{"report_id":"ee858cb6-369f-4a3b-946b-c1c753f8e1ed","version":0,"status":"done","tags":[],"date":"2026-10-08T00:18:13Z","url":{"schema":"http","addr":"ko-racingshop.com/","fqdn":"ko-racingshop.com","domain":"ko-racingshop.com","tld":"com"},"ip":{"addr":"94.237.64.192","port":0,"asn":202053,"as":"UpCloud Ltd","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"ko-racingshop.com/","fqdn":"ko-racingshop.com","domain":"ko-racingshop.com","tld":"com"},"title":"ระบบจัดการ อู่โก้เซอร์วิส ศรีราชา","dom":{"size":3575,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (501)","md5":"2ff65fc12d738236a87ec41df0087f5a","sha1":"2b947b52244e51c56e4fae047173d86710d2042c","sha256":"0d604ac208d40a825261b701f93ba320e7f23add6070daaa39e053590a5ded54","sha512":"bd5ea2c1b3660c70649b1781915b5e263c0fd8a1b41ecc4e5600319c81e3dd34bf691d2f80cf503d628f70ada22fe86a5bde3295d8a16a0b71486db86737caf3","ssdeep":"","tlshash":"3671a809acfd4a67236380d5656fb6096e8cd00b5904cdd4b9ec4be82ff9f9ac933548","dom_hash":"domhashb96464e59c783f86da78accbc3e53c71","first_seen":"2026-10-08T00:18:14.680456Z","last_seen":"2026-10-08T00:18:14.680456Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ko-racingshop.com/","fqdn":"ko-racingshop.com","domain":"ko-racingshop.com","tld":"com"},"ip":{"addr":"94.237.64.192","port":0,"asn":202053,"as":"UpCloud Ltd","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-12T00:18:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-08","alert":"Phishing Block","trigger":"ko-racingshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ko-racingshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ko-racingshop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"ko-racingshop.com","ip":{"addr":"94.237.64.192","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Singapore","country_code":"SG"},"domain_registered":"2020-01-18","domain_rank":681517,"first_seen":"2020-01-18T13:32:55Z","last_seen":"2025-06-28T07:59:03.258171Z","alert_count":27,"request_count":9,"received_data":515610,"sent_data":4430,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"jQuery:2.2.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"iCheck","description":"iCheck is a library for customizable checkboxes and radio buttons.","website":"https://github.com/drgullin/icheck","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-10-04T23:38:02.393941Z","alert_count":0,"request_count":2,"received_data":80758,"sent_data":1062,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-04T22:47:16.540786Z","alert_count":0,"request_count":1,"received_data":17792,"sent_data":554,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ko-racingshop.com/Content/plugins/jQuery/jquery-2.2.3.min.js","fqdn":"ko-racingshop.com","domain":"ko-racingshop.com","tld":"com"},"ip":{"addr":"94.237.64.192","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"33cabfa15c1060aaa3d207c653afb1ee","sha1":"e3dbb65f2b541d842b50d37304b0102a2d5f2387","sha256":"6b6de0d4db7876d1183a3edb47ebd3bbbf93f153f5de1ba6645049348628109a","sha512":"48568d6f7c42d3c93f59fe8244cd49f8efefbf8616cab3c149dcb4a3ed67a8acdffae2eb2019da7a8f1a62800039ddf59cc347c17f33c15c1331b6c226303c2a","ssdeep":"1536:MYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOi79xfWBZ+Bjda4w9W3qG9a986:n4J+OlfOM9xrCW6G9a98Hr2","tlshash":"1f83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85659,"data":"","first_seen":"2023-03-07T01:06:18Z","last_seen":"2026-10-08T00:18:14.720951Z","times_seen":7394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ko-racingshop.com/Content/bootstrap/js/bootstrap.min.js","fqdn":"ko-racingshop.com","domain":"ko-racingshop.com","tld":"com"},"ip":{"addr":"94.237.64.192","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","size":37045,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-10-08T02:50:56.33981Z","times_seen":101435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ko-racingshop.com/Content/plugins/iCheck/icheck.min.js","fqdn":"ko-racingshop.com","domain":"ko-racingshop.com","tld":"com"},"ip":{"addr":"94.237.64.192","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"8011794c92c6e1476cc7c5811c5c2095","sha1":"b5ae4e9efe2d42a55d0e01b2bbc43b9a518996c4","sha256":"6102d725c22f9bf27ef542ceae070843153f3e0926b89820a75f29b107e33cb2","sha512":"3e3bbf5e8d76da49513cdcd72590914b520b08c1325895bbecfb9ec61f763dc25904d0650ae6d3dfdd63f877ee270474012c839ae77ed32e5d7972548de9b2f4","ssdeep":"96:GRLzvsPO6TI9Ri6pX49d3tKxy1RuibBL0fXz99GKaePSatA:AU1Mni6po1pBLWR9GK4iA","tlshash":"1b91c75dbbc132a771ef70d612db8002727a8431f6500d5ab1a6a2942ebd8718237ebd","size":4516,"data":"","first_seen":"2023-03-07T01:16:05Z","last_seen":"2026-10-08T00:18:14.696839Z","times_seen":1159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ko-racingshop.com/","fqdn":"ko-racingshop.com","domain":"ko-racingshop.com","tld":"com"},"ip":{"addr":"94.237.64.192","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"91c64cef41ffb471b527100e54054fc4","sha1":"aeab34ce965a7cc383062b66746c538641f43e64","sha256":"173096637440c9281e6c460dc65c1e1307984cb8a203c363b432d340c6559f74","sha512":"4c624c796527967a38f7621f2c6975facf11238f67ae3df281c7fcc20689142d2e9ec5fee832b60f0efd142cae8fedf8d2d411ff990818f8f66880ef651a07ae","ssdeep":"","tlshash":"7511d10ef9ee1712567770a90a2f8000672a605b1548de28bfac87d45f9e178a763e4c","size":884,"data":"","first_seen":"2026-10-08T00:18:14.734692Z","last_seen":"2026-10-08T00:18:14.734692Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ko-racingshop.com/Content/bootstrap/fonts/glyphicons-halflings-regular.woff2","fqdn":"ko-racingshop.com","domain":"ko-racingshop.com","tld":"com"},"ip":{"addr":"94.237.64.192","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ko-racingshop.com/","date":"2026-10-08T00:17:45.012Z","timestamp":1791418665012,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ko-racingshop.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 07:51:36 GMT","end":"Wed, 18 Nov 2026 07:51:35 GMT"},"fingerprint":{"sha1":"C3:AA:00:36:30:AB:22:74:46:11:DF:79:9D:FB:DC:89:16:D0:94:44","sha256":"0F:72:20:84:F6:91:31:10:70:70:96:56:58:8E:CA:36:4C:FA:76:15:7D:8D:5A:AA:C8:5D:F5:23:3D:A1:B3:FC"}}},"request":{"raw":"GET /Content/bootstrap/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1\r\nHost: ko-racingshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ko-racingshop.com/Content/bootstrap/css/bootstrap.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: font/x-woff2\r\nlast-modified: Sat, 26 Apr 2025 16:28:44 GMT\r\naccept-ranges: bytes\r\netag: \"ad562447c8b6db1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Thu, 08 Oct 2026 00:17:58 GMT\r\ncontent-length: 18028\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":18028,"size_decoded":18327,"mime_type":"font/x-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18028, version 1.589","md5":"448c34a56d699c29117adc64c43affeb","sha1":"ca35b697d99cae4d1b60f2d60fcd37771987eb07","sha256":"fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c","sha512":"3811804f56ec3c82f0bef35de0a9250e546a1e357fb59e2784f610d638fec355a27b480e3f796243c0e3d3743be3eadda8f9064c2b5b49577e16b7e40efcdb83","ssdeep":"384:Y22oezK7jlf4flnEPn9+1z2DIH6r3lEsNgV:Y22oeKjlCnm9+1y8gA","tlshash":"d082d0f4ea92999085b01c37d19acb48dc87b9cef5a4d01611e4e13eb5ff8ad684c6c8","first_seen":"2023-04-05T16:42:51Z","last_seen":"2026-10-08T01:47:30.080176Z","times_seen":54098,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-08","alert":"Phishing Block","trigger":"ko-racingshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ko-racingshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ko-racingshop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ko-racingshop.com/Content/bootstrap/js/bootstrap.min.js","fqdn":"ko-racingshop.com","domain":"ko-racingshop.com","tld":"com"},"ip":{"addr":"94.237.64.192","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ko-racingshop.com/","date":"2026-10-08T00:17:40.902Z","timestamp":1791418660902,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ko-racingshop.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 07:51:36 GMT","end":"Wed, 18 Nov 2026 07:51:35 GMT"},"fingerprint":{"sha1":"C3:AA:00:36:30:AB:22:74:46:11:DF:79:9D:FB:DC:89:16:D0:94:44","sha256":"0F:72:20:84:F6:91:31:10:70:70:96:56:58:8E:CA:36:4C:FA:76:15:7D:8D:5A:AA:C8:5D:F5:23:3D:A1:B3:FC"}}},"request":{"raw":"GET /Content/bootstrap/js/bootstrap.min.js HTTP/1.1\r\nHost: ko-racingshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ko-racingshop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nlast-modified: Sat, 26 Apr 2025 16:28:43 GMT\r\naccept-ranges: bytes\r\netag: \"a896d546c8b6db1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Thu, 08 Oct 2026 00:17:55 GMT\r\ncontent-length: 37045\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":37045,"size_decoded":37354,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-10-08T02:50:56.33981Z","times_seen":101435,"resource_available":true,"data":null}},"time_used":2069,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1726,"receive":343,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ko-racingshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-08","alert":"Phishing Block","trigger":"ko-racingshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ko-racingshop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ko-racingshop.com/Content/plugins/iCheck/icheck.min.js","fqdn":"ko-racingshop.com","domain":"ko-racingshop.com","tld":"com"},"ip":{"addr":"94.237.64.192","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ko-racingshop.com/","date":"2026-10-08T00:17:41.073Z","timestamp":1791418661073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ko-racingshop.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 07:51:36 GMT","end":"Wed, 18 Nov 2026 07:51:35 GMT"},"fingerprint":{"sha1":"C3:AA:00:36:30:AB:22:74:46:11:DF:79:9D:FB:DC:89:16:D0:94:44","sha256":"0F:72:20:84:F6:91:31:10:70:70:96:56:58:8E:CA:36:4C:FA:76:15:7D:8D:5A:AA:C8:5D:F5:23:3D:A1:B3:FC"}}},"request":{"raw":"GET /Content/plugins/iCheck/icheck.min.js HTTP/1.1\r\nHost: ko-racingshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ko-racingshop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nlast-modified: Sat, 26 Apr 2025 16:28:53 GMT\r\naccept-ranges: bytes\r\netag: \"b62ff74cc8b6db1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Thu, 08 Oct 2026 00:17:55 GMT\r\ncontent-length: 4516\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":4516,"size_decoded":4824,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (534)","md5":"8011794c92c6e1476cc7c5811c5c2095","sha1":"b5ae4e9efe2d42a55d0e01b2bbc43b9a518996c4","sha256":"6102d725c22f9bf27ef542ceae070843153f3e0926b89820a75f29b107e33cb2","sha512":"3e3bbf5e8d76da49513cdcd72590914b520b08c1325895bbecfb9ec61f763dc25904d0650ae6d3dfdd63f877ee270474012c839ae77ed32e5d7972548de9b2f4","ssdeep":"96:GRLzvsPO6TI9Ri6pX49d3tKxy1RuibBL0fXz99GKaePSatA:AU1Mni6po1pBLWR9GK4iA","tlshash":"1b91c75dbbc132a771ef70d612db8002727a8431f6500d5ab1a6a2942ebd8718237ebd","first_seen":"2023-03-07T01:16:05Z","last_seen":"2026-10-08T00:18:14.696839Z","times_seen":1159,"resource_available":true,"data":null}},"time_used":1897,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1897,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-08","alert":"Phishing Block","trigger":"ko-racingshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ko-racingshop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ko-racingshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ionicons/2.0.1/css/ionicons.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ko-racingshop.com/","date":"2026-10-08T00:17:41.369Z","timestamp":1791418661369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/ionicons/2.0.1/css/ionicons.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ko-racingshop.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 00:17:41 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1215603\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:11:20 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SgWRIMO5yaFmWJsKtlJKNLkA6lBQuIfT%2FBbgC88XCGdq4TshjucXc2H460RZ9MfN10XtoNlN08WYcVX%2BgZIIt2RrpRVAPhQvlI5tDEWpbVjDOju7Zf4rV%2B9KvpPdyz8cLb1dN8CY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a470f6c9aa73b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51284,"size_decoded":7646,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (50802)","md5":"6798564e1f2e3291ed7e11eb291d282b","sha1":"cc8043b90c2a0962ecae08e62298d3ebb894eabb","sha256":"8c01c3cb08ae66fdf817221b3a79245fcdb94ea59a3fce2093894d6f4bb6ccf8","sha512":"bec80201e8e3317b1bd57782dbb715f3d4265dec398e53f321cd333c55887a31ef52e4a0537b900a39870e75abeda684282bbdc7a7b1b99df28c13bfaa00d459","ssdeep":"384:048lBhhJhjRqFdtYRjJIjsjaHnNfc2C4741mf5HRzL:048hhjQFduRjJ7uHFcu7Smf5xzL","tlshash":"cb33f8e4d20c0dd0ab35c447ab49674858b5f7fbe4584ca8e42fd4ac39cb224a3e5b6d","first_seen":"2025-04-07T04:59:13.012522Z","last_seen":"2026-10-08T03:06:52.169727Z","times_seen":26420,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ko-racingshop.com/Content/dist/css/AdminLTE.css","fqdn":"ko-racingshop.com","domain":"ko-racingshop.com","tld":"com"},"ip":{"addr":"94.237.64.192","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ko-racingshop.com/","date":"2026-10-08T00:17:41.371Z","timestamp":1791418661371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ko-racingshop.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 07:51:36 GMT","end":"Wed, 18 Nov 2026 07:51:35 GMT"},"fingerprint":{"sha1":"C3:AA:00:36:30:AB:22:74:46:11:DF:79:9D:FB:DC:89:16:D0:94:44","sha256":"0F:72:20:84:F6:91:31:10:70:70:96:56:58:8E:CA:36:4C:FA:76:15:7D:8D:5A:AA:C8:5D:F5:23:3D:A1:B3:FC"}}},"request":{"raw":"GET /Content/dist/css/AdminLTE.css HTTP/1.1\r\nHost: ko-racingshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ko-racingshop.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nlast-modified: Sat, 26 Apr 2025 16:28:44 GMT\r\naccept-ranges: bytes\r\netag: \"904b9e47c8b6db1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Thu, 08 Oct 2026 00:17:55 GMT\r\ncontent-length: 110574\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":110574,"size_decoded":110870,"mime_type":"text/css","magic":"ASCII text","md5":"5aafce4dd7581229444e7f82a9a5412d","sha1":"7ad8de3775a039b842c63ef953098a0ba78218b1","sha256":"43fce33b41511803e6369cbf30dc6318ad190e65fee017b8ecbb2386b3759e18","sha512":"1294174e8c30d628249fd35ba5629b062b44a99c567f6fbf099a788d1741d607ceb3574bd313c237225adf0f8bc13a7ca4967b6dbf60ed16eb7f65b181cb1b9e","ssdeep":"3072:oDk85px4CfvxnurLHz5Zai31/UT+fT4BaLGRVEyzJWar:oDk85px4CfvxnurLHz5Zai31/UT+fT4l","tlshash":"2bb38296baf529113017c05d60d39ea1736d9482810ede7e7bb6706cffc82c5c93ab89","first_seen":"2025-06-28T07:59:03.191989Z","last_seen":"2026-10-08T00:18:14.699154Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2804,"receive":688,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ko-racingshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-08","alert":"Phishing Block","trigger":"ko-racingshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ko-racingshop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ko-racingshop.com/Content/plugins/iCheck/square/blue.css","fqdn":"ko-racingshop.com","domain":"ko-racingshop.com","tld":"com"},"ip":{"addr":"94.237.64.192","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ko-racingshop.com/","date":"2026-10-08T00:17:41.373Z","timestamp":1791418661373,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ko-racingshop.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 07:51:36 GMT","end":"Wed, 18 Nov 2026 07:51:35 GMT"},"fingerprint":{"sha1":"C3:AA:00:36:30:AB:22:74:46:11:DF:79:9D:FB:DC:89:16:D0:94:44","sha256":"0F:72:20:84:F6:91:31:10:70:70:96:56:58:8E:CA:36:4C:FA:76:15:7D:8D:5A:AA:C8:5D:F5:23:3D:A1:B3:FC"}}},"request":{"raw":"GET /Content/plugins/iCheck/square/blue.css HTTP/1.1\r\nHost: ko-racingshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ko-racingshop.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nlast-modified: Sat, 26 Apr 2025 16:29:13 GMT\r\naccept-ranges: bytes\r\netag: \"4f17df58c8b6db1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Thu, 08 Oct 2026 00:17:55 GMT\r\ncontent-length: 1611\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":1611,"size_decoded":1905,"mime_type":"text/css","magic":"ASCII text","md5":"37fd35194ed2735b31d71b8b8c063898","sha1":"d18acf65e95e79a0329d7cae5204897b79a68699","sha256":"467fefb5320f85af9c3dd29605d3a6f33cf29048143ae24dc2bdb1f345b16228","sha512":"ddfff7e103a0ee450286fceb535c25e3a59632fef5ba3f79c747c3f6b903d25f94a2625a9551d3481575318059118272f4f5bf1cac836b310ca9bcebad0a0bcf","ssdeep":"","tlshash":"7131382ade9326163cefd12116226252d3355413d601debc3a4eb1644fcbde020bbfb4","first_seen":"2023-04-10T02:33:10Z","last_seen":"2026-10-08T00:18:14.713351Z","times_seen":499,"resource_available":true,"data":null}},"time_used":3486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-08","alert":"Phishing Block","trigger":"ko-racingshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ko-racingshop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ko-racingshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,600,700,300italic,400italic,600italic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ko-racingshop.com/","date":"2026-10-08T00:17:44.870Z","timestamp":1791418664870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css?family=Source+Sans+Pro:300,400,600,700,300italic,400italic,600italic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ko-racingshop.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 08 Oct 2026 00:17:44 GMT\r\ndate: Thu, 08 Oct 2026 00:17:44 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17108,"size_decoded":1682,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e58937e31942ec823fdc1e8dc310bb33","sha1":"6cd0c5b75a4d8b98ef89bffc67476d2153aad530","sha256":"ba7283b67134760a127e16b1f3583ba3a29c38e06b91bd32eeffc1bfd1c71fd6","sha512":"f4e44a0f495c3c76ea37b536e7987199b77dc40c0cb6426355aefacda12536f2c696962ef579e82f10522f5f2a488fef64563700c7a49b3898cd6896be3eb9c1","ssdeep":"384:mg2FMatcZNP2+zntxo7g2FMatcZ5a7RIbueg:I","tlshash":"1072ccb2411ae45857a31cc633df3e3a9e8f60107186c16adffd4898aca5c2a5374b5d","first_seen":"2026-10-06T10:12:42.350515Z","last_seen":"2026-10-08T00:18:14.715267Z","times_seen":4,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":3,"connect":15,"send":0,"wait":35,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ko-racingshop.com/Content/favicon.ico","fqdn":"ko-racingshop.com","domain":"ko-racingshop.com","tld":"com"},"ip":{"addr":"94.237.64.192","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ko-racingshop.com/","date":"2026-10-08T00:17:45.113Z","timestamp":1791418665113,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ko-racingshop.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 07:51:36 GMT","end":"Wed, 18 Nov 2026 07:51:35 GMT"},"fingerprint":{"sha1":"C3:AA:00:36:30:AB:22:74:46:11:DF:79:9D:FB:DC:89:16:D0:94:44","sha256":"0F:72:20:84:F6:91:31:10:70:70:96:56:58:8E:CA:36:4C:FA:76:15:7D:8D:5A:AA:C8:5D:F5:23:3D:A1:B3:FC"}}},"request":{"raw":"GET /Content/favicon.ico HTTP/1.1\r\nHost: ko-racingshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ko-racingshop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/x-icon\r\nlast-modified: Sat, 26 Apr 2025 16:28:41 GMT\r\naccept-ranges: bytes\r\netag: \"694f6c45c8b6db1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Thu, 08 Oct 2026 00:17:58 GMT\r\ncontent-length: 130457\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":130457,"size_decoded":130757,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"abb0aa9fa57d100f1687029c387c229d","sha1":"f273e295691f6cb57cbbff8b5281beced8fb248f","sha256":"089fb3f637787ed37ec0d894103f8331ff31382ecafc14a33421b4b7ea1b47a4","sha512":"a16c9b9839429f2019605a193fb3f90d96039857746856579bb76a3dcac272d3eced6b0081ed4962a3dc39290a28aa1a3f5a8770a1c35c6fd20fdb7832e33208","ssdeep":"3072:5qoTz+4iGV+2XpH2yQQfSwSbI8Awo5bXhLPUdKxAkewV9f4LRjKdtZnYmtzmtewN:5HTJmyQQfSwSbnvo5bXhLPUdK+kewVJu","tlshash":"08d381795f5c3e0cc5cc6cf1bfad8ab59afe4994c1e89a47d5a2f9242438bc40e4b481","first_seen":"2025-06-28T07:59:03.188628Z","last_seen":"2026-10-08T00:18:14.717799Z","times_seen":2,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":178,"receive":515,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-08","alert":"Phishing Block","trigger":"ko-racingshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ko-racingshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ko-racingshop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ko-racingshop.com/","fqdn":"ko-racingshop.com","domain":"ko-racingshop.com","tld":"com"},"ip":{"addr":"94.237.64.192","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T00:17:38.517Z","timestamp":1791418658517,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ko-racingshop.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 07:51:36 GMT","end":"Wed, 18 Nov 2026 07:51:35 GMT"},"fingerprint":{"sha1":"C3:AA:00:36:30:AB:22:74:46:11:DF:79:9D:FB:DC:89:16:D0:94:44","sha256":"0F:72:20:84:F6:91:31:10:70:70:96:56:58:8E:CA:36:4C:FA:76:15:7D:8D:5A:AA:C8:5D:F5:23:3D:A1:B3:FC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ko-racingshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private\r\ncontent-type: text/html; charset=utf-8\r\nserver: Microsoft-IIS/10.0\r\nx-aspnetmvc-version: 2.0\r\nx-aspnet-version: 4.0.30319\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Thu, 08 Oct 2026 00:17:54 GMT\r\ncontent-length: 3816\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:2.2.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"iCheck","description":"iCheck is a library for customizable checkboxes and radio buttons.","website":"https://github.com/drgullin/icheck","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":3816,"size_decoded":4110,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (513), with CRLF line terminators","md5":"4323bed09c708030ba14383ce0afa5ba","sha1":"fcf3bc6d82912f0778c52dd4c907cd0778b28bfa","sha256":"10be7ce0458ea625b12ea8fb2092ddbc81acf6e08710118247866f24a17c3bac","sha512":"aa40938aad641fe1417b04fd50757502b4baad578cc4af680ea9ae62911149e9f48934e7822048beaa299c51b6c4fa8a43fc8fb850b3f50266706b0eff2a05ad","ssdeep":"","tlshash":"f771b609a88c8e62137381e1556ab614fd5d801756008ed8fdec46eb2ff9f59ca33980","first_seen":"2025-06-28T07:59:03.189415Z","last_seen":"2026-10-08T00:18:14.719186Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2121,"timings":{"blocked":-1,"dns":376,"connect":172,"send":0,"wait":173,"receive":0,"ssl":1400},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ko-racingshop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ko-racingshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-08","alert":"Phishing Block","trigger":"ko-racingshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ko-racingshop.com/Content/plugins/jQuery/jquery-2.2.3.min.js","fqdn":"ko-racingshop.com","domain":"ko-racingshop.com","tld":"com"},"ip":{"addr":"94.237.64.192","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ko-racingshop.com/","date":"2026-10-08T00:17:40.899Z","timestamp":1791418660899,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ko-racingshop.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 07:51:36 GMT","end":"Wed, 18 Nov 2026 07:51:35 GMT"},"fingerprint":{"sha1":"C3:AA:00:36:30:AB:22:74:46:11:DF:79:9D:FB:DC:89:16:D0:94:44","sha256":"0F:72:20:84:F6:91:31:10:70:70:96:56:58:8E:CA:36:4C:FA:76:15:7D:8D:5A:AA:C8:5D:F5:23:3D:A1:B3:FC"}}},"request":{"raw":"GET /Content/plugins/jQuery/jquery-2.2.3.min.js HTTP/1.1\r\nHost: ko-racingshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ko-racingshop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nlast-modified: Sat, 26 Apr 2025 16:28:52 GMT\r\naccept-ranges: bytes\r\netag: \"718e674cc8b6db1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Thu, 08 Oct 2026 00:17:55 GMT\r\ncontent-length: 85659\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":85659,"size_decoded":85968,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"33cabfa15c1060aaa3d207c653afb1ee","sha1":"e3dbb65f2b541d842b50d37304b0102a2d5f2387","sha256":"6b6de0d4db7876d1183a3edb47ebd3bbbf93f153f5de1ba6645049348628109a","sha512":"48568d6f7c42d3c93f59fe8244cd49f8efefbf8616cab3c149dcb4a3ed67a8acdffae2eb2019da7a8f1a62800039ddf59cc347c17f33c15c1331b6c226303c2a","ssdeep":"1536:MYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOi79xfWBZ+Bjda4w9W3qG9a986:n4J+OlfOM9xrCW6G9a98Hr2","tlshash":"1f83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:06:18Z","last_seen":"2026-10-08T00:18:14.720951Z","times_seen":7394,"resource_available":true,"data":null}},"time_used":1555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":1209,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-08","alert":"Phishing Block","trigger":"ko-racingshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ko-racingshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ko-racingshop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ko-racingshop.com/Content/bootstrap/css/bootstrap.min.css","fqdn":"ko-racingshop.com","domain":"ko-racingshop.com","tld":"com"},"ip":{"addr":"94.237.64.192","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ko-racingshop.com/","date":"2026-10-08T00:17:41.076Z","timestamp":1791418661076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ko-racingshop.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 07:51:36 GMT","end":"Wed, 18 Nov 2026 07:51:35 GMT"},"fingerprint":{"sha1":"C3:AA:00:36:30:AB:22:74:46:11:DF:79:9D:FB:DC:89:16:D0:94:44","sha256":"0F:72:20:84:F6:91:31:10:70:70:96:56:58:8E:CA:36:4C:FA:76:15:7D:8D:5A:AA:C8:5D:F5:23:3D:A1:B3:FC"}}},"request":{"raw":"GET /Content/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: ko-racingshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ko-racingshop.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nlast-modified: Sat, 26 Apr 2025 16:28:42 GMT\r\naccept-ranges: bytes\r\netag: \"be4f645c8b6db1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Thu, 08 Oct 2026 00:17:55 GMT\r\ncontent-length: 121200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":121200,"size_decoded":121495,"mime_type":"text/css","magic":"ASCII text, with very long lines (65371)","md5":"ec3bb52a00e176a7181d454dffaea219","sha1":"6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68","sha256":"f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c","sha512":"e8c5daf01eae68ed7c1e277a6e544c7ad108a0fa877fb531d6d9f2210769b7da88e4e002c7b0be3b72154ebf7cbf01a795c8342ce2dad368bd6351e956195f8b","ssdeep":"768:Vy3Gxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:nw/a1fIuiHlq5mN8lDbNmPbh","tlshash":"2cc3c7a0f21031ea7333c55a75d0ed872219a153e56a4fb7f22f25d88f845ca1673f1a","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-10-08T00:31:09.111409Z","times_seen":76008,"resource_available":true,"data":null}},"time_used":3100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1896,"receive":1204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-08","alert":"Phishing Block","trigger":"ko-racingshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ko-racingshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ko-racingshop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.5.0/css/font-awesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ko-racingshop.com/","date":"2026-10-08T00:17:41.364Z","timestamp":1791418661364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ko-racingshop.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 00:17:41 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1236608\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xRChh0QOT6HWwsF4x8r4bI2I%2BLZFNLKQaYd0zZIgEv8aEuqPVHSgsA2fXVDcys6m4v5%2BMNvybIG6En716OLWmJ5sO%2BAweX6BqWkkkzheZwd0q6VGyMuZ8bPfCAS7NnMlLdeurA6P\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a470f6c9aa72b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4972\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27466,"size_decoded":5976,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (27303)","md5":"4fbd15cb6047af93373f4f895639c8bf","sha1":"12d6861075de8e293265ff6ff03b1f3adcb44c76","sha256":"ddd92f10ad162c7449eff0acaf40598c05b1111739587edb75e5326b6697c5d5","sha512":"f8be32cba15170319b5c9f663c6f0c4ffdd4083cf047d80f7b214d302b489eca25fbee66ddb9366d758a7598efc9b9a886b02c9f751ae71f207cb9db1356243a","ssdeep":"384:Qi5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/8c:Dlr+Klk3YlKfwYUf8l8yQ/T","tlshash":"3bc230f8e54c01d66731c48bff81b36862b6f73dd5814d99f01f690c29d22a522c5bba","first_seen":"2023-04-05T07:46:17Z","last_seen":"2026-10-08T03:03:13.805991Z","times_seen":43248,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}