{"report_id":"092ca877-b468-48ac-ac9b-03aa3a7c50aa","version":6,"status":"done","tags":[],"date":"2026-04-13T18:59:44Z","url":{"schema":"http","addr":"bauschsurgical360support.com/","fqdn":"bauschsurgical360support.com","domain":"bauschsurgical360support.com","tld":"com"},"ip":{"addr":"45.60.85.143","port":0,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"bauschsurgical360support.com/","fqdn":"bauschsurgical360support.com","domain":"bauschsurgical360support.com","tld":"com"},"title":"403 Forbidden","dom":{"size":292,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"d1a81789a278a2c2d2b80dd4e32f9730","sha1":"26ef8300c58b53bb7f9c7cf633970c483ae64176","sha256":"09cb9a03c83cea8b7f6400c7289e4613a2c22a0ffed659d08b27f33d914462f3","sha512":"147ad0d39d6d156716b63669ab3607801bc41d993ecfdf622a670bbc9e87ec7f79716bd866306884011e1e1aae29b94aa4c8bf2778a4f7a61cda10770e885420","ssdeep":"","tlshash":"9fe02b6fad4ec6195a1223c099ab56c4f046512cf5d28c4dcbded242f1bc7ae4406e9c","dom_hash":"domhashf17ba9d46240665fb98896ec23f8ab1b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bauschsurgical360support.com/","fqdn":"bauschsurgical360support.com","domain":"bauschsurgical360support.com","tld":"com"},"ip":{"addr":"45.60.85.143","port":0,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-18T18:59:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bauschsurgical360support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bauschsurgical360support.com","ip":{"addr":"45.60.76.143","port":80,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"domain_registered":"2021-06-09","domain_rank":0,"first_seen":"2021-06-11T15:40:28Z","last_seen":"2025-08-14T06:44:06.101074Z","alert_count":6,"request_count":6,"received_data":82531,"sent_data":6772,"comment":"","tags":null,"fingerprints":[{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bauschsurgical360support.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3\u0026ns=3\u0026cb=565406325","fqdn":"bauschsurgical360support.com","domain":"bauschsurgical360support.com","tld":"com"},"ip":{"addr":"45.60.76.143","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"74c77a2d057ffbbd10e0cf17ebe6ec5b","sha1":"9014a9d31de4f8bc374fded3776be9a836718bd1","sha256":"e512d241d7a60163ab737f39bb041bf5a430907776ae307cbe5eb62ce84c5a40","sha512":"f94f3e3c4bc8127b1e9eabbc7f1d1ea3ce04a3cf0785abe0db1aca8b0620b5aae679759cbc5107342cf724ad3bd49c652c69a1225a7bc09f854c9084ffec5946","ssdeep":"1536:truwGepWIafZPMpRppEp6lZHDuQeVB/e/F1xU2CvcnqHBfWtHaL1aRWJ5/K9a1Mg:truwGkWIafZPMpRppEp6lZHDuQeVB/eI","tlshash":"5f7312d5bbc5f807128d5a33be1e79a9e46b9862b4c4b643c654b68c24fc123c1e4ef1","size":79582,"data":"","first_seen":"2026-04-13T18:59:46.156931Z","last_seen":"2026-04-13T18:59:46.156931Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"bauschsurgical360support.com/","fqdn":"bauschsurgical360support.com","domain":"bauschsurgical360support.com","tld":"com"},"ip":{"addr":"45.60.76.143","port":80,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-13T18:59:22.225Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: bauschsurgical360support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visid_incap_2613384=mwIV+1uuSfGjFsOpy/GOegk93WkAAAAAQUIPAAAAAAC599ePMyhWsFSdclrONKqT; incap_ses_720_2613384=ucd0W/AsSQn6sf55vfT9CQk93WkAAAAACDgQTKL1jm6oSn+3vYUDCQ==\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nLocation: https://bauschsurgical360support.com/\r\nContent-Length: 0\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":332,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T10:23:19.677194Z","times_seen":13930759,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":17,"dns":1,"connect":21,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bauschsurgical360support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bauschsurgical360support.com/","fqdn":"bauschsurgical360support.com","domain":"bauschsurgical360support.com","tld":"com"},"ip":{"addr":"45.60.76.143","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-13T18:59:22.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bauschsurgical360support.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"19:17:02:1C:AB:FD:87:DC:BC:95:98:34:45:BB:14:D9:E8:72:29:AF","sha256":"EB:C0:2D:59:11:F8:8E:E9:BD:A0:5D:6B:9B:81:36:E5:04:91:4F:75:1C:93:8E:0D:C2:9B:7E:F1:87:EB:21:25"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bauschsurgical360support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visid_incap_2613384=mwIV+1uuSfGjFsOpy/GOegk93WkAAAAAQUIPAAAAAAC599ePMyhWsFSdclrONKqT; incap_ses_720_2613384=ucd0W/AsSQn6sf55vfT9CQk93WkAAAAACDgQTKL1jm6oSn+3vYUDCQ==\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nServer: nginx\r\nDate: Mon, 13 Apr 2026 18:59:22 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nConnection: keep-alive\r\nX-CDN: Imperva\r\nContent-Encoding: gzip\r\nTransfer-Encoding: chunked\r\nX-Iinfo: 12-12977268-12977269 SNYN RT(1776106762002 282) q(0 0 0 -1) r(0 0) U11\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":332,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"c3db75db186d301817a2bbef0fef3aa0","sha1":"3cdaa77973b221c4b821c99907261eff180d343a","sha256":"793a6000f035950bf8d7f3abddaf1c6ff5d0483c10ceb45bea48d97fa22fd917","sha512":"b3ba78927b271b2423919e5eb014de41d399b3527d3ec9966aef3d085ec669c582116092553388bc544afb1cb6ff00c642942c2bd0b70fd5a3a5f587ae5b348f","ssdeep":"","tlshash":"c4e07dafac4fc564951333c056d755c6e0001128ae924ccc8ecef142f6e07bc541ea5c","first_seen":"2026-04-13T18:59:46.153529Z","last_seen":"2026-04-13T18:59:46.153529Z","times_seen":1,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bauschsurgical360support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bauschsurgical360support.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3\u0026ns=3\u0026cb=565406325","fqdn":"bauschsurgical360support.com","domain":"bauschsurgical360support.com","tld":"com"},"ip":{"addr":"45.60.76.143","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bauschsurgical360support.com/","date":"2026-04-13T18:59:22.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bauschsurgical360support.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"19:17:02:1C:AB:FD:87:DC:BC:95:98:34:45:BB:14:D9:E8:72:29:AF","sha256":"EB:C0:2D:59:11:F8:8E:E9:BD:A0:5D:6B:9B:81:36:E5:04:91:4F:75:1C:93:8E:0D:C2:9B:7E:F1:87:EB:21:25"}}},"request":{"raw":"GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3\u0026ns=3\u0026cb=565406325 HTTP/1.1\r\nHost: bauschsurgical360support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bauschsurgical360support.com/\r\nCookie: visid_incap_2613384=mwIV+1uuSfGjFsOpy/GOegk93WkAAAAAQUIPAAAAAAC599ePMyhWsFSdclrONKqT; incap_ses_720_2613384=ucd0W/AsSQn6sf55vfT9CQk93WkAAAAACDgQTKL1jm6oSn+3vYUDCQ==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: no-cache, no-store\r\nContent-Type: application/javascript\r\nContent-Encoding: gzip\r\nX-Robots-Tag: noindex\r\nContent-Length: 18840\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79582,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"74c77a2d057ffbbd10e0cf17ebe6ec5b","sha1":"9014a9d31de4f8bc374fded3776be9a836718bd1","sha256":"e512d241d7a60163ab737f39bb041bf5a430907776ae307cbe5eb62ce84c5a40","sha512":"f94f3e3c4bc8127b1e9eabbc7f1d1ea3ce04a3cf0785abe0db1aca8b0620b5aae679759cbc5107342cf724ad3bd49c652c69a1225a7bc09f854c9084ffec5946","ssdeep":"1536:truwGepWIafZPMpRppEp6lZHDuQeVB/e/F1xU2CvcnqHBfWtHaL1aRWJ5/K9a1Mg:truwGkWIafZPMpRppEp6lZHDuQeVB/eI","tlshash":"5f7312d5bbc5f807128d5a33be1e79a9e46b9862b4c4b643c654b68c24fc123c1e4ef1","first_seen":"2026-04-13T18:59:46.156931Z","last_seen":"2026-04-13T18:59:46.156931Z","times_seen":1,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bauschsurgical360support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bauschsurgical360support.com/favicon.ico","fqdn":"bauschsurgical360support.com","domain":"bauschsurgical360support.com","tld":"com"},"ip":{"addr":"45.60.76.143","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bauschsurgical360support.com/","date":"2026-04-13T18:59:22.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bauschsurgical360support.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"19:17:02:1C:AB:FD:87:DC:BC:95:98:34:45:BB:14:D9:E8:72:29:AF","sha256":"EB:C0:2D:59:11:F8:8E:E9:BD:A0:5D:6B:9B:81:36:E5:04:91:4F:75:1C:93:8E:0D:C2:9B:7E:F1:87:EB:21:25"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bauschsurgical360support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bauschsurgical360support.com/\r\nCookie: visid_incap_2613384=mwIV+1uuSfGjFsOpy/GOegk93WkAAAAAQUIPAAAAAAC599ePMyhWsFSdclrONKqT; incap_ses_720_2613384=ucd0W/AsSQn6sf55vfT9CQk93WkAAAAACDgQTKL1jm6oSn+3vYUDCQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Mon, 13 Apr 2026 18:59:22 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nConnection: keep-alive\r\nX-CDN: Imperva\r\nContent-Encoding: gzip\r\nTransfer-Encoding: chunked\r\nX-Iinfo: 12-12977268-12977269 SNYN RT(1776106762002 494) q(0 0 0 -1) r(0 0) U11\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":330,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"048b3abe8797961c8f6e7831e062dde2","sha1":"5b7b48cba575bcec6fb9d7351e897cf1cab8fd15","sha256":"bb77dac03f0142341ce8be2a97e08d588c4e3b9bcbd7ef29def857ede1604df5","sha512":"678f1ef853423bdbecd13b8c26432a508f468a01b289b0b3a7e97ed175e73a3d8e20b7f2db7e5d6ee79aa8631100892ff4520ff18c38ebaa9fca8ab40219930d","ssdeep":"","tlshash":"5ee07d5f5847d3c5801121d076c351c6d108122ea97189ec5ed6a145b6a477d644ab9c","first_seen":"2026-04-13T18:59:46.160755Z","last_seen":"2026-04-13T18:59:46.160755Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bauschsurgical360support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bauschsurgical360support.com/_Incapsula_Resource?SWKMTFSR=1\u0026e=0.6672712935690346","fqdn":"bauschsurgical360support.com","domain":"bauschsurgical360support.com","tld":"com"},"ip":{"addr":"45.60.76.143","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bauschsurgical360support.com/","date":"2026-04-13T18:59:22.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bauschsurgical360support.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"19:17:02:1C:AB:FD:87:DC:BC:95:98:34:45:BB:14:D9:E8:72:29:AF","sha256":"EB:C0:2D:59:11:F8:8E:E9:BD:A0:5D:6B:9B:81:36:E5:04:91:4F:75:1C:93:8E:0D:C2:9B:7E:F1:87:EB:21:25"}}},"request":{"raw":"GET /_Incapsula_Resource?SWKMTFSR=1\u0026e=0.6672712935690346 HTTP/1.1\r\nHost: bauschsurgical360support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bauschsurgical360support.com/\r\nCookie: visid_incap_2613384=mwIV+1uuSfGjFsOpy/GOegk93WkAAAAAQUIPAAAAAAC599ePMyhWsFSdclrONKqT; incap_ses_720_2613384=ucd0W/AsSQn6sf55vfT9CQk93WkAAAAACDgQTKL1jm6oSn+3vYUDCQ==; ___utmvc=voT4mzhM2ErMZG94nBOsaCfRXT+cAbmg2b3oSJTbdYmQ+2kT3CtbpUF6uPSdfFBtwhY84hfxo0Elu28v37PSJbf722+0ch+he9iYAsO3jWi2I4KvXmTv0H9cspfh0IhVTo4uAnS/NW2YV4xN6ErhY6lSxso2J1fRCVABH2j0yXzs1/VUEWs4I4RCl9R17rYXX6CHEe/79IWq2OZqOuqC5Z0yCSHCVA34U+/ruLZFWyEJpGDqJYp6g7XgIp2x0SJVq0ta0cVFXqCo2mfEZRkRVWE0Nn8fipqyM9D6QFEUM5YAwJryjzbelroliwLhCm+zTF4h5w3LHixcZ4lZJMFYxJFqMhzBmPDLZzc0f2WOi+unDvpspKLN86Lq1SpH0aIbguI6INu0o51/XPgp3LT2iUZUugjPyE4uWYIfzmmDf8CnMPcXm/s9tMGyU0J3br2kX/nK2rz4JK5VXPu+CASzeXmFoCVPPzIwzh1mZ/uniXZgEFsNuZc9bqo7T3JPR1mOKK8X/gox41PklG73s4lROPwzHt6PRxFFI07HeghSgDoeIvFy0JhTJTv/rMbgvnczSv1/xeAekBzeqOj7eyMB/3hDs0BIp13EinM7EjoHs4njSCnbewqNmiS02JWAxk5wsyOgh4cj0gEWdfR0Lw6wv04DF6jt6oJD6fFpb79FhVyNmcuJPZeNr5lj7ApyP5uOFR+cm5QJHzSFzfHsP/IAgXMbeKIbwebBhAq9kd4jspIRKwuNMmXnXLayN/ev1h5yE6Ys1wVpBe8ikcOpZ4fxqRjXEHwGgCt+uyLxar+Nmbq5rUhSJKg1tUzrrcjx4MCDmCdpXiC9SV5CmE1Nmndg8ZF+iXA3RAj1tkoCIdCHhGNqvpCZ4fl+pNXAKpeHJ3afW+JOwGml9almIaaRZFjQm8YvrsLLSrSvZa08lkvNJqpBhPFbDmKI73IqsvnQQpRCYDmqnzpM6lWrQZccHXKF/RXbI6gwh+cPhPhU+aAhaIjoK9IQwLPtXMEC0CeNeirjweYJa7xmO7jv9CpmK07Z2STfYjM6MinrfnNN4QC3SWhC/KTHo+x1YawKePn9A1HM5tcO7CqWqeAe9h7oMc3Z+SIOruwScFkr537SIZIZm6sx1q2XnCO4esAp3M1a5EratawN7SWUlFu5m7EtdFSO9s4BcAkwJG5r2NTA7TwvJU0g6M3UlSxQKAYtnctJa0zcJd612KXQxAAkST54Iiua3ABsINkqVP/3wZWxESeSGNzK+78+wUadNDZm8+KNskM/ENCrMNFhcHiHLwGVhEVvxUt3OqLDIMiC1znRXgrjRB9cytKbNscinHGaybDtWJNgL10HsbEbyeFikLX/LVialChmW/ZVS+PZlSrpzzw2/WzzKJ0UIiBC1J844+P2rTq5xKF3IIFTU6+mMg5MImNMBWgknIubP2BBVe6qwfythCHPF38GVUDaaDB6V39HeYE/r8tlvGAh9PTCPAxmUUt6aEpZmhZDlce5w26IXxQZDHE5yjbTrFh6OAjcPzRIlC5r1VTEDuxV8aNH725tnuOXgZNkmlArsqNa151CG1wBkHWH94bzbZzUI6f3Un2axI5VeOVKf3VI9nmes7RkNVm67P/qJ6topKEmYq8550nfPzkJj8RZ9GKRObFam5ItuxbGryKf9MiwaNbtHaretT/JB+ucrp/iLHEIs8xXbi9qu+i0bXRB+dB+sclyDhFbIAze5OqivXHMvbtpLUjg5rmA2Rio19OzAv6iRcLh26UiHc3rjUo12+DXtFve0dagC817WW1oLzXFDjtfWsh6jk54hWmSPoTKR7eoA1cWmxBOkqaJbURRGKizv2byyiQqXcS3vmj/bE/Aglzp9NxrvosqlqhXpbytHhUajnJSMuL7q9iwpOL/8W5EW6isqV/atIEgi3x/nLuglhUBApZpxAkzWsuYMR4ivYycPA28Kem1PPhrI7guV/zT+14HkJG1eW7XzN6RdiA6G1LgrHuhyX6sU5P3A3M1VMVlztMrw86X5NqoEJKwbRx5ajSEWx2Va5cR6DWuRN1oQfv/FTNlt3+3SlbZKwJJG98pAfgrXRsRKmFd3oy2OcbihYqY7E0Q0FDijwSqFy4KydEgnzC3Kwf9qP/ljBLd3eL1Du8ER2mB3rcZf+KyxT7pMyL5Tn+XxqgDbD0+n98kbFwdUoXv8oXhYMHVOL6FTIeyLa7aI3X508oPH1NGh36Dk3D5buJRDGPuEMv6pP3GtKJd+9JHf9VWr+HPVpc0Yk8UHg6Ohclv+Jgz6+t5UijjaXzslWGQR/4ETURggTXs0tH/mGh5GC1U/KMhYJjwTEbOOnFbzPZeJ7JTHVq7dSnPzIa4zTWkgkA6WEDji+momAce+FKu4CinV6r/D15cB3EPUmU8mDNfozTZigsGGvee2iv+why1RTISYA+X00FFGu6SwR4meq/eOfwUBebnbegNIh6v9K1m70O89az/IJzMb8aIg2L988q0gkApjVCXvaig8K2pYU0P1mYSb5ss+Dw/5XJZxoDKBO9XVQ1LkygLKtqprZdBcmj0r++FsQLvEbN2hHHW6YEvv/xgC1RblbbLj5zAo4nsPiito9YRwKYX1Fp9ylOUyo4bngQJP6CF8gCdrr4fdL9HcfeRb3VpkFfxPAV98lvGdb3zDrzYDmw6JwhVFP25RLTC4SyMtoZxJ7J7rVFBp6/u6C6SIwG5hlN66c5T0j5s9DPZnk5UTOHlu++mdSvK8dqa2rTRkJWKxgp8VD5HWmmDhQ+AYSEGbafoFqulOafSlxujLaBlz4ShzNjPGg72ktmdbWQKHEFXdnfoJjEywktONy3/VCHbzQGV724bwG5pnBqkFE1r6itS46MCkUUjnpIsZGlnZXN0PTE5NzYyOSxzPWEwOGVhODg2Nzg3YWExYjM4ODlmNjg2NDlkOWNhMTlhYTZhNTYyOWU3YWEyODdiMDY4OWU4ODY5YWJhMGFiYjI4MThhOGE2ZDhiYTA3NDcz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: no-cache, no-store\r\nContent-Type: text/plain\r\nX-Robots-Tag: noindex\r\nContent-Length: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1,"size_decoded":0,"mime_type":"text/plain","magic":"very short file (no magic)","md5":"c4ca4238a0b923820dcc509a6f75849b","sha1":"356a192b7913b04c54574d18c28d46e6395428ab","sha256":"6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b","sha512":"4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a","ssdeep":"","tlshash":"c70000000c000000c00000300000000000000000000000000000000000000000000030","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-04-19T10:21:15.147553Z","times_seen":106819,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bauschsurgical360support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bauschsurgical360support.com/","fqdn":"bauschsurgical360support.com","domain":"bauschsurgical360support.com","tld":"com"},"ip":{"addr":"45.60.76.143","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-13T18:59:21.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bauschsurgical360support.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"19:17:02:1C:AB:FD:87:DC:BC:95:98:34:45:BB:14:D9:E8:72:29:AF","sha256":"EB:C0:2D:59:11:F8:8E:E9:BD:A0:5D:6B:9B:81:36:E5:04:91:4F:75:1C:93:8E:0D:C2:9B:7E:F1:87:EB:21:25"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bauschsurgical360support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nServer: nginx\r\nDate: Mon, 13 Apr 2026 18:59:22 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nConnection: keep-alive\r\nSet-Cookie: visid_incap_2613384=mwIV+1uuSfGjFsOpy/GOegk93WkAAAAAQUIPAAAAAAC599ePMyhWsFSdclrONKqT; expires=Mon, 12 Apr 2027 22:22:01 GMT; HttpOnly; path=/; Domain=.bauschsurgical360support.com\nincap_ses_720_2613384=ucd0W/AsSQn6sf55vfT9CQk93WkAAAAACDgQTKL1jm6oSn+3vYUDCQ==; path=/; Domain=.bauschsurgical360support.com\r\nX-CDN: Imperva\r\nContent-Encoding: gzip\r\nTransfer-Encoding: chunked\r\nX-Iinfo: 12-12977268-12977269 NNYN CT(23 26 0) RT(1776106762002 30) q(0 0 1 0) r(1 1) U11\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":333,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"2a49881d2215f79d8f5ec3b0251a2952","sha1":"ed1477d31c89890f475af9a4b30d7c3269f2f78b","sha256":"b22f6e7c073907edbf2a41ab4b7f7dbe89b3199ed841c989291582de411f9425","sha512":"73579681203efe447d26f99b036bfa4ccd4ee92b4c6df9a06a9833d72bdce69b6b06f40557568e727657d843705ce9212de7a7f6416c82e59079e230897960b4","ssdeep":"","tlshash":"d1e07d6fec8fd1a4925333c056e756c5e0041128a9a28ccd8ecaf542f2f17bd440aa5c","first_seen":"2026-04-13T18:59:46.164931Z","last_seen":"2026-04-13T18:59:46.164931Z","times_seen":1,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":128,"dns":77,"connect":21,"send":0,"wait":97,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bauschsurgical360support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
