{"report_id":"0ea8347a-1023-465e-9b4a-e244552cda99","version":6,"status":"done","tags":[],"date":"2026-04-15T18:25:52Z","url":{"schema":"http","addr":"resplendent-basbousa-fc515d.netlify.app/","fqdn":"resplendent-basbousa-fc515d.netlify.app","domain":"resplendent-basbousa-fc515d.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"resplendent-basbousa-fc515d.netlify.app/","fqdn":"resplendent-basbousa-fc515d.netlify.app","domain":"resplendent-basbousa-fc515d.netlify.app","tld":"netlify.app"},"title":"Sign in - Professional Email","dom":{"size":44,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"73956d6ebea072659493bd6a2b58c593","sha1":"729b2f4da55d3b13b793a00fa20bc8ec10c63ed0","sha256":"7b8dc4dc541347fb74e4933dd718adb981e124bae2cded37d903791df90aafb3","sha512":"bac2a7efaaf047493b9f0d095fc259a63b44c9b6312684b01b99d709920138f7cb268a4513a6f10444c3ec14bf1f2347005dd95b00939fc1cc259a0a0dc7b4a6","ssdeep":"","tlshash":"109004fdd4d1100d5c7035d00cc113d10c14437430114f00ddc1747cd405115dc031d4","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"resplendent-basbousa-fc515d.netlify.app/","fqdn":"resplendent-basbousa-fc515d.netlify.app","domain":"resplendent-basbousa-fc515d.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-20T18:25:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-15T18:25:29Z","timestamp":1776277529,"ip_dst":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"Client IP","port":57622,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET HUNTING Suspicious Netlify Hosted TLS SNI Request - Possible Phishing Landing","source":"{\"timestamp\":\"2026-04-15T18:25:29.332144+0000\",\"flow_id\":1277460043357512,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":57622,\"dest_ip\":\"35.157.26.135\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2032760,\"rev\":1,\"signature\":\"ET HUNTING Suspicious Netlify Hosted TLS SNI Request - Possible Phishing Landing\",\"category\":\"Possible Social Engineering Attempted\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2021_04_14\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0001\"],\"mitre_tactic_name\":[\"Initial_Access\"],\"mitre_technique_id\":[\"T1566\"],\"mitre_technique_name\":[\"Phishing\"],\"signature_severity\":[\"Critical\"],\"tag\":[\"Phishing\"],\"updated_at\":[\"2021_04_14\"]}},\"tls\":{\"sni\":\"resplendent-basbousa-fc515d.netlify.app\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3504,\"start\":\"2026-04-15T18:25:29.286024+0000\"}}"}],"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-15","alert":"Phishing Block","trigger":"resplendent-basbousa-fc515d.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"resplendent-basbousa-fc515d.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"jdmediax.com","ip":{"addr":"147.93.125.2","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"domain_registered":"2025-06-06","domain_rank":6441489,"first_seen":"2025-06-11T12:25:45.275828Z","last_seen":"2026-04-15T12:30:45.560706Z","alert_count":0,"request_count":5,"received_data":370476,"sent_data":2438,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}]},{"fqdn":"webmail-oxcs.networksolutionsemail.com","ip":{"addr":"198.251.71.220","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"domain_registered":"2003-01-09","domain_rank":671255,"first_seen":"2021-11-09T02:11:21Z","last_seen":"2026-04-13T03:05:34.907333Z","alert_count":0,"request_count":1,"received_data":484,"sent_data":511,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"resplendent-basbousa-fc515d.netlify.app","ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":1,"received_data":41633,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"javascriptURL","is_inline":false,"md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","size":5,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-26T09:25:15.672969Z","times_seen":79796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resplendent-basbousa-fc515d.netlify.app/","fqdn":"resplendent-basbousa-fc515d.netlify.app","domain":"resplendent-basbousa-fc515d.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9aa5acf0809feec17f49c5a767e77109","sha1":"2b442beae58032fd108164a458f410ab26f508a6","sha256":"d9682ed531e3afbd53399c4236ebba63fb82aa0c858d460751f7e303024696bb","sha512":"363d10f59b3418aa44120013525f09d704218429fbe5eb1905c7d2dedb2569dc275ec838c9b67e7104ab388037e19e3a30b91ff8c917be41dd22ea0cd8212876","ssdeep":"","tlshash":"d2c012ca4d46144642d22312598330641472d1ff1398a40779586e012b6975c1a16b84","size":179,"data":"","first_seen":"2023-03-14T05:05:51Z","last_seen":"2026-06-06T10:10:38.717303Z","times_seen":3154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resplendent-basbousa-fc515d.netlify.app/","fqdn":"resplendent-basbousa-fc515d.netlify.app","domain":"resplendent-basbousa-fc515d.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"6cebe24ff4f67f2767d2a729d0cbee00","sha1":"eaf56acf9d514778119d762cfa521c94c2b7e884","sha256":"56428f4061d871e5c97880100e5b9bec42219947248326dc9f62ff14cfc74335","sha512":"c9ab1baac60b514535066cd885e7e58dea9ad2b30925676b18b74f58f39ad43c840f67c5d417cae9d42758108a7b43ce0f8567af37bb132d7e5e2963f79a86f7","ssdeep":"","tlshash":"8811122d59766838651346f3319526c325034c1f9c44337b75af53042f9948df2b6afa","size":856,"data":"","first_seen":"2024-01-11T05:06:02Z","last_seen":"2026-06-06T10:10:38.717882Z","times_seen":593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"jdmediax.com/app/networksolu/media/main-781bf877.css","fqdn":"jdmediax.com","domain":"jdmediax.com","tld":"com"},"ip":{"addr":"147.93.125.2","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://resplendent-basbousa-fc515d.netlify.app/","date":"2026-04-15T18:25:29.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdmediax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 04:08:17 GMT","end":"Thu, 02 Jul 2026 04:08:16 GMT"},"fingerprint":{"sha1":"58:8F:12:70:74:A8:25:0B:8F:BB:EB:52:EA:5C:E4:9F:CE:A5:C3:A6","sha256":"F6:D0:4A:22:EB:23:43:F7:8F:9A:F7:09:76:CB:41:12:9F:C6:3E:7C:08:A9:8A:85:2D:7F:F4:C4:85:97:C5:E0"}}},"request":{"raw":"GET /app/networksolu/media/main-781bf877.css HTTP/1.1\r\nHost: jdmediax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://resplendent-basbousa-fc515d.netlify.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 22 Apr 2026 18:25:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Jun 2025 21:57:44 GMT\r\netag: \"53a1e-68436458-fab4cfba5acf7a0d;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 49272\r\ndate: Wed, 15 Apr 2026 18:25:29 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":342558,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (61468)","md5":"0b47d8c2153027bbb01929b8872e077d","sha1":"ad68622abc534babd02c655fdb5d3b744a2f0408","sha256":"781bf8770b0fd1f8b0c4a0d1c930ff58c7a7211780bdcf594b1ade206fec2fe9","sha512":"04c8499b9b285c4d1b5197c1f8c18489e2688a84c4934a375a2dec63f35cd3e973e943997c5c106eaac0d05058e4d9500b7175f0316cd003a0732ebccfe9b6c8","ssdeep":"1536:BlV3imHCI6AHZyaq2k3Sdyqh4B7Q01FDk4sMt7QRXSbWowqb59e5zv68:ZVf07Q01FDk4sMt7QRXQWY59e5zC8","tlshash":"5f74d514a310303f3867c06679d4bd97be16a05fdc6a4bbaf42694a803ce5d72237e76","first_seen":"2024-01-11T05:06:02Z","last_seen":"2026-07-18T17:21:50.149057Z","times_seen":487,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":98,"dns":36,"connect":19,"send":0,"wait":20,"receive":34,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jdmediax.com/app/networksolu/media/error-generic.svg","fqdn":"jdmediax.com","domain":"jdmediax.com","tld":"com"},"ip":{"addr":"147.93.125.2","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://resplendent-basbousa-fc515d.netlify.app/","date":"2026-04-15T18:25:29.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdmediax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 04:08:17 GMT","end":"Thu, 02 Jul 2026 04:08:16 GMT"},"fingerprint":{"sha1":"58:8F:12:70:74:A8:25:0B:8F:BB:EB:52:EA:5C:E4:9F:CE:A5:C3:A6","sha256":"F6:D0:4A:22:EB:23:43:F7:8F:9A:F7:09:76:CB:41:12:9F:C6:3E:7C:08:A9:8A:85:2D:7F:F4:C4:85:97:C5:E0"}}},"request":{"raw":"GET /app/networksolu/media/error-generic.svg HTTP/1.1\r\nHost: jdmediax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://resplendent-basbousa-fc515d.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 22 Apr 2026 18:25:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 06 Jun 2025 21:57:43 GMT\r\netag: \"13d9-68436457-8bb818f232f31436;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1688\r\ndate: Wed, 15 Apr 2026 18:25:29 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5081,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bd20ccc0e2c46e063663be1fb8ece5d7","sha1":"7c64092a73dc42a3eddb5d1393b146b7b1818257","sha256":"0ca8f37a2863dc15192234ec9fe2c54d3a9e97b68a51fa2a38b09c3e52f73722","sha512":"b5f3c788865c6beb1c9a9188ab4ffbc3ed6d0e458a3a0d7788e8a01a12f095a0649f7ff10172b0af827850a1eacd610cace943d5ec85ce103f5de66151792494","ssdeep":"96:4GyFOZ3gdZ9DU9Zjzgcj+k28lNvB94AN3:4TOZ3K9Y9Zjvj7rlNp94A1","tlshash":"c4a1c6e4299c85aef44747d8cf98216e043e70ff28699954799e06f0df012ee2c7f446","first_seen":"2023-05-15T10:40:11Z","last_seen":"2026-07-18T17:21:50.035555Z","times_seen":497,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jdmediax.com/app/networksolu/media/logo","fqdn":"jdmediax.com","domain":"jdmediax.com","tld":"com"},"ip":{"addr":"147.93.125.2","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://resplendent-basbousa-fc515d.netlify.app/","date":"2026-04-15T18:25:29.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdmediax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 04:08:17 GMT","end":"Thu, 02 Jul 2026 04:08:16 GMT"},"fingerprint":{"sha1":"58:8F:12:70:74:A8:25:0B:8F:BB:EB:52:EA:5C:E4:9F:CE:A5:C3:A6","sha256":"F6:D0:4A:22:EB:23:43:F7:8F:9A:F7:09:76:CB:41:12:9F:C6:3E:7C:08:A9:8A:85:2D:7F:F4:C4:85:97:C5:E0"}}},"request":{"raw":"GET /app/networksolu/media/logo HTTP/1.1\r\nHost: jdmediax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://resplendent-basbousa-fc515d.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Jun 2025 21:57:43 GMT\r\netag: \"10f6-68436457-92877a0382a78e61;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 4342\r\ndate: Wed, 15 Apr 2026 18:25:29 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4342,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 154 x 62, 8-bit/color RGBA, non-interlaced","md5":"8d74d147618554291f8cb17959e22450","sha1":"4602c88a77f1ae4832e5943a9f31e6dc46c4019c","sha256":"38f4cd5c0c12b0655856bb8470b15392154ebad70467d63a577ff730e8f248df","sha512":"5677c216106a72ea816b3c44ff3e62a72d1ecf6661c8c18c3e7b885577ddd582df401dc7e3220d9a5894faf63547c79bfb6dacbd33d510161461ebcaa39cfb69","ssdeep":"96:DScG+WWD284hWhWlN1UQ9AXZ1DDlkA9R2S/hcOd8EBOv:DScEw28aW6AkA9R2S5cOOEBOv","tlshash":"53917dd6a9c04cc6dbeb4d3ad295b8ebc26e0fb90043e51844fad539431bc10c7ae1ad","first_seen":"2023-05-01T23:08:16Z","last_seen":"2026-07-24T21:39:50.698655Z","times_seen":6569,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jdmediax.com/app/networksolu/media/logo_180.png","fqdn":"jdmediax.com","domain":"jdmediax.com","tld":"com"},"ip":{"addr":"147.93.125.2","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://resplendent-basbousa-fc515d.netlify.app/","date":"2026-04-15T18:25:29.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdmediax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 04:08:17 GMT","end":"Thu, 02 Jul 2026 04:08:16 GMT"},"fingerprint":{"sha1":"58:8F:12:70:74:A8:25:0B:8F:BB:EB:52:EA:5C:E4:9F:CE:A5:C3:A6","sha256":"F6:D0:4A:22:EB:23:43:F7:8F:9A:F7:09:76:CB:41:12:9F:C6:3E:7C:08:A9:8A:85:2D:7F:F4:C4:85:97:C5:E0"}}},"request":{"raw":"GET /app/networksolu/media/logo_180.png HTTP/1.1\r\nHost: jdmediax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://resplendent-basbousa-fc515d.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 22 Apr 2026 18:25:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 06 Jun 2025 21:57:43 GMT\r\netag: \"3d8a-68436457-6d1419f19ab6361d;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 15754\r\ndate: Wed, 15 Apr 2026 18:25:29 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":15754,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e06af44c8daf198f8f7347c19d16b6fb","sha1":"5f19c6b1810c23b4c00c47ab9ab69ac2fe616954","sha256":"bf4d6827f36f12aaf4e420da28f3ee7b6335be06a13aa3b54bc67eaa4f6465ae","sha512":"74936fb186b6e01e294908c74828055ad9e4c46f5a467eb1f89afae9191245ec93c078054803f706bda3b4463e143aba9b9f6a91409662420b968e258121d9a6","ssdeep":"384:is8kUKBoDqINe3wDrYojG3eyVyH4rd4nlWUsFP:itNKBolUoqey0H4rd4lW/P","tlshash":"ae62d0d8eac7dfcaa6fddc43951c91230af6c912de7d1a012bd01b5800778979b5592c","first_seen":"2023-05-03T20:03:27Z","last_seen":"2026-07-18T17:21:50.146324Z","times_seen":1905,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.networksolutionsemail.com/appsuite/favicon.svg?version=3999779421","fqdn":"webmail-oxcs.networksolutionsemail.com","domain":"networksolutionsemail.com","tld":"com"},"ip":{"addr":"198.251.71.220","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://resplendent-basbousa-fc515d.netlify.app/","date":"2026-04-15T18:25:29.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.networksolutionsemail.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4A:D4:DA:57:B4:2E:66:EA:E2:1F:CB:8A:DB:C6:1A:27:BD:B0:FE:E6","sha256":"29:D0:EA:9F:32:0D:4B:2C:84:1E:A6:4A:49:37:B0:79:FD:16:CC:C2:88:1F:27:E0:9A:A7:2F:70:75:31:4B:F4"}}},"request":{"raw":"GET /appsuite/favicon.svg?version=3999779421 HTTP/1.1\r\nHost: webmail-oxcs.networksolutionsemail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://resplendent-basbousa-fc515d.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Wed, 15 Apr 2026 18:25:36 GMT\r\ncontent-type: application/xml\r\nx-amz-request-id: tx0000052c4aaae9031fd6f-0069dfd820-1755bcee4-msc1\r\naccept-ranges: bytes\r\nx-app-server: rgw15ham2\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T09:24:06.977701Z","times_seen":17543020,"resource_available":true,"data":null}},"time_used":6236,"timings":{"blocked":-1,"dns":0,"connect":118,"send":0,"wait":5962,"receive":0,"ssl":156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resplendent-basbousa-fc515d.netlify.app/","fqdn":"resplendent-basbousa-fc515d.netlify.app","domain":"resplendent-basbousa-fc515d.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T18:25:29.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: resplendent-basbousa-fc515d.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 21236\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Wed, 15 Apr 2026 18:25:29 GMT\r\netag: \"aa45ef54c65af085a0054ccc72f9395f-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KP9688VBY5A7F50AGRJXMHGN\r\ncontent-length: 7654\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":41150,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e38ace775beefe165d7a99d484f4d26e","sha1":"7291b401943ba11d2a96865299277332320d5719","sha256":"639f54059c13de3e1ae363d45775d99b139f3dc36599685eeb66fad5d3e139d9","sha512":"08948cf92f7b8457bbbc8bff5c0bb3b41fd9e2a7a627d479fb70da957d64d5572c0973a06a1450c1b5baab04f14617f79d971d2e55825d43522b0d6670f0adf9","ssdeep":"384:jle0uvbY0bUbuDBm/Zm08OVBSj3oAmCrUflu/egEUCL8G8+b8bidSjv8MTzZuvuG:MEYj3oAmCrK5bnMLV5NJm","tlshash":"f403856aa4b4145653170ec437d1a5253942e00f8c8bf9ec76be82d85fe0e936c9f78e","first_seen":"2026-04-15T12:30:49.046837Z","last_seen":"2026-04-15T18:25:56.117856Z","times_seen":2,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":171,"dns":16,"connect":23,"send":0,"wait":25,"receive":17,"ssl":131},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-15","alert":"Phishing Block","trigger":"resplendent-basbousa-fc515d.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"resplendent-basbousa-fc515d.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jdmediax.com/app/networksolu/media/index.html.js.download","fqdn":"jdmediax.com","domain":"jdmediax.com","tld":"com"},"ip":{"addr":"147.93.125.2","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://resplendent-basbousa-fc515d.netlify.app/","date":"2026-04-15T18:25:29.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdmediax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 04:08:17 GMT","end":"Thu, 02 Jul 2026 04:08:16 GMT"},"fingerprint":{"sha1":"58:8F:12:70:74:A8:25:0B:8F:BB:EB:52:EA:5C:E4:9F:CE:A5:C3:A6","sha256":"F6:D0:4A:22:EB:23:43:F7:8F:9A:F7:09:76:CB:41:12:9F:C6:3E:7C:08:A9:8A:85:2D:7F:F4:C4:85:97:C5:E0"}}},"request":{"raw":"GET /app/networksolu/media/index.html.js.download HTTP/1.1\r\nHost: jdmediax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://resplendent-basbousa-fc515d.netlify.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://resplendent-basbousa-fc515d.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain\r\nlast-modified: Fri, 06 Jun 2025 21:57:43 GMT\r\netag: \"116b-68436457-f0574c0add87bd4f;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2086\r\ndate: Wed, 15 Apr 2026 18:25:29 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T09:24:06.977701Z","times_seen":17543020,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":103,"dns":38,"connect":25,"send":0,"wait":24,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}