{"report_id":"07e8714c-7fb1-42b6-a004-c994e3b7dc19","version":6,"status":"done","tags":[],"date":"2025-10-18T15:58:58Z","url":{"schema":"http","addr":"linklock.titanhq.com/analyse?url=https://email.instructure.com/NTE1LVhZTC01MTQAAAGdkvkVqTxCdLurC0fxup4ZyXI4YZ_3kyeU9R11wgyDa2EDHJinLMTqCuxj-CG91hsBzPKZiUc=\u0026data=eJw9jcFugzAYg58GbkT5k5CKQw4MWroOqq2i1calQsAKCxSakBX29KM7TLJky_InF4IzwjgnfOUxoHYptNEl6tXF7sRu2NI4OuhEwd7WwgXXmebWcYEhjGDFMV0cI04pQx5ihDCXWAwP_dh3eQHYxaiTj9y0qOg7WwnZ5brt71o2y-7_yYh6HAdtUd8im0XVH9Fc9ahMMRpVPeil36driE91lgYYkvTN9_2olN_ydEunoIyNCvDnZAaWze_P7CM7UzlXR-8AcL_MYU7W4XbXXOMkvQVm-nKCyINaP_28vmTNsbBo-AvU5VOf","fqdn":"linklock.titanhq.com","domain":"titanhq.com","tld":"com"},"ip":{"addr":"18.158.34.97","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"email.instructure.com/track?mktoTestLink\u0026mkt_tok=NTE1LVhZTC01MTQAAAGdkvkVqQRzOmjSzY0roApRT9Er9X6u30TrzldnrMjSHgORQ6HFjsbIBEeHiCAtTNjgaqa56N7ES8otRQwUUiU_F67VcKwiLXqB4E75dgHWBA","fqdn":"email.instructure.com","domain":"instructure.com","tld":"com"},"title":"404 - Page not found"},"submit":{"url":{"schema":"http","addr":"linklock.titanhq.com/analyse?url=https://email.instructure.com/NTE1LVhZTC01MTQAAAGdkvkVqTxCdLurC0fxup4ZyXI4YZ_3kyeU9R11wgyDa2EDHJinLMTqCuxj-CG91hsBzPKZiUc=\u0026data=eJw9jcFugzAYg58GbkT5k5CKQw4MWroOqq2i1calQsAKCxSakBX29KM7TLJky_InF4IzwjgnfOUxoHYptNEl6tXF7sRu2NI4OuhEwd7WwgXXmebWcYEhjGDFMV0cI04pQx5ihDCXWAwP_dh3eQHYxaiTj9y0qOg7WwnZ5brt71o2y-7_yYh6HAdtUd8im0XVH9Fc9ahMMRpVPeil36driE91lgYYkvTN9_2olN_ydEunoIyNCvDnZAaWze_P7CM7UzlXR-8AcL_MYU7W4XbXXOMkvQVm-nKCyINaP_28vmTNsbBo-AvU5VOf","fqdn":"linklock.titanhq.com","domain":"titanhq.com","tld":"com"},"ip":{"addr":"18.158.34.97","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-22T15:58:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"email.instructure.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"linklock.titanhq.com","ip":{"addr":"3.124.33.45","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2013-05-03","domain_rank":1716149,"first_seen":"2021-08-20T04:01:10Z","last_seen":"2025-10-15T10:29:39.786683Z","alert_count":0,"request_count":1,"received_data":825,"sent_data":941,"comment":"","tags":null,"fingerprints":null},{"fqdn":"email.instructure.com","ip":{"addr":"104.17.74.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-02-25","domain_rank":5199617,"first_seen":"2025-07-17T19:07:08.865642Z","last_seen":"2025-07-17T19:07:08.865642Z","alert_count":3,"request_count":3,"received_data":2930,"sent_data":2051,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"email.instructure.com/track?mktoTestLink\u0026mkt_tok=NTE1LVhZTC01MTQAAAGdkvkVqQRzOmjSzY0roApRT9Er9X6u30TrzldnrMjSHgORQ6HFjsbIBEeHiCAtTNjgaqa56N7ES8otRQwUUiU_F67VcKwiLXqB4E75dgHWBA","fqdn":"email.instructure.com","domain":"instructure.com","tld":"com"},"ip":{"addr":"104.17.74.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"814b8e6d4d32c92f5ec80270279dc4f4","sha1":"ad337d2d41ba8714f45c8f80cfc9dea2d9b133b7","sha256":"27e63897ec9fc57778718cc7f4b8575121d26fbcd9bb66e075d7c2ba655924ca","sha512":"0933a561951979714f8d5d8fc9167dfafb063153e53d89b34413d6a7087aa60efcf387ebc159a2ff9ea2ea83107ee73975877a8f76a8f09cc35cc2bf3bedde37","ssdeep":"","tlshash":"559002902257665163051221512185509869c224e8662f75500f4900014040c4255a04","size":45,"data":"","first_seen":"2023-09-22T06:19:52Z","last_seen":"2026-04-03T15:53:57.975867Z","times_seen":891,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"60342540d524a126489c9c495ab221f6","sha1":"826dbb6347346b5cb46fd969cbd6e5fd4112b2b2","sha256":"80372a93e1b111105e7fab9b52eb248a64b300b1eb0d6d54541af840f148846d","sha512":"5179ee25301918aaa58561355c42dcd4eab88bbcda501607b37f596466aca4f158ec6245d54759d47c542b7377a33d2a1afe18ea66a23acfe80a8a6709279164","ssdeep":"","tlshash":"b070002032e08000000e0838000202028830a8030800a202200000880a2f0020e2080b","size":22,"data":"","first_seen":"2025-10-18T15:59:00.076613Z","last_seen":"2025-10-18T15:59:00.076613Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"linklock.titanhq.com/analyse?url=https://email.instructure.com/NTE1LVhZTC01MTQAAAGdkvkVqTxCdLurC0fxup4ZyXI4YZ_3kyeU9R11wgyDa2EDHJinLMTqCuxj-CG91hsBzPKZiUc=\u0026data=eJw9jcFugzAYg58GbkT5k5CKQw4MWroOqq2i1calQsAKCxSakBX29KM7TLJky_InF4IzwjgnfOUxoHYptNEl6tXF7sRu2NI4OuhEwd7WwgXXmebWcYEhjGDFMV0cI04pQx5ihDCXWAwP_dh3eQHYxaiTj9y0qOg7WwnZ5brt71o2y-7_yYh6HAdtUd8im0XVH9Fc9ahMMRpVPeil36driE91lgYYkvTN9_2olN_ydEunoIyNCvDnZAaWze_P7CM7UzlXR-8AcL_MYU7W4XbXXOMkvQVm-nKCyINaP_28vmTNsbBo-AvU5VOf","fqdn":"linklock.titanhq.com","domain":"titanhq.com","tld":"com"},"ip":{"addr":"3.124.33.45","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-18T15:58:36.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linklock.titanhq.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 27 May 2025 00:00:00 GMT","end":"Thu, 25 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:96:0D:3A:B9:91:98:C1:C0:30:D9:40:C3:CA:6F:9A:21:BC:B8:B2","sha256":"9F:F2:6C:E4:91:0A:B5:9D:6E:75:F3:9C:14:2E:2E:2D:F8:91:C9:79:82:B5:91:CB:E1:14:CD:3E:C8:3F:C7:03"}}},"request":{"raw":"GET /analyse?url=https://email.instructure.com/NTE1LVhZTC01MTQAAAGdkvkVqTxCdLurC0fxup4ZyXI4YZ_3kyeU9R11wgyDa2EDHJinLMTqCuxj-CG91hsBzPKZiUc=\u0026data=eJw9jcFugzAYg58GbkT5k5CKQw4MWroOqq2i1calQsAKCxSakBX29KM7TLJky_InF4IzwjgnfOUxoHYptNEl6tXF7sRu2NI4OuhEwd7WwgXXmebWcYEhjGDFMV0cI04pQx5ihDCXWAwP_dh3eQHYxaiTj9y0qOg7WwnZ5brt71o2y-7_yYh6HAdtUd8im0XVH9Fc9ahMMRpVPeil36driE91lgYYkvTN9_2olN_ydEunoIyNCvDnZAaWze_P7CM7UzlXR-8AcL_MYU7W4XbXXOMkvQVm-nKCyINaP_28vmTNsbBo-AvU5VOf HTTP/1.1\r\nHost: linklock.titanhq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sat, 18 Oct 2025 15:58:37 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 157\r\nConnection: keep-alive\r\nLocation: https://email.instructure.com/NTE1LVhZTC01MTQAAAGdkvkVqTxCdLurC0fxup4ZyXI4YZ_3kyeU9R11wgyDa2EDHJinLMTqCuxj-CG91hsBzPKZiUc=\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":535,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":1423,"timings":{"blocked":306,"dns":1,"connect":22,"send":0,"wait":811,"receive":0,"ssl":280},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"email.instructure.com/NTE1LVhZTC01MTQAAAGdkvkVqTxCdLurC0fxup4ZyXI4YZ_3kyeU9R11wgyDa2EDHJinLMTqCuxj-CG91hsBzPKZiUc=","fqdn":"email.instructure.com","domain":"instructure.com","tld":"com"},"ip":{"addr":"104.17.74.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-18T15:58:37.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"email.instructure.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 10:13:13 GMT","end":"Wed, 14 Jan 2026 11:13:05 GMT"},"fingerprint":{"sha1":"EB:2F:1A:2D:7D:C6:BC:A9:6C:8E:33:C1:EC:E1:5A:DD:69:94:49:F9","sha256":"F9:8A:7A:E6:A8:B4:92:72:CA:2A:F3:C8:75:A3:E5:5D:39:87:13:B9:80:AB:65:82:51:EC:AF:DB:B2:63:38:1C"}}},"request":{"raw":"GET /NTE1LVhZTC01MTQAAAGdkvkVqTxCdLurC0fxup4ZyXI4YZ_3kyeU9R11wgyDa2EDHJinLMTqCuxj-CG91hsBzPKZiUc= HTTP/1.1\r\nHost: email.instructure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 18 Oct 2025 15:58:38 GMT\r\ncontent-type: text/html;charset=UTF-8\r\ncf-ray: 99093cfde92c35a6-OSL\r\nx-request-id: 9fddcac4cd3468ec\r\ncache-control: private, no-cache, no-store, max-age=0\r\nreferrer-policy: strict-origin\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; img-src 'self';script-src 'self' 'sha256-Yv+P8NvF+RsGC/YrMjLSm+rXeJEyPFJkHqy4aqnkRFc=';object-src 'none';form-action 'none';frame-src 'none';style-src 'self'\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=9q5C7LUJH_E3Lalj5iWgjyn4xcLDt_rcttM9WZQ_c2A-1760803118-1.0.1.1-dNvHwL87YZsKPc1l38O8ianVjdG7ifRxr7BSfHYK7qJ5RGFs7m.yHA9SIqRGKz1DgaQhb6R0fqioJHtI.Ag.KLt5ESVQd.QqeQu7S6k474k; path=/; expires=Sat, 18-Oct-25 16:28:38 GMT; domain=.email.instructure.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":535,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":1064,"timings":{"blocked":326,"dns":307,"connect":1,"send":0,"wait":412,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"email.instructure.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"email.instructure.com/track?mktoTestLink\u0026mkt_tok=NTE1LVhZTC01MTQAAAGdkvkVqQRzOmjSzY0roApRT9Er9X6u30TrzldnrMjSHgORQ6HFjsbIBEeHiCAtTNjgaqa56N7ES8otRQwUUiU_F67VcKwiLXqB4E75dgHWBA","fqdn":"email.instructure.com","domain":"instructure.com","tld":"com"},"ip":{"addr":"104.17.74.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-18T15:58:38.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"email.instructure.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 10:13:13 GMT","end":"Wed, 14 Jan 2026 11:13:05 GMT"},"fingerprint":{"sha1":"EB:2F:1A:2D:7D:C6:BC:A9:6C:8E:33:C1:EC:E1:5A:DD:69:94:49:F9","sha256":"F9:8A:7A:E6:A8:B4:92:72:CA:2A:F3:C8:75:A3:E5:5D:39:87:13:B9:80:AB:65:82:51:EC:AF:DB:B2:63:38:1C"}}},"request":{"raw":"GET /track?mktoTestLink\u0026mkt_tok=NTE1LVhZTC01MTQAAAGdkvkVqQRzOmjSzY0roApRT9Er9X6u30TrzldnrMjSHgORQ6HFjsbIBEeHiCAtTNjgaqa56N7ES8otRQwUUiU_F67VcKwiLXqB4E75dgHWBA HTTP/1.1\r\nHost: email.instructure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=9q5C7LUJH_E3Lalj5iWgjyn4xcLDt_rcttM9WZQ_c2A-1760803118-1.0.1.1-dNvHwL87YZsKPc1l38O8ianVjdG7ifRxr7BSfHYK7qJ5RGFs7m.yHA9SIqRGKz1DgaQhb6R0fqioJHtI.Ag.KLt5ESVQd.QqeQu7S6k474k\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 15:58:38 GMT\r\ncontent-type: text/html;charset=UTF-8\r\ncontent-encoding: gzip\r\nx-request-id: f4472b23b88a99bc\r\ncache-control: private, no-cache, no-store, max-age=0\r\nreferrer-policy: strict-origin\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; img-src 'self';script-src 'self' 'sha256-J+Y4l+yfxXd4cYzH9LhXUSHSb7zZu2bgddfCumVZJMo=';object-src 'none';form-action 'none';frame-src 'none';style-src 'self' 'sha256-OU0LTytxyR8kjQ+DRjRCDKhUAKEeH7rb0D5nBWOzRlQ='\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 99093d0198f735a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":539,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (539), with no line terminators","md5":"673b9cdb679a0bbac7cce63908f7185e","sha1":"5ee0e2c134aa40e717d5041a22a86b824969ab8d","sha256":"56edc285313954f8dc540d7bcbf681062ca1902c29e7010fe9db9f8596497f6f","sha512":"04139cccf8a3e34cb6da8ed0ecbb48381eb331c0e8a6e8255f3ceefbdd4b16eba80cf899764ce2c9eea8f6ba38de324e06e39d144eff78f7da60dbd5e6ec6d79","ssdeep":"","tlshash":"55f0c06c2822510cf71335e372f1b36654998211dd97d8b9305fa560dbcec744723b99","first_seen":"2023-09-24T16:08:59Z","last_seen":"2026-04-03T15:53:57.974286Z","times_seen":719,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"email.instructure.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"email.instructure.com/favicon.ico","fqdn":"email.instructure.com","domain":"instructure.com","tld":"com"},"ip":{"addr":"104.17.74.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://email.instructure.com/track?mktoTestLink\u0026mkt_tok=NTE1LVhZTC01MTQAAAGdkvkVqQRzOmjSzY0roApRT9Er9X6u30TrzldnrMjSHgORQ6HFjsbIBEeHiCAtTNjgaqa56N7ES8otRQwUUiU_F67VcKwiLXqB4E75dgHWBA","date":"2025-10-18T15:58:38.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"email.instructure.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 10:13:13 GMT","end":"Wed, 14 Jan 2026 11:13:05 GMT"},"fingerprint":{"sha1":"EB:2F:1A:2D:7D:C6:BC:A9:6C:8E:33:C1:EC:E1:5A:DD:69:94:49:F9","sha256":"F9:8A:7A:E6:A8:B4:92:72:CA:2A:F3:C8:75:A3:E5:5D:39:87:13:B9:80:AB:65:82:51:EC:AF:DB:B2:63:38:1C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: email.instructure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://email.instructure.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=9q5C7LUJH_E3Lalj5iWgjyn4xcLDt_rcttM9WZQ_c2A-1760803118-1.0.1.1-dNvHwL87YZsKPc1l38O8ianVjdG7ifRxr7BSfHYK7qJ5RGFs7m.yHA9SIqRGKz1DgaQhb6R0fqioJHtI.Ag.KLt5ESVQd.QqeQu7S6k474k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 15:58:38 GMT\r\ncf-ray: 99093d02bc1635a6-OSL\r\nx-request-id: d4d459f3a227a60e\r\nlast-modified: Sat, 18 Oct 2025 15:58:38 GMT\r\ncf-cache-status: MISS\r\nexpires: Sat, 18 Oct 2025 19:58:38 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"email.instructure.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}