{"report_id":"ebfcc398-ab2e-4ace-b7d3-31e35d1f91e0","version":6,"status":"done","tags":[],"date":"2026-01-28T05:57:10Z","url":{"schema":"https","addr":"rohab.ro/","fqdn":"rohab.ro","domain":"rohab.ro","tld":"ro"},"ip":{"addr":"50.87.229.231","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"rohab.ro/","fqdn":"rohab.ro","domain":"rohab.ro","tld":"ro"},"title":"Hacked By MR.GREEN","dom":{"size":104562,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20368)","md5":"51c021694dc93e4b05692e14a8deb75c","sha1":"7f56e3bac2349380ace25e6f756b88661cf2d4d6","sha256":"d6b95ad24f753406f572bfc893445de6bfe4598996ffd78c26122cb0d2fef81c","sha512":"c681e0a07dc00bd3f2450e3e8d4e040c915a2e70d6db2c24194240889412273ec83a3ee0e9241f82b920e73b00ca47a03dd29a170501609e9522e62492ad3174","ssdeep":"1536:bjHclkHjCypQVy8Vhnp8IM6dHZobwemlUVuXwamgDOrvC3k:bjHclkD7eJdHZobwemlUVugamvrvC3k","tlshash":"96a395a043b44cf5797f936b9948a318621ae912ce4976e5f0f3d15464ccea60af3b0f","dom_hash":"domhash6af3c4e9d20dea27570239b42b00b3b6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rohab.ro/","fqdn":"rohab.ro","domain":"rohab.ro","tld":"ro"},"ip":{"addr":"50.87.229.231","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-04T05:57:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"rohab.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rohab.ro","ip":{"addr":"50.87.229.231","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2020-07-22","domain_rank":0,"first_seen":"2026-01-28T05:57:10.68561Z","last_seen":"2026-01-28T05:57:10.68561Z","alert_count":12,"request_count":12,"received_data":1154476,"sent_data":5848,"comment":"","tags":null,"fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rohab.ro/wp-block-template-skip-link-js-after","fqdn":"rohab.ro","domain":"rohab.ro","tld":"ro"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"29b14ce97dc78a53db302b9494bc8e60","sha1":"db1f8dc59d50de245c461e19087234f54dff8631","sha256":"00fbb6f2e0b1b8e7bb2628388e6c7b1205bc96d2f7e2a9ef22315fc167afdc30","sha512":"2bd34909875a92db3a1683034cc0d474aa85a8f192c1e6eaa00e9d4f23f94536800e5ec35ceea15cfa9cc840bfef046413a83f395bb73f01a4ee8bda15fa5b01","ssdeep":"","tlshash":"d84195c4f21506f401662a39c4341bc9e2b92998f6db1ca7cc0c8c2cb1b256f46b6f7e","size":1925,"data":"","first_seen":"2025-11-25T05:56:26.725704Z","last_seen":"2026-05-20T18:04:46.194017Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rohab.ro/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"rohab.ro","domain":"rohab.ro","tld":"ro"},"ip":{"addr":"50.87.229.231","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","size":3401,"data":"","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-06-06T09:24:16.528516Z","times_seen":11252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rohab.ro/wp-includes/js/wp-emoji-loader.min.js","fqdn":"rohab.ro","domain":"rohab.ro","tld":"ro"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"673ea2864287ff95443f7e358998150a","sha1":"8eb679f0010b938ec1ccd1d4124fcd1b4694fbdc","sha256":"3c32d4a9f9656980c9c557e1b043fd1853b8c123bdec492f04fe91097ad59863","sha512":"191559a81d9a9e00ffb303dd57f158397f5eb0d538ee595143695804cb122a90f53fdfcd22aac953512299c4a9a0a238aef28612b0c4211b3f708be2ab94e89b","ssdeep":"","tlshash":"9581969ae77638dfb2f900f2697a0d47eb614435d6c8d438c9bda3241cb5893c274a46","size":3832,"data":"","first_seen":"2026-01-28T05:57:12.427073Z","last_seen":"2026-01-28T05:57:12.427073Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rohab.ro/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=8964710565a1d258501f","fqdn":"rohab.ro","domain":"rohab.ro","tld":"ro"},"ip":{"addr":"50.87.229.231","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2a658b82d711091555f0b2d305461f32","sha1":"27229b23e7800ac16da73fff9a602de24d21da9c","sha256":"d52199627d73f2f06550baf26bc5cd75d3e73fdf3a9cc3e4cd7145b4525c8972","sha512":"0ea95325b6c36fd2a5a530c80d85636fa990b9d1326b3c6c4bc1f0ae7074f0c52efb4321871362e3c826e6e5ee0782e7f71861e8de436d478eed0645ced6e077","ssdeep":"768:/eW4693OQsx4lWM2vTJ19FuB57/tonYlrEdO4uMJhYlxu4DMJJiYp0ARmKmIVnVd:/eQ93pGM2v91a7VIuqxsbO1nsPpLL9TG","tlshash":"0303c8a8b065f03047ea14a6907b091bf3356618304ec0e0f769e8e778b915f65a7f3e","size":41076,"data":"","first_seen":"2025-12-03T05:59:44.83451Z","last_seen":"2026-06-04T16:42:57.297495Z","times_seen":3619,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rohab.ro/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"rohab.ro","domain":"rohab.ro","tld":"ro"},"ip":{"addr":"50.87.229.231","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-06-06T13:11:37.812093Z","times_seen":260147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rohab.ro/wp-content/themes/twentytwentyfour/assets/fonts/inter/Inter-VariableFont_slnt,wght.woff2","fqdn":"rohab.ro","domain":"rohab.ro","tld":"ro"},"ip":{"addr":"50.87.229.231","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rohab.ro/","date":"2026-01-28T05:56:51.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rohab-ro.thornnet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 18:14:58 GMT","end":"Thu, 23 Apr 2026 18:14:57 GMT"},"fingerprint":{"sha1":"79:E0:B5:2B:73:7D:35:2E:A4:E0:65:B0:C1:0D:3B:8B:78:10:C2:B4","sha256":"80:60:3A:CD:F3:92:6D:E2:92:FC:F9:06:BB:80:13:09:14:CD:0E:F3:38:6D:00:F1:43:6F:27:3B:93:43:82:DB"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/fonts/inter/Inter-VariableFont_slnt,wght.woff2 HTTP/1.1\r\nHost: rohab.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rohab.ro/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 07 Nov 2023 22:03:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 326628\r\ncache-control: max-age=10368000\r\nexpires: max-age=A10368000, public\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncontent-type: application/font-woff2\r\ndate: Wed, 28 Jan 2026 05:56:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":326628,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 326628, version 1.0","md5":"9c9cff93a0d5a209225c1bae18d80a9d","sha1":"40546dbfd5c467c3257d8f3a4ad8af0d9995aeb6","sha256":"e931823ffd0b6cfd1624e3a7c1c49861ed3420297862e727f07e04c8be1cc89b","sha512":"6d60eba8b9ae8b8b85ac93d4da1f3ecac3d8472e9821f9a580ede27ed778b5aa590a5083ccb960602cc2b9d345fa17ed67355cac4a1d07427b1b4330a63abff1","ssdeep":"6144:xfpkCcEWnNlAharQ/P8TVcEbGEDyfVxBe3n/uhWxWFrzW/K/M/4GP:xf2CcnNlAwrqP8TVcEbgV63nqWV/6M4U","tlshash":"7b6423d7562e01f6ee6e19a700855e73f8ee2a326f7cf65c7c43a8f938a1c1464421e1","first_seen":"2023-05-10T07:09:06Z","last_seen":"2026-06-06T11:57:30.655125Z","times_seen":14266,"resource_available":false,"data":null}},"time_used":846,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":409,"receive":437,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"rohab.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rohab.ro/wp-content/themes/twentytwentyfour/assets/fonts/cardo/cardo_normal_400.woff2","fqdn":"rohab.ro","domain":"rohab.ro","tld":"ro"},"ip":{"addr":"50.87.229.231","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rohab.ro/","date":"2026-01-28T05:56:51.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rohab-ro.thornnet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 18:14:58 GMT","end":"Thu, 23 Apr 2026 18:14:57 GMT"},"fingerprint":{"sha1":"79:E0:B5:2B:73:7D:35:2E:A4:E0:65:B0:C1:0D:3B:8B:78:10:C2:B4","sha256":"80:60:3A:CD:F3:92:6D:E2:92:FC:F9:06:BB:80:13:09:14:CD:0E:F3:38:6D:00:F1:43:6F:27:3B:93:43:82:DB"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/fonts/cardo/cardo_normal_400.woff2 HTTP/1.1\r\nHost: rohab.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rohab.ro/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 07 Nov 2023 22:03:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 146060\r\ncache-control: max-age=10368000\r\nexpires: max-age=A10368000, public\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncontent-type: application/font-woff2\r\ndate: Wed, 28 Jan 2026 05:56:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":146060,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 146060, version 1.0","md5":"b782b01afc9646c7259701b07e2a71d0","sha1":"b86a6f0bf3fb4777160165dfe37ca4e99b90216e","sha256":"aa8042a77500cfe4a4893e2b7edbd54dded92768e40418fa0665bec8aae9ae18","sha512":"5f727d90952c324dfb9447c4ef702166844e456c614934bc266be072ed8ca681f8246cbc98b653fa45c6579bdad24dfaad04ebe8300f34774ed137254d208fe3","ssdeep":"3072:86eYDlgQh72091K9MIMjeIHT8edPDfeLSyxJjQ:84ZNh720IMIA8eoj8","tlshash":"e6e31376e110fc9723a55a5c1033a4b82a4ea8e7c188f0d4d1ef4a86effd46646c702f","first_seen":"2023-11-07T21:49:08Z","last_seen":"2026-06-06T11:01:11.255816Z","times_seen":10174,"resource_available":false,"data":null}},"time_used":844,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":841,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"rohab.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rohab.ro/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=8964710565a1d258501f","fqdn":"rohab.ro","domain":"rohab.ro","tld":"ro"},"ip":{"addr":"50.87.229.231","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rohab.ro/","date":"2026-01-28T05:56:51.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rohab-ro.thornnet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 18:14:58 GMT","end":"Thu, 23 Apr 2026 18:14:57 GMT"},"fingerprint":{"sha1":"79:E0:B5:2B:73:7D:35:2E:A4:E0:65:B0:C1:0D:3B:8B:78:10:C2:B4","sha256":"80:60:3A:CD:F3:92:6D:E2:92:FC:F9:06:BB:80:13:09:14:CD:0E:F3:38:6D:00:F1:43:6F:27:3B:93:43:82:DB"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=8964710565a1d258501f HTTP/1.1\r\nHost: rohab.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rohab.ro/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 07 Jan 2026 01:56:04 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=10368000\r\nexpires: max-age=A10368000, public\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncontent-type: application/javascript\r\ndate: Wed, 28 Jan 2026 05:56:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":41076,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41076), with no line terminators","md5":"2a658b82d711091555f0b2d305461f32","sha1":"27229b23e7800ac16da73fff9a602de24d21da9c","sha256":"d52199627d73f2f06550baf26bc5cd75d3e73fdf3a9cc3e4cd7145b4525c8972","sha512":"0ea95325b6c36fd2a5a530c80d85636fa990b9d1326b3c6c4bc1f0ae7074f0c52efb4321871362e3c826e6e5ee0782e7f71861e8de436d478eed0645ced6e077","ssdeep":"768:/eW4693OQsx4lWM2vTJ19FuB57/tonYlrEdO4uMJhYlxu4DMJJiYp0ARmKmIVnVd:/eQ93pGM2v91a7VIuqxsbO1nsPpLL9TG","tlshash":"0303c8a8b065f03047ea14a6907b091bf3356618304ec0e0f769e8e778b915f65a7f3e","first_seen":"2025-12-03T05:59:44.83451Z","last_seen":"2026-06-04T16:42:57.297495Z","times_seen":3619,"resource_available":true,"data":null}},"time_used":712,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":712,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"rohab.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rohab.ro/favicon.ico","fqdn":"rohab.ro","domain":"rohab.ro","tld":"ro"},"ip":{"addr":"50.87.229.231","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rohab.ro/","date":"2026-01-28T05:56:51.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rohab-ro.thornnet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 18:14:58 GMT","end":"Thu, 23 Apr 2026 18:14:57 GMT"},"fingerprint":{"sha1":"79:E0:B5:2B:73:7D:35:2E:A4:E0:65:B0:C1:0D:3B:8B:78:10:C2:B4","sha256":"80:60:3A:CD:F3:92:6D:E2:92:FC:F9:06:BB:80:13:09:14:CD:0E:F3:38:6D:00:F1:43:6F:27:3B:93:43:82:DB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rohab.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rohab.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 28 Jan 2026 05:56:52 GMT\r\nserver: nginx/1.25.5\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nlink: \u003chttps://rohab.ro/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nlocation: https://rohab.ro/wp-includes/images/w-logo-blue-white-bg.png\r\ncache-control: max-age=7200\r\nexpires: Wed, 28 Jan 2026 07:56:51 GMT\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T13:09:45.117471Z","times_seen":16178700,"resource_available":true,"data":null}},"time_used":445,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"rohab.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rohab.ro/wp-includes/images/w-logo-blue-white-bg.png","fqdn":"rohab.ro","domain":"rohab.ro","tld":"ro"},"ip":{"addr":"50.87.229.231","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rohab.ro/","date":"2026-01-28T05:56:52.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rohab-ro.thornnet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 18:14:58 GMT","end":"Thu, 23 Apr 2026 18:14:57 GMT"},"fingerprint":{"sha1":"79:E0:B5:2B:73:7D:35:2E:A4:E0:65:B0:C1:0D:3B:8B:78:10:C2:B4","sha256":"80:60:3A:CD:F3:92:6D:E2:92:FC:F9:06:BB:80:13:09:14:CD:0E:F3:38:6D:00:F1:43:6F:27:3B:93:43:82:DB"}}},"request":{"raw":"GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1\r\nHost: rohab.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rohab.ro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 04 Feb 2022 21:55:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4119\r\ncache-control: max-age=10368000\r\nexpires: max-age=A10368000, public\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncontent-type: image/png\r\ndate: Wed, 28 Jan 2026 05:56:52 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"000bf649cc8f6bf27cfb04d1bcdcd3c7","sha1":"d73d2f6d74ec6cdcbae07955592962e77d8ae814","sha256":"6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0","sha512":"73d2ea5ffc572c1ae73f37f8f0ff25e945afee8e077b6ee42ce969e575cdc2d8444f90848ea1cb4d1c9ee4bd725aee2b4576afc25f17d7295a90e1cbfe6edfd5","ssdeep":"96:h3bdWfcmTY+aRF1pXWZL2+42HGhIUc8KeLEd:hgXTY+as02mOB8XLEd","tlshash":"00814b63df38c566e66a2b189ff6bca56b290fd50ca1194c0eecb025632c06d1065089","first_seen":"2023-04-08T12:31:37Z","last_seen":"2026-06-06T13:11:37.81552Z","times_seen":66287,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"rohab.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rohab.ro/","fqdn":"rohab.ro","domain":"rohab.ro","tld":"ro"},"ip":{"addr":"50.87.229.231","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-28T05:56:47.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rohab-ro.thornnet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 18:14:58 GMT","end":"Thu, 23 Apr 2026 18:14:57 GMT"},"fingerprint":{"sha1":"79:E0:B5:2B:73:7D:35:2E:A4:E0:65:B0:C1:0D:3B:8B:78:10:C2:B4","sha256":"80:60:3A:CD:F3:92:6D:E2:92:FC:F9:06:BB:80:13:09:14:CD:0E:F3:38:6D:00:F1:43:6F:27:3B:93:43:82:DB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rohab.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:50 GMT\r\nserver: nginx/1.25.5\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://rohab.ro/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncache-control: max-age=7200\r\nexpires: Wed, 28 Jan 2026 07:56:48 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":104378,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20368)","md5":"cb921ed1c8d7fd0fa3464cdd744ea6d7","sha1":"db160830ff35d90a17189b55f2bc026b7044c1dd","sha256":"910fce9ad0aa22d67a6208a2c3abdbc9e1607ff126453b7cce7d08a786fd368c","sha512":"1b9ff5460066246e417e6422857d930a9037adc08ee725dc2f3bdfd2a2c012c68c896e820060fb33c07a4c6a97e2ff4d5e98c6575bcf5a2361385e13314f05a2","ssdeep":"1536:YydclkBNCypQVy8Vhnp8YModSZMpX4wvSAIXuTVt3OrvC3k:YydclkL7eTdSZMpX4wvSAIeTVIrvC3k","tlshash":"5da395a047b44cf5797f836b9948a318621ae912ce4976e5f0f3d15464ccea60af3b0f","first_seen":"2026-01-28T05:57:12.405135Z","last_seen":"2026-01-28T05:57:12.405135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3445,"timings":{"blocked":330,"dns":47,"connect":136,"send":0,"wait":2781,"receive":0,"ssl":148},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"rohab.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rohab.ro/wp-content/themes/twentytwentyfour/assets/images/building-exterior.webp","fqdn":"rohab.ro","domain":"rohab.ro","tld":"ro"},"ip":{"addr":"50.87.229.231","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rohab.ro/","date":"2026-01-28T05:56:51.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rohab-ro.thornnet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 18:14:58 GMT","end":"Thu, 23 Apr 2026 18:14:57 GMT"},"fingerprint":{"sha1":"79:E0:B5:2B:73:7D:35:2E:A4:E0:65:B0:C1:0D:3B:8B:78:10:C2:B4","sha256":"80:60:3A:CD:F3:92:6D:E2:92:FC:F9:06:BB:80:13:09:14:CD:0E:F3:38:6D:00:F1:43:6F:27:3B:93:43:82:DB"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/images/building-exterior.webp HTTP/1.1\r\nHost: rohab.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rohab.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:51 GMT\r\nserver: nginx/1.25.5\r\ncontent-type: image/webp\r\ncontent-length: 199724\r\nlast-modified: Tue, 07 Nov 2023 22:03:25 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=10368000\r\nexpires: max-age=A10368000, public\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":199724,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2af7c6205191cb22f5184bfb4c8e47a3","sha1":"6804bf960deaa7ce32a32d8908cff9df0b157772","sha256":"7ab1e25df9f0e9825e577187a3c73ebda9c0a068d9b35d2a235b8e924b9c58e5","sha512":"d840754c2657e09975c1d041d2285c67b97b9bacfe77d01d78ecbb5bf4e29eae691a6853cf933e829cf7c201085301f8b4cad7f1f3cd5b4d7e16e675c6f2caa4","ssdeep":"6144:ZETkYnSyNylu2wvIbCS+liXoCW+neFY75YnN:okYSluxaCRl4eqVw","tlshash":"041423038edb316bd4f078b0cb400a8007b489af9764a9768ef2da756617278b3f5d1d","first_seen":"2023-11-08T18:58:35Z","last_seen":"2026-06-06T02:39:14.697377Z","times_seen":1155,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":696,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"rohab.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rohab.ro/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"rohab.ro","domain":"rohab.ro","tld":"ro"},"ip":{"addr":"50.87.229.231","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rohab.ro/","date":"2026-01-28T05:56:51.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rohab-ro.thornnet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 18:14:58 GMT","end":"Thu, 23 Apr 2026 18:14:57 GMT"},"fingerprint":{"sha1":"79:E0:B5:2B:73:7D:35:2E:A4:E0:65:B0:C1:0D:3B:8B:78:10:C2:B4","sha256":"80:60:3A:CD:F3:92:6D:E2:92:FC:F9:06:BB:80:13:09:14:CD:0E:F3:38:6D:00:F1:43:6F:27:3B:93:43:82:DB"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210 HTTP/1.1\r\nHost: rohab.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rohab.ro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 07 Jan 2026 01:56:04 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=10368000\r\nexpires: max-age=A10368000, public\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncontent-length: 1209\r\ncontent-type: application/javascript\r\ndate: Wed, 28 Jan 2026 05:56:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3401,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3401), with no line terminators","md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-06-06T09:24:16.528516Z","times_seen":11252,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"rohab.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rohab.ro/wp-content/themes/twentytwentyfour/assets/fonts/cardo/cardo_italic_400.woff2","fqdn":"rohab.ro","domain":"rohab.ro","tld":"ro"},"ip":{"addr":"50.87.229.231","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rohab.ro/","date":"2026-01-28T05:56:51.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rohab-ro.thornnet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 18:14:58 GMT","end":"Thu, 23 Apr 2026 18:14:57 GMT"},"fingerprint":{"sha1":"79:E0:B5:2B:73:7D:35:2E:A4:E0:65:B0:C1:0D:3B:8B:78:10:C2:B4","sha256":"80:60:3A:CD:F3:92:6D:E2:92:FC:F9:06:BB:80:13:09:14:CD:0E:F3:38:6D:00:F1:43:6F:27:3B:93:43:82:DB"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/fonts/cardo/cardo_italic_400.woff2 HTTP/1.1\r\nHost: rohab.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rohab.ro/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 07 Nov 2023 22:03:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 105184\r\ncache-control: max-age=10368000\r\nexpires: max-age=A10368000, public\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncontent-type: application/font-woff2\r\ndate: Wed, 28 Jan 2026 05:56:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":105184,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 105184, version 1.0","md5":"f92d2db85594215e2a4d135561897188","sha1":"0fdff68c4027cf421d605798a1de46a061d160a3","sha256":"c3b2ff62e3ac4219811de0c709bd0d81d962a88dc87a598ac19b20f58f960136","sha512":"b532fda93bed9ff05432462a5f4c13ea4b859648032aaafbe339b864dc2a36cfe71a46dede923019a07c7d40b8828aa47127eac3ca1a5dadf8eeef490e5a6ae7","ssdeep":"3072:3nnudHFZEJd5hdHjvd4IbIsmhHTw37DuFs2:3niFZED5hdDLIsmFTwQp","tlshash":"97a312e55ca5b3c58fe0344e663fbe95a181ae514accc7118aca142b4bcd21dfae074f","first_seen":"2023-11-08T18:58:35Z","last_seen":"2026-06-06T02:39:14.67828Z","times_seen":1370,"resource_available":false,"data":null}},"time_used":833,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":830,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"rohab.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rohab.ro/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"rohab.ro","domain":"rohab.ro","tld":"ro"},"ip":{"addr":"50.87.229.231","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rohab.ro/","date":"2026-01-28T05:56:51.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rohab-ro.thornnet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 18:14:58 GMT","end":"Thu, 23 Apr 2026 18:14:57 GMT"},"fingerprint":{"sha1":"79:E0:B5:2B:73:7D:35:2E:A4:E0:65:B0:C1:0D:3B:8B:78:10:C2:B4","sha256":"80:60:3A:CD:F3:92:6D:E2:92:FC:F9:06:BB:80:13:09:14:CD:0E:F3:38:6D:00:F1:43:6F:27:3B:93:43:82:DB"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: rohab.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rohab.ro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 07 Jan 2026 01:56:04 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=10368000\r\nexpires: max-age=A10368000, public\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncontent-length: 5657\r\ncontent-type: application/javascript\r\ndate: Wed, 28 Jan 2026 05:56:52 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-06-06T13:11:37.812093Z","times_seen":260147,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"rohab.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rohab.ro/wp-content/themes/twentytwentyfour/assets/images/tourist-and-building.webp","fqdn":"rohab.ro","domain":"rohab.ro","tld":"ro"},"ip":{"addr":"50.87.229.231","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rohab.ro/","date":"2026-01-28T05:56:51.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rohab-ro.thornnet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 18:14:58 GMT","end":"Thu, 23 Apr 2026 18:14:57 GMT"},"fingerprint":{"sha1":"79:E0:B5:2B:73:7D:35:2E:A4:E0:65:B0:C1:0D:3B:8B:78:10:C2:B4","sha256":"80:60:3A:CD:F3:92:6D:E2:92:FC:F9:06:BB:80:13:09:14:CD:0E:F3:38:6D:00:F1:43:6F:27:3B:93:43:82:DB"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/images/tourist-and-building.webp HTTP/1.1\r\nHost: rohab.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rohab.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:51 GMT\r\nserver: nginx/1.25.5\r\ncontent-type: image/webp\r\ncontent-length: 66482\r\nlast-modified: Tue, 07 Nov 2023 22:03:25 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=10368000\r\nexpires: max-age=A10368000, public\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":66482,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7d03dae46404d16f0ee5b13cb3794a29","sha1":"5d2c6cd3d8d2c412281237628073e451257716e4","sha256":"0fc42e518e17733d6c766ceec3a2154896e332571f130fae27e4f20480e0980c","sha512":"9e33b9c236183e7d3c9e7cf27fe8c7d47c7769a008b025c716b5c5cfcdcb0331cca6181fcdeaa19dea48d8f2ebbcc1d4fd76f81e540ec08898a62acf56262aff","ssdeep":"1536:gmuYP0ZH4syavVBIvDbkA0ch0a7ZzTIdHq:gm/0ZH4Ar4Ph0E1SHq","tlshash":"d25302b3da071c5ed7eebf70c91a601208ca7d8ad9f30393c612cb66565624827d68f7","first_seen":"2023-11-08T18:58:35Z","last_seen":"2026-06-06T02:39:14.698301Z","times_seen":1163,"resource_available":false,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"rohab.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rohab.ro/wp-content/themes/twentytwentyfour/assets/images/windows.webp","fqdn":"rohab.ro","domain":"rohab.ro","tld":"ro"},"ip":{"addr":"50.87.229.231","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rohab.ro/","date":"2026-01-28T05:56:51.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rohab-ro.thornnet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 18:14:58 GMT","end":"Thu, 23 Apr 2026 18:14:57 GMT"},"fingerprint":{"sha1":"79:E0:B5:2B:73:7D:35:2E:A4:E0:65:B0:C1:0D:3B:8B:78:10:C2:B4","sha256":"80:60:3A:CD:F3:92:6D:E2:92:FC:F9:06:BB:80:13:09:14:CD:0E:F3:38:6D:00:F1:43:6F:27:3B:93:43:82:DB"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/images/windows.webp HTTP/1.1\r\nHost: rohab.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rohab.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 05:56:51 GMT\r\nserver: nginx/1.25.5\r\ncontent-type: image/webp\r\ncontent-length: 126244\r\nlast-modified: Tue, 07 Nov 2023 22:03:25 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=10368000\r\nexpires: max-age=A10368000, public\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":126244,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9c8ab14e61504d8290608dd62812840d","sha1":"18a3284f7b5ec684211dc355fe2ae56b30639a9e","sha256":"a8b72c3a34a4ac883406005c0fab343d64894c978b3dda1b6bb00eed01e9409e","sha512":"a004a16cc557e9e9cec3f36af8fda796966f7f4d16f11bca1761b350a81cd122048cd2742ccb2beffc4501dcb2746f64cd33f3356575b9cd74de590c56127d69","ssdeep":"3072:sdZsaKCAD83OCerX+GoIKSQgGfMB/WhLQPR2lMvjBy4piYbXxxzY:sdZsxDqKrXSvgS8PcGvmYdxc","tlshash":"ecc312fe0a6c538eca4f077ae3a1ee494151b71673e09053e9ac41d79820437f65abd4","first_seen":"2023-11-08T18:58:35Z","last_seen":"2026-06-06T02:39:14.700935Z","times_seen":1152,"resource_available":false,"data":null}},"time_used":865,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":430,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"rohab.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}