{"report_id":"0895c9ed-1389-4e46-aeba-1f5970a0c877","version":6,"status":"done","tags":["microsoft","phishing"],"date":"2025-06-24T10:26:21Z","url":{"schema":"https","addr":"svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/","fqdn":"svbart.com","domain":"svbart.com","tld":"com"},"ip":{"addr":"94.26.90.17","port":0,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/","fqdn":"svbart.com","domain":"svbart.com","tld":"com"},"title":"Outlook"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-02T10:26:21Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"svbart.com","ip":{"addr":"94.26.90.17","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"domain_registered":"2025-05-23","domain_rank":0,"first_seen":"2025-06-24T10:26:21.563441Z","last_seen":"2025-06-24T10:26:21.563441Z","alert_count":9,"request_count":9,"received_data":262817,"sent_data":5472,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-06-24T10:25:59Z","timestamp":1750760759,"ip_dst":{"addr":"172.18.0.26","port":38046,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"94.26.90.17","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 14","source":"{\"timestamp\":\"2025-06-24T10:25:59.459317+0000\",\"flow_id\":1872354438801506,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"94.26.90.17\",\"src_port\":443,\"dest_ip\":\"172.18.0.26\",\"dest_port\":38046,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400013,\"rev\":4335,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 14\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_05_07\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2025-06-24T10:25:59.387170+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/","fqdn":"svbart.com","domain":"svbart.com","tld":"com"},"ip":{"addr":"94.26.90.17","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed25167a6041f2ae6853cf888fb2a5fe","sha1":"8e39e980c0e3ce882a636dc0ee2163ba344bb8c2","sha256":"4361ef28047ab0d15a4525a9bdc5027fa74b100fed7ae97670be95c400fcc740","sha512":"458c31646c8df13de5cb9c593ef905429520451c25d106ede5b55e8e73f043cd70ee31c6ce53a5cc7ffeb8ba45c266fed6bc8a3eca481d8d047373f764986e3f","ssdeep":"96:MjSgiM+EG+8k7pogzHC1d2fW105Xy3E8AlSsx+VS4z1iWoBjeiY:M2giM+EIgzHC1KWSC31sS7ZViY","tlshash":"0ea1f11af0b3182016b7e5774b5b66443139a007e506dd84bf7d43082f6be569a33beb","size":4896,"data":"","first_seen":"2025-06-24T10:26:25.568566Z","last_seen":"2025-06-24T10:26:25.568566Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/","fqdn":"svbart.com","domain":"svbart.com","tld":"com"},"ip":{"addr":"94.26.90.17","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"7eb80bbb9ab8ed5d6a7832ccc437ad74","sha1":"c83363e2a9af54a4c96fd7aaf820bf0457433e26","sha256":"4eb404a1fbe28419009636bd444bbf86d0b1c6455343bb70734698277a8670d5","sha512":"dd9fbe4e1f4f884abeb4089d197181aec31d022786a96b56f87656dd69bf57dfe986b37e1633c3bda00d12ab7c312fd9f87c6b19f45ccbbe457f0e21c965a1db","ssdeep":"768:XIpZuJx/MUnkrKaOKQYuE/WYuxDRIPYU8fLZ4tAr2GfO6eD9vKBAK9r9LIjsZNiq:iqr+/a9q/bSr4KyMt4hSbmVxM","tlshash":"0fd3373c7c18406b9c3e3d37ae554e8cab307d0db98a4586602cb96565d30fb7a6c3b6","size":137660,"data":"","first_seen":"2025-06-24T10:26:25.569289Z","last_seen":"2025-06-24T10:26:25.569289Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"d0e2c852a653d3588f51048b98c7bb85","sha1":"44b8f75c1af2a1cc94e25c64a8211431ca3b4e06","sha256":"3fec84d73618f24f8dc8a1ab056d7227212f5cfe4a6c9ca54b34a698895c3040","sha512":"b68a532137f112ef404d476f8abd93e5798cdcfb243607c09e55869035ba53d1e2b50441d1e263d7301e6b583c93555afd95b979943f86e894fdbf31658cbf24","ssdeep":"384:mGhyEQv//wZilsYKgzHKKWSa1saiQGZazm6EFR:RyiwjsvsDL0zHEP","tlshash":"9082f84b25f12d22610b60e5b7d6af85372f8103458fd9657abc570ccf82caa8363b4c","size":18279,"data":"","first_seen":"2025-06-24T10:26:25.569981Z","last_seen":"2026-03-17T12:27:58.934753Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/9c770679e153e060c880c26a7b4e833ed1502aa3.png","fqdn":"svbart.com","domain":"svbart.com","tld":"com"},"ip":{"addr":"94.26.90.17","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"","requested_by":"https://svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/","date":"2025-06-24T10:26:00.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"svbart.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Jun 2025 20:40:38 GMT","end":"Fri, 12 Sep 2025 20:40:37 GMT"},"fingerprint":{"sha1":"66:7A:DA:AF:4F:C8:C4:5D:22:9C:93:2E:97:EF:70:06:46:39:04:BB","sha256":"BC:0C:11:67:67:94:49:29:FD:DD:8A:28:3C:0F:1D:1C:74:8D:65:C7:8C:2B:EE:28:CD:EF:4D:C1:0E:54:92:83"}}},"request":{"raw":"GET /x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/9c770679e153e060c880c26a7b4e833ed1502aa3.png HTTP/1.1\r\nHost: svbart.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 24 Jun 2025 10:26:00 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 22 Apr 2025 08:55:01 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1434\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1434,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 10 x 879, 8-bit/color RGBA, non-interlaced","md5":"700528c06d9ba83eebb320059f27443f","sha1":"9c770679e153e060c880c26a7b4e833ed1502aa3","sha256":"6710ee6e22d5e3e82f70554804806c37aac5789b110d944383ea393d93eb627a","sha512":"0ff118819e81f8b51c149a6b360f3693bee7414527a33148cdc9b056eac4d44126a448228fa486e48c739148a3a56adebdcd4a1dad2d09c86354bb6146a5364b","ssdeep":"","tlshash":"0221b64be770bd019348d02b18db6217cf368cc398c2a8296e8ed8a7ec600f5494dccb","first_seen":"2023-05-16T03:44:19Z","last_seen":"2026-04-01T01:49:31.975835Z","times_seen":64,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/favicon.ico","fqdn":"svbart.com","domain":"svbart.com","tld":"com"},"ip":{"addr":"94.26.90.17","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"","requested_by":"https://svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/","date":"2025-06-24T10:26:00.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"svbart.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Jun 2025 20:40:38 GMT","end":"Fri, 12 Sep 2025 20:40:37 GMT"},"fingerprint":{"sha1":"66:7A:DA:AF:4F:C8:C4:5D:22:9C:93:2E:97:EF:70:06:46:39:04:BB","sha256":"BC:0C:11:67:67:94:49:29:FD:DD:8A:28:3C:0F:1D:1C:74:8D:65:C7:8C:2B:EE:28:CD:EF:4D:C1:0E:54:92:83"}}},"request":{"raw":"GET /x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/favicon.ico HTTP/1.1\r\nHost: svbart.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 24 Jun 2025 10:26:00 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 22 Apr 2025 08:55:01 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 7886\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/x-icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7886,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"759fade9033aa298629e4b000dcd6dde","sha1":"34a1adf5c7326d7bde5b5735471b5d81e611c189","sha256":"cf0808a61ec571e0c4975663903b288009d55502ac0445d9948983b339a5cf6e","sha512":"e96e93b13d70420d4d509d89a6337651440ae049b2a23d57c6250987003c46512c40c85c41bfa1c473a704801c961ffbe421522b89a1c34ba3b9e82a6d0769ed","ssdeep":"48:g8KokgDQoxTP0Vh0jV/H2kPxL6GUEtcrCOmgfzQumtGCzYoITin0iarrWtwVWsiw:97DdTGhGW6yS7Kvs/WjiUKqWmNQOWY","tlshash":"0cf130334afb6800e6171df04556f774c16a2d16394e58c3d88c3a6ae037be6706a9ef","first_seen":"2023-05-01T18:01:52Z","last_seen":"2026-04-04T05:57:01.406866Z","times_seen":5369,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/1652bc8a723648f32d05c842f6af269581e26dc1.png","fqdn":"svbart.com","domain":"svbart.com","tld":"com"},"ip":{"addr":"94.26.90.17","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"","requested_by":"https://svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/","date":"2025-06-24T10:26:00.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"svbart.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Jun 2025 20:40:38 GMT","end":"Fri, 12 Sep 2025 20:40:37 GMT"},"fingerprint":{"sha1":"66:7A:DA:AF:4F:C8:C4:5D:22:9C:93:2E:97:EF:70:06:46:39:04:BB","sha256":"BC:0C:11:67:67:94:49:29:FD:DD:8A:28:3C:0F:1D:1C:74:8D:65:C7:8C:2B:EE:28:CD:EF:4D:C1:0E:54:92:83"}}},"request":{"raw":"GET /x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/1652bc8a723648f32d05c842f6af269581e26dc1.png HTTP/1.1\r\nHost: svbart.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 24 Jun 2025 10:26:00 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 22 Apr 2025 08:55:01 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3595\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3595,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 69 x 55, 8-bit/color RGBA, non-interlaced","md5":"b92016c97a84ceb7f12fdf0e7276215e","sha1":"1652bc8a723648f32d05c842f6af269581e26dc1","sha256":"4de8fc175826d9f78fce9f9f2b71a63fe832fc7507e0394125c823b0909fa54a","sha512":"0b4746e93bb71275719473a47bb77414f2129935cf617c53de31a98aca921383e5576e6e1eecdd6e953c3b9a105902fe3f3cc802846a99e8a5191fe336d18993","ssdeep":"","tlshash":"56717edfcdb0e49f688dba220dcc1142e35a527c964a2368a1c279de04f5e0b6f715b9","first_seen":"2023-05-04T02:09:13Z","last_seen":"2026-04-03T20:29:29.259889Z","times_seen":183,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":127,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/cef70286faa37d152c3b2af9a60f8340534f1f3d.png","fqdn":"svbart.com","domain":"svbart.com","tld":"com"},"ip":{"addr":"94.26.90.17","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"","requested_by":"https://svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/","date":"2025-06-24T10:26:00.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"svbart.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Jun 2025 20:40:38 GMT","end":"Fri, 12 Sep 2025 20:40:37 GMT"},"fingerprint":{"sha1":"66:7A:DA:AF:4F:C8:C4:5D:22:9C:93:2E:97:EF:70:06:46:39:04:BB","sha256":"BC:0C:11:67:67:94:49:29:FD:DD:8A:28:3C:0F:1D:1C:74:8D:65:C7:8C:2B:EE:28:CD:EF:4D:C1:0E:54:92:83"}}},"request":{"raw":"GET /x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/cef70286faa37d152c3b2af9a60f8340534f1f3d.png HTTP/1.1\r\nHost: svbart.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 24 Jun 2025 10:26:00 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 22 Apr 2025 08:55:01 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 7746\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7746,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 76, 8-bit/color RGBA, non-interlaced","md5":"8f66b06c5aedba6a75ce7f9a49619c4a","sha1":"cef70286faa37d152c3b2af9a60f8340534f1f3d","sha256":"a7c14ee84d81a536a4cd54e3a144f388f2174a4a5c409ae118ea49f0da6b4aa6","sha512":"65c7a0e856db0e42954891a1e5eebb99156e2e23312f01223dd6d40d35e66c067ab38cdf1e453840a2476d3b9e8f64f9e64bf67c67e8d2d11fbc2dcc8470b815","ssdeep":"96:75QSAVeb6f7oLVN56aqo+vv5MmWB1zfGhbhdmhcblk4PceNEEe0mjjZ:tQSAVya7mVK/Ry/zePshHyNEEJs","tlshash":"6ef1bfed34d1f1f859b89bffe1453291ec5b1fa78222f05ce229d470546c851b24ae2e","first_seen":"2023-05-03T15:00:06Z","last_seen":"2026-03-28T23:29:16.326561Z","times_seen":398,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":168,"dns":6,"connect":85,"send":0,"wait":203,"receive":1,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/segoeui-regular.ttf","fqdn":"svbart.com","domain":"svbart.com","tld":"com"},"ip":{"addr":"94.26.90.17","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"","requested_by":"https://svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/","date":"2025-06-24T10:26:00.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"svbart.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Jun 2025 20:40:38 GMT","end":"Fri, 12 Sep 2025 20:40:37 GMT"},"fingerprint":{"sha1":"66:7A:DA:AF:4F:C8:C4:5D:22:9C:93:2E:97:EF:70:06:46:39:04:BB","sha256":"BC:0C:11:67:67:94:49:29:FD:DD:8A:28:3C:0F:1D:1C:74:8D:65:C7:8C:2B:EE:28:CD:EF:4D:C1:0E:54:92:83"}}},"request":{"raw":"GET /x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/segoeui-regular.ttf HTTP/1.1\r\nHost: svbart.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 24 Jun 2025 10:26:00 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 22 Apr 2025 08:55:01 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 56760\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: font/ttf\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56760,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"LTSH\", 11 names, Microsoft, language 0x409, � 2010 Microsoft Corporation. All Rights Reserved.RegularSegoe UI RegularVersion 0.81 Build 159S","md5":"8af990b6ad3ba192c2dd6a193890bf5f","sha1":"4db5bf117ff8f1392fab3b438216d7cff4ae4976","sha256":"c147c2ec76a8ab8bd5082f1f4d3f80a43c689165cb164cdd812e44048fe38708","sha512":"9eb10b5965ec7f272d854d46778d3f61f07edf9e13b5b6b6184f52fb1bdeaf552756e54f7abd0b2422cfb76aa9917fc3db42e0cd713cc7651c2650b6d9417c0d","ssdeep":"768:V6VwA2/UhWmTcrZslrc1pMEEfTsjRvlJ2LQ5XUAat0bJlZy+mO1F3iIezxHJLrLr:GwdMTwN1Dw6tewUZtyVy+mI7qfrLFKpi","tlshash":"66437d7ad3b4eb1ee5b471b4ccf453b101b1b82587654aba274b8533e84893ac361f4e","first_seen":"2023-04-17T17:35:42Z","last_seen":"2026-04-04T05:57:01.411474Z","times_seen":3784,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":72,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/segoeui-semilight.ttf","fqdn":"svbart.com","domain":"svbart.com","tld":"com"},"ip":{"addr":"94.26.90.17","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"","requested_by":"https://svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/","date":"2025-06-24T10:26:00.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"svbart.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Jun 2025 20:40:38 GMT","end":"Fri, 12 Sep 2025 20:40:37 GMT"},"fingerprint":{"sha1":"66:7A:DA:AF:4F:C8:C4:5D:22:9C:93:2E:97:EF:70:06:46:39:04:BB","sha256":"BC:0C:11:67:67:94:49:29:FD:DD:8A:28:3C:0F:1D:1C:74:8D:65:C7:8C:2B:EE:28:CD:EF:4D:C1:0E:54:92:83"}}},"request":{"raw":"GET /x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/segoeui-semilight.ttf HTTP/1.1\r\nHost: svbart.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 24 Jun 2025 10:26:00 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 22 Apr 2025 08:55:01 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 41560\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: font/ttf\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41560,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"OS/2\", 11 names, Microsoft, language 0x409, � 2010 Microsoft Corporation. All Rights Reserved.RegularSegoe UI SemilightVersion 1.00 build 16","md5":"6c26c24aabe31040657665b1e0d9505c","sha1":"b3bdc48643752665e3e5798a192b27432a87d234","sha256":"2d508a6e8979bba74b6fdf804c01a09a620c781e0fea73a8eefda904f5bcab25","sha512":"96bd759271df842f333b8085650dbf2006fe8e35b9485afc91b5de5b88d158d6147f594475fb4b5d086fa1b93720e935a346ba7d343171e6cbf8e08d4c7396ee","ssdeep":"768:FF6XesIz0ymUHmLg0e8sSM7tq2v40ezxHJLrLFKaXhU:zlHmLFejlbqfrLFKB","tlshash":"c0138e6b63b0bb05f2a664b888b507f10aa53c0523a28b4f245dc077d6dd677dad1f0b","first_seen":"2023-04-17T17:35:42Z","last_seen":"2026-04-04T05:57:01.41078Z","times_seen":3827,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":117,"dns":0,"connect":0,"send":0,"wait":73,"receive":148,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/","fqdn":"svbart.com","domain":"svbart.com","tld":"com"},"ip":{"addr":"94.26.90.17","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-24T10:25:59.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"svbart.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Jun 2025 20:40:38 GMT","end":"Fri, 12 Sep 2025 20:40:37 GMT"},"fingerprint":{"sha1":"66:7A:DA:AF:4F:C8:C4:5D:22:9C:93:2E:97:EF:70:06:46:39:04:BB","sha256":"BC:0C:11:67:67:94:49:29:FD:DD:8A:28:3C:0F:1D:1C:74:8D:65:C7:8C:2B:EE:28:CD:EF:4D:C1:0E:54:92:83"}}},"request":{"raw":"GET /x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/ HTTP/1.1\r\nHost: svbart.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 24 Jun 2025 10:25:59 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 23 Jun 2025 12:38:50 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 137704\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":137704,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (65496), with CRLF line terminators","md5":"d36d288edcef911cec012fc1344d83f1","sha1":"fe8a3808e6c1a482ff93730f1a9d4c97798795d0","sha256":"a6ba7bf5dde8873a37ae511e947d90213fcdd2f343b2c07343488d59743d3b62","sha512":"e3c8c606cd8249fb814db20fa87cf9b5e6f5912d87911fc96a479dd58569631a94caa8043f97110d76c78ae70720e7109f43a1e8a0b94f980d221f44ea840b74","ssdeep":"768:bIpZuJx/MUnkrKaOKQYuE/WYuxDRIPYU8fLZ4tAr2GfO6eD9vKBAK9r9LIjsZNi0:+qr+/a9q/bSr4KyMt4hSbmVxe","tlshash":"c6d3373c7c18406b9c3e3d37ae554e8cab307d0db98a4586602cb96565d30fb7a6c3b6","first_seen":"2025-06-24T10:26:25.565434Z","last_seen":"2025-06-24T10:26:25.565434Z","times_seen":1,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":255,"dns":30,"connect":93,"send":0,"wait":73,"receive":224,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/5e2b2882d0bdbe593429a43de72ee3c3652e62ce.png","fqdn":"svbart.com","domain":"svbart.com","tld":"com"},"ip":{"addr":"94.26.90.17","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"","requested_by":"https://svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/","date":"2025-06-24T10:26:00.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"svbart.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Jun 2025 20:40:38 GMT","end":"Fri, 12 Sep 2025 20:40:37 GMT"},"fingerprint":{"sha1":"66:7A:DA:AF:4F:C8:C4:5D:22:9C:93:2E:97:EF:70:06:46:39:04:BB","sha256":"BC:0C:11:67:67:94:49:29:FD:DD:8A:28:3C:0F:1D:1C:74:8D:65:C7:8C:2B:EE:28:CD:EF:4D:C1:0E:54:92:83"}}},"request":{"raw":"GET /x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/5e2b2882d0bdbe593429a43de72ee3c3652e62ce.png HTTP/1.1\r\nHost: svbart.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 24 Jun 2025 10:26:00 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 22 Apr 2025 08:55:01 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1441\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1441,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 22, 8-bit/color RGBA, non-interlaced","md5":"2fc55ac36211fb6b5a051281cc4898ad","sha1":"5e2b2882d0bdbe593429a43de72ee3c3652e62ce","sha256":"07f38b8b8c1f96ed85ecd96988f0454a95d1f665427086a507c72e55ff3ce0e7","sha512":"49dbb218b01f6aae602facee3ccfa01180607c17e6ba0cf5ec5c269da0ef4574cfda15309af115416d70a7bc9b6d70269286f8f52ccca8326e27b150b108f4ae","ssdeep":"","tlshash":"3c215487ff88784053ade39234b79027d9220b559ed4f47ab9cec01e59341b5181f6cb","first_seen":"2023-05-04T02:09:13Z","last_seen":"2026-04-01T01:49:31.975254Z","times_seen":590,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":174,"dns":6,"connect":89,"send":0,"wait":195,"receive":1,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/282d061aecb8ddfbb2c78225fc7f0cd58d9fce48.png","fqdn":"svbart.com","domain":"svbart.com","tld":"com"},"ip":{"addr":"94.26.90.17","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"","requested_by":"https://svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/","date":"2025-06-24T10:26:00.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"svbart.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Jun 2025 20:40:38 GMT","end":"Fri, 12 Sep 2025 20:40:37 GMT"},"fingerprint":{"sha1":"66:7A:DA:AF:4F:C8:C4:5D:22:9C:93:2E:97:EF:70:06:46:39:04:BB","sha256":"BC:0C:11:67:67:94:49:29:FD:DD:8A:28:3C:0F:1D:1C:74:8D:65:C7:8C:2B:EE:28:CD:EF:4D:C1:0E:54:92:83"}}},"request":{"raw":"GET /x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/282d061aecb8ddfbb2c78225fc7f0cd58d9fce48.png HTTP/1.1\r\nHost: svbart.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://svbart.com/x39kfL4nW8zA2qRBmD71uyN0hgPKXtYVaFevLsMd9cpEJqGrHwZUt73oXLyCmNQkb5vOa8R!nzFs6JDqTGa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 24 Jun 2025 10:26:00 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 22 Apr 2025 08:55:01 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2503\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2503,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 108, 8-bit/color RGBA, non-interlaced","md5":"fb4df93a98b7af6880c126a8318a60a8","sha1":"282d061aecb8ddfbb2c78225fc7f0cd58d9fce48","sha256":"d9ed6586942003696afe4e52b09f343f8342244b51a9e175b75162d7e615207b","sha512":"1ee46aa063f3b54eaa0d688c72b5b60103d94664eac52368c2eedc76745e8371dfe99f24716d89216b13220251cc628ac3c3f58a863022fb9dc03868240dc615","ssdeep":"","tlshash":"f8512c0ae80424a4c1f4bdf430e2952797e34fc087c4f5669acdc1176e603e6a939bd7","first_seen":"2023-05-01T21:53:03Z","last_seen":"2026-04-01T01:49:31.965568Z","times_seen":607,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":173,"dns":5,"connect":80,"send":0,"wait":205,"receive":1,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}}]}