{"report_id":"e7124138-c912-4daa-b234-19e8678663f5","version":0,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-06-24T10:35:22Z","url":{"schema":"http","addr":"castigan.us","fqdn":"castigan.us","domain":"castigan.us","tld":"us"},"ip":{"addr":"66.85.46.240","port":0,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"castigan.us/","fqdn":"castigan.us","domain":"castigan.us","tld":"us"},"title":"castigan.us/","dom":{"size":88922,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (60351)","md5":"ea804666f34166ffc99b63341ead2588","sha1":"ad5b4b16aa186c6b07a5334d286a70a8e0613ecb","sha256":"a7b26001c123a9ef15a0c75e2c11f0ff8d7e7c44dfb4fb9f6a6b53b010fe1e91","sha512":"44d75612f14c6c5446dad9cc5cbf7f0d1b646704903e9196e73c045c1c329213461e935c58fcde2d1b9a252e9d1297ebb039357fc0db830b06e11fffdd1ab9eb","ssdeep":"384:OX20GpNegbfhfFfnfs71Mf13tB8B9SMoZUU4TOiPx3Kk6csK1pRyIlyfUUAKipML:82DZUU9csniHTetsiyPRX0UKoy","tlshash":"38939b59b501823f3c03a5fcd35ce0aab25321d0fe7986f7ac8620119fdabf698a7155","dom_hash":"domhash1d9b2a447a283dd625fe8302d5a73c0d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"castigan.us","fqdn":"castigan.us","domain":"castigan.us","tld":"us"},"ip":{"addr":"66.85.46.240","port":0,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-29T10:35:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-24","alert":"Detects file containing Telegram Bot API","trigger":"castigan.us/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-24","alert":"Phishing Block","trigger":"castigan.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"castigan.us","ip":{"addr":"66.85.46.240","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"domain_registered":"2026-04-07","domain_rank":0,"first_seen":"2026-06-24T01:57:52.637117Z","last_seen":"2026-06-24T01:57:52.637117Z","alert_count":38,"request_count":12,"received_data":676188,"sent_data":5838,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"static.cimcontent.net","ip":{"addr":"23.49.28.112","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2008-10-17","domain_rank":228070,"first_seen":"2018-06-06T22:15:44Z","last_seen":"2026-06-20T09:07:15.529318Z","alert_count":0,"request_count":3,"received_data":147813,"sent_data":1639,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"login.xfinity.com","ip":{"addr":"23.36.79.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2003-01-23","domain_rank":28072,"first_seen":"2018-01-15T14:52:54Z","last_seen":"2026-06-20T09:07:15.605213Z","alert_count":0,"request_count":2,"received_data":4578,"sent_data":1139,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"castigan.us/","fqdn":"castigan.us","domain":"castigan.us","tld":"us"},"ip":{"addr":"66.85.46.240","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"md5":"9a14c06cdc89c2bef6957ac2ffa123ff","sha1":"c214a55cfc3f1c5efa420c963ef154471a7d31f4","sha256":"517fe618f67c9091a656160cb3d86fc812b9eca1c4ed002e06b3c03a679b71a1","sha512":"8f88e19bc1f8f1c11cac13f3e06e5168c27ca99f4c9772d8840bd7eb224c49464584d39154fb7c7c8479861f0be098cf9b577e452e79c02df12b13d7e6a70752","size":1228,"token":"8082640198:AAFRhHlYU-PEGza9IcWihQJEnoBkbxBcFPs","is_revoked":false,"bot":{"token":"8082640198:AAFRhHlYU-PEGza9IcWihQJEnoBkbxBcFPs","user_id":"8082640198","username":"Ihateme404_bot","first_name":"Result BOT👅","last_name":"","chat":{"chat_id":"6020125971","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":1}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"castigan.us/js/bundle-cef2f07.js","fqdn":"castigan.us","domain":"castigan.us","tld":"us"},"ip":{"addr":"66.85.46.240","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc28393a81e68f7b33e0aa6ad91cbaa2","sha1":"3a7c1f50c0cd49b8219adfe78431018a3040e5fd","sha256":"686a33f005c28796f3dd0a3fc0b63f9c4103e33b71c8f1d4551d219ee4138903","sha512":"baeade20e2155e2a3c4d2e1f165a2a880f29f756379da5abda76960e7f98b686bdfb0f2741a16dc16bbe8cec4119e2e28d5924c3ed663e14502cddcaf2d74ea1","ssdeep":"384:92MSonnyQyBt7vwC5SHch51Y6s1u5EAVsZWRyiEst5d4uX3hJDzN:92MjiEs75uqVsBKd4QTN","tlshash":"a362b78ab691b87203a3a476917f510bf23a2da4741e90d0d669c8d17cb888e417ff6d","size":14877,"data":"","first_seen":"2025-04-09T12:14:49.173799Z","last_seen":"2026-06-24T10:36:43.387287Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"castigan.us/js/comcast-common.js","fqdn":"castigan.us","domain":"castigan.us","tld":"us"},"ip":{"addr":"66.85.46.240","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71cdb47571f4acc45a95181fd917147b","sha1":"53279319e3c597e08b37c9a6f2e3fb4dd158c9ea","sha256":"14500096a5ad4d9d53e232c14928d3d60232a29f26c2c09aac5fc89ad23c2e09","sha512":"5478ef1dbc96b39b5d6692f2e995ece6b641ac88bba8130e65277277a885c8f82fa65366fd22ce455c9afd414ffbc0883ecb924f18b9afcc932726999eb1e805","ssdeep":"6144:1VmxgwiMPNCI60TiguQuQXlwP2O1TMTOK5xQdIBTncp96o:vUgwJ3/iguTIlpOK6K56mBIP","tlshash":"73347d4aebc843fdc19839d2585e134694fda8221cd8f1186176e4fb6f78f38a47c91a","size":242760,"data":"","first_seen":"2025-04-09T12:14:49.167086Z","last_seen":"2026-06-24T10:36:43.384578Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"castigan.us/","fqdn":"castigan.us","domain":"castigan.us","tld":"us"},"ip":{"addr":"66.85.46.240","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a14c06cdc89c2bef6957ac2ffa123ff","sha1":"c214a55cfc3f1c5efa420c963ef154471a7d31f4","sha256":"517fe618f67c9091a656160cb3d86fc812b9eca1c4ed002e06b3c03a679b71a1","sha512":"8f88e19bc1f8f1c11cac13f3e06e5168c27ca99f4c9772d8840bd7eb224c49464584d39154fb7c7c8479861f0be098cf9b577e452e79c02df12b13d7e6a70752","ssdeep":"","tlshash":"b121ab562cb614901a9bf1ba03e7a005e131606b3644d811be4c97e11f25b69647fa84","size":1228,"data":"","first_seen":"2026-06-24T01:57:57.010514Z","last_seen":"2026-06-24T10:36:43.390704Z","times_seen":3,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-24","alert":"Detects file containing Telegram Bot API","trigger":"castigan.us/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"","filename":"https://castigan.us/js/comcast-common.js","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"castigan.us/","fqdn":"castigan.us","domain":"castigan.us","tld":"us"},"ip":{"addr":"66.85.46.240","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-24T10:34:57.297Z","timestamp":1782297297297,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.castigan.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 14:20:06 GMT","end":"Sat, 05 Sep 2026 14:20:05 GMT"},"fingerprint":{"sha1":"9D:9F:C2:4C:E7:8A:78:79:AE:FD:CF:4A:92:D3:E2:5C:49:0E:E8:49","sha256":"4C:CE:23:02:61:11:CA:51:8E:12:02:EF:B2:26:02:6F:B9:62:17:47:22:A2:A0:46:7A:4A:36:2E:D1:BF:08:DC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: castigan.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 24 Jun 2026 10:34:57 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 21 Jun 2026 23:46:43 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 89017\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":89017,"size_decoded":89261,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (60351), with CRLF line terminators","md5":"11af4b79cab0db85060002f2b1876de9","sha1":"6211ceff2e3485dd459b20b826a09112b7d28ed7","sha256":"75675370e9960ecc6a48b2780baee61ef4204664ac9c510fdecbb5dc103d94fa","sha512":"c3e17a8622fb200037567b43438657a7027c939542121bbe2042f5d5926e85501bd2c3073b73fdd639095c087a459035a9ddf1846e3cf641276cae41cd1b78dc","ssdeep":"384:OXv0GpNegbfhfFfnfs71Mf13tB8B9SMoZUU4TOiPx3Kk6csK1pRyIlyfUUAKipMA:8vDZUU9csnhzTjasr0PRp04K2P","tlshash":"14937a59b501823f3c03a5fcd35ce0aab25321d0fe7986f7bc862011abdabf69897155","first_seen":"2026-06-24T01:57:57.003418Z","last_seen":"2026-06-24T10:36:43.382488Z","times_seen":3,"resource_available":true,"data":null}},"time_used":817,"timings":{"blocked":-1,"dns":22,"connect":137,"send":0,"wait":122,"receive":290,"ssl":246},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-24","alert":"Detects file containing Telegram Bot API","trigger":"castigan.us/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-24","alert":"Phishing Block","trigger":"castigan.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"castigan.us/static/images/global/xfinity-logo-grey.svg","fqdn":"castigan.us","domain":"castigan.us","tld":"us"},"ip":{"addr":"66.85.46.240","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://castigan.us/","date":"2026-06-24T10:34:59.087Z","timestamp":1782297299087,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.castigan.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 14:20:06 GMT","end":"Sat, 05 Sep 2026 14:20:05 GMT"},"fingerprint":{"sha1":"9D:9F:C2:4C:E7:8A:78:79:AE:FD:CF:4A:92:D3:E2:5C:49:0E:E8:49","sha256":"4C:CE:23:02:61:11:CA:51:8E:12:02:EF:B2:26:02:6F:B9:62:17:47:22:A2:A0:46:7A:4A:36:2E:D1:BF:08:DC"}}},"request":{"raw":"GET /static/images/global/xfinity-logo-grey.svg HTTP/1.1\r\nHost: castigan.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castigan.us/css/bundle.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 24 Jun 2026 10:34:59 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":555,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-07-17T08:49:20.894228Z","times_seen":45709,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-24","alert":"Phishing Block","trigger":"castigan.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cimcontent.net/common-web-assets/fonts/dm-sans/dmsans-bold.woff2","fqdn":"static.cimcontent.net","domain":"cimcontent.net","tld":"net"},"ip":{"addr":"23.49.28.112","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://castigan.us/","date":"2026-06-24T10:34:59.128Z","timestamp":1782297299128,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.cimcontent.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"46:FC:E0:D1:88:C7:1E:7C:1D:B7:52:B9:B3:30:69:7B:87:4B:FD:AD","sha256":"F7:95:98:9F:5F:98:FC:5F:87:D3:4F:EF:98:90:14:E3:F8:0A:88:6C:10:E7:A7:8A:F7:0C:17:9B:4A:8E:99:4C"}}},"request":{"raw":"GET /common-web-assets/fonts/dm-sans/dmsans-bold.woff2 HTTP/1.1\r\nHost: static.cimcontent.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://castigan.us\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castigan.us/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: font/woff2\r\ncontent-length: 29872\r\nlast-modified: Wed, 07 May 2025 17:42:38 GMT\r\netag: \"5f8fa708197e8666b28fecf16ab5c7f9\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: HftgflcdxPkkngwbcCwqHydsdLguA4t3\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 3EthMhfvdLLm95ZfFJdYMl6KnXhYBnutyalg9Z2uzzQjmQWc253IGw==\r\ncache-control: max-age=31536000\r\ndate: Wed, 24 Jun 2026 10:34:59 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":29872,"size_decoded":30371,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29872, version 1.0","md5":"5f8fa708197e8666b28fecf16ab5c7f9","sha1":"cf1789b9debe417b1bf3d97e4fdb34584ec6f77c","sha256":"f4fc8ea1d0db62d19b2320e0299afe1c60abc0aacb7ba34d4169d56bcc828fe2","sha512":"18a73b963f0bd2142bb4d6a24e14f1b4f223b87dfc52c2e1aab73d743a555eab9bece1a2dc4692e0eb083d3c523931816a09c31f6cb52d7e9da7d6b18135a0a2","ssdeep":"768:J7ClyHjz6WfDoWPfAW2EhywNRDxFn9UBWvyC:QwP6WxI3I1vxFn9UByyC","tlshash":"86d2e1cf54a70fd2c52888b86090e91c6deef375f3e9648c035ee88ead4d5623b21653","first_seen":"2023-07-14T01:42:30Z","last_seen":"2026-07-15T03:40:01.390195Z","times_seen":184,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":201,"connect":1,"send":0,"wait":3,"receive":2,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cimcontent.net/common-web-assets/fonts/xfinity-brown-optimized/xfinitybrown-regular.woff2","fqdn":"static.cimcontent.net","domain":"cimcontent.net","tld":"net"},"ip":{"addr":"23.49.28.112","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://castigan.us/","date":"2026-06-24T10:34:59.132Z","timestamp":1782297299132,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.cimcontent.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"46:FC:E0:D1:88:C7:1E:7C:1D:B7:52:B9:B3:30:69:7B:87:4B:FD:AD","sha256":"F7:95:98:9F:5F:98:FC:5F:87:D3:4F:EF:98:90:14:E3:F8:0A:88:6C:10:E7:A7:8A:F7:0C:17:9B:4A:8E:99:4C"}}},"request":{"raw":"GET /common-web-assets/fonts/xfinity-brown-optimized/xfinitybrown-regular.woff2 HTTP/1.1\r\nHost: static.cimcontent.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://castigan.us\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castigan.us/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: font/woff2\r\ncontent-length: 86524\r\nlast-modified: Wed, 07 May 2025 17:42:40 GMT\r\netag: \"7852867d778f90102ccdec973b475759\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: gw7wjuR4opXGeqv20283quaergq0iUvk\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: CPH50-P1\r\nx-amz-cf-id: ocD4MuE9g-nT3U4foISbyMd14f_Ga_lwer-u4dzTywuPsegaYx-NlQ==\r\ncache-control: max-age=31536000\r\ndate: Wed, 24 Jun 2026 10:34:59 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":86524,"size_decoded":87023,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 86524, version 1.66","md5":"7852867d778f90102ccdec973b475759","sha1":"17a64dacf2c9e594cc4a6f5d49492a54a88b5193","sha256":"ac7ab1854db99c8278486132a7cef4a5d4f2992fd59488d02b4a5c5a071407d0","sha512":"31114c84767199aa085e0d6f285296154f9006d5ecdf794c72af34f4dc2508d90f53786329e85e6915eebc1f83ac622749b498b3ac8650072537c3aef5f9eae4","ssdeep":"1536:/Ocqyvx5/JtUBWeYL5CIKTcEXV1ULAQcq8UMeTbbGUbfwT9DiROYFaAC:/FHbYBO5C3tej8RUIsOY8D","tlshash":"76831273b4a34856cc36e8ec9a2ed8b15b79c78ff2080d95b95c84b8d22f691873594c","first_seen":"2023-04-15T05:38:27Z","last_seen":"2026-07-15T03:40:01.395103Z","times_seen":1466,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":196,"connect":2,"send":0,"wait":3,"receive":2,"ssl":218},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"castigan.us/css/favicon-16x16.png","fqdn":"castigan.us","domain":"castigan.us","tld":"us"},"ip":{"addr":"66.85.46.240","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://castigan.us/","date":"2026-06-24T10:34:59.603Z","timestamp":1782297299603,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.castigan.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 14:20:06 GMT","end":"Sat, 05 Sep 2026 14:20:05 GMT"},"fingerprint":{"sha1":"9D:9F:C2:4C:E7:8A:78:79:AE:FD:CF:4A:92:D3:E2:5C:49:0E:E8:49","sha256":"4C:CE:23:02:61:11:CA:51:8E:12:02:EF:B2:26:02:6F:B9:62:17:47:22:A2:A0:46:7A:4A:36:2E:D1:BF:08:DC"}}},"request":{"raw":"GET /css/favicon-16x16.png HTTP/1.1\r\nHost: castigan.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castigan.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 24 Jun 2026 10:34:59 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 21 Mar 2024 04:47:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 184\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":184,"size_decoded":425,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit grayscale, non-interlaced","md5":"db142cad60d6acbf015835843f35071f","sha1":"56261a4d35ff1ad9c210376f025f8762e608494f","sha256":"1a819ccf88edbedbdce80f8f48844260c685edf389ba39ba92e42c7291522801","sha512":"73373b61b828ddc6223a9a48286efe5efc5610f3358738035cc347acecc1a98dbf6d8697b0e04131925a54cf97c4bb1f39de408ebddc69a2867a6391b63f5272","ssdeep":"","tlshash":"71c0c0ef73643c7de8080e3f6c0204b19c2543c1c6f1049013b48030e300f3c02b8502","first_seen":"2023-06-04T02:44:54Z","last_seen":"2026-06-30T23:59:17.972222Z","times_seen":1477,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-24","alert":"Phishing Block","trigger":"castigan.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"castigan.us/js/comcast-common.js","fqdn":"castigan.us","domain":"castigan.us","tld":"us"},"ip":{"addr":"66.85.46.240","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://castigan.us/","date":"2026-06-24T10:34:58.064Z","timestamp":1782297298064,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.castigan.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 14:20:06 GMT","end":"Sat, 05 Sep 2026 14:20:05 GMT"},"fingerprint":{"sha1":"9D:9F:C2:4C:E7:8A:78:79:AE:FD:CF:4A:92:D3:E2:5C:49:0E:E8:49","sha256":"4C:CE:23:02:61:11:CA:51:8E:12:02:EF:B2:26:02:6F:B9:62:17:47:22:A2:A0:46:7A:4A:36:2E:D1:BF:08:DC"}}},"request":{"raw":"GET /js/comcast-common.js HTTP/1.1\r\nHost: castigan.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castigan.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 24 Jun 2026 10:34:58 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 21 Mar 2024 04:47:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 242760\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":242760,"size_decoded":243011,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71cdb47571f4acc45a95181fd917147b","sha1":"53279319e3c597e08b37c9a6f2e3fb4dd158c9ea","sha256":"14500096a5ad4d9d53e232c14928d3d60232a29f26c2c09aac5fc89ad23c2e09","sha512":"5478ef1dbc96b39b5d6692f2e995ece6b641ac88bba8130e65277277a885c8f82fa65366fd22ce455c9afd414ffbc0883ecb924f18b9afcc932726999eb1e805","ssdeep":"6144:1VmxgwiMPNCI60TiguQuQXlwP2O1TMTOK5xQdIBTncp96o:vUgwJ3/iguTIlpOK6K56mBIP","tlshash":"73347d4aebc843fdc19839d2585e134694fda8221cd8f1186176e4fb6f78f38a47c91a","first_seen":"2025-04-09T12:14:49.167086Z","last_seen":"2026-06-24T10:36:43.384578Z","times_seen":46,"resource_available":true,"data":null}},"time_used":847,"timings":{"blocked":-1,"dns":0,"connect":119,"send":0,"wait":120,"receive":480,"ssl":127},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-24","alert":"Phishing Block","trigger":"castigan.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"castigan.us/css/prism-ui-cef2f07.css","fqdn":"castigan.us","domain":"castigan.us","tld":"us"},"ip":{"addr":"66.85.46.240","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://castigan.us/","date":"2026-06-24T10:34:58.085Z","timestamp":1782297298085,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.castigan.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 14:20:06 GMT","end":"Sat, 05 Sep 2026 14:20:05 GMT"},"fingerprint":{"sha1":"9D:9F:C2:4C:E7:8A:78:79:AE:FD:CF:4A:92:D3:E2:5C:49:0E:E8:49","sha256":"4C:CE:23:02:61:11:CA:51:8E:12:02:EF:B2:26:02:6F:B9:62:17:47:22:A2:A0:46:7A:4A:36:2E:D1:BF:08:DC"}}},"request":{"raw":"GET /css/prism-ui-cef2f07.css HTTP/1.1\r\nHost: castigan.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castigan.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 24 Jun 2026 10:34:58 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 21 Mar 2024 04:47:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 67968\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":67968,"size_decoded":68210,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cb5c0ce049ae586b381128adc222e578","sha1":"862f7765781f6faba5759f4effeb692d1250d03f","sha256":"4d0d01d5e95e4904e89cab34bc4439558f20e3de3677990f53f8885508c71afd","sha512":"c585377e1c2523d2455f9ad21604c1c5ee4109b7fe913566f270bdcf358dc61c557caf572061624d52a0bf45df5ab5f2e7e63a9c99cde12ae00d434b94f5eb26","ssdeep":"768:keIxIZIAIGIGIpIPIxIZIAIGIGIpIVhDI8zwdiw+Ub6PhvLtA5xi:zIxIZIAIGIGIpIPIxIZIAIGIGIpIS5xi","tlshash":"eb632210fb01921fb82a4aff10adb5e395271147c76b86f9f38b100bb59facb5197246","first_seen":"2023-07-14T01:42:30Z","last_seen":"2026-06-24T10:36:43.386759Z","times_seen":1279,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":118,"send":0,"wait":121,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-24","alert":"Phishing Block","trigger":"castigan.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"castigan.us/css/bundle-cef2f07.css","fqdn":"castigan.us","domain":"castigan.us","tld":"us"},"ip":{"addr":"66.85.46.240","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://castigan.us/","date":"2026-06-24T10:34:58.087Z","timestamp":1782297298087,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.castigan.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 14:20:06 GMT","end":"Sat, 05 Sep 2026 14:20:05 GMT"},"fingerprint":{"sha1":"9D:9F:C2:4C:E7:8A:78:79:AE:FD:CF:4A:92:D3:E2:5C:49:0E:E8:49","sha256":"4C:CE:23:02:61:11:CA:51:8E:12:02:EF:B2:26:02:6F:B9:62:17:47:22:A2:A0:46:7A:4A:36:2E:D1:BF:08:DC"}}},"request":{"raw":"GET /css/bundle-cef2f07.css HTTP/1.1\r\nHost: castigan.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castigan.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 24 Jun 2026 10:34:58 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 21 Mar 2024 04:47:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 90549\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":90549,"size_decoded":90792,"mime_type":"text/css","magic":"ASCII text, with very long lines (65472)","md5":"440160c5b1b460a156f7780ec1c4d60e","sha1":"eecf6690b2ea5c5a0019a82296cf985a19b7cd81","sha256":"a9adb899c167f01d969696a58403d3089cf6cf452df0a53ab42afe90000fbc52","sha512":"f3f03d39a548d01991fec6ed641a9f07446fd9e23d9c9433baa157817e89f304dbff3d813e8b495aa0fd70379889b6574cde0cfde66c53105502ebf9ac75d257","ssdeep":"768:VI5IhIHIYIhIhI1FlDI8z7F3riw+Ub6PhvLtma+Ax6r5+sR:VI5IhIHIYIhIhI1V97a+Ax6d+sR","tlshash":"37935314ff01811fb8164aff50acb6a395274547db6b86f8f647000abbef6cb5297206","first_seen":"2024-12-08T16:59:48.253651Z","last_seen":"2026-06-24T10:36:43.385094Z","times_seen":49,"resource_available":false,"data":null}},"time_used":723,"timings":{"blocked":-1,"dns":0,"connect":119,"send":0,"wait":122,"receive":355,"ssl":126},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-24","alert":"Phishing Block","trigger":"castigan.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"castigan.us/js/bundle-cef2f07.js","fqdn":"castigan.us","domain":"castigan.us","tld":"us"},"ip":{"addr":"66.85.46.240","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://castigan.us/","date":"2026-06-24T10:34:58.091Z","timestamp":1782297298091,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.castigan.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 14:20:06 GMT","end":"Sat, 05 Sep 2026 14:20:05 GMT"},"fingerprint":{"sha1":"9D:9F:C2:4C:E7:8A:78:79:AE:FD:CF:4A:92:D3:E2:5C:49:0E:E8:49","sha256":"4C:CE:23:02:61:11:CA:51:8E:12:02:EF:B2:26:02:6F:B9:62:17:47:22:A2:A0:46:7A:4A:36:2E:D1:BF:08:DC"}}},"request":{"raw":"GET /js/bundle-cef2f07.js HTTP/1.1\r\nHost: castigan.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castigan.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 24 Jun 2026 10:34:58 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 21 Mar 2024 04:47:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 14877\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14877,"size_decoded":15127,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14840)","md5":"bc28393a81e68f7b33e0aa6ad91cbaa2","sha1":"3a7c1f50c0cd49b8219adfe78431018a3040e5fd","sha256":"686a33f005c28796f3dd0a3fc0b63f9c4103e33b71c8f1d4551d219ee4138903","sha512":"baeade20e2155e2a3c4d2e1f165a2a880f29f756379da5abda76960e7f98b686bdfb0f2741a16dc16bbe8cec4119e2e28d5924c3ed663e14502cddcaf2d74ea1","ssdeep":"384:92MSonnyQyBt7vwC5SHch51Y6s1u5EAVsZWRyiEst5d4uX3hJDzN:92MjiEs75uqVsBKd4QTN","tlshash":"a362b78ab691b87203a3a476917f510bf23a2da4741e90d0d669c8d17cb888e417ff6d","first_seen":"2025-04-09T12:14:49.173799Z","last_seen":"2026-06-24T10:36:43.387287Z","times_seen":46,"resource_available":true,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":121,"send":0,"wait":122,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-24","alert":"Phishing Block","trigger":"castigan.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"castigan.us/css/cookie-consent.css","fqdn":"castigan.us","domain":"castigan.us","tld":"us"},"ip":{"addr":"66.85.46.240","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://castigan.us/","date":"2026-06-24T10:34:58.093Z","timestamp":1782297298093,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.castigan.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 14:20:06 GMT","end":"Sat, 05 Sep 2026 14:20:05 GMT"},"fingerprint":{"sha1":"9D:9F:C2:4C:E7:8A:78:79:AE:FD:CF:4A:92:D3:E2:5C:49:0E:E8:49","sha256":"4C:CE:23:02:61:11:CA:51:8E:12:02:EF:B2:26:02:6F:B9:62:17:47:22:A2:A0:46:7A:4A:36:2E:D1:BF:08:DC"}}},"request":{"raw":"GET /css/cookie-consent.css HTTP/1.1\r\nHost: castigan.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castigan.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 24 Jun 2026 10:34:58 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 21 Mar 2024 04:47:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 55562\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":55562,"size_decoded":55805,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (1846)","md5":"b9feeadfb853a8bb5a375d84ec0fa9b2","sha1":"6f162a510d1879ea69932b8e30af836e67127468","sha256":"1db596d64a139ee0b14e98dfe183c8cb7e7ef5e528649b3f51991a8bc42eab7f","sha512":"596d17334012415ff7ba536d64bb915d91956d696f87dfa60c78f108cee00ce08d21015280d036bdc2ee1e58c240f54baa1a154ffd8ae588f90467bcbe0b8cd1","ssdeep":"1536:AIUINI6IsIZI9IeImI5ItItIzIxIRIFbnIDmZ26aKY+rEv/PmMUOK4ddGBjXLw:dpGfRq2rjKmmcSyFbqmg6M+i0BQ","tlshash":"844345e55eb5115471179c96ba8e2b577b28cf26840eedbbebe1340cefc41489c63388","first_seen":"2023-04-15T05:38:27Z","last_seen":"2026-07-15T03:40:01.383722Z","times_seen":1282,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":238,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-24","alert":"Phishing Block","trigger":"castigan.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.xfinity.com/static/images/global/xfinity-logo-black.svg","fqdn":"login.xfinity.com","domain":"xfinity.com","tld":"com"},"ip":{"addr":"23.36.79.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://castigan.us/","date":"2026-06-24T10:34:58.383Z","timestamp":1782297298383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login.xfinity.com","organization":""},"issuer":{"commonName":"COMODO RSA Organization Validation Secure Server CA","organization":"COMODO CA Limited"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FC:AE:B5:13:FA:D2:2D:2A:C0:B7:8E:29:95:DC:AC:2E:8A:1C:9D:E6","sha256":"5E:03:92:9D:5B:E4:F4:0C:83:CA:FC:B1:31:E5:D4:49:AB:A1:5C:D5:19:38:84:AD:F0:7A:41:C6:D6:F1:6F:D1"}}},"request":{"raw":"GET /static/images/global/xfinity-logo-black.svg HTTP/1.1\r\nHost: login.xfinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castigan.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Jun 2026 20:53:32 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Wed, 24 Jun 2026 10:34:59 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Wed, 24 Jun 2026 10:34:59 GMT\r\ncontent-length: 536\r\nset-cookie: AWSALBTG=+lIdIOSSJ02E93ga8IksDdazRm9XkHlqQSa1MhKBpU3/4micWKw0MUl9xb7m4bDgtVI9JqWy+qQ9Pp0VqOAqZID3Nw1KxasgpB5Ia3kazJRmu4ASFQQf+Px90bOV+g24t5L8tdU80x73BLIdE+tZM3OSmwdy5WEQLxLJIh3gdjqH; Expires=Wed, 01 Jul 2026 10:34:59 GMT; Path=/\nAWSALBTGCORS=+lIdIOSSJ02E93ga8IksDdazRm9XkHlqQSa1MhKBpU3/4micWKw0MUl9xb7m4bDgtVI9JqWy+qQ9Pp0VqOAqZID3Nw1KxasgpB5Ia3kazJRmu4ASFQQf+Px90bOV+g24t5L8tdU80x73BLIdE+tZM3OSmwdy5WEQLxLJIh3gdjqH; Expires=Wed, 01 Jul 2026 10:34:59 GMT; Path=/; SameSite=None; Secure\nAWSALB=XqGlHFO8e0tTBcvTiEgfrRb3G3yJDUqq/73VnIGSXhekDGHeA8dneHaI/SFQkGqc0C0oKLtf7+hAD1/HY/mT1dF8Uzzd/hKtP+s4iYuVKLgGsd+5XNuw9JE1meUT; Expires=Wed, 01 Jul 2026 10:34:59 GMT; Path=/\nAWSALBCORS=XqGlHFO8e0tTBcvTiEgfrRb3G3yJDUqq/73VnIGSXhekDGHeA8dneHaI/SFQkGqc0C0oKLtf7+hAD1/HY/mT1dF8Uzzd/hKtP+s4iYuVKLgGsd+5XNuw9JE1meUT; Expires=Wed, 01 Jul 2026 10:34:59 GMT; Path=/; SameSite=None; Secure\nlogin_dc=east; expires=Wed, 24-Jun-2026 12:34:59 GMT; path=/\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":939,"size_decoded":1886,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad0169683d32ded98ee715cf453e4033","sha1":"94e5de676c41f5819be4510c8dc852a0e5b629f1","sha256":"f831f28eea507b3e762cc59806bb6c8b6f2101cbf56f4689981055d77a7bffb5","sha512":"7eff6aac74551a729f091e6d615c61edad582c91e5d2a925155d32ae8f59878c6dfe4e00d5e960ea0e10f2e58d629117ab291297df0c54f916da19c548edfaa2","ssdeep":"","tlshash":"6811dc3a032f17cdbbc89b106060e0a66476603a73b490a89fc3e814ac009f30076975","first_seen":"2024-03-03T08:20:16Z","last_seen":"2026-06-24T10:36:43.385616Z","times_seen":1134,"resource_available":false,"data":null}},"time_used":707,"timings":{"blocked":528,"dns":0,"connect":1,"send":0,"wait":167,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"castigan.us/static/images/global/xfinity-logo-black.svg","fqdn":"castigan.us","domain":"castigan.us","tld":"us"},"ip":{"addr":"66.85.46.240","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://castigan.us/","date":"2026-06-24T10:34:59.090Z","timestamp":1782297299090,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.castigan.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 14:20:06 GMT","end":"Sat, 05 Sep 2026 14:20:05 GMT"},"fingerprint":{"sha1":"9D:9F:C2:4C:E7:8A:78:79:AE:FD:CF:4A:92:D3:E2:5C:49:0E:E8:49","sha256":"4C:CE:23:02:61:11:CA:51:8E:12:02:EF:B2:26:02:6F:B9:62:17:47:22:A2:A0:46:7A:4A:36:2E:D1:BF:08:DC"}}},"request":{"raw":"GET /static/images/global/xfinity-logo-black.svg HTTP/1.1\r\nHost: castigan.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castigan.us/css/bundle.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 24 Jun 2026 10:34:59 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":555,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-07-17T08:49:20.894228Z","times_seen":45709,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-24","alert":"Phishing Block","trigger":"castigan.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cimcontent.net/common-web-assets/fonts/dm-sans/dmsans-regular.woff2","fqdn":"static.cimcontent.net","domain":"cimcontent.net","tld":"net"},"ip":{"addr":"23.49.28.112","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://castigan.us/","date":"2026-06-24T10:34:59.130Z","timestamp":1782297299130,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.cimcontent.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"46:FC:E0:D1:88:C7:1E:7C:1D:B7:52:B9:B3:30:69:7B:87:4B:FD:AD","sha256":"F7:95:98:9F:5F:98:FC:5F:87:D3:4F:EF:98:90:14:E3:F8:0A:88:6C:10:E7:A7:8A:F7:0C:17:9B:4A:8E:99:4C"}}},"request":{"raw":"GET /common-web-assets/fonts/dm-sans/dmsans-regular.woff2 HTTP/1.1\r\nHost: static.cimcontent.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://castigan.us\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castigan.us/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: font/woff2\r\ncontent-length: 29920\r\nlast-modified: Wed, 07 May 2025 17:42:38 GMT\r\netag: \"b9d5e5cad821648da76e2fedb6c6a680\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: B6Y2UPZ8HumiPBqb9Tc2GO2DjkgxwQ9e\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: LHR50-P4\r\nx-amz-cf-id: rnNc1lJa6lOwPJVAjpApAMfhkimHlQOqLCzTINdUcxFTPYKFwNnjsQ==\r\ncache-control: max-age=31536000\r\ndate: Wed, 24 Jun 2026 10:34:59 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":29920,"size_decoded":30419,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29920, version 1.0","md5":"b9d5e5cad821648da76e2fedb6c6a680","sha1":"f99e9d4c60c524dfb2e5015dfc754ae325773ff9","sha256":"40aefc09f33205666c2c42f20d54285147ae9434ef5f8018481950fd67ddcb68","sha512":"4a94b57c36cef25992c4324289e3ceb6fd5e22cb053d1d6a0c81749d421192c4cd9f8abeed548fd716492674b0cf568dd1182fe402a0f36c77b21a37cb0aca7a","ssdeep":"768:YUyDoffo32x6g0X+TIhsqOGmalsmzanisIZFk7:qmKcksqOGmJsg","tlshash":"1bd2e189fbc2b957ca45816c2e707da9061d8500a5afeb3499d31f3d83e24b7b880d5f","first_seen":"2023-04-06T07:47:01Z","last_seen":"2026-07-16T19:45:04.361885Z","times_seen":1543,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":199,"connect":2,"send":0,"wait":2,"receive":2,"ssl":216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"castigan.us/static/images/global/xfinity-logo-black.svg","fqdn":"castigan.us","domain":"castigan.us","tld":"us"},"ip":{"addr":"66.85.46.240","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://castigan.us/","date":"2026-06-24T10:34:59.465Z","timestamp":1782297299465,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.castigan.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 14:20:06 GMT","end":"Sat, 05 Sep 2026 14:20:05 GMT"},"fingerprint":{"sha1":"9D:9F:C2:4C:E7:8A:78:79:AE:FD:CF:4A:92:D3:E2:5C:49:0E:E8:49","sha256":"4C:CE:23:02:61:11:CA:51:8E:12:02:EF:B2:26:02:6F:B9:62:17:47:22:A2:A0:46:7A:4A:36:2E:D1:BF:08:DC"}}},"request":{"raw":"GET /static/images/global/xfinity-logo-black.svg HTTP/1.1\r\nHost: castigan.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castigan.us/css/bundle.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 24 Jun 2026 10:34:59 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":555,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-07-17T08:49:20.894228Z","times_seen":45709,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-24","alert":"Phishing Block","trigger":"castigan.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"castigan.us/css/android-icon-192x192.png","fqdn":"castigan.us","domain":"castigan.us","tld":"us"},"ip":{"addr":"66.85.46.240","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://castigan.us/","date":"2026-06-24T10:34:59.601Z","timestamp":1782297299601,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.castigan.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 14:20:06 GMT","end":"Sat, 05 Sep 2026 14:20:05 GMT"},"fingerprint":{"sha1":"9D:9F:C2:4C:E7:8A:78:79:AE:FD:CF:4A:92:D3:E2:5C:49:0E:E8:49","sha256":"4C:CE:23:02:61:11:CA:51:8E:12:02:EF:B2:26:02:6F:B9:62:17:47:22:A2:A0:46:7A:4A:36:2E:D1:BF:08:DC"}}},"request":{"raw":"GET /css/android-icon-192x192.png HTTP/1.1\r\nHost: castigan.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castigan.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 24 Jun 2026 10:34:59 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 21 Mar 2024 04:47:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2569\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2569,"size_decoded":2811,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit grayscale, non-interlaced","md5":"4d5a72cfafe8a0e67a3a4e3684ae379f","sha1":"2140780ff72470e5a9d63fdf950d7b816ce804be","sha256":"b8bbda2990b5611317f747bf13de3a78e1de77fd7d864a27d845194988490375","sha512":"a2323abb4342312eeaf8cb9d5003287a64665dcc859424f84a80868fc9cc3d684464627e728ea9d688d9af50fea2d55a849ed753615667f4226bef751345776f","ssdeep":"","tlshash":"86513a75d7229ed994c95bbcb11d230ae425841c3c60899bd73f84ae8a92c16bad8fc4","first_seen":"2023-06-04T02:44:54Z","last_seen":"2026-06-30T23:59:17.975485Z","times_seen":1477,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-24","alert":"Phishing Block","trigger":"castigan.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"castigan.us/css/bundle.css","fqdn":"castigan.us","domain":"castigan.us","tld":"us"},"ip":{"addr":"66.85.46.240","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://castigan.us/","date":"2026-06-24T10:34:58.089Z","timestamp":1782297298089,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.castigan.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 14:20:06 GMT","end":"Sat, 05 Sep 2026 14:20:05 GMT"},"fingerprint":{"sha1":"9D:9F:C2:4C:E7:8A:78:79:AE:FD:CF:4A:92:D3:E2:5C:49:0E:E8:49","sha256":"4C:CE:23:02:61:11:CA:51:8E:12:02:EF:B2:26:02:6F:B9:62:17:47:22:A2:A0:46:7A:4A:36:2E:D1:BF:08:DC"}}},"request":{"raw":"GET /css/bundle.css HTTP/1.1\r\nHost: castigan.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castigan.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 24 Jun 2026 10:34:58 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 21 Mar 2024 04:47:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 108837\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":108837,"size_decoded":109081,"mime_type":"text/css","magic":"ASCII text, with very long lines (383)","md5":"c811877c687e09e14bf950d15eae27ff","sha1":"5d2c230141661e167ef0d5e030541cbbb1db2ba4","sha256":"55ebcc68f8185eb8af8000a1cd4a4da5643ff026873d5753183ce452bc6df75a","sha512":"d3e496ec80d1edd79d2855b6a41cd58d291427d15ff553d56ad840d850a6c7f9ed076e3cc216828d31d355a7f1e3b62b90c7af46f42dcde902b4685bcad6296e","ssdeep":"1536:XHDB555GIxIZI7IGI9IpIbIxIZI7IGI9IpIrT4oQDAAk:XSqUD260SqUD26b","tlshash":"20b30f44aa00121f787f46fb315ea2867277510adb27dfe4bdca00099fce7caa6d6345","first_seen":"2025-04-09T12:14:49.172793Z","last_seen":"2026-06-24T10:36:43.383057Z","times_seen":46,"resource_available":false,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":118,"send":0,"wait":118,"receive":353,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-24","alert":"Phishing Block","trigger":"castigan.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"castigan.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.xfinity.com/static/images/global/xfinity-logo-grey.svg","fqdn":"login.xfinity.com","domain":"xfinity.com","tld":"com"},"ip":{"addr":"23.36.79.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://castigan.us/","date":"2026-06-24T10:34:58.377Z","timestamp":1782297298377,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login.xfinity.com","organization":""},"issuer":{"commonName":"COMODO RSA Organization Validation Secure Server CA","organization":"COMODO CA Limited"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FC:AE:B5:13:FA:D2:2D:2A:C0:B7:8E:29:95:DC:AC:2E:8A:1C:9D:E6","sha256":"5E:03:92:9D:5B:E4:F4:0C:83:CA:FC:B1:31:E5:D4:49:AB:A1:5C:D5:19:38:84:AD:F0:7A:41:C6:D6:F1:6F:D1"}}},"request":{"raw":"GET /static/images/global/xfinity-logo-grey.svg HTTP/1.1\r\nHost: login.xfinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castigan.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Jun 2026 20:53:32 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Wed, 24 Jun 2026 10:34:59 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Wed, 24 Jun 2026 10:34:59 GMT\r\ncontent-length: 539\r\nset-cookie: AWSALBTG=SEqhPTt3jIO4F9ptIl5+809m6FaYXg8s/zc3edOU178hhHVoMtXUdV19K130l6bO903EJLYJN6cA09tcf777yxcmSUsQqARjU+I9scWPtR+eUYUWik3xyv8iedzfA/vJICrjMX1U6ozf/HYu0zzFc6KouaM6GkHPapRW0KECY0W6; Expires=Wed, 01 Jul 2026 10:34:59 GMT; Path=/\nAWSALBTGCORS=SEqhPTt3jIO4F9ptIl5+809m6FaYXg8s/zc3edOU178hhHVoMtXUdV19K130l6bO903EJLYJN6cA09tcf777yxcmSUsQqARjU+I9scWPtR+eUYUWik3xyv8iedzfA/vJICrjMX1U6ozf/HYu0zzFc6KouaM6GkHPapRW0KECY0W6; Expires=Wed, 01 Jul 2026 10:34:59 GMT; Path=/; SameSite=None; Secure\nAWSALB=t7G3Aibk5CXUtpHj4HQkSqBebND4zTb0t5gmcArkQq0C3kDo+Pv//bKIe5BW5B7ZW/VRDTUm4HMYmPqyA5YqVk4Qm8DKvuBSUT4DlON22JKK6BWE2R+TKrnYUr4i; Expires=Wed, 01 Jul 2026 10:34:59 GMT; Path=/\nAWSALBCORS=t7G3Aibk5CXUtpHj4HQkSqBebND4zTb0t5gmcArkQq0C3kDo+Pv//bKIe5BW5B7ZW/VRDTUm4HMYmPqyA5YqVk4Qm8DKvuBSUT4DlON22JKK6BWE2R+TKrnYUr4i; Expires=Wed, 01 Jul 2026 10:34:59 GMT; Path=/; SameSite=None; Secure\nlogin_dc=east; expires=Wed, 24-Jun-2026 12:34:59 GMT; path=/\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":939,"size_decoded":1889,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ab5a5950fe0ba1d4ebd5d6c482586e08","sha1":"b92792cd903f5fc0d0d8ae54fdc4c50d33b0d74f","sha256":"15334e1a1a24d9f0f0a3daaedc6f438e3bdd6ef11d7fefb7d37e3208094c7089","sha512":"cd6b48aefff26646fed9215e5d5081d581b9ddf5baa61a16adfbde490d3b2560699bccf2863fdbd9ce55b2e29374defa2fe6c95263f40b2d19e9aa1b5e3ae97f","ssdeep":"","tlshash":"b011dc39032f17debbc85f106060e0a66476503a73b490a89fc3e814ac009f30076975","first_seen":"2023-05-09T23:35:06Z","last_seen":"2026-07-15T03:40:01.386007Z","times_seen":1145,"resource_available":false,"data":null}},"time_used":877,"timings":{"blocked":533,"dns":0,"connect":3,"send":0,"wait":125,"receive":0,"ssl":215},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}