{"report_id":"c1d67d9a-622c-438d-aa70-186a22000543","version":0,"status":"done","tags":[],"date":"2026-10-10T21:43:47Z","url":{"schema":"http","addr":"heurica.dk/","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"ip":{"addr":"94.231.103.138","port":0,"asn":48854,"as":"team.blue Denmark A/S","country":"Denmark","country_code":"DK"},"final":{"url":{"schema":"http","addr":"heurica.dk/","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"title":"Home","dom":{"size":8076,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (523)","md5":"c08dd006cc3cb4abf296d034450b30e8","sha1":"39768a55c0c7ea5c8f12bf937e51e640eb17acb3","sha256":"dcecab115ff5451dd52612f90e20eb925df532e3043b6bd943491b30255dedad","sha512":"aa7ffa36a25f896c6bdc36ca8d452140ba5b8f8c77bb5305e9111c5837cea2a25f0e46fc79d4a72c3536b19311a4380f6d58507ef369aa92b9d30fdeded99a23","ssdeep":"192:BsfnTY0ZikJrItPHrYMuinZH6DIvndNtlAWCcnD81eDOkRij:BsFgPxLtlASseDOFj","tlshash":"82f1b71080b15e3b132385e5eaa4ea1a6de5cd43da475d0032fc4bca4fdae868e27d59","dom_hash":"domhashfc4d5f4333f85e6793a4ddb41c0927cd","first_seen":"2026-10-10T21:43:49.057131Z","last_seen":"2026-10-10T21:43:49.057131Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"heurica.dk/","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"ip":{"addr":"94.231.103.138","port":0,"asn":48854,"as":"team.blue Denmark A/S","country":"Denmark","country_code":"DK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-14T21:43:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"heurica.dk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"heurica.dk","ip":{"addr":"94.231.103.138","port":80,"asn":48854,"as":"team.blue Denmark A/S","country":"Denmark","country_code":"DK"},"domain_registered":"2004-09-15","domain_rank":5470760,"first_seen":"2026-08-12T16:42:02.508815Z","last_seen":"2026-08-12T16:42:02.508815Z","alert_count":15,"request_count":15,"received_data":472368,"sent_data":7442,"comment":"","tags":null,"fingerprints":[{"name":"Joomla","description":"Joomla is a free and open-source content management system for publishing web content.","website":"https://www.joomla.org/","common_platform_enumeration":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","icon":"Joomla.svg","categories":["CMS"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"heurica.dk/media/system/js/fields/passwordview.min.js?bae2911b22f836c780af199d956a1b22c8604694","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"ip":{"addr":"94.231.103.138","port":80,"asn":48854,"as":"team.blue Denmark A/S","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"560d070f399dd202fe252ef81cb84423","sha1":"bae2911b22f836c780af199d956a1b22c8604694","sha256":"ffc17bbe585114a96da62807eeabfdd99fbccd436a24ef49578cfba01473a967","sha512":"7ce3bd75014d81e3774223bf5e5d06b24ff1d38ddbb551232692e7fa38738413ec9d5abe6e5c198fd51072ceb6f33072cb6943a852c3d83699dd660c10a431b2","ssdeep":"","tlshash":"9011715609155f3149efae6070a4df803a81c951ac9949615532cfdf2abacd28170fdb","size":949,"data":"","first_seen":"2023-03-08T02:16:45Z","last_seen":"2026-10-10T21:43:49.076261Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"heurica.dk/media/system/js/keepalive.min.js?20ace83a13886af1b0b5f58386fd8adf33f586a3","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"ip":{"addr":"94.231.103.138","port":80,"asn":48854,"as":"team.blue Denmark A/S","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"48bf89e630dce5782a6bd4126cb13a17","sha1":"20ace83a13886af1b0b5f58386fd8adf33f586a3","sha256":"52ef0eb8863d389ac1ebd2720be4dbb2ba66af00fd85e87719338425e79b4efa","sha512":"7f437dbaa0ef882f7f87467a2c4eb84be5918a4b8e7d7cb476d572eed78cf32abbf5373c3862df782f0f9c63933f94f2f17dc5082a214ba315f6b32ac5db8508","ssdeep":"","tlshash":"caf028030312428d85d29a9300297ae3a932c353fedd70322754de8170df946c44b5db","size":577,"data":"","first_seen":"2023-03-08T02:16:45Z","last_seen":"2026-10-10T21:43:49.068253Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"heurica.dk/media/system/js/messages.min.js?7425e8d1cb9e4f061d5e30271d6d99b085344117","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"ip":{"addr":"94.231.103.138","port":80,"asn":48854,"as":"team.blue Denmark A/S","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"29393d6876c415988d12287821f432ec","sha1":"7425e8d1cb9e4f061d5e30271d6d99b085344117","sha256":"d5d2e5ff36a371736c74fc21effdb456e0fd7ad1d7a93dd44a65e24c03e64b8b","sha512":"cd59f24bbdad4878d77db2b1d90f74a569b6861617320a5d85845f364a07bdd68f7087bc22d0f7fdbb696290df1badd25120eedbdd71a8131ce82d4329ad58e5","ssdeep":"96:xTc72U+hLgkYvNEa0ER3On8cFsD+35Vh6:W2/WkONT3On80X5Vh6","tlshash":"33b1f3e7e2532f771bc8d289602d2a81bd1a6051c02f6c2c765ceceed99cd80257e772","size":5419,"data":"","first_seen":"2023-03-07T01:06:35Z","last_seen":"2026-10-10T21:43:49.070643Z","times_seen":785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"heurica.dk/media/system/js/core.min.js?576eb51da909dcf692c98643faa6fc89629ead18","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"ip":{"addr":"94.231.103.138","port":80,"asn":48854,"as":"team.blue Denmark A/S","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"887dc88864147cffb438f5919a0c0ef7","sha1":"576eb51da909dcf692c98643faa6fc89629ead18","sha256":"8683142e78e960a89142e4851e20874b0d95c5c4f58a64a3ac8417159fc6ca29","sha512":"622c04ef24a48e02434a9bdc358f9ed5a27f5a70a41ad42f589d9634b52ce4c574ca19410f4be119a461ce2a5ee825201d482fe8ac57c9fa763bb593dcd43478","ssdeep":"192:3knTOiijSx67ADOEcFza3rTknrhU1jyP1nQJk8OeAC9rLSLSsH1Zm1EZeZuZP:3ITCSxmADsYknrhU1jw1nQJ/OeAC5LtI","tlshash":"0df109e3285663728bf892eee0e4175470329220791e4430a49cddf775d6f03d9b7ae9","size":7706,"data":"","first_seen":"2023-04-27T11:52:53Z","last_seen":"2026-10-10T21:43:49.064281Z","times_seen":364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"heurica.dk/media/templates/site/cassiopeia/js/template.min.js?82d57cc29d0cb08006796d75b8109a6d","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"ip":{"addr":"94.231.103.138","port":80,"asn":48854,"as":"team.blue Denmark A/S","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9a89da8143d11cc8d33a300210b1669","sha1":"dd5dd74ed261eaa9652d7eeb70b05e9d75207da6","sha256":"5838ce43b792853e87fdd8294bad15d73e4c9204b1e313ccb497f255cac6fbaf","sha512":"0a87e1334749bd2018e5ca0239796b9eab668216bb682bda6953276046e81f7731d80204740acc709f6a90b43ba57f920449fb3621249ee170eaab1398144c16","ssdeep":"","tlshash":"f201ce742214647200ffb7f5e58fbb87b7766093cd4140100824dcd61db9beaa369eea","size":836,"data":"","first_seen":"2023-03-08T02:16:45Z","last_seen":"2026-10-10T21:43:49.065398Z","times_seen":246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"heurica.dk/media/system/css/joomla-fontawesome.min.css?82d57cc29d0cb08006796d75b8109a6d","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"ip":{"addr":"94.231.103.138","port":80,"asn":48854,"as":"team.blue Denmark A/S","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://heurica.dk/","date":"2026-10-10T21:43:19.644Z","timestamp":1791668599644,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /media/system/css/joomla-fontawesome.min.css?82d57cc29d0cb08006796d75b8109a6d HTTP/1.1\r\nHost: heurica.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://heurica.dk/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: 309f19abd157daf1ef56064e66f65b18=432d103074676aa9241ba45dadeeb00a\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"309f19abd157daf1ef56064e66f65b18","value":"432d103074676aa9241ba45dadeeb00a"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 10 Oct 2026 21:43:19 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sat, 15 Apr 2023 00:27:36 GMT\r\nETag: W/\"1286e-5f9550640ce00\"\r\nCache-Control: max-age=600\r\nExpires: Sat, 10 Oct 2026 21:53:19 GMT\r\nX-Content-Type-Options: nosniff\r\nSimplyCom-Server: Apache\r\nServer: Simply.com\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75886,"size_decoded":16062,"mime_type":"text/css","magic":"ASCII text, with very long lines (59035)","md5":"e6d2a113fab54674e6950193ef28b311","sha1":"c0692a267e31de42ec74a96b01f269506a344bea","sha256":"dacb7f4e40b13861610a757c430099f9088d741b1716e9b9f7bb53127d9c121e","sha512":"456412d7a44c6f9da1eb0882257b78e51ba1c626a6a3e2d4337a5f4b4fae38cbb2c60a203378d2c047b98315c6cd719b818ed6067c135358db7d12cc10d905c4","ssdeep":"768:PTUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz2b7Av5fO:PTU0PxXE4YXJgndFTfy9lQib7E52","tlshash":"22732db8e44c01cab731c44bef41b36ca9a6f73cd9911d56f04f681c2ae16a852c5fb9","first_seen":"2023-04-27T11:52:53Z","last_seen":"2026-10-10T21:43:49.061748Z","times_seen":289,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"heurica.dk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"heurica.dk/media/system/js/core.min.js?576eb51da909dcf692c98643faa6fc89629ead18","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"ip":{"addr":"94.231.103.138","port":80,"asn":48854,"as":"team.blue Denmark A/S","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://heurica.dk/","date":"2026-10-10T21:43:19.453Z","timestamp":1791668599453,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /media/system/js/core.min.js?576eb51da909dcf692c98643faa6fc89629ead18 HTTP/1.1\r\nHost: heurica.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://heurica.dk/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: 309f19abd157daf1ef56064e66f65b18=432d103074676aa9241ba45dadeeb00a\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"309f19abd157daf1ef56064e66f65b18","value":"432d103074676aa9241ba45dadeeb00a"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 10 Oct 2026 21:43:19 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sat, 15 Apr 2023 00:27:46 GMT\r\nETag: W/\"1e1a-5f95506d96480\"\r\nCache-Control: max-age=600\r\nExpires: Sat, 10 Oct 2026 21:53:19 GMT\r\nX-Content-Type-Options: nosniff\r\nSimplyCom-Server: Apache\r\nServer: Simply.com\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7706,"size_decoded":3610,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7706), with no line terminators","md5":"887dc88864147cffb438f5919a0c0ef7","sha1":"576eb51da909dcf692c98643faa6fc89629ead18","sha256":"8683142e78e960a89142e4851e20874b0d95c5c4f58a64a3ac8417159fc6ca29","sha512":"622c04ef24a48e02434a9bdc358f9ed5a27f5a70a41ad42f589d9634b52ce4c574ca19410f4be119a461ce2a5ee825201d482fe8ac57c9fa763bb593dcd43478","ssdeep":"192:3knTOiijSx67ADOEcFza3rTknrhU1jyP1nQJk8OeAC9rLSLSsH1Zm1EZeZuZP:3ITCSxmADsYknrhU1jw1nQJ/OeAC5LtI","tlshash":"0df109e3285663728bf892eee0e4175470329220791e4430a49cddf775d6f03d9b7ae9","first_seen":"2023-04-27T11:52:53Z","last_seen":"2026-10-10T21:43:49.064281Z","times_seen":364,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"heurica.dk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"heurica.dk/media/templates/site/cassiopeia/js/template.min.js?82d57cc29d0cb08006796d75b8109a6d","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"ip":{"addr":"94.231.103.138","port":80,"asn":48854,"as":"team.blue Denmark A/S","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://heurica.dk/","date":"2026-10-10T21:43:19.458Z","timestamp":1791668599458,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /media/templates/site/cassiopeia/js/template.min.js?82d57cc29d0cb08006796d75b8109a6d HTTP/1.1\r\nHost: heurica.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://heurica.dk/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: 309f19abd157daf1ef56064e66f65b18=432d103074676aa9241ba45dadeeb00a\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"309f19abd157daf1ef56064e66f65b18","value":"432d103074676aa9241ba45dadeeb00a"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 10 Oct 2026 21:43:19 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sat, 15 Apr 2023 00:27:37 GMT\r\nETag: W/\"344-5f95506501040\"\r\nCache-Control: max-age=600\r\nExpires: Sat, 10 Oct 2026 21:53:19 GMT\r\nX-Content-Type-Options: nosniff\r\nSimplyCom-Server: Apache\r\nServer: Simply.com\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":836,"size_decoded":920,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (836), with no line terminators","md5":"c9a89da8143d11cc8d33a300210b1669","sha1":"dd5dd74ed261eaa9652d7eeb70b05e9d75207da6","sha256":"5838ce43b792853e87fdd8294bad15d73e4c9204b1e313ccb497f255cac6fbaf","sha512":"0a87e1334749bd2018e5ca0239796b9eab668216bb682bda6953276046e81f7731d80204740acc709f6a90b43ba57f920449fb3621249ee170eaab1398144c16","ssdeep":"","tlshash":"f201ce742214647200ffb7f5e58fbb87b7766093cd4140100824dcd61db9beaa369eea","first_seen":"2023-03-08T02:16:45Z","last_seen":"2026-10-10T21:43:49.065398Z","times_seen":246,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"heurica.dk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"heurica.dk/media/system/js/keepalive.min.js?20ace83a13886af1b0b5f58386fd8adf33f586a3","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"ip":{"addr":"94.231.103.138","port":80,"asn":48854,"as":"team.blue Denmark A/S","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://heurica.dk/","date":"2026-10-10T21:43:19.460Z","timestamp":1791668599460,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /media/system/js/keepalive.min.js?20ace83a13886af1b0b5f58386fd8adf33f586a3 HTTP/1.1\r\nHost: heurica.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://heurica.dk/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: 309f19abd157daf1ef56064e66f65b18=432d103074676aa9241ba45dadeeb00a\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"309f19abd157daf1ef56064e66f65b18","value":"432d103074676aa9241ba45dadeeb00a"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 10 Oct 2026 21:43:19 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sat, 15 Apr 2023 00:27:39 GMT\r\nETag: W/\"241-5f955066e94c0\"\r\nCache-Control: max-age=600\r\nExpires: Sat, 10 Oct 2026 21:53:19 GMT\r\nX-Content-Type-Options: nosniff\r\nSimplyCom-Server: Apache\r\nServer: Simply.com\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":577,"size_decoded":756,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (577), with no line terminators","md5":"48bf89e630dce5782a6bd4126cb13a17","sha1":"20ace83a13886af1b0b5f58386fd8adf33f586a3","sha256":"52ef0eb8863d389ac1ebd2720be4dbb2ba66af00fd85e87719338425e79b4efa","sha512":"7f437dbaa0ef882f7f87467a2c4eb84be5918a4b8e7d7cb476d572eed78cf32abbf5373c3862df782f0f9c63933f94f2f17dc5082a214ba315f6b32ac5db8508","ssdeep":"","tlshash":"caf028030312428d85d29a9300297ae3a932c353fedd70322754de8170df946c44b5db","first_seen":"2023-03-08T02:16:45Z","last_seen":"2026-10-10T21:43:49.068253Z","times_seen":110,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"heurica.dk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"heurica.dk/media/vendor/joomla-custom-elements/css/joomla-alert.css","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"ip":{"addr":"94.231.103.138","port":80,"asn":48854,"as":"team.blue Denmark A/S","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://heurica.dk/","date":"2026-10-10T21:43:19.510Z","timestamp":1791668599510,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /media/vendor/joomla-custom-elements/css/joomla-alert.css HTTP/1.1\r\nHost: heurica.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://heurica.dk/media/templates/site/cassiopeia/css/vendor/joomla-custom-elements/joomla-alert.min.css?0.2.0\r\nCookie: 309f19abd157daf1ef56064e66f65b18=432d103074676aa9241ba45dadeeb00a\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"309f19abd157daf1ef56064e66f65b18","value":"432d103074676aa9241ba45dadeeb00a"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 10 Oct 2026 21:43:19 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sat, 15 Apr 2023 00:27:17 GMT\r\nETag: W/\"11b8-5f955051ee340\"\r\nCache-Control: max-age=600\r\nExpires: Sat, 10 Oct 2026 21:53:19 GMT\r\nX-Content-Type-Options: nosniff\r\nSimplyCom-Server: Apache\r\nServer: Simply.com\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4536,"size_decoded":1433,"mime_type":"text/css","magic":"ASCII text","md5":"7d005e8fbb2c5b1c3909f269356773f6","sha1":"d18e47bd6333dcd00487eb295e619c6cefe69d4a","sha256":"83eb83a8b38b12ca2a151b57f4f2c9707687c687d102d2b894e2e5586300f1b8","sha512":"4ddbaf5452c95aa3968da2bea48449e4656fa3e5155b61bbf4b530fcd2151266f153bc3ec6ea1d0c97e769aa32b8037058071e44177883a9e4f9b53a2eeb2be8","ssdeep":"96:p0hLw76nUayrp8NpNpuspcokFJEjAzAzY+lth8c9+NY:p0hkDCbM7cWc9+NY","tlshash":"c6917a45a29a0de63737875d755ed6882f260680c8178f14fbf939ecbf48e652d322c4","first_seen":"2023-04-14T06:07:13Z","last_seen":"2026-10-10T21:43:49.069133Z","times_seen":317,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"heurica.dk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heurica.dk/","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-10T21:43:18.654Z","timestamp":1791668598654,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: heurica.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T06:43:31.048076Z","times_seen":19019768,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"heurica.dk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"heurica.dk/media/system/js/messages.min.js?7425e8d1cb9e4f061d5e30271d6d99b085344117","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"ip":{"addr":"94.231.103.138","port":80,"asn":48854,"as":"team.blue Denmark A/S","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://heurica.dk/","date":"2026-10-10T21:43:19.463Z","timestamp":1791668599463,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /media/system/js/messages.min.js?7425e8d1cb9e4f061d5e30271d6d99b085344117 HTTP/1.1\r\nHost: heurica.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://heurica.dk/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: 309f19abd157daf1ef56064e66f65b18=432d103074676aa9241ba45dadeeb00a\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"309f19abd157daf1ef56064e66f65b18","value":"432d103074676aa9241ba45dadeeb00a"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 10 Oct 2026 21:43:19 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sat, 15 Apr 2023 00:27:46 GMT\r\nETag: W/\"152b-5f95506d96480\"\r\nCache-Control: max-age=600\r\nExpires: Sat, 10 Oct 2026 21:53:19 GMT\r\nX-Content-Type-Options: nosniff\r\nSimplyCom-Server: Apache\r\nServer: Simply.com\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5419,"size_decoded":2154,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (5419), with no line terminators","md5":"29393d6876c415988d12287821f432ec","sha1":"7425e8d1cb9e4f061d5e30271d6d99b085344117","sha256":"d5d2e5ff36a371736c74fc21effdb456e0fd7ad1d7a93dd44a65e24c03e64b8b","sha512":"cd59f24bbdad4878d77db2b1d90f74a569b6861617320a5d85845f364a07bdd68f7087bc22d0f7fdbb696290df1badd25120eedbdd71a8131ce82d4329ad58e5","ssdeep":"96:xTc72U+hLgkYvNEa0ER3On8cFsD+35Vh6:W2/WkONT3On80X5Vh6","tlshash":"33b1f3e7e2532f771bc8d289602d2a81bd1a6051c02f6c2c765ceceed99cd80257e772","first_seen":"2023-03-07T01:06:35Z","last_seen":"2026-10-10T21:43:49.070643Z","times_seen":785,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"heurica.dk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"heurica.dk/media/templates/site/cassiopeia/images/logo.svg","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"ip":{"addr":"94.231.103.138","port":80,"asn":48854,"as":"team.blue Denmark A/S","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://heurica.dk/","date":"2026-10-10T21:43:19.470Z","timestamp":1791668599470,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /media/templates/site/cassiopeia/images/logo.svg HTTP/1.1\r\nHost: heurica.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://heurica.dk/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: 309f19abd157daf1ef56064e66f65b18=432d103074676aa9241ba45dadeeb00a\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"309f19abd157daf1ef56064e66f65b18","value":"432d103074676aa9241ba45dadeeb00a"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 10 Oct 2026 21:43:19 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sat, 15 Apr 2023 00:26:43 GMT\r\nETag: W/\"6c3-5f955031816c0\"\r\nCache-Control: max-age=36000\r\nExpires: Sun, 11 Oct 2026 07:43:19 GMT\r\nX-Content-Type-Options: nosniff\r\nSimplyCom-Server: Apache\r\nServer: Simply.com\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1731,"size_decoded":1025,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f7b092f38323ac84d7918c02365ddb8","sha1":"501fdef973203d74286ac45a184865c6104848b7","sha256":"62fbfd7b5a771b510bc6551773b58aba05581e16b9c22ee3da80630cd48a84eb","sha512":"6e0bc2ec45daa5409f3a57108e0df13197b823aa2d067c22003d7c546e51edad4e353a9c0a186a526d49a83712207b790585dc473ee0fad6aed4bd9a2cc34eb8","ssdeep":"","tlshash":"f7318ebfb424000a69a68741efc91695587ed347932104787b5274cf5e249321afdad7","first_seen":"2023-05-08T00:37:25Z","last_seen":"2026-10-10T21:43:49.071267Z","times_seen":93,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":99,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"heurica.dk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"heurica.dk/","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"ip":{"addr":"94.231.103.138","port":80,"asn":48854,"as":"team.blue Denmark A/S","country":"Denmark","country_code":"DK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-10T21:43:18.765Z","timestamp":1791668598765,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: heurica.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 10 Oct 2026 21:43:19 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nExpires: Wed, 17 Aug 2005 00:00:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nSet-Cookie: 309f19abd157daf1ef56064e66f65b18=432d103074676aa9241ba45dadeeb00a; path=/; HttpOnly\r\nLast-Modified: Sat, 10 Oct 2026 21:43:19 GMT\r\nX-Content-Type-Options: nosniff\r\nSimplyCom-Server: Apache\r\nServer: Simply.com\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"309f19abd157daf1ef56064e66f65b18","value":"432d103074676aa9241ba45dadeeb00a","quoted":false,"path":"/","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"309f19abd157daf1ef56064e66f65b18=432d103074676aa9241ba45dadeeb00a; path=/; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Joomla","description":"Joomla is a free and open-source content management system for publishing web content.","website":"https://www.joomla.org/","common_platform_enumeration":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","icon":"Joomla.svg","categories":["CMS"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":8076,"size_decoded":3253,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (520)","md5":"5fd5326ab92dc30be7854e893e48670d","sha1":"a884c16269ecadd169c4539c927084a46bf21084","sha256":"318b8dec0e52ad674f2e7a740dce2e312d7381f99d61f7bbeebde3ccac30dc0c","sha512":"67bfca8a7a3649ce364546d6cabeadaf9689dd3ce2fec9bcc8df758223c73abb49b6e911ef5a807c7cd1b315e8f4a01ea3dd0fee518d5c29fb05867b71ac9dba","ssdeep":"192:vs/TYfkGmteHrYMHRaH6DmvcdNtlAWmcnD81eDOkRiH:vs7xeltlA4seDOFH","tlshash":"27f1b61040b15e37132385e5aaa4ea1aade5cd43da475d0032fc4bca4fdaec58e37d99","first_seen":"2026-10-10T21:43:49.072865Z","last_seen":"2026-10-10T21:43:49.072865Z","times_seen":1,"resource_available":true,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":4,"connect":29,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"heurica.dk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"heurica.dk/media/templates/site/cassiopeia/css/vendor/joomla-custom-elements/joomla-alert.min.css?0.2.0","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"ip":{"addr":"94.231.103.138","port":80,"asn":48854,"as":"team.blue Denmark A/S","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://heurica.dk/","date":"2026-10-10T21:43:19.452Z","timestamp":1791668599452,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /media/templates/site/cassiopeia/css/vendor/joomla-custom-elements/joomla-alert.min.css?0.2.0 HTTP/1.1\r\nHost: heurica.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://heurica.dk/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: 309f19abd157daf1ef56064e66f65b18=432d103074676aa9241ba45dadeeb00a\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"309f19abd157daf1ef56064e66f65b18","value":"432d103074676aa9241ba45dadeeb00a"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 10 Oct 2026 21:43:19 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sat, 15 Apr 2023 00:27:36 GMT\r\nETag: W/\"18ed-5f9550640ce00\"\r\nCache-Control: max-age=600\r\nExpires: Sat, 10 Oct 2026 21:53:19 GMT\r\nX-Content-Type-Options: nosniff\r\nSimplyCom-Server: Apache\r\nServer: Simply.com\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6381,"size_decoded":2140,"mime_type":"text/css","magic":"ASCII text, with very long lines (6381), with no line terminators","md5":"9a21e536444a01c8d045d52a8cd3abc8","sha1":"42190b9bfa6fdc4621a03a49cc59b822b0ae3ef6","sha256":"84cf690af7c195322f4655f9b2a888410fda62f076fdd930dccf43d0d11a3686","sha512":"20119e71b87aa064903a6acf7cf5065b8bcb4048a4a1c155adc8d4a9fa5d7a8f9713cdf563ab3384986c5e2c22672964413e1ee5d5ddcd6f500be32e87185169","ssdeep":"96:WktlGwTDl8L1dJcfh+Dl7JDl0T4oQSDlrx/kdedZdf3dNHqi6uc7:WkLxT58LOp+57J50soQS5zqi6uo","tlshash":"61d1221bd7c02da87766876db12c23981f26a011c0071efae6dea778b383ced2565752","first_seen":"2023-04-17T12:49:25Z","last_seen":"2026-10-10T21:43:49.074526Z","times_seen":73,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":25,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"heurica.dk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"heurica.dk/media/system/js/fields/passwordview.min.js?bae2911b22f836c780af199d956a1b22c8604694","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"ip":{"addr":"94.231.103.138","port":80,"asn":48854,"as":"team.blue Denmark A/S","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://heurica.dk/","date":"2026-10-10T21:43:19.461Z","timestamp":1791668599461,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /media/system/js/fields/passwordview.min.js?bae2911b22f836c780af199d956a1b22c8604694 HTTP/1.1\r\nHost: heurica.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://heurica.dk/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: 309f19abd157daf1ef56064e66f65b18=432d103074676aa9241ba45dadeeb00a\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"309f19abd157daf1ef56064e66f65b18","value":"432d103074676aa9241ba45dadeeb00a"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 10 Oct 2026 21:43:19 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sat, 15 Apr 2023 00:27:40 GMT\r\nETag: W/\"3b5-5f955067dd700\"\r\nCache-Control: max-age=600\r\nExpires: Sat, 10 Oct 2026 21:53:19 GMT\r\nX-Content-Type-Options: nosniff\r\nSimplyCom-Server: Apache\r\nServer: Simply.com\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":949,"size_decoded":877,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (949), with no line terminators","md5":"560d070f399dd202fe252ef81cb84423","sha1":"bae2911b22f836c780af199d956a1b22c8604694","sha256":"ffc17bbe585114a96da62807eeabfdd99fbccd436a24ef49578cfba01473a967","sha512":"7ce3bd75014d81e3774223bf5e5d06b24ff1d38ddbb551232692e7fa38738413ec9d5abe6e5c198fd51072ceb6f33072cb6943a852c3d83699dd660c10a431b2","ssdeep":"","tlshash":"9011715609155f3149efae6070a4df803a81c951ac9949615532cfdf2abacd28170fdb","first_seen":"2023-03-08T02:16:45Z","last_seen":"2026-10-10T21:43:49.076261Z","times_seen":83,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"heurica.dk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"heurica.dk/media/vendor/fontawesome-free/webfonts/fa-solid-900.woff2","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"ip":{"addr":"94.231.103.138","port":80,"asn":48854,"as":"team.blue Denmark A/S","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://heurica.dk/","date":"2026-10-10T21:43:19.759Z","timestamp":1791668599759,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /media/vendor/fontawesome-free/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: heurica.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://heurica.dk/media/system/css/joomla-fontawesome.min.css?82d57cc29d0cb08006796d75b8109a6d\r\nCookie: 309f19abd157daf1ef56064e66f65b18=432d103074676aa9241ba45dadeeb00a\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"309f19abd157daf1ef56064e66f65b18","value":"432d103074676aa9241ba45dadeeb00a"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 10 Oct 2026 21:43:19 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 78268\r\nConnection: keep-alive\r\nLast-Modified: Sat, 15 Apr 2023 00:27:20 GMT\r\nETag: \"131bc-5f955054caa00\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=36000\r\nExpires: Sun, 11 Oct 2026 07:43:19 GMT\r\nX-Content-Type-Options: nosniff\r\nSimplyCom-Server: Apache\r\nServer: Simply.com\r\nAlt-Svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":78268,"size_decoded":78673,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78268, version 331.-31196","md5":"d824df7eb2e268626a2dd9a6a741ac4e","sha1":"0ccb2c814a7e4ca12c4778821633809cb0361eaa","sha256":"9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537","sha512":"a84e13f216ea95146af285af98aef0b464cd962440e161a1c602ca2178a179e04ae4ed2a2f98d5b2eb165480ec6920e0e88de77d5f1eb7f11ed772b092daf865","ssdeep":"1536:AOhrLFyv3lzKb1hkG8l0o4HXWj2uwgcdSJSls7ZahNpUFl8a/KdDe8Y7fN5O:AOhfMv3ILc0Dm3wA4LpKKdO7a","tlshash":"c97312aba6cd77ac88dd14565f0043533afdfb35ab27864349eca2e01a300677b5712b","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-10-11T06:45:17.579497Z","times_seen":60949,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"heurica.dk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"heurica.dk/media/templates/site/cassiopeia/css/global/colors_standard.min.css?82d57cc29d0cb08006796d75b8109a6d","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"ip":{"addr":"94.231.103.138","port":80,"asn":48854,"as":"team.blue Denmark A/S","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://heurica.dk/","date":"2026-10-10T21:43:19.449Z","timestamp":1791668599449,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /media/templates/site/cassiopeia/css/global/colors_standard.min.css?82d57cc29d0cb08006796d75b8109a6d HTTP/1.1\r\nHost: heurica.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://heurica.dk/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: 309f19abd157daf1ef56064e66f65b18=432d103074676aa9241ba45dadeeb00a\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"309f19abd157daf1ef56064e66f65b18","value":"432d103074676aa9241ba45dadeeb00a"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 10 Oct 2026 21:43:19 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sat, 15 Apr 2023 00:27:36 GMT\r\nETag: W/\"6a-5f9550640ce00\"\r\nCache-Control: max-age=600\r\nExpires: Sat, 10 Oct 2026 21:53:19 GMT\r\nX-Content-Type-Options: nosniff\r\nSimplyCom-Server: Apache\r\nServer: Simply.com\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":106,"size_decoded":527,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"8ce8c54c3c8f49eddfd233808df8b180","sha1":"f5f2896127a0ebd9ecb5599cbcb4bf7bb3eefebc","sha256":"0c6bca37f5f8ae0c1ee85f51bfbdb2c39d67cccae7cae3156df2ed7727c5204c","sha512":"41b1dcaeec42293d6ba93fdc4650b4056a572ce53b6bb95c704178b1ef71a8be7f79a5365172119a6ae4e0800f2b262db407901e10c8445b4de298b08cf26112","ssdeep":"","tlshash":"8ab09286a04043230a22a6a846b4a6109024a450a360120eb6704f3026053836369692","first_seen":"2023-04-17T12:49:25Z","last_seen":"2026-10-10T21:43:49.078385Z","times_seen":114,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"heurica.dk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"heurica.dk/media/templates/site/cassiopeia/css/template.min.css?82d57cc29d0cb08006796d75b8109a6d","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"ip":{"addr":"94.231.103.138","port":80,"asn":48854,"as":"team.blue Denmark A/S","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://heurica.dk/","date":"2026-10-10T21:43:19.450Z","timestamp":1791668599450,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /media/templates/site/cassiopeia/css/template.min.css?82d57cc29d0cb08006796d75b8109a6d HTTP/1.1\r\nHost: heurica.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://heurica.dk/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: 309f19abd157daf1ef56064e66f65b18=432d103074676aa9241ba45dadeeb00a\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"309f19abd157daf1ef56064e66f65b18","value":"432d103074676aa9241ba45dadeeb00a"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 10 Oct 2026 21:43:19 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sat, 15 Apr 2023 00:27:36 GMT\r\nETag: W/\"42e98-5f9550640ce00\"\r\nCache-Control: max-age=600\r\nExpires: Sat, 10 Oct 2026 21:53:19 GMT\r\nX-Content-Type-Options: nosniff\r\nSimplyCom-Server: Apache\r\nServer: Simply.com\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":274072,"size_decoded":39002,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65304)","md5":"f6d2fb4a352fc0e6061787141fb3d293","sha1":"c205361949fd0f1a53414123b823bc672e8f4c49","sha256":"300acbb08c5619b2cd07fe412bbb30e0ccbcd0bd7535d62b4f9e056c7d60de23","sha512":"00841ed17a67ca052ddcdc682adfa94e39466bf3ebcec9c84d647cab4900490d5a0bd358482383de4a0230da725359bb58086945d785985abc8b7dc0955a5a64","ssdeep":"1536:FKKAfy9QfZPWU90uYQGbSYg1jg4c7ZbvzTRleZje60I4uTvrTyHhdTdwXGXNXGXC:0KAfy9QfZPFKltTRleZje60I4uTag7q","tlshash":"a84491a7f590312ca8678a0892c1bbfd462f9552db121bfaf4137b6487c7bd3096390d","first_seen":"2023-05-16T22:22:37Z","last_seen":"2026-10-10T21:43:49.079825Z","times_seen":8,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":31,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"heurica.dk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"heurica.dk/media/system/images/joomla-favicon.svg","fqdn":"heurica.dk","domain":"heurica.dk","tld":"dk"},"ip":{"addr":"94.231.103.138","port":80,"asn":48854,"as":"team.blue Denmark A/S","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://heurica.dk/","date":"2026-10-10T21:43:19.641Z","timestamp":1791668599641,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /media/system/images/joomla-favicon.svg HTTP/1.1\r\nHost: heurica.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://heurica.dk/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: 309f19abd157daf1ef56064e66f65b18=432d103074676aa9241ba45dadeeb00a\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"309f19abd157daf1ef56064e66f65b18","value":"432d103074676aa9241ba45dadeeb00a"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 10 Oct 2026 21:43:19 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sat, 15 Apr 2023 00:26:43 GMT\r\nETag: W/\"5d0-5f955031816c0\"\r\nCache-Control: max-age=36000\r\nExpires: Sun, 11 Oct 2026 07:43:19 GMT\r\nX-Content-Type-Options: nosniff\r\nSimplyCom-Server: Apache\r\nServer: Simply.com\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1488,"size_decoded":1153,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1b6942e22443109daea739524ab74123","sha1":"5364f28e0e945b619b05409e9bd1917fcb419cbe","sha256":"e3f05046db911ba7c130875fee1914eb2411b8211833bb20b8e3bc27e06bb31d","sha512":"02f1666a3e1d7893360c74b0fc9ceb8514dd3c9f12e343290784ff5c71901f371329584772019749b9cf9f9c6acf4035abec18610a1bddbcbb10cc2d90aefc38","ssdeep":"","tlshash":"1f3199eac788f3f81d29c3b4aa2935b4342fa8a593d36275426c5974be620d4c8dc8c5","first_seen":"2023-05-08T00:37:25Z","last_seen":"2026-10-10T21:43:49.081545Z","times_seen":375,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"heurica.dk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}