{"report_id":"da18379c-0b76-4198-95da-f0ac26a2a333","version":6,"status":"done","tags":[],"date":"2026-01-26T13:50:06Z","url":{"schema":"http","addr":"casrm.org","fqdn":"casrm.org","domain":"casrm.org","tld":"org"},"ip":{"addr":"104.225.128.78","port":0,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"casrm.org/windows.php","fqdn":"casrm.org","domain":"casrm.org","tld":"org"},"title":"Adobe Acrobat for Windows — Download","dom":{"size":6476,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"f7650362cdaaf84c7c82957fe694d69f","sha1":"bacc992843672b8acd9f4f49215700e68ff90339","sha256":"2e4a7d98ad9090965e0628b8a41c41df1ee52b3507bd371c827ccd938f83c90a","sha512":"bfc778acfb21aa7fe12cba32c0d2431d7a61b091204883f5d6ecef4e963a2a19be427140c139a0f947df61dd78ccf5bb9497b32922af78474698281707560c5a","ssdeep":"96:nhrGqn0vdIEJCtn+OYx0qfSk+NfkLE0kR9jAaXAALZb6EZlabdQfDy:hrGyydM+7x0n0f0kawALRgdQby","tlshash":"5dd1836b90a550357963d0856aea1b4f3950c607e10bc6403efdb264dfd2e838db23ce","dom_hash":"domhash7d31d4c02d8782fee9560cbf98d5b897","first_seen":"2025-12-22T17:43:44.811304Z","last_seen":"2026-02-11T16:14:44.697177Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"casrm.org","fqdn":"casrm.org","domain":"casrm.org","tld":"org"},"ip":{"addr":"104.225.128.78","port":0,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-02T13:50:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"casrm.org","ip":{"addr":"104.225.128.78","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"domain_registered":"2025-12-23","domain_rank":0,"first_seen":"2026-01-26T13:39:02.319731Z","last_seen":"2026-01-26T13:39:02.319731Z","alert_count":0,"request_count":5,"received_data":38845209,"sent_data":2358,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"www.edigitalagency.com.au","ip":{"addr":"103.254.137.34","port":443,"asn":55803,"as":"Hostopia Australia Web Pty Ltd","country":"Australia","country_code":"AU"},"domain_registered":"unknown","domain_rank":7158634,"first_seen":"2017-02-27T09:26:14Z","last_seen":"2026-01-24T18:07:54.215701Z","alert_count":0,"request_count":2,"received_data":3410,"sent_data":962,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":[{"md5":"1a78c11d9de99a0ed7fadff1598c8565","sha1":"485232cdb38cc5b8ffbc6e0b49a729dd5d3614f0","sha256":"04f358dfdd27ff9d87ae0bd6ba194224485c1d9d993ea0d63b82f913e7d3d452","sha512":"c48db7e23a097513d93ec5a3dd018e6e52476dedc0568cb0cb87083f13cc0033dc68e0427cfe49b289747537e2ab3aa574830a1da3d9ff1777941c4d0e7fb8cd","magic":"PE32+ executable (GUI) x86-64, for MS Windows, 5 sections","size":38833672,"url":{"schema":"https","addr":"casrm.org/download.php","fqdn":"casrm.org","domain":"casrm.org","tld":"org"},"ip":{"addr":"104.225.128.78","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"archive":null,"alerts":{"urlquery":null,"analyzer":null}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"casrm.org/windows.php","fqdn":"casrm.org","domain":"casrm.org","tld":"org"},"ip":{"addr":"104.225.128.78","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e14fb1e3aed90da07414487ac5c0914","sha1":"c733b8e12680559054ad3782cd1103c352032897","sha256":"4e161d10528768356f41d6556fb83be14fe9ecba9965f8fb217509967970b4a1","sha512":"d84e47e278df15fa99cfafd826cf2a13005725d26b016290b7c9c0ad26b6904ef1dae13fd537611e6b190a3da7424064fbaed35b41df122351241ed8956520b8","ssdeep":"","tlshash":"71219d6f74bb01309b6b65bb9a5f2b4c34305103340bc0a479fda5149fb0e476997ade","size":1301,"data":"","first_seen":"2025-12-22T17:43:44.82864Z","last_seen":"2026-03-27T13:25:19.257345Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"casrm.org/favicon.ico","fqdn":"casrm.org","domain":"casrm.org","tld":"org"},"ip":{"addr":"104.225.128.78","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casrm.org/","date":"2026-01-26T13:49:44.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casrm.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 00:26:22 GMT","end":"Wed, 22 Apr 2026 00:26:21 GMT"},"fingerprint":{"sha1":"8F:12:0D:81:20:5D:1B:45:A0:B5:00:36:52:CA:D6:44:75:FC:91:A0","sha256":"53:06:62:16:B6:4B:49:76:4E:5D:6D:12:08:F5:A4:62:32:B4:7D:A5:8F:9C:10:0A:F2:CE:B6:1F:19:B3:8B:93"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: casrm.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casrm.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Mon, 26 Jan 2026 13:49:44 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":796,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-08-05T15:47:03.561501Z","times_seen":53021,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casrm.org/windows.php","fqdn":"casrm.org","domain":"casrm.org","tld":"org"},"ip":{"addr":"104.225.128.78","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-26T13:49:49.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casrm.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 00:26:22 GMT","end":"Wed, 22 Apr 2026 00:26:21 GMT"},"fingerprint":{"sha1":"8F:12:0D:81:20:5D:1B:45:A0:B5:00:36:52:CA:D6:44:75:FC:91:A0","sha256":"53:06:62:16:B6:4B:49:76:4E:5D:6D:12:08:F5:A4:62:32:B4:7D:A5:8F:9C:10:0A:F2:CE:B6:1F:19:B3:8B:93"}}},"request":{"raw":"GET /windows.php HTTP/1.1\r\nHost: casrm.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 2347\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 26 Jan 2026 13:49:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6561,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"51d26a13582082f4924d3b7f3080970c","sha1":"61902d7cedc40ff5f56af26de6f83542893a614a","sha256":"c6ca96801cd24a7dc9b5a88eb6b403d0402c382106fd5882add35560b25fedca","sha512":"bd3868c29ec960af05a897bccc87a7e8288e17f2c32e63017b140a4d6ca1ded56969ed9e5c705e37f377e2a7fcf27c873da5e914f576e22e86bf73fe199a9f5c","ssdeep":"96:fhajz+EpNgtMfu9dQDTf9P0962CAVGK21fll2N4Mc:fhYKq8rnjVGK2V726Mc","tlshash":"08d15027908461256677d185afa50b4efe518207d20783407aedb356dff2e028e73bce","first_seen":"2025-12-22T17:43:44.823777Z","last_seen":"2026-03-27T13:25:19.254704Z","times_seen":6,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.edigitalagency.com.au/wp-content/uploads/new-Adobe-icon-png-small-size.png","fqdn":"www.edigitalagency.com.au","domain":"edigitalagency.com.au","tld":"com.au"},"ip":{"addr":"103.254.137.34","port":443,"asn":55803,"as":"Hostopia Australia Web Pty Ltd","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casrm.org/windows.php","date":"2026-01-26T13:49:49.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edigitalagency.com.au","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Mon, 16 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"16:08:E0:9B:CB:2A:AD:0C:88:09:CA:65:3A:D3:E0:09:BD:56:39:74","sha256":"32:E3:E4:36:DF:B7:D5:28:E7:20:B7:8F:2C:C6:15:22:E0:44:67:FB:BA:AC:4F:18:C5:74:DB:9E:A6:89:5B:6F"}}},"request":{"raw":"GET /wp-content/uploads/new-Adobe-icon-png-small-size.png HTTP/1.1\r\nHost: www.edigitalagency.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casrm.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 08 Jun 2025 13:31:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1500\r\ncontent-type: image/png\r\ndate: Mon, 26 Jan 2026 13:49:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1500,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 199, 4-bit colormap, non-interlaced","md5":"c952c2db66408a12650584c46cd20a46","sha1":"256a9ab36b022423a7d3ed4fa03ba192b5ba20db","sha256":"a9315da1d1d44aaf55aaf88ab5f9ddd45084c540b2e72f0ca3b3e17d837e0aff","sha512":"4576e6b9252e2e096396e4490c1fbd59facc507841e48e105a6740616a70f517b232a74d42e21425cc7d28c31b6ac63984e31cccbece7c9c83faf315722a2b66","ssdeep":"","tlshash":"68311cc16970bc696df92da7d1691ae97197eb090f0183b047171784f3af6131ce7c28","first_seen":"2025-12-22T17:43:44.819818Z","last_seen":"2026-07-30T14:46:20.199869Z","times_seen":15,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":319,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casrm.org/favicon.ico","fqdn":"casrm.org","domain":"casrm.org","tld":"org"},"ip":{"addr":"104.225.128.78","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casrm.org/windows.php","date":"2026-01-26T13:49:49.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casrm.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 00:26:22 GMT","end":"Wed, 22 Apr 2026 00:26:21 GMT"},"fingerprint":{"sha1":"8F:12:0D:81:20:5D:1B:45:A0:B5:00:36:52:CA:D6:44:75:FC:91:A0","sha256":"53:06:62:16:B6:4B:49:76:4E:5D:6D:12:08:F5:A4:62:32:B4:7D:A5:8F:9C:10:0A:F2:CE:B6:1F:19:B3:8B:93"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: casrm.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casrm.org/windows.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Mon, 26 Jan 2026 13:49:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":796,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-08-05T15:47:03.561501Z","times_seen":53021,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casrm.org/download.php","fqdn":"casrm.org","domain":"casrm.org","tld":"org"},"ip":{"addr":"104.225.128.78","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://casrm.org/windows.php","date":"2026-01-26T13:49:50.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casrm.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 00:26:22 GMT","end":"Wed, 22 Apr 2026 00:26:21 GMT"},"fingerprint":{"sha1":"8F:12:0D:81:20:5D:1B:45:A0:B5:00:36:52:CA:D6:44:75:FC:91:A0","sha256":"53:06:62:16:B6:4B:49:76:4E:5D:6D:12:08:F5:A4:62:32:B4:7D:A5:8F:9C:10:0A:F2:CE:B6:1F:19:B3:8B:93"}}},"request":{"raw":"GET /download.php HTTP/1.1\r\nHost: casrm.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casrm.org/windows.php\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-description: File Transfer\r\ncontent-type: application/octet-stream\r\ncontent-disposition: attachment; filename=\"Adobe_Acrobat_Reader.scr\"\r\ncontent-length: 38833672\r\ndate: Mon, 26 Jan 2026 13:49:50 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38833672,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PE32+ executable (GUI) x86-64, for MS Windows, 5 sections","md5":"1a78c11d9de99a0ed7fadff1598c8565","sha1":"485232cdb38cc5b8ffbc6e0b49a729dd5d3614f0","sha256":"04f358dfdd27ff9d87ae0bd6ba194224485c1d9d993ea0d63b82f913e7d3d452","sha512":"c48db7e23a097513d93ec5a3dd018e6e52476dedc0568cb0cb87083f13cc0033dc68e0427cfe49b289747537e2ab3aa574830a1da3d9ff1777941c4d0e7fb8cd","ssdeep":"24576:2NLU92UOpzDeJyhO76T+EXKcJUXipzHZbQRr68V1:2Ng0UOpzDccOmjXKcJUXMHZkRrf","tlshash":"8625e075e2e628e5d677f038ca924253ebb174580320a3d307b48a761fb77d6663d3a0","first_seen":"2025-12-04T23:08:40.594317Z","last_seen":"2026-06-15T15:11:03.908118Z","times_seen":34,"resource_available":true,"data":null}},"time_used":6210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":627,"receive":5583,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casrm.org/","fqdn":"casrm.org","domain":"casrm.org","tld":"org"},"ip":{"addr":"104.225.128.78","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-26T13:49:43.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casrm.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 00:26:22 GMT","end":"Wed, 22 Apr 2026 00:26:21 GMT"},"fingerprint":{"sha1":"8F:12:0D:81:20:5D:1B:45:A0:B5:00:36:52:CA:D6:44:75:FC:91:A0","sha256":"53:06:62:16:B6:4B:49:76:4E:5D:6D:12:08:F5:A4:62:32:B4:7D:A5:8F:9C:10:0A:F2:CE:B6:1F:19:B3:8B:93"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: casrm.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 754\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 26 Jan 2026 13:49:44 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1972,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"f314bdb42e5db00eeb8a73d62a039096","sha1":"bf9304b2978596c5e864a840f2d7ac2f04249249","sha256":"038b58bc8c8bc78ecbfed797eb6059aa33b8f663fdbe0d2d345f132a52b52e18","sha512":"9f85a9dd28b50eb0227d359892fdea0550b8f176bf733818747093643c804c9b289bfdd7c5615cbade2946ffd712e96cab7a4611d3cc3fde63e19f7c1f898e08","ssdeep":"","tlshash":"0f41e32a58852001427393a0aff3a758fad6c153830f05a67bdd324b8ff565987e3f98","first_seen":"2026-01-26T13:39:07.900703Z","last_seen":"2026-06-04T15:15:49.420624Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1243,"timings":{"blocked":254,"dns":1,"connect":123,"send":0,"wait":735,"receive":0,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.edigitalagency.com.au/wp-content/uploads/new-Adobe-icon-png-small-size.png","fqdn":"www.edigitalagency.com.au","domain":"edigitalagency.com.au","tld":"com.au"},"ip":{"addr":"103.254.137.34","port":443,"asn":55803,"as":"Hostopia Australia Web Pty Ltd","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casrm.org/","date":"2026-01-26T13:49:44.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edigitalagency.com.au","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Mon, 16 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"16:08:E0:9B:CB:2A:AD:0C:88:09:CA:65:3A:D3:E0:09:BD:56:39:74","sha256":"32:E3:E4:36:DF:B7:D5:28:E7:20:B7:8F:2C:C6:15:22:E0:44:67:FB:BA:AC:4F:18:C5:74:DB:9E:A6:89:5B:6F"}}},"request":{"raw":"GET /wp-content/uploads/new-Adobe-icon-png-small-size.png HTTP/1.1\r\nHost: www.edigitalagency.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casrm.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 08 Jun 2025 13:31:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1500\r\ncontent-type: image/png\r\ndate: Mon, 26 Jan 2026 13:49:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1500,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 199, 4-bit colormap, non-interlaced","md5":"c952c2db66408a12650584c46cd20a46","sha1":"256a9ab36b022423a7d3ed4fa03ba192b5ba20db","sha256":"a9315da1d1d44aaf55aaf88ab5f9ddd45084c540b2e72f0ca3b3e17d837e0aff","sha512":"4576e6b9252e2e096396e4490c1fbd59facc507841e48e105a6740616a70f517b232a74d42e21425cc7d28c31b6ac63984e31cccbece7c9c83faf315722a2b66","ssdeep":"","tlshash":"68311cc16970bc696df92da7d1691ae97197eb090f0183b047171784f3af6131ce7c28","first_seen":"2025-12-22T17:43:44.819818Z","last_seen":"2026-07-30T14:46:20.199869Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1569,"timings":{"blocked":625,"dns":1,"connect":310,"send":0,"wait":315,"receive":0,"ssl":315},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}