{"report_id":"f6b14edd-35c6-4412-8f6a-d5d9957f8f66","version":0,"status":"done","tags":[],"date":"2026-09-09T14:06:21Z","url":{"schema":"https","addr":"realglobainvest.ltd/","fqdn":"realglobainvest.ltd","domain":"realglobainvest.ltd","tld":"ltd"},"ip":{"addr":"198.251.84.200","port":0,"asn":53667,"as":"FranTech Solutions","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"realglobainvest.ltd/","fqdn":"realglobainvest.ltd","domain":"realglobainvest.ltd","tld":"ltd"},"title":"realglobainvest.ltd","dom":{"size":10536,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"df2bc2e2e9bff64d85336b26c205a606","sha1":"2fd1ac8c4adaaaa9fd48c052a1194e3a0a2a9e7c","sha256":"0eb99118f6974fa45e8fb43edc564188429c14859c9b4a6e85d76664c9edf97f","sha512":"2e58ffd455699084f1df7a4d873a3deaa83f7cc3563c29776c05d7933a6b00e739c8c176b3f1d916e8fddf459918c0fc3ad4de1bcdc51776fbada47e8e1a840b","ssdeep":"192:DWvSaqxhdycwZebqjopUMUJaAiwUF9bQVu9knZhU9vnfiNmoozlV:FwZZebqjopUMUS3Q7nZInfiNwn","tlshash":"6522215199c13a7fd92321dbda065e9593e65027c3510ca4b9efa43f0f81ec8ee2722c","dom_hash":"domhashab5d07b13d7bec209e7d6f34e98cc941","first_seen":"2026-09-09T14:06:22.548125Z","last_seen":"2026-09-09T14:06:22.548125Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"realglobainvest.ltd/","fqdn":"realglobainvest.ltd","domain":"realglobainvest.ltd","tld":"ltd"},"ip":{"addr":"198.251.84.200","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-14T14:06:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"realglobainvest.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"realglobainvest.ltd","ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-31T14:30:01.600506Z","last_seen":"2026-05-31T14:30:01.600506Z","alert_count":5,"request_count":5,"received_data":33138,"sent_data":2768,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"realglobainvest.ltd/","fqdn":"realglobainvest.ltd","domain":"realglobainvest.ltd","tld":"ltd"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b9b68df32dfe2cf2b9254bea72d76ce","sha1":"b117c5d5cefafee304ec961c128ed5ef6305ad92","sha256":"60d383779744026478c8e31aa49a4ddb03a863db70c298ac47182b3df4caec16","sha512":"947e692de73d785e7c26688060abc5e5b7e380ad49f0e515c32003574eeb85cb9283ddd8111a83f7cb329627590762967e25dcb4fde865b7f6429bbd3af5ae8d","ssdeep":"","tlshash":"4ce04f7e6067582223a34b2139aba64578688847220ede4ee93c436a7f71b61846196d","size":347,"data":"","first_seen":"2026-07-10T15:13:37.468765Z","last_seen":"2026-09-09T14:06:22.55408Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realglobainvest.ltd/","fqdn":"realglobainvest.ltd","domain":"realglobainvest.ltd","tld":"ltd"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"753ef2bb5074e00fdbe482ddb8dba95a","sha1":"6a8bf20aee47921965246e691f4648d3cdbcdd3b","sha256":"51afc6632e96d51b91b50e41dec09ff2b79fb0660accdfae58efa8c4582e9a20","sha512":"cf94e7447382d158feb52e9ee256d1786c8dd6e738a655cffba3b1630517c468843e57f675e43132f4d8db99e344d5c8a2fde681ccfc2b3275af8e754aadf908","ssdeep":"","tlshash":"d7d02b348b3d34307496a0135067181c4763c2134531f416a54ca6739540112bbf4f2c","size":253,"data":"","first_seen":"2025-05-17T11:43:08.8697Z","last_seen":"2026-09-09T14:06:22.554708Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"realglobainvest.ltd/images/top.gif","fqdn":"realglobainvest.ltd","domain":"realglobainvest.ltd","tld":"ltd"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://realglobainvest.ltd/","date":"2026-09-09T14:05:52.855Z","timestamp":1788962752855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.realglobainvest.ltd","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 22:19:08 GMT","end":"Tue, 01 Dec 2026 22:19:07 GMT"},"fingerprint":{"sha1":"8E:42:AF:8D:FD:35:99:59:EC:50:DD:B6:40:C7:AD:57:E7:25:1D:73","sha256":"7A:EA:67:A8:68:47:71:8B:B2:95:89:DA:36:DC:A9:AB:E1:BE:52:C6:E1:CF:89:9E:D5:4C:12:33:3F:9D:53:B2"}}},"request":{"raw":"GET /images/top.gif HTTP/1.1\r\nHost: realglobainvest.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://realglobainvest.ltd/\r\nConnection: keep-alive\r\nCookie: PHPSESSID=4061a3d1aa14dd0c24201ae19b5b30b0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 14:05:52 GMT\r\ncontent-type: image/gif\r\nlast-modified: Mon, 07 Sep 2026 14:02:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20076\r\ndate: Wed, 09 Sep 2026 14:05:52 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20076,"size_decoded":20362,"mime_type":"image/gif","magic":"GIF image data, version 89a, 304 x 142","md5":"f3be93cc6744a4bb95602768f6e34c25","sha1":"567b79011b4c748656856bff8a50361dd5104d77","sha256":"57d67cc16ad7672c7c6d9d02b517d215ac3f2cadc897dc6dd0997357d11f6370","sha512":"7e1c4eb7997d7105f56a068b1676b964131bba55a12b089d8a65028c1f27d73c2f0aeee6a0d6b5eef1f854c9ea1d040ef1859d8d5e4dfc28393ba54f7f50b92e","ssdeep":"384:TEnsJlus/jHnQlD4NQvwWF8EjMfu6CNJ2/EQKnJV0L8C36wOjlHhSOx:wQbDQpvX217SJF3/0LMBZHhS4","tlshash":"7d92e102a6c4e14a68e5d4f492d3460178dfaa7eb4a1c6f38646fea144d1f10f2cda5f","first_seen":"2025-11-09T03:59:03.999856Z","last_seen":"2026-09-09T14:06:22.549529Z","times_seen":6,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"realglobainvest.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realglobainvest.ltd/images/q.gif","fqdn":"realglobainvest.ltd","domain":"realglobainvest.ltd","tld":"ltd"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://realglobainvest.ltd/","date":"2026-09-09T14:05:52.857Z","timestamp":1788962752857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.realglobainvest.ltd","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 22:19:08 GMT","end":"Tue, 01 Dec 2026 22:19:07 GMT"},"fingerprint":{"sha1":"8E:42:AF:8D:FD:35:99:59:EC:50:DD:B6:40:C7:AD:57:E7:25:1D:73","sha256":"7A:EA:67:A8:68:47:71:8B:B2:95:89:DA:36:DC:A9:AB:E1:BE:52:C6:E1:CF:89:9E:D5:4C:12:33:3F:9D:53:B2"}}},"request":{"raw":"GET /images/q.gif HTTP/1.1\r\nHost: realglobainvest.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://realglobainvest.ltd/\r\nConnection: keep-alive\r\nCookie: PHPSESSID=4061a3d1aa14dd0c24201ae19b5b30b0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 14:05:52 GMT\r\ncontent-type: image/gif\r\nlast-modified: Mon, 07 Sep 2026 14:02:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49\r\ndate: Wed, 09 Sep 2026 14:05:52 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":332,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"56398e76be6355ad5999b262208a17c9","sha1":"a1fdee122b95748d81cee426d717c05b5174fe96","sha256":"2f561b02a49376e3679acd5975e3790abdff09ecbadfa1e1858c7ba26e3ffcef","sha512":"fd8b021f0236e487bfee13bf8f0ae98760abc492f7ca3023e292631979e135cb4ccb0c89b6234971b060ad72c0ca4474cbb5092c6c7a3255d81a54a36277b486","ssdeep":"","tlshash":"609002438585c491d151c1304814935011b5a5614505134ea6a836adac551a1c800408","first_seen":"2023-04-05T11:29:19Z","last_seen":"2026-09-09T16:10:52.963347Z","times_seen":12134,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"realglobainvest.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realglobainvest.ltd/images/ver.gif","fqdn":"realglobainvest.ltd","domain":"realglobainvest.ltd","tld":"ltd"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://realglobainvest.ltd/","date":"2026-09-09T14:05:52.858Z","timestamp":1788962752858,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.realglobainvest.ltd","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 22:19:08 GMT","end":"Tue, 01 Dec 2026 22:19:07 GMT"},"fingerprint":{"sha1":"8E:42:AF:8D:FD:35:99:59:EC:50:DD:B6:40:C7:AD:57:E7:25:1D:73","sha256":"7A:EA:67:A8:68:47:71:8B:B2:95:89:DA:36:DC:A9:AB:E1:BE:52:C6:E1:CF:89:9E:D5:4C:12:33:3F:9D:53:B2"}}},"request":{"raw":"GET /images/ver.gif HTTP/1.1\r\nHost: realglobainvest.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://realglobainvest.ltd/\r\nConnection: keep-alive\r\nCookie: PHPSESSID=4061a3d1aa14dd0c24201ae19b5b30b0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 14:05:52 GMT\r\ncontent-type: image/gif\r\nlast-modified: Mon, 07 Sep 2026 14:02:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 211\r\ndate: Wed, 09 Sep 2026 14:05:52 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":211,"size_decoded":495,"mime_type":"image/gif","magic":"GIF image data, version 89a, 2 x 142","md5":"f605ef2af291ec0bd0efad3848439106","sha1":"a292b3fcb26d453aecc6ad6f9407d272e8b07f01","sha256":"42e47ee428cbdef2307f721b72f1f5cbc8e641158763fc7778351ad155e28591","sha512":"6f4cf7a16c11fb92dbb29bcf2640c06b4ffd574b5aedca081183f00c49e87b0a83ffff945d0cfc1fe8ff62ab3fcd1a6080edfd361f0afe76c8e6a5c22b634245","ssdeep":"","tlshash":"ced0c0d6d08c68cfc4732af4293f0c60312811300f0768227c0c03f21dc77050c90900","first_seen":"2025-05-17T11:43:08.865654Z","last_seen":"2026-09-09T14:06:22.551435Z","times_seen":7,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"realglobainvest.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realglobainvest.ltd/favicon.ico","fqdn":"realglobainvest.ltd","domain":"realglobainvest.ltd","tld":"ltd"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://realglobainvest.ltd/","date":"2026-09-09T14:05:53.048Z","timestamp":1788962753048,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.realglobainvest.ltd","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 22:19:08 GMT","end":"Tue, 01 Dec 2026 22:19:07 GMT"},"fingerprint":{"sha1":"8E:42:AF:8D:FD:35:99:59:EC:50:DD:B6:40:C7:AD:57:E7:25:1D:73","sha256":"7A:EA:67:A8:68:47:71:8B:B2:95:89:DA:36:DC:A9:AB:E1:BE:52:C6:E1:CF:89:9E:D5:4C:12:33:3F:9D:53:B2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: realglobainvest.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://realglobainvest.ltd/\r\nCookie: PHPSESSID=4061a3d1aa14dd0c24201ae19b5b30b0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 14:05:53 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 07 Sep 2026 14:02:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 544\r\ndate: Wed, 09 Sep 2026 14:05:53 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1150,"size_decoded":878,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"b9e9cfccd15ebf492b4410f605037a10","sha1":"d866c1eb6918ac833f5ae69b8a3b6c9314968aa1","sha256":"fd0d560d08308290efaa44db399268fba4e8957d3927a6f189c665a9f5b8aa2c","sha512":"936fdc33e7e889830d3d2d11a536948e4a006147130954e9005f1950e28a55f1382fa0d713f353da397f2cdae30bd1980f7643e1624e9bbc7ed75c505241564a","ssdeep":"","tlshash":"f72199f0ba477e54fd324370d1d6bf02820ebc63900042cdb368bc5bb883458e923a89","first_seen":"2023-05-23T21:09:26Z","last_seen":"2026-09-09T14:06:22.552399Z","times_seen":190,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"realglobainvest.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realglobainvest.ltd/","fqdn":"realglobainvest.ltd","domain":"realglobainvest.ltd","tld":"ltd"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-09T14:05:52.007Z","timestamp":1788962752007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.realglobainvest.ltd","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 22:19:08 GMT","end":"Tue, 01 Dec 2026 22:19:07 GMT"},"fingerprint":{"sha1":"8E:42:AF:8D:FD:35:99:59:EC:50:DD:B6:40:C7:AD:57:E7:25:1D:73","sha256":"7A:EA:67:A8:68:47:71:8B:B2:95:89:DA:36:DC:A9:AB:E1:BE:52:C6:E1:CF:89:9E:D5:4C:12:33:3F:9D:53:B2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: realglobainvest.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nset-cookie: CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; secure\nPHPSESSID=4061a3d1aa14dd0c24201ae19b5b30b0; path=/; domain=realglobainvest.ltd; HttpOnly; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 09 Sep 2026 14:05:52 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"CameFrom","value":"deleted","quoted":false,"expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; secure"},{"name":"PHPSESSID","value":"4061a3d1aa14dd0c24201ae19b5b30b0","quoted":false,"path":"/","domain":"realglobainvest.ltd","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"PHPSESSID=4061a3d1aa14dd0c24201ae19b5b30b0; path=/; domain=realglobainvest.ltd; HttpOnly; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9934,"size_decoded":3191,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"c07dbda11e0821e2baaeebd45f2aff85","sha1":"b073fd7c1e796ad41baf335ee331e0c1d559a2d7","sha256":"4e26d61f7376283595929d954c1af6f5033aa32aee26350f914b2b6cf90f98fa","sha512":"f5f2c785120907a82c5f285e09e3b9ec6dabfdc49cbe6ef9d3fe648b31526900679084f607ddc344f04c5bbc254211a2717dd8031f429bb84bd7c33c5740397c","ssdeep":"192:UBawxvPK1hpQw+HYJ2Ja5wUmqs7BX909vsSEjezNM:WSHQw+HYJ2smqOBXe9vsS5e","tlshash":"b722ee6056d0363f984365e7e98b1e1a26e69063c3824cd4b5be183f4f86e80b537f5c","first_seen":"2026-09-09T14:06:22.552947Z","last_seen":"2026-09-09T14:06:22.552947Z","times_seen":1,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":170,"connect":86,"send":0,"wait":263,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"realglobainvest.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}