{"report_id":"104fb2c6-f7e5-426f-bb9c-f89327686e73","version":6,"status":"done","tags":[],"date":"2026-03-12T20:45:58Z","url":{"schema":"http","addr":"gemini.net.au/","fqdn":"gemini.net.au","domain":"gemini.net.au","tld":"net.au"},"ip":{"addr":"103.152.248.205","port":0,"asn":133104,"as":"Instra Corporation Pty Ltd","country":"Australia","country_code":"AU"},"final":{"url":{"schema":"https","addr":"gemini.net.au/","fqdn":"gemini.net.au","domain":"gemini.net.au","tld":"net.au"},"title":"Gemini Management Pages","dom":{"size":2569,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (986)","md5":"e2e8eca7ee691fc7fec09f7676ae718d","sha1":"07546cc5fcf3306622b4690087210dfea42b1f50","sha256":"58d5c111683e7a87022b419e06439e7f40f766f1774abfe450343a002c244f89","sha512":"3897cb5e077c668ec611ed8d727ef9c3ced563ac195987968da9c1b90575702d113bc83904e89ad977d57b80846a9b7bb0777230faad1983cacd0e739b1080c8","ssdeep":"","tlshash":"a75168a0728e611fb143466ed680bcec8457b52993624e3cfd69709b414b74ed8336bd","dom_hash":"domhash18c5ac4795dfcf139683962a8d45ac16","first_seen":"2026-01-03T16:33:38.888534Z","last_seen":"2026-03-12T20:46:00.477869Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gemini.net.au/","fqdn":"gemini.net.au","domain":"gemini.net.au","tld":"net.au"},"ip":{"addr":"103.152.248.205","port":0,"asn":133104,"as":"Instra Corporation Pty Ltd","country":"Australia","country_code":"AU"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-16T20:45:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"gemini.net.au","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"gemini.net.au","ip":{"addr":"103.152.248.205","port":443,"asn":133104,"as":"Instra Corporation Pty Ltd","country":"Australia","country_code":"AU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2015-02-10T14:25:04Z","last_seen":"2026-01-03T16:33:38.881273Z","alert_count":32,"request_count":8,"received_data":71914,"sent_data":3511,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gemini.net.au/","fqdn":"gemini.net.au","domain":"gemini.net.au","tld":"net.au"},"ip":{"addr":"103.152.248.205","port":443,"asn":133104,"as":"Instra Corporation Pty Ltd","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"174fa9ceb5ef5ae8cc822543e04c9bdd","sha1":"a67cb8cd847df32ac71db089c1e88213a3e3b0d7","sha256":"fd331e0d39b447ec0c384575b4692c9542d44bfdc6ed2d2127f4974b6ebce3f1","sha512":"e0011d574359515b715c7e9991b9b9c0467a5f7ca55856477a2af75e5f3753aa80fb81c058a7600269bf12ec01a77844f4e8ddbbe95da1e05eccda9f238ce764","ssdeep":"","tlshash":"5ca02200e00ea20caa00088ccb08a00c0c02080333ff302c88e0f8020200a000be0e30","size":67,"data":"","first_seen":"2026-01-03T16:33:38.935751Z","last_seen":"2026-03-12T20:46:00.486512Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"gemini.net.au/","fqdn":"gemini.net.au","domain":"gemini.net.au","tld":"net.au"},"ip":{"addr":"103.152.248.205","port":443,"asn":133104,"as":"Instra Corporation Pty Ltd","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-12T20:45:36.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gemini.net.au","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 11:18:47 GMT","end":"Tue, 09 Jun 2026 11:18:46 GMT"},"fingerprint":{"sha1":"64:CF:3B:1B:7A:07:04:50:22:DB:6B:24:2D:12:A1:81:50:06:E5:92","sha256":"2B:F8:DA:3F:EB:B2:D6:13:FE:67:59:75:60:CC:0F:79:D6:FA:82:FF:A1:1D:CB:40:A3:F9:94:ED:90:92:D3:34"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gemini.net.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 26 Oct 2009 21:12:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 718\r\ndate: Thu, 12 Mar 2026 20:45:37 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2380,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (869)","md5":"78cf4778877a8c65c909558de4dfb9d9","sha1":"df6e6991c6483335209a81dea94ec2f2b632eb85","sha256":"081a331f8bdb1f62e8d8e6b0b77774cdc9275a456bc775f5ce1b7355a2860561","sha512":"5d04bc3056bb44df8838e4efeb3998d8be2e45a78c60f50b948010dda09c87627fe7440dcfd1b3c337efd25ddf007793636cd1c2567a8a55c73adf0dc2b28df9","ssdeep":"","tlshash":"6141e0267759b26da08acd3f70497c5a42f0e80f237f0db5b7b55184840ad8f7929b9c","first_seen":"2023-12-12T14:24:59Z","last_seen":"2026-03-12T20:46:00.479123Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1413,"timings":{"blocked":575,"dns":41,"connect":263,"send":0,"wait":263,"receive":0,"ssl":268},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"gemini.net.au","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini.net.au/pulsar1.gif","fqdn":"gemini.net.au","domain":"gemini.net.au","tld":"net.au"},"ip":{"addr":"103.152.248.205","port":443,"asn":133104,"as":"Instra Corporation Pty Ltd","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini.net.au/","date":"2026-03-12T20:45:37.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gemini.net.au","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 11:18:47 GMT","end":"Tue, 09 Jun 2026 11:18:46 GMT"},"fingerprint":{"sha1":"64:CF:3B:1B:7A:07:04:50:22:DB:6B:24:2D:12:A1:81:50:06:E5:92","sha256":"2B:F8:DA:3F:EB:B2:D6:13:FE:67:59:75:60:CC:0F:79:D6:FA:82:FF:A1:1D:CB:40:A3:F9:94:ED:90:92:D3:34"}}},"request":{"raw":"GET /pulsar1.gif HTTP/1.1\r\nHost: gemini.net.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini.net.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Mar 2026 20:45:37 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 01 Sep 2005 01:38:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5837\r\ndate: Thu, 12 Mar 2026 20:45:37 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5837,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 36 x 36","md5":"31ae86fc24bdb3ee4b1856460c1f566d","sha1":"c94898580451230b2de111d739d10a429b588400","sha256":"d125c6dcb07fa2b250e5db29dfe60cedfa151146dfa9a6f2b36f1f55bdeeb2e6","sha512":"ab19b53d114b7dc21f4e33ed9a3d33a34591893e7e05d1989e2cdafce8b57141b7084b7fd125a838085a206f9fd00b6b8d3cd40dc71277064cb8c2032957648e","ssdeep":"96:a4WMi+EVbJ5APLPC3EFcW3Pfh36PPLPDbJ5xEwY:aaKbJ5aLPC3EJPZqHLPDbJ5xo","tlshash":"4bc11b10e8b66489f825b53c1b9d9a0c49ba8020547b4efaa0146ad65be777ed4bcc44","first_seen":"2023-12-12T14:24:59Z","last_seen":"2026-03-12T20:46:00.480091Z","times_seen":11,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"gemini.net.au","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini.net.au/pulsar2.gif","fqdn":"gemini.net.au","domain":"gemini.net.au","tld":"net.au"},"ip":{"addr":"103.152.248.205","port":443,"asn":133104,"as":"Instra Corporation Pty Ltd","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini.net.au/","date":"2026-03-12T20:45:37.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gemini.net.au","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 11:18:47 GMT","end":"Tue, 09 Jun 2026 11:18:46 GMT"},"fingerprint":{"sha1":"64:CF:3B:1B:7A:07:04:50:22:DB:6B:24:2D:12:A1:81:50:06:E5:92","sha256":"2B:F8:DA:3F:EB:B2:D6:13:FE:67:59:75:60:CC:0F:79:D6:FA:82:FF:A1:1D:CB:40:A3:F9:94:ED:90:92:D3:34"}}},"request":{"raw":"GET /pulsar2.gif HTTP/1.1\r\nHost: gemini.net.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini.net.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Mar 2026 20:45:37 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 01 Sep 2005 01:37:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5837\r\ndate: Thu, 12 Mar 2026 20:45:37 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5837,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 36 x 36","md5":"36807ce4c90f42cf19b299c73e512037","sha1":"05c003fb401a3e2d90e39ed07c7286cc770e8ece","sha256":"51d8e8d33ab1f6b949980685a3e5784b2076d752ffe5eac9be32c882de3840bd","sha512":"95dc6d0c3722ffdf49d7c5e2653753c30f3076caadf1e8f48b2b4c8ca50cd26996171988cd14e37f7d32f0b20da99ed6cad39bb50b7c9a1d324bc610669acf52","ssdeep":"96:a4WMi+EVbJ5APLPC3EFcW3Pfh36PPLPDbJ5xEnY:aaKbJ5aLPC3EJPZqHLPDbJ5xZ","tlshash":"48c12b10e8b76489f825b53c1b9d9a0c49bac020547b4effa0146ed65be777ed4bcc44","first_seen":"2023-12-12T14:24:59Z","last_seen":"2026-03-12T20:46:00.481068Z","times_seen":11,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"gemini.net.au","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini.net.au/manag.gif","fqdn":"gemini.net.au","domain":"gemini.net.au","tld":"net.au"},"ip":{"addr":"103.152.248.205","port":443,"asn":133104,"as":"Instra Corporation Pty Ltd","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini.net.au/","date":"2026-03-12T20:45:37.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gemini.net.au","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 11:18:47 GMT","end":"Tue, 09 Jun 2026 11:18:46 GMT"},"fingerprint":{"sha1":"64:CF:3B:1B:7A:07:04:50:22:DB:6B:24:2D:12:A1:81:50:06:E5:92","sha256":"2B:F8:DA:3F:EB:B2:D6:13:FE:67:59:75:60:CC:0F:79:D6:FA:82:FF:A1:1D:CB:40:A3:F9:94:ED:90:92:D3:34"}}},"request":{"raw":"GET /manag.gif HTTP/1.1\r\nHost: gemini.net.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini.net.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Mar 2026 20:45:37 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 01 Sep 2005 01:36:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13130\r\ndate: Thu, 12 Mar 2026 20:45:37 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13130,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 427 x 50","md5":"ce12692504a84a61a65becee9a57d192","sha1":"b457d0dc05481e5739f70336ba68e0a1497acfc2","sha256":"53ca73d2bed01145977ffaf4cb0ec288ff34cd51ebe27d5519c113a76431fb59","sha512":"4801310b1b4cdfccce2281b6ecd9acda9bf01aa768327c4da09e08a8d743fc9cb0bdf8981e3d0687e2299343de9da8487e130ee2a2a405c00660dcef017e3bd6","ssdeep":"384:le3+5fircQoJlJh7Yj4nogTHaWwluYyuLRJy12ipwV:Q3+5figbJU4j2WwMelJy1dwV","tlshash":"4642bf77a1b35253f8cceab3cc8ff6d2b340251684d186d045c0f8a5af917419778a53","first_seen":"2023-12-12T14:24:59Z","last_seen":"2026-03-12T20:46:00.481946Z","times_seen":11,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"gemini.net.au","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini.net.au/favicon.ico","fqdn":"gemini.net.au","domain":"gemini.net.au","tld":"net.au"},"ip":{"addr":"103.152.248.205","port":443,"asn":133104,"as":"Instra Corporation Pty Ltd","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini.net.au/","date":"2026-03-12T20:45:38.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gemini.net.au","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 11:18:47 GMT","end":"Tue, 09 Jun 2026 11:18:46 GMT"},"fingerprint":{"sha1":"64:CF:3B:1B:7A:07:04:50:22:DB:6B:24:2D:12:A1:81:50:06:E5:92","sha256":"2B:F8:DA:3F:EB:B2:D6:13:FE:67:59:75:60:CC:0F:79:D6:FA:82:FF:A1:1D:CB:40:A3:F9:94:ED:90:92:D3:34"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gemini.net.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini.net.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Thu, 12 Mar 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-07T22:21:17.258116Z","times_seen":146406,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"gemini.net.au","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini.net.au/gem.gif","fqdn":"gemini.net.au","domain":"gemini.net.au","tld":"net.au"},"ip":{"addr":"103.152.248.205","port":443,"asn":133104,"as":"Instra Corporation Pty Ltd","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini.net.au/","date":"2026-03-12T20:45:37.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gemini.net.au","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 11:18:47 GMT","end":"Tue, 09 Jun 2026 11:18:46 GMT"},"fingerprint":{"sha1":"64:CF:3B:1B:7A:07:04:50:22:DB:6B:24:2D:12:A1:81:50:06:E5:92","sha256":"2B:F8:DA:3F:EB:B2:D6:13:FE:67:59:75:60:CC:0F:79:D6:FA:82:FF:A1:1D:CB:40:A3:F9:94:ED:90:92:D3:34"}}},"request":{"raw":"GET /gem.gif HTTP/1.1\r\nHost: gemini.net.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini.net.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Mar 2026 20:45:37 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 01 Sep 2005 01:34:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6880\r\ndate: Thu, 12 Mar 2026 20:45:37 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6880,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 226 x 53","md5":"d2fb55fab647e27127bdac655c1ad216","sha1":"e4bdbe199c5172080ca2a16e717a2cc6fc05f446","sha256":"1a0c599a17257f9770a5664a955c7584989d7364a52a93e6d312a8194e64afc1","sha512":"3e5815fd942a1043f3ea6ca83593a48fb4a198e499826de7357ab3ae02ac2e76092b38c6d726998c738f069f91d01e59f8da386181429fdc2b772ebb58a73290","ssdeep":"192:AmttpGEQ4HELoebEw/IC2OQ0FUIH5eW20ckMpDY0RD:HbGEQfLL/AC2H0FUIH5eBVk90p","tlshash":"fee18d53f4aa7c58c6da36b2993380ef5dad7a73a71b90054f802de1a9cc1b6f2180d5","first_seen":"2023-12-12T14:24:59Z","last_seen":"2026-03-12T20:46:00.48368Z","times_seen":11,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"gemini.net.au","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini.net.au/wirescreen.jpg","fqdn":"gemini.net.au","domain":"gemini.net.au","tld":"net.au"},"ip":{"addr":"103.152.248.205","port":443,"asn":133104,"as":"Instra Corporation Pty Ltd","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini.net.au/","date":"2026-03-12T20:45:37.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gemini.net.au","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 11:18:47 GMT","end":"Tue, 09 Jun 2026 11:18:46 GMT"},"fingerprint":{"sha1":"64:CF:3B:1B:7A:07:04:50:22:DB:6B:24:2D:12:A1:81:50:06:E5:92","sha256":"2B:F8:DA:3F:EB:B2:D6:13:FE:67:59:75:60:CC:0F:79:D6:FA:82:FF:A1:1D:CB:40:A3:F9:94:ED:90:92:D3:34"}}},"request":{"raw":"GET /wirescreen.jpg HTTP/1.1\r\nHost: gemini.net.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini.net.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Mar 2026 20:45:37 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 01 Sep 2005 01:39:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8985\r\ndate: Thu, 12 Mar 2026 20:45:37 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8985,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, comment: \"File written by Adobe Photoshop� 4.0\", baseline, precision 8, 1024x72, components 3","md5":"a248760e9e7e5e1f5d9faff88d0ae5c1","sha1":"64f8081c3e60c00de48547241410ff19031083e2","sha256":"4b52de78330811c9b7cf401732d3bdaf0e7f34aaf5736664aa69112075a9bf52","sha512":"2ef6f0bf38df966402dfc03ffbf9ce362b8d6b07289a53fc3a3e0f3004acf311437268f6e24e631c499f0e3cc8c1ae9e8e4e30fd3aca98bb01baf9e6aa8c341e","ssdeep":"192:fEOkkJWyda826dD68RFRwb0AA9ytxetWtfG4nj/jbbbbbbbbbbbbbbbbbbR:vJZda826I8bSXA94gAO4nL1","tlshash":"14025a732e13deb3faeba2701402f66676199cc58a934b1030bd779fb27c6030c86284","first_seen":"2023-12-12T14:24:59Z","last_seen":"2026-03-12T20:46:00.484592Z","times_seen":11,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"gemini.net.au","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini.net.au/3demail1.gif","fqdn":"gemini.net.au","domain":"gemini.net.au","tld":"net.au"},"ip":{"addr":"103.152.248.205","port":443,"asn":133104,"as":"Instra Corporation Pty Ltd","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini.net.au/","date":"2026-03-12T20:45:37.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gemini.net.au","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 11:18:47 GMT","end":"Tue, 09 Jun 2026 11:18:46 GMT"},"fingerprint":{"sha1":"64:CF:3B:1B:7A:07:04:50:22:DB:6B:24:2D:12:A1:81:50:06:E5:92","sha256":"2B:F8:DA:3F:EB:B2:D6:13:FE:67:59:75:60:CC:0F:79:D6:FA:82:FF:A1:1D:CB:40:A3:F9:94:ED:90:92:D3:34"}}},"request":{"raw":"GET /3demail1.gif HTTP/1.1\r\nHost: gemini.net.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini.net.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Mar 2026 20:45:37 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 01 Sep 2005 01:33:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25222\r\ndate: Thu, 12 Mar 2026 20:45:37 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25222,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 55 x 65","md5":"b2154785b05a6870b106a201c0e8835d","sha1":"4561b29636b258e6b219547423c89f498f7a933f","sha256":"acd5d472ed014e21aaa4b993c4bc3c3cbe95b736a3abc34f4c33522edc1f6a4b","sha512":"0bc098b106d8cb8a57de3146f180ebbaef5703d67b6ffaf073f4812552f5796f3858b19fb28a4c0ca376f00df8ade244d79f3caaf7b691cd1922d193d307bce8","ssdeep":"384:6o+tJ8QpqahWZVoUaWQcKf6etUVHbQy9mwhW21CX8m7wt25Ua7L6rTgkutg5A:ipqahWI3VUFGh212twt2Ugku+G","tlshash":"e7b2c076ed2691b3e78b74f45cb6344a182475f0879411fbe891f0e025f682e9db0bb4","first_seen":"2023-12-12T14:24:59Z","last_seen":"2026-03-12T20:46:00.485583Z","times_seen":11,"resource_available":false,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gemini.net.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"gemini.net.au","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}