{"report_id":"1207ca1c-213c-45ee-8416-cf57a3e10875","version":6,"status":"done","tags":[],"date":"2026-01-27T11:02:40Z","url":{"schema":"http","addr":"11a830f.netsolhost.com","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"ip":{"addr":"206.188.192.221","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"11a830f.netsolhost.com/","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"title":"Webmail :: Welcome to Webmail","dom":{"size":12549,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (730)","md5":"9abd71a7ed2893c95bed999ecbacb73d","sha1":"36b057c799957da7d308eabf8db40726323455d7","sha256":"06989ccead1af456f5a721686b7a04a367461bd70dd3d2af3b2e344dab63efb4","sha512":"30955e5f399c86459102d99fd2ef133638506ae85960438078bec11ac30a3d317c827c92a2a0b7633ce3b24955020e73fd0343e6fd8a59bd88d88d46d7716842","ssdeep":"192:dvo2MrUfHUUbhh/oyaXiLQ/cBNMBwU6KJoW5wNDGFAZQ+Kh0iFE30iXTiJgrXrMC:dJMr+vYwbEoW5w16Wtr/iZyb3y6","tlshash":"6a42e725b8baae32113314e475fea60666bdc1179b40cc0879fc87942fc0e16a5bb69c","dom_hash":"domhash0e237623d0021b832ba57372156992ce","first_seen":"2026-01-27T11:02:42.319477Z","last_seen":"2026-01-27T11:02:42.319477Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"11a830f.netsolhost.com","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"ip":{"addr":"206.188.192.221","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-03T11:02:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"11a830f.netsolhost.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"webmail.eatel.net","ip":{"addr":"64.98.38.234","port":443,"asn":32133,"as":"AS-TING-BACKBONE","country":"Canada","country_code":"CA"},"domain_registered":"1995-10-09","domain_rank":5400593,"first_seen":"2017-02-06T17:57:14Z","last_seen":"2026-01-27T10:55:51.077166Z","alert_count":0,"request_count":11,"received_data":589655,"sent_data":5707,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"11a830f.netsolhost.com","ip":{"addr":"206.188.192.221","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"domain_registered":"2004-09-21","domain_rank":0,"first_seen":"2026-01-27T11:02:41.013539Z","last_seen":"2026-01-27T11:02:41.523171Z","alert_count":48,"request_count":16,"received_data":20188,"sent_data":7316,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"punycode","description":"A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.","website":"https://github.com/mathiasbynens/punycode.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"11a830f.netsolhost.com/","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"ip":{"addr":"206.188.192.221","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb7a79c3e7b6232442bfc99da6932200","sha1":"e49ac7c2ec4011b91ba26839d52ec8982bb3c18b","sha256":"cddc20a19c8b68d3f9004ebc9157593ba0bbc5201f4693952dde487f89176c58","sha512":"76005c82af3fa3d4b96afc847ca93ae7df1133be4d583560dadd3e4af889bd37b2eb096e4f001e1cba908407deac6b1f1465aad4abad07d48eadd7fc3bd48167","ssdeep":"","tlshash":"9051ce3df7ffa610773331395abf51107639819b1488ce18b89ca7906f50629d0eaaec","size":3111,"data":"","first_seen":"2023-03-07T12:03:00Z","last_seen":"2026-06-06T14:32:43.532959Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"11a830f.netsolhost.com/","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"ip":{"addr":"206.188.192.221","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3cda87cd04e4169adc56f52856f71616","sha1":"79a923ea5f1aec8a360b7a3c1e46946232f9b7b0","sha256":"8cbce3f8c2dad5011a8cb8ffde4f7087619c1e786b7e35e3392e1f134f8f154d","sha512":"26eb06b735966ea2172ccd0dfbde495369ef93cc6c70d7fec1c4af72a4144923980ab39f8d2a501e2a38c7640dfb77c170bfa2fcf357825e223481812044b1f5","ssdeep":"","tlshash":"0b41c7853901cf7b06a20ac534cf718a17ec436a71602d8afd8ed11c6f8572296e31f4","size":2181,"data":"","first_seen":"2026-01-27T10:55:56.169303Z","last_seen":"2026-01-27T11:25:00.768979Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"11a830f.netsolhost.com/","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"ip":{"addr":"206.188.192.221","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a775d176fe6d876f154d42b35e7ed097","sha1":"8a50cfd12ff8a27c06b5138f2b1ea6e08f5c5d87","sha256":"5dcbeac1a9f7e416a0890096aca797ca9a100b9b9a8509bda24e3cd7338810fb","sha512":"58b815a634d929fb05690bd93ba38a3f43accac109c6b877977e0617a8fcddc6927ed56a90556971eee428e256ec27ee53e69938c8f8318f7af488f4cef461f3","ssdeep":"","tlshash":"15f0623b68e70173a82337a80e3f91045b359c3b2a04d919775db690ef81927a53d9dc","size":576,"data":"","first_seen":"2023-03-07T12:03:00Z","last_seen":"2026-06-06T14:32:43.535184Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"11a830f.netsolhost.com/","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"ip":{"addr":"206.188.192.221","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0c5b963f8165f56493874746adedf97","sha1":"e09c78d91814eebbd23a7080b6e90e06f4c84de1","sha256":"1a1f1580c0b8e2a2101cf9e01c596bcee15c2e38657b69ec8bd9ee4a526fd168","sha512":"eef06f1b999cf008c8ef5957c5b2961d9e664deca82f96e0a2a4438772046ce2f181af3cc0a2764a4fc3a74f2ee50052b3dcc2c5137d92dd447ef9ef2858e56f","ssdeep":"","tlshash":"9580008cb88f38320032302c22fb808cbc3b20803e3a300002cc00c30f22bbc322282e","size":35,"data":"","first_seen":"2023-03-07T12:03:00Z","last_seen":"2026-07-20T21:38:25.218126Z","times_seen":2274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"webmail.eatel.net/REV-ScreenConnect-Header.png","fqdn":"webmail.eatel.net","domain":"eatel.net","tld":"net"},"ip":{"addr":"64.98.38.234","port":443,"asn":32133,"as":"AS-TING-BACKBONE","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:21.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.eatel.net","organization":"EATEL"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 27 Mar 2025 00:00:00 GMT","end":"Sat, 25 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"54:B2:EE:6F:99:69:F6:10:E2:1D:A5:88:6D:CA:7A:49:A5:22:A0:A8","sha256":"C0:45:F9:43:52:95:41:41:FD:19:4F:2E:AB:8F:04:3C:7B:93:90:CB:E6:FD:7E:41:84:34:BE:F3:D7:11:2B:6F"}}},"request":{"raw":"GET /REV-ScreenConnect-Header.png HTTP/1.1\r\nHost: webmail.eatel.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://11a830f.netsolhost.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Tue, 27 Jan 2026 11:02:22 GMT\r\nServer: Apache\r\nContent-Length: 303\r\nConnection: close\r\nContent-Type: text/html; charset=iso-8859-1\r\nStrict-Transport-Security: max-age=15768000 ; includeSubDomains\r\nSet-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1htbmgwSD5f1; Path=/; Secure; HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T17:58:19.397699Z","times_seen":17711605,"resource_available":true,"data":null}},"time_used":636,"timings":{"blocked":256,"dns":2,"connect":123,"send":0,"wait":125,"receive":0,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.eatel.net/skins/elastic/fonts/roboto-v18-greek-ext_cyrillic-ext_cyrillic_greek_latin-ext_latin-700.woff2","fqdn":"webmail.eatel.net","domain":"eatel.net","tld":"net"},"ip":{"addr":"64.98.38.234","port":443,"asn":32133,"as":"AS-TING-BACKBONE","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:21.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.eatel.net","organization":"EATEL"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 27 Mar 2025 00:00:00 GMT","end":"Sat, 25 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"54:B2:EE:6F:99:69:F6:10:E2:1D:A5:88:6D:CA:7A:49:A5:22:A0:A8","sha256":"C0:45:F9:43:52:95:41:41:FD:19:4F:2E:AB:8F:04:3C:7B:93:90:CB:E6:FD:7E:41:84:34:BE:F3:D7:11:2B:6F"}}},"request":{"raw":"GET /skins/elastic/fonts/roboto-v18-greek-ext_cyrillic-ext_cyrillic_greek_latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: webmail.eatel.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://11a830f.netsolhost.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.eatel.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 27 Jan 2026 11:02:22 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 11 Oct 2024 14:00:16 GMT\r\nETag: \"fce4-62433e816bc00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 64740\r\nReporting-Endpoints: report=\"https://mail.b.hostedemail.com/?_task=background\u0026_action=csp_report\"\r\nContent-Security-Policy-Report-Only: default-src * 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background\u0026_action=csp_report\r\nX-Robots-Tag: noindex, nofollow\r\nConnection: close\r\nContent-Type: font/woff2\r\nStrict-Transport-Security: max-age=15768000 ; includeSubDomains\r\nSet-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1htbmgwSD5f1; Path=/; Secure; HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15898,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64740, version 1.0","md5":"af4f12fc69dd29916aa6396cf18935b9","sha1":"eec0612681e8684c8d600489d3949e5c6c7de825","sha256":"92178164f1c5ff605dd4448568f4c35423aa403232e435a7d44d76765344909c","sha512":"fe898fbfa8b26c526e0ab6a86fc0bbb68bc60336ead3ff3ad2fb8dd2233c94dea6fc58b1715868e3e8435a640bdf3bf25f100f3ffdf2b5285703593aeec8d035","ssdeep":"192:x2gvY1+75KxB9XGVssUU+5R3JdBCd2TrxjyqWuw9KqNYRYtn1hCECuEAEBxJ2lyk:xJ1UTXG3u5RBxrhzWRlmRY11Rcx25Sq","tlshash":"e862b08a0d76ed8ebb2a71e6e2175c126a709509709db00136509b8f1ff50ff696360a","first_seen":"2026-01-27T10:55:56.158129Z","last_seen":"2026-01-27T11:25:00.760512Z","times_seen":3,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":249,"dns":0,"connect":0,"send":0,"wait":123,"receive":3,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"11a830f.netsolhost.com/favicon.ico","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"ip":{"addr":"206.188.192.221","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:22.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netsolhost.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Wed, 01 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FF:B8:E1:00:77:32:64:A9:80:7F:20:0E:5C:41:99:E7:CF:3A:45:B3","sha256":"02:E8:D8:E6:26:12:6C:23:91:92:C5:80:3F:54:8C:03:5D:B7:EB:B0:77:5D:BD:30:AF:8B:D7:E8:0A:B8:05:0B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 11a830f.netsolhost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://11a830f.netsolhost.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty/1.25.3.1\r\nDate: Tue, 27 Jan 2026 11:02:22 GMT\r\nContent-Type: text/html\r\nContent-Length: 575\r\nConnection: keep-alive\r\nLast-Modified: Mon, 06 May 2024 23:16:49 GMT\r\nETag: \"23f-617d1438a3a40\"\r\nStrict-Transport-Security: max-age=31536000\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: \"1; mode=block\"\r\nReferrer-Policy: no-referrer-when-downgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":575,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text","md5":"4546cec9cc9f33afaa19f1e81c7278fb","sha1":"1b389a6d4d910de0f991a27487f1e1cd8b1223df","sha256":"54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720","sha512":"021d1061337eaaaadd78d1b2341a88e7534183a7b3ef74af96f07d7339f32f5d08ee9a220cf0e14861f321791cc7608177707968312f1d2ad9c7347bae7f9d23","ssdeep":"","tlshash":"48f0e96feaf2133392d065282b08bed28f1590674b705716769c5309df10b55a5ab9c1","first_seen":"2023-04-06T01:26:14Z","last_seen":"2026-05-17T21:05:29.446955Z","times_seen":1214,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"11a830f.netsolhost.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"11a830f.netsolhost.com/program/js/common.js?s=1643308124","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"ip":{"addr":"206.188.192.221","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:18.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netsolhost.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Wed, 01 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FF:B8:E1:00:77:32:64:A9:80:7F:20:0E:5C:41:99:E7:CF:3A:45:B3","sha256":"02:E8:D8:E6:26:12:6C:23:91:92:C5:80:3F:54:8C:03:5D:B7:EB:B0:77:5D:BD:30:AF:8B:D7:E8:0A:B8:05:0B"}}},"request":{"raw":"GET /program/js/common.js?s=1643308124 HTTP/1.1\r\nHost: 11a830f.netsolhost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://11a830f.netsolhost.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty/1.25.3.1\r\nDate: Tue, 27 Jan 2026 11:02:19 GMT\r\nContent-Type: text/html\r\nContent-Length: 575\r\nConnection: keep-alive\r\nLast-Modified: Mon, 06 May 2024 23:16:49 GMT\r\nETag: \"23f-617d1438a3a40\"\r\nStrict-Transport-Security: max-age=31536000\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: \"1; mode=block\"\r\nReferrer-Policy: no-referrer-when-downgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T17:58:19.397699Z","times_seen":17711605,"resource_available":true,"data":null}},"time_used":764,"timings":{"blocked":317,"dns":1,"connect":105,"send":0,"wait":115,"receive":0,"ssl":223},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"11a830f.netsolhost.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"11a830f.netsolhost.com/plugins/jqueryui/js/jquery-ui.min.js?s=1643308112","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"ip":{"addr":"206.188.192.221","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:18.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netsolhost.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Wed, 01 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FF:B8:E1:00:77:32:64:A9:80:7F:20:0E:5C:41:99:E7:CF:3A:45:B3","sha256":"02:E8:D8:E6:26:12:6C:23:91:92:C5:80:3F:54:8C:03:5D:B7:EB:B0:77:5D:BD:30:AF:8B:D7:E8:0A:B8:05:0B"}}},"request":{"raw":"GET /plugins/jqueryui/js/jquery-ui.min.js?s=1643308112 HTTP/1.1\r\nHost: 11a830f.netsolhost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://11a830f.netsolhost.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty/1.25.3.1\r\nDate: Tue, 27 Jan 2026 11:02:18 GMT\r\nContent-Type: text/html\r\nContent-Length: 575\r\nConnection: keep-alive\r\nLast-Modified: Mon, 06 May 2024 23:16:49 GMT\r\nETag: \"23f-617d1438a3a40\"\r\nStrict-Transport-Security: max-age=31536000\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: \"1; mode=block\"\r\nReferrer-Policy: no-referrer-when-downgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T17:58:19.397699Z","times_seen":17711605,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"11a830f.netsolhost.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webmail.eatel.net/brands/827/1518453375854/content/REV-ScreenConnect-Header.png?s=1645542994","fqdn":"webmail.eatel.net","domain":"eatel.net","tld":"net"},"ip":{"addr":"64.98.38.234","port":443,"asn":32133,"as":"AS-TING-BACKBONE","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:18.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.eatel.net","organization":"EATEL"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 27 Mar 2025 00:00:00 GMT","end":"Sat, 25 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"54:B2:EE:6F:99:69:F6:10:E2:1D:A5:88:6D:CA:7A:49:A5:22:A0:A8","sha256":"C0:45:F9:43:52:95:41:41:FD:19:4F:2E:AB:8F:04:3C:7B:93:90:CB:E6:FD:7E:41:84:34:BE:F3:D7:11:2B:6F"}}},"request":{"raw":"GET /brands/827/1518453375854/content/REV-ScreenConnect-Header.png?s=1645542994 HTTP/1.1\r\nHost: webmail.eatel.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://11a830f.netsolhost.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 27 Jan 2026 11:02:21 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 22 Feb 2022 15:16:34 GMT\r\nETag: \"12aa-5d89cd59eb880\"\r\nAccept-Ranges: bytes\r\nContent-Length: 4778\r\nReporting-Endpoints: report=\"https://mail.b.hostedemail.com/?_task=background\u0026_action=csp_report\"\r\nContent-Security-Policy-Report-Only: default-src * 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background\u0026_action=csp_report\r\nX-Robots-Tag: noindex, nofollow\r\nConnection: close\r\nContent-Type: image/png\r\nStrict-Transport-Security: max-age=15768000 ; includeSubDomains\r\nSet-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1itbmgwSD8D0; Path=/; Secure; HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4778,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 519 x 74, 8-bit/color RGBA, non-interlaced","md5":"0c32dfbc8fe7675dcb52edcb823b7c7a","sha1":"8b15483484177b92569b87ee81b9c264269083e4","sha256":"d0ce2b9b3b2cf56a9a34b4a9312e94cfa1189624ca21854bfceec58a9a876931","sha512":"6b46ee9273822cc2f3dee13720fed0a2227d21600b7108f48a1bd1480a50fdaace58480c8fa75326b4d03e8ce75c089b5754436d970ca89648bc01861ea70f82","ssdeep":"96:QO5YB3LnBwDulVY3X+6Kvz6sjIzZsIIjNAJ02hpBBAEevTdQixbiDNdp:cpLODccuNGskZsM3VehQ4bi/p","tlshash":"b7a15c9e0f60b646d9ed2ff6d3ce683cce024bb4bac06716ea56888845d02f87717705","first_seen":"2026-01-27T10:55:56.147836Z","last_seen":"2026-01-27T11:25:00.765192Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2497,"timings":{"blocked":2115,"dns":1,"connect":123,"send":0,"wait":124,"receive":1,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.eatel.net/REV-ScreenConnect-Header.png","fqdn":"webmail.eatel.net","domain":"eatel.net","tld":"net"},"ip":{"addr":"64.98.38.234","port":443,"asn":32133,"as":"AS-TING-BACKBONE","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:18.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.eatel.net","organization":"EATEL"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 27 Mar 2025 00:00:00 GMT","end":"Sat, 25 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"54:B2:EE:6F:99:69:F6:10:E2:1D:A5:88:6D:CA:7A:49:A5:22:A0:A8","sha256":"C0:45:F9:43:52:95:41:41:FD:19:4F:2E:AB:8F:04:3C:7B:93:90:CB:E6:FD:7E:41:84:34:BE:F3:D7:11:2B:6F"}}},"request":{"raw":"GET /REV-ScreenConnect-Header.png HTTP/1.1\r\nHost: webmail.eatel.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://11a830f.netsolhost.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Tue, 27 Jan 2026 11:02:21 GMT\r\nServer: Apache\r\nContent-Length: 303\r\nConnection: close\r\nContent-Type: text/html; charset=iso-8859-1\r\nStrict-Transport-Security: max-age=15768000 ; includeSubDomains\r\nSet-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1jdbmgwSDZxE; Path=/; Secure; HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T17:58:19.397699Z","times_seen":17711605,"resource_available":true,"data":null}},"time_used":2497,"timings":{"blocked":2116,"dns":1,"connect":123,"send":0,"wait":124,"receive":1,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"11a830f.netsolhost.com/program/js/jquery.min.js?s=1643308124","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"ip":{"addr":"206.188.192.221","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:20.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netsolhost.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Wed, 01 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FF:B8:E1:00:77:32:64:A9:80:7F:20:0E:5C:41:99:E7:CF:3A:45:B3","sha256":"02:E8:D8:E6:26:12:6C:23:91:92:C5:80:3F:54:8C:03:5D:B7:EB:B0:77:5D:BD:30:AF:8B:D7:E8:0A:B8:05:0B"}}},"request":{"raw":"GET /program/js/jquery.min.js?s=1643308124 HTTP/1.1\r\nHost: 11a830f.netsolhost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://11a830f.netsolhost.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty/1.25.3.1\r\nDate: Tue, 27 Jan 2026 11:02:20 GMT\r\nContent-Type: text/html\r\nContent-Length: 575\r\nConnection: keep-alive\r\nLast-Modified: Mon, 06 May 2024 23:16:49 GMT\r\nETag: \"23f-617d1438a3a40\"\r\nStrict-Transport-Security: max-age=31536000\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: \"1; mode=block\"\r\nReferrer-Policy: no-referrer-when-downgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T17:58:19.397699Z","times_seen":17711605,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"11a830f.netsolhost.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"11a830f.netsolhost.com/program/js/common.js?s=1643308124","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"ip":{"addr":"206.188.192.221","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:20.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netsolhost.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Wed, 01 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FF:B8:E1:00:77:32:64:A9:80:7F:20:0E:5C:41:99:E7:CF:3A:45:B3","sha256":"02:E8:D8:E6:26:12:6C:23:91:92:C5:80:3F:54:8C:03:5D:B7:EB:B0:77:5D:BD:30:AF:8B:D7:E8:0A:B8:05:0B"}}},"request":{"raw":"GET /program/js/common.js?s=1643308124 HTTP/1.1\r\nHost: 11a830f.netsolhost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://11a830f.netsolhost.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty/1.25.3.1\r\nDate: Tue, 27 Jan 2026 11:02:21 GMT\r\nContent-Type: text/html\r\nContent-Length: 575\r\nConnection: keep-alive\r\nLast-Modified: Mon, 06 May 2024 23:16:49 GMT\r\nETag: \"23f-617d1438a3a40\"\r\nStrict-Transport-Security: max-age=31536000\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: \"1; mode=block\"\r\nReferrer-Policy: no-referrer-when-downgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T17:58:19.397699Z","times_seen":17711605,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"11a830f.netsolhost.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"11a830f.netsolhost.com/program/js/app.js?s=1643308124","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"ip":{"addr":"206.188.192.221","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:21.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netsolhost.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Wed, 01 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FF:B8:E1:00:77:32:64:A9:80:7F:20:0E:5C:41:99:E7:CF:3A:45:B3","sha256":"02:E8:D8:E6:26:12:6C:23:91:92:C5:80:3F:54:8C:03:5D:B7:EB:B0:77:5D:BD:30:AF:8B:D7:E8:0A:B8:05:0B"}}},"request":{"raw":"GET /program/js/app.js?s=1643308124 HTTP/1.1\r\nHost: 11a830f.netsolhost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://11a830f.netsolhost.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty/1.25.3.1\r\nDate: Tue, 27 Jan 2026 11:02:21 GMT\r\nContent-Type: text/html\r\nContent-Length: 575\r\nConnection: keep-alive\r\nLast-Modified: Mon, 06 May 2024 23:16:49 GMT\r\nETag: \"23f-617d1438a3a40\"\r\nStrict-Transport-Security: max-age=31536000\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: \"1; mode=block\"\r\nReferrer-Policy: no-referrer-when-downgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T17:58:19.397699Z","times_seen":17711605,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"11a830f.netsolhost.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"11a830f.netsolhost.com/","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"ip":{"addr":"206.188.192.221","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T11:02:17.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netsolhost.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Wed, 01 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FF:B8:E1:00:77:32:64:A9:80:7F:20:0E:5C:41:99:E7:CF:3A:45:B3","sha256":"02:E8:D8:E6:26:12:6C:23:91:92:C5:80:3F:54:8C:03:5D:B7:EB:B0:77:5D:BD:30:AF:8B:D7:E8:0A:B8:05:0B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 11a830f.netsolhost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.25.3.1\r\nDate: Tue, 27 Jan 2026 11:02:18 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: \"1; mode=block\"\r\nReferrer-Policy: no-referrer-when-downgrade\r\nX-Webcom-Cache-Status: BYPASS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"punycode","description":"A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.","website":"https://github.com/mathiasbynens/punycode.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12857,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (730), with CRLF line terminators","md5":"d881e02c92c2ba3acd90de1365eb29b0","sha1":"25fe56c04ea43a9dae636411fab5c0114d88b08c","sha256":"d85cdf0c0c19c66165747ec665a10106b02285776437af3a88d2f3245f63ed36","sha512":"06d021a7a010b2eef0b552a4b941f7a57a2686b513c9d9f1cb6880b09d7661f24d20e12732338a6fdc2d3d16afec1f3f84d61337335db80e466163fa36793ed2","ssdeep":"192:3oSMuU9UTS/nhtCMy5c82odyowNDGFN6chWnhTYeN/eiumii8C8cMhTAkPPMhTuk:3bMuszyr2oMow1YANgQWZ2bnB","tlshash":"4942d7366459ae32013313f4a5b99705fabec1178b409d18b9ec968b2ff0d0591bbedc","first_seen":"2026-01-27T11:02:42.330486Z","last_seen":"2026-01-27T11:02:42.330486Z","times_seen":1,"resource_available":false,"data":null}},"time_used":951,"timings":{"blocked":369,"dns":0,"connect":108,"send":0,"wait":212,"receive":1,"ssl":257},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"11a830f.netsolhost.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webmail.eatel.net/skins/elastic/deps/bootstrap.min.css?s=1643308123","fqdn":"webmail.eatel.net","domain":"eatel.net","tld":"net"},"ip":{"addr":"64.98.38.234","port":443,"asn":32133,"as":"AS-TING-BACKBONE","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:18.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.eatel.net","organization":"EATEL"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 27 Mar 2025 00:00:00 GMT","end":"Sat, 25 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"54:B2:EE:6F:99:69:F6:10:E2:1D:A5:88:6D:CA:7A:49:A5:22:A0:A8","sha256":"C0:45:F9:43:52:95:41:41:FD:19:4F:2E:AB:8F:04:3C:7B:93:90:CB:E6:FD:7E:41:84:34:BE:F3:D7:11:2B:6F"}}},"request":{"raw":"GET /skins/elastic/deps/bootstrap.min.css?s=1643308123 HTTP/1.1\r\nHost: webmail.eatel.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://11a830f.netsolhost.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 27 Jan 2026 11:02:19 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 21 Jan 2026 14:51:51 GMT\r\nETag: \"27958-648e71074cfc0\"\r\nAccept-Ranges: bytes\r\nContent-Length: 162136\r\nReporting-Endpoints: report=\"https://mail.b.hostedemail.com/?_task=background\u0026_action=csp_report\"\r\nContent-Security-Policy-Report-Only: default-src * 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background\u0026_action=csp_report\r\nX-Robots-Tag: noindex, nofollow\r\nConnection: close\r\nContent-Type: text/css\r\nStrict-Transport-Security: max-age=15768000 ; includeSubDomains\r\nSet-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1ldbmgwSDTyn; Path=/; Secure; HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":162136,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65326)","md5":"5cc22540ffcc77afb144a3ec5af79510","sha1":"cc6db4712ba5dfd0d6fe48af4152ed60cf440c4a","sha256":"ca2d63f7f2d4eedf5767ae32b8badd7a17bce8835a538ec0d80d20afb723b8e6","sha512":"da5d6e4b3634145572fa783bd79fc392459f7aacb81871838c34c62aaa36a5621d4c3625a00dc943ba5a8222d826615edc705d0240706f959825aace6066e20a","ssdeep":"1536:kw7CIJ0T+r+ryEIA1pDEBi8yNcuSEIA1/uypq3SYiLENM6HN26z:H7VKGGq3SYiLENM6HN26z","tlshash":"67f374a6f5a0312de467c61964d0bafd152f8245d7224bfbf8273b6487892c70a73e4c","first_seen":"2023-04-05T16:41:33Z","last_seen":"2026-07-17T15:20:38.057109Z","times_seen":116,"resource_available":false,"data":null}},"time_used":2036,"timings":{"blocked":765,"dns":254,"connect":126,"send":0,"wait":125,"receive":373,"ssl":390},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.eatel.net/plugins/skins/login.css?s=1643308100","fqdn":"webmail.eatel.net","domain":"eatel.net","tld":"net"},"ip":{"addr":"64.98.38.234","port":443,"asn":32133,"as":"AS-TING-BACKBONE","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:18.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.eatel.net","organization":"EATEL"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 27 Mar 2025 00:00:00 GMT","end":"Sat, 25 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"54:B2:EE:6F:99:69:F6:10:E2:1D:A5:88:6D:CA:7A:49:A5:22:A0:A8","sha256":"C0:45:F9:43:52:95:41:41:FD:19:4F:2E:AB:8F:04:3C:7B:93:90:CB:E6:FD:7E:41:84:34:BE:F3:D7:11:2B:6F"}}},"request":{"raw":"GET /plugins/skins/login.css?s=1643308100 HTTP/1.1\r\nHost: webmail.eatel.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://11a830f.netsolhost.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 27 Jan 2026 11:02:19 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 11 Oct 2024 14:00:16 GMT\r\nETag: \"10e9-62433e816bc00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 4329\r\nReporting-Endpoints: report=\"https://mail.b.hostedemail.com/?_task=background\u0026_action=csp_report\"\r\nContent-Security-Policy-Report-Only: default-src * 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background\u0026_action=csp_report\r\nX-Robots-Tag: noindex, nofollow\r\nConnection: close\r\nContent-Type: text/css\r\nStrict-Transport-Security: max-age=15768000 ; includeSubDomains\r\nSet-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1ltbmgwSDnYC; Path=/; Secure; HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4329,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"983c80164da22b6b860ff359e0467da0","sha1":"b0568adbb711e52ee955b4ca5813106f18e12c17","sha256":"98338a949abe7dab9f6a8e75e897d81a0d9ea3d4e14cd591ef98046c9e71749a","sha512":"7b061ce17bc0145d2a95def18fdc2ec430bbc1d0b99bb6bd11ce7298a19a3ad154dd9c1359518e70bb7beb780e557789630d841590db5f3bcd8d1625386cbd85","ssdeep":"96:U9N8WU2U8kK/qrC337KLPf5FM8i+yjEIUIPX1ZcZcbGdKWcR:+qr0ufTMsylJdSc1t","tlshash":"b5910c064b282e1ea177d2e6bce2535a932e1065b78aaebf5cf85404d78c2400473ef8","first_seen":"2023-04-05T16:41:33Z","last_seen":"2026-07-17T15:20:38.070858Z","times_seen":114,"resource_available":false,"data":null}},"time_used":1659,"timings":{"blocked":762,"dns":253,"connect":126,"send":0,"wait":124,"receive":1,"ssl":382},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"11a830f.netsolhost.com/program/js/jquery.min.js?s=1643308124","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"ip":{"addr":"206.188.192.221","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:18.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netsolhost.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Wed, 01 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FF:B8:E1:00:77:32:64:A9:80:7F:20:0E:5C:41:99:E7:CF:3A:45:B3","sha256":"02:E8:D8:E6:26:12:6C:23:91:92:C5:80:3F:54:8C:03:5D:B7:EB:B0:77:5D:BD:30:AF:8B:D7:E8:0A:B8:05:0B"}}},"request":{"raw":"GET /program/js/jquery.min.js?s=1643308124 HTTP/1.1\r\nHost: 11a830f.netsolhost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://11a830f.netsolhost.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty/1.25.3.1\r\nDate: Tue, 27 Jan 2026 11:02:18 GMT\r\nContent-Type: text/html\r\nContent-Length: 575\r\nConnection: keep-alive\r\nLast-Modified: Mon, 06 May 2024 23:16:49 GMT\r\nETag: \"23f-617d1438a3a40\"\r\nStrict-Transport-Security: max-age=31536000\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: \"1; mode=block\"\r\nReferrer-Policy: no-referrer-when-downgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T17:58:19.397699Z","times_seen":17711605,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"11a830f.netsolhost.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"11a830f.netsolhost.com/program/js/jstz.min.js?s=1643308124","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"ip":{"addr":"206.188.192.221","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:18.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netsolhost.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Wed, 01 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FF:B8:E1:00:77:32:64:A9:80:7F:20:0E:5C:41:99:E7:CF:3A:45:B3","sha256":"02:E8:D8:E6:26:12:6C:23:91:92:C5:80:3F:54:8C:03:5D:B7:EB:B0:77:5D:BD:30:AF:8B:D7:E8:0A:B8:05:0B"}}},"request":{"raw":"GET /program/js/jstz.min.js?s=1643308124 HTTP/1.1\r\nHost: 11a830f.netsolhost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://11a830f.netsolhost.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty/1.25.3.1\r\nDate: Tue, 27 Jan 2026 11:02:19 GMT\r\nContent-Type: text/html\r\nContent-Length: 575\r\nConnection: keep-alive\r\nLast-Modified: Mon, 06 May 2024 23:16:49 GMT\r\nETag: \"23f-617d1438a3a40\"\r\nStrict-Transport-Security: max-age=31536000\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: \"1; mode=block\"\r\nReferrer-Policy: no-referrer-when-downgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T17:58:19.397699Z","times_seen":17711605,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":1,"connect":110,"send":0,"wait":113,"receive":0,"ssl":244},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"11a830f.netsolhost.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"11a830f.netsolhost.com/plugins/jqueryui/js/jquery-ui.min.js?s=1643308112","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"ip":{"addr":"206.188.192.221","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:21.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netsolhost.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Wed, 01 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FF:B8:E1:00:77:32:64:A9:80:7F:20:0E:5C:41:99:E7:CF:3A:45:B3","sha256":"02:E8:D8:E6:26:12:6C:23:91:92:C5:80:3F:54:8C:03:5D:B7:EB:B0:77:5D:BD:30:AF:8B:D7:E8:0A:B8:05:0B"}}},"request":{"raw":"GET /plugins/jqueryui/js/jquery-ui.min.js?s=1643308112 HTTP/1.1\r\nHost: 11a830f.netsolhost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://11a830f.netsolhost.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty/1.25.3.1\r\nDate: Tue, 27 Jan 2026 11:02:21 GMT\r\nContent-Type: text/html\r\nContent-Length: 575\r\nConnection: keep-alive\r\nLast-Modified: Mon, 06 May 2024 23:16:49 GMT\r\nETag: \"23f-617d1438a3a40\"\r\nStrict-Transport-Security: max-age=31536000\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: \"1; mode=block\"\r\nReferrer-Policy: no-referrer-when-downgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T17:58:19.397699Z","times_seen":17711605,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"11a830f.netsolhost.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webmail.eatel.net/skins/elastic/fonts/roboto-v18-greek-ext_cyrillic-ext_cyrillic_greek_latin-ext_latin-700.woff","fqdn":"webmail.eatel.net","domain":"eatel.net","tld":"net"},"ip":{"addr":"64.98.38.234","port":443,"asn":32133,"as":"AS-TING-BACKBONE","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:22.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.eatel.net","organization":"EATEL"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 27 Mar 2025 00:00:00 GMT","end":"Sat, 25 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"54:B2:EE:6F:99:69:F6:10:E2:1D:A5:88:6D:CA:7A:49:A5:22:A0:A8","sha256":"C0:45:F9:43:52:95:41:41:FD:19:4F:2E:AB:8F:04:3C:7B:93:90:CB:E6:FD:7E:41:84:34:BE:F3:D7:11:2B:6F"}}},"request":{"raw":"GET /skins/elastic/fonts/roboto-v18-greek-ext_cyrillic-ext_cyrillic_greek_latin-ext_latin-700.woff HTTP/1.1\r\nHost: webmail.eatel.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://11a830f.netsolhost.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.eatel.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 27 Jan 2026 11:02:22 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 11 Oct 2024 14:00:16 GMT\r\nETag: \"150a8-62433e816bc00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 86184\r\nReporting-Endpoints: report=\"https://mail.b.hostedemail.com/?_task=background\u0026_action=csp_report\"\r\nContent-Security-Policy-Report-Only: default-src * 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background\u0026_action=csp_report\r\nX-Robots-Tag: noindex, nofollow\r\nConnection: close\r\nContent-Type: font/woff\r\nStrict-Transport-Security: max-age=15768000 ; includeSubDomains\r\nSet-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1gNbmgwSDCF4; Path=/; Secure; HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15898,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 86184, version 1.1","md5":"020c462011715d0d99d06f15e4e10856","sha1":"ba552b3c2d1b1ba7e480aa389cc71602a36e8370","sha256":"99f75cda8d34397983afd75942b011f786e8fbc4b3fd6c6ee2787aa2eae0971b","sha512":"9024079d0d4b7b54484193f6b079c61cfc7f164956e4d9fb70853c1ca1e7c7aed8dc1885a8d5b66cfc2ddc80a7b4fb4ba17b473257125f35992b0c1c87b1d896","ssdeep":"384:zBCE3I9aChFAk5t5rNCM2TeMCaPsO0jU5Y40TvFq0t:zBCMChFAOruvFMY0d","tlshash":"ff62b0e60a9b2debd4de713d9c462b6b2f02c297908388508abd3d4f2aa17f04347545","first_seen":"2026-01-27T10:55:56.140846Z","last_seen":"2026-01-27T11:25:00.766907Z","times_seen":3,"resource_available":false,"data":null}},"time_used":644,"timings":{"blocked":263,"dns":2,"connect":124,"send":0,"wait":124,"receive":2,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.eatel.net/skins/elastic/fonts/roboto-v18-greek-ext_cyrillic-ext_cyrillic_greek_latin-ext_latin-regular.woff","fqdn":"webmail.eatel.net","domain":"eatel.net","tld":"net"},"ip":{"addr":"64.98.38.234","port":443,"asn":32133,"as":"AS-TING-BACKBONE","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:22.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.eatel.net","organization":"EATEL"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 27 Mar 2025 00:00:00 GMT","end":"Sat, 25 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"54:B2:EE:6F:99:69:F6:10:E2:1D:A5:88:6D:CA:7A:49:A5:22:A0:A8","sha256":"C0:45:F9:43:52:95:41:41:FD:19:4F:2E:AB:8F:04:3C:7B:93:90:CB:E6:FD:7E:41:84:34:BE:F3:D7:11:2B:6F"}}},"request":{"raw":"GET /skins/elastic/fonts/roboto-v18-greek-ext_cyrillic-ext_cyrillic_greek_latin-ext_latin-regular.woff HTTP/1.1\r\nHost: webmail.eatel.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://11a830f.netsolhost.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.eatel.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 27 Jan 2026 11:02:22 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 11 Oct 2024 14:00:16 GMT\r\nETag: \"14f74-62433e816bc00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 85876\r\nReporting-Endpoints: report=\"https://mail.b.hostedemail.com/?_task=background\u0026_action=csp_report\"\r\nContent-Security-Policy-Report-Only: default-src * 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background\u0026_action=csp_report\r\nX-Robots-Tag: noindex, nofollow\r\nConnection: close\r\nContent-Type: font/woff\r\nStrict-Transport-Security: max-age=15768000 ; includeSubDomains\r\nSet-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1g9bmgwSD-PH; Path=/; Secure; HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15898,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 85876, version 1.1","md5":"018262fe54155812610c9e0c16947bf7","sha1":"095c6d39bc4b38a28a1e06fb657896e7ed3770a6","sha256":"35112e62c932904665715be73ae80744aa7f5bb1387a67531efc46d51246a415","sha512":"dbfa2a6ba6e250a3fdbe4a8e9fde1fc12209a6bfc60cb7255391c8762ed0b8c0a4d208e977469ec18774b1aef9e5c59b1018f388d9d0f0c7c6723c0e431fbd0c","ssdeep":"192:wPRbuf82jbMZIlZC/A6j7v6CG6pnM11KKBNHPwpRY6jONhJplns0irLAUv9jjV4m:SRydjom7C4U9G6kF4pjmhlWvFq0hOrS","tlshash":"aa62c0ad02804984d180b2b35b8f17ca3795fa566070dc354efcbeef32505e9e6c84d5","first_seen":"2026-01-23T06:35:19.695734Z","last_seen":"2026-01-27T11:25:00.761091Z","times_seen":4,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":243,"dns":0,"connect":0,"send":0,"wait":123,"receive":2,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.eatel.net/brands/827/1518453375854/styles.2.css?s=1645552511","fqdn":"webmail.eatel.net","domain":"eatel.net","tld":"net"},"ip":{"addr":"64.98.38.234","port":443,"asn":32133,"as":"AS-TING-BACKBONE","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:18.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.eatel.net","organization":"EATEL"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 27 Mar 2025 00:00:00 GMT","end":"Sat, 25 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"54:B2:EE:6F:99:69:F6:10:E2:1D:A5:88:6D:CA:7A:49:A5:22:A0:A8","sha256":"C0:45:F9:43:52:95:41:41:FD:19:4F:2E:AB:8F:04:3C:7B:93:90:CB:E6:FD:7E:41:84:34:BE:F3:D7:11:2B:6F"}}},"request":{"raw":"GET /brands/827/1518453375854/styles.2.css?s=1645552511 HTTP/1.1\r\nHost: webmail.eatel.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://11a830f.netsolhost.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 27 Jan 2026 11:02:19 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 11 Apr 2022 21:36:55 GMT\r\nETag: \"4ddbf-5dc67be3d8bc0\"\r\nAccept-Ranges: bytes\r\nContent-Length: 318911\r\nReporting-Endpoints: report=\"https://mail.b.hostedemail.com/?_task=background\u0026_action=csp_report\"\r\nContent-Security-Policy-Report-Only: default-src * 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background\u0026_action=csp_report\r\nX-Robots-Tag: noindex, nofollow\r\nConnection: close\r\nContent-Type: text/css\r\nStrict-Transport-Security: max-age=15768000 ; includeSubDomains\r\nSet-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1ltbmgwSDnYC; Path=/; Secure; HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":318911,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (655)","md5":"23554c1f18bed5d10dce66170872c200","sha1":"597e635d8771991a847caa8e1be17542de0242a0","sha256":"5657d42596a0f4b3a598dab9a0b0a6390625eeea2666b8137860191571ba3f3f","sha512":"cbdc9bee0bf2a579bfe0d457dc4dd968fe81920b8a04ecfeeec6264b6d3010587977acc4c699bfb42f15e17b3d7c834b7ecc038041be6d77e112848ca30868d9","ssdeep":"6144:0o/3ALp+v20vTDtAyxzwoGCqowo/3ALp+v20vTDtAyxzwoGCqo23TsMMZ:73Ajyxz/qof3Ajyxz/qogMZ","tlshash":"0f64b5ecaeb91d00652bc199754637a0f71dc1158d0eed79eae7308c9fc8264d0be78a","first_seen":"2026-01-27T10:55:56.15292Z","last_seen":"2026-01-27T11:25:00.762737Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2795,"timings":{"blocked":652,"dns":250,"connect":122,"send":0,"wait":123,"receive":1357,"ssl":287},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.eatel.net/plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1643308113","fqdn":"webmail.eatel.net","domain":"eatel.net","tld":"net"},"ip":{"addr":"64.98.38.234","port":443,"asn":32133,"as":"AS-TING-BACKBONE","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:18.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.eatel.net","organization":"EATEL"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 27 Mar 2025 00:00:00 GMT","end":"Sat, 25 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"54:B2:EE:6F:99:69:F6:10:E2:1D:A5:88:6D:CA:7A:49:A5:22:A0:A8","sha256":"C0:45:F9:43:52:95:41:41:FD:19:4F:2E:AB:8F:04:3C:7B:93:90:CB:E6:FD:7E:41:84:34:BE:F3:D7:11:2B:6F"}}},"request":{"raw":"GET /plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1643308113 HTTP/1.1\r\nHost: webmail.eatel.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://11a830f.netsolhost.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 27 Jan 2026 11:02:19 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 21 Jan 2026 14:48:00 GMT\r\nETag: \"727d-648e702b00800\"\r\nAccept-Ranges: bytes\r\nContent-Length: 29309\r\nReporting-Endpoints: report=\"https://mail.b.hostedemail.com/?_task=background\u0026_action=csp_report\"\r\nContent-Security-Policy-Report-Only: default-src * 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background\u0026_action=csp_report\r\nX-Robots-Tag: noindex, nofollow\r\nConnection: close\r\nContent-Type: text/css\r\nStrict-Transport-Security: max-age=15768000 ; includeSubDomains\r\nSet-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1l9bmgwSDicH; Path=/; Secure; HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29309,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26371)","md5":"7e848d774e13122792027c11b994c19c","sha1":"276df81de919d3614fbb970a6dbdbb7a0570e40c","sha256":"aad541bcbd68b5ea0300c91b804637a2706e983a46d93546b109e6f322869107","sha512":"9e277ee3e4af841c5e6c82df943ff2ed33b4cbc47d3573b8990b3ccc24a9a5a5878e3b42896836bbb356d4107b728d9c0da3d5e73cb42d66e1891d9e60f097a5","ssdeep":"384:OCwiEt7/rpc5CN14/1ejUEzy9pDFkM7nfPBV5T:tlEtTN14EUEzQpDhBVB","tlshash":"65d23230a5c2243dfe33d23061e15ef4523ac246dda61fbda09af65953ea8e4c47b871","first_seen":"2023-11-08T04:46:40Z","last_seen":"2026-08-04T12:27:33.988477Z","times_seen":1699,"resource_available":false,"data":null}},"time_used":1604,"timings":{"blocked":673,"dns":249,"connect":126,"send":0,"wait":123,"receive":123,"ssl":303},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"11a830f.netsolhost.com/skins/elastic/ui.js?s=1643308123","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"ip":{"addr":"206.188.192.221","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:18.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netsolhost.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Wed, 01 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FF:B8:E1:00:77:32:64:A9:80:7F:20:0E:5C:41:99:E7:CF:3A:45:B3","sha256":"02:E8:D8:E6:26:12:6C:23:91:92:C5:80:3F:54:8C:03:5D:B7:EB:B0:77:5D:BD:30:AF:8B:D7:E8:0A:B8:05:0B"}}},"request":{"raw":"GET /skins/elastic/ui.js?s=1643308123 HTTP/1.1\r\nHost: 11a830f.netsolhost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://11a830f.netsolhost.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty/1.25.3.1\r\nDate: Tue, 27 Jan 2026 11:02:19 GMT\r\nContent-Type: text/html\r\nContent-Length: 575\r\nConnection: keep-alive\r\nLast-Modified: Mon, 06 May 2024 23:16:49 GMT\r\nETag: \"23f-617d1438a3a40\"\r\nStrict-Transport-Security: max-age=31536000\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: \"1; mode=block\"\r\nReferrer-Policy: no-referrer-when-downgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T17:58:19.397699Z","times_seen":17711605,"resource_available":true,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":1,"connect":110,"send":0,"wait":122,"receive":0,"ssl":243},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"11a830f.netsolhost.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"11a830f.netsolhost.com/plugins/skins/punycode.js?s=1643308100","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"ip":{"addr":"206.188.192.221","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:21.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netsolhost.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Wed, 01 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FF:B8:E1:00:77:32:64:A9:80:7F:20:0E:5C:41:99:E7:CF:3A:45:B3","sha256":"02:E8:D8:E6:26:12:6C:23:91:92:C5:80:3F:54:8C:03:5D:B7:EB:B0:77:5D:BD:30:AF:8B:D7:E8:0A:B8:05:0B"}}},"request":{"raw":"GET /plugins/skins/punycode.js?s=1643308100 HTTP/1.1\r\nHost: 11a830f.netsolhost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://11a830f.netsolhost.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty/1.25.3.1\r\nDate: Tue, 27 Jan 2026 11:02:21 GMT\r\nContent-Type: text/html\r\nContent-Length: 575\r\nConnection: keep-alive\r\nLast-Modified: Mon, 06 May 2024 23:16:49 GMT\r\nETag: \"23f-617d1438a3a40\"\r\nStrict-Transport-Security: max-age=31536000\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: \"1; mode=block\"\r\nReferrer-Policy: no-referrer-when-downgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T17:58:19.397699Z","times_seen":17711605,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"11a830f.netsolhost.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webmail.eatel.net/skins/elastic/fonts/roboto-v18-greek-ext_cyrillic-ext_cyrillic_greek_latin-ext_latin-regular.woff2","fqdn":"webmail.eatel.net","domain":"eatel.net","tld":"net"},"ip":{"addr":"64.98.38.234","port":443,"asn":32133,"as":"AS-TING-BACKBONE","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:21.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.eatel.net","organization":"EATEL"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 27 Mar 2025 00:00:00 GMT","end":"Sat, 25 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"54:B2:EE:6F:99:69:F6:10:E2:1D:A5:88:6D:CA:7A:49:A5:22:A0:A8","sha256":"C0:45:F9:43:52:95:41:41:FD:19:4F:2E:AB:8F:04:3C:7B:93:90:CB:E6:FD:7E:41:84:34:BE:F3:D7:11:2B:6F"}}},"request":{"raw":"GET /skins/elastic/fonts/roboto-v18-greek-ext_cyrillic-ext_cyrillic_greek_latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: webmail.eatel.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://11a830f.netsolhost.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.eatel.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 27 Jan 2026 11:02:22 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 11 Oct 2024 14:00:16 GMT\r\nETag: \"fc78-62433e816bc00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 64632\r\nReporting-Endpoints: report=\"https://mail.b.hostedemail.com/?_task=background\u0026_action=csp_report\"\r\nContent-Security-Policy-Report-Only: default-src * 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background\u0026_action=csp_report\r\nX-Robots-Tag: noindex, nofollow\r\nConnection: close\r\nContent-Type: font/woff2\r\nStrict-Transport-Security: max-age=15768000 ; includeSubDomains\r\nSet-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1h9bmgwSD7hM; Path=/; Secure; HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15898,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64632, version 1.0","md5":"62f86bf2206ff290186ba68191f11b03","sha1":"b73beb86640bed897ecf817b7cd6cb3b28d23cbc","sha256":"45bb103251fe24ada857465f0b498e7e3501a67f9e66821670179c9dd1d77938","sha512":"3e432f640538c1d1f8f226d7c2952f8ff64f3dc36e2b74b8fbf026bd867f6926fbdecab429e6e90005d3355a1f638eaa6c8e4a0cd7aa3b2581b20f7f842a9aa1","ssdeep":"384:bW+qvRFq7pGO4o0ktfCg/b99ORDtCHjSjgczKQ:bNOq7pGO4o0kNCgDQsOEG","tlshash":"6f62d08795f1a0f6cb0e91fb24648e09e804e9e1645f354d48e8137acddc1e28e9a0fd","first_seen":"2026-01-23T06:35:19.688377Z","last_seen":"2026-01-27T11:25:00.766044Z","times_seen":4,"resource_available":false,"data":null}},"time_used":644,"timings":{"blocked":259,"dns":5,"connect":123,"send":0,"wait":124,"receive":3,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"11a830f.netsolhost.com/program/js/app.js?s=1643308124","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"ip":{"addr":"206.188.192.221","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:18.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netsolhost.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Wed, 01 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FF:B8:E1:00:77:32:64:A9:80:7F:20:0E:5C:41:99:E7:CF:3A:45:B3","sha256":"02:E8:D8:E6:26:12:6C:23:91:92:C5:80:3F:54:8C:03:5D:B7:EB:B0:77:5D:BD:30:AF:8B:D7:E8:0A:B8:05:0B"}}},"request":{"raw":"GET /program/js/app.js?s=1643308124 HTTP/1.1\r\nHost: 11a830f.netsolhost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://11a830f.netsolhost.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty/1.25.3.1\r\nDate: Tue, 27 Jan 2026 11:02:19 GMT\r\nContent-Type: text/html\r\nContent-Length: 575\r\nConnection: keep-alive\r\nLast-Modified: Mon, 06 May 2024 23:16:49 GMT\r\nETag: \"23f-617d1438a3a40\"\r\nStrict-Transport-Security: max-age=31536000\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: \"1; mode=block\"\r\nReferrer-Policy: no-referrer-when-downgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T17:58:19.397699Z","times_seen":17711605,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":341,"dns":1,"connect":107,"send":0,"wait":125,"receive":0,"ssl":246},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"11a830f.netsolhost.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"11a830f.netsolhost.com/plugins/skins/punycode.js?s=1643308100","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"ip":{"addr":"206.188.192.221","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:18.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netsolhost.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Wed, 01 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FF:B8:E1:00:77:32:64:A9:80:7F:20:0E:5C:41:99:E7:CF:3A:45:B3","sha256":"02:E8:D8:E6:26:12:6C:23:91:92:C5:80:3F:54:8C:03:5D:B7:EB:B0:77:5D:BD:30:AF:8B:D7:E8:0A:B8:05:0B"}}},"request":{"raw":"GET /plugins/skins/punycode.js?s=1643308100 HTTP/1.1\r\nHost: 11a830f.netsolhost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://11a830f.netsolhost.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty/1.25.3.1\r\nDate: Tue, 27 Jan 2026 11:02:19 GMT\r\nContent-Type: text/html\r\nContent-Length: 575\r\nConnection: keep-alive\r\nLast-Modified: Mon, 06 May 2024 23:16:49 GMT\r\nETag: \"23f-617d1438a3a40\"\r\nStrict-Transport-Security: max-age=31536000\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: \"1; mode=block\"\r\nReferrer-Policy: no-referrer-when-downgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T17:58:19.397699Z","times_seen":17711605,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":1,"connect":106,"send":0,"wait":113,"receive":0,"ssl":227},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"11a830f.netsolhost.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"11a830f.netsolhost.com/program/js/jstz.min.js?s=1643308124","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"ip":{"addr":"206.188.192.221","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:21.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netsolhost.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Wed, 01 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FF:B8:E1:00:77:32:64:A9:80:7F:20:0E:5C:41:99:E7:CF:3A:45:B3","sha256":"02:E8:D8:E6:26:12:6C:23:91:92:C5:80:3F:54:8C:03:5D:B7:EB:B0:77:5D:BD:30:AF:8B:D7:E8:0A:B8:05:0B"}}},"request":{"raw":"GET /program/js/jstz.min.js?s=1643308124 HTTP/1.1\r\nHost: 11a830f.netsolhost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://11a830f.netsolhost.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty/1.25.3.1\r\nDate: Tue, 27 Jan 2026 11:02:21 GMT\r\nContent-Type: text/html\r\nContent-Length: 575\r\nConnection: keep-alive\r\nLast-Modified: Mon, 06 May 2024 23:16:49 GMT\r\nETag: \"23f-617d1438a3a40\"\r\nStrict-Transport-Security: max-age=31536000\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: \"1; mode=block\"\r\nReferrer-Policy: no-referrer-when-downgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T17:58:19.397699Z","times_seen":17711605,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"11a830f.netsolhost.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"11a830f.netsolhost.com/skins/elastic/ui.js?s=1643308123","fqdn":"11a830f.netsolhost.com","domain":"netsolhost.com","tld":"com"},"ip":{"addr":"206.188.192.221","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://11a830f.netsolhost.com/","date":"2026-01-27T11:02:21.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netsolhost.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Wed, 01 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FF:B8:E1:00:77:32:64:A9:80:7F:20:0E:5C:41:99:E7:CF:3A:45:B3","sha256":"02:E8:D8:E6:26:12:6C:23:91:92:C5:80:3F:54:8C:03:5D:B7:EB:B0:77:5D:BD:30:AF:8B:D7:E8:0A:B8:05:0B"}}},"request":{"raw":"GET /skins/elastic/ui.js?s=1643308123 HTTP/1.1\r\nHost: 11a830f.netsolhost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://11a830f.netsolhost.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty/1.25.3.1\r\nDate: Tue, 27 Jan 2026 11:02:21 GMT\r\nContent-Type: text/html\r\nContent-Length: 575\r\nConnection: keep-alive\r\nLast-Modified: Mon, 06 May 2024 23:16:49 GMT\r\nETag: \"23f-617d1438a3a40\"\r\nStrict-Transport-Security: max-age=31536000\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: \"1; mode=block\"\r\nReferrer-Policy: no-referrer-when-downgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T17:58:19.397699Z","times_seen":17711605,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"11a830f.netsolhost.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"11a830f.netsolhost.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}