{"report_id":"128cb15a-9412-4ded-8d9e-a9459fad6510","version":6,"status":"done","tags":[],"date":"2026-02-14T12:30:55Z","url":{"schema":"https","addr":"setupdish.zone/","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":0,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"setupdish.zone/","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"title":"ScreenConnect Remote Support Software","dom":{"size":33760,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (837)","md5":"c107aaab08fbbb9b1fcb8c3d9487815a","sha1":"36d1ed3ae8c1bdc69298f6420ad91dbf218c186c","sha256":"5a63d4e8263fa139d20980b9ba78ac591944a02a1e779e563a54ebd5f15c3f06","sha512":"2be095812d952463d605404d45ca00a5d8085d0ef02e9443a37a91f06de9c07e089a9d7b6b9e48391df7d01b1861d345d83607a79e89574367a9d7dfb6ced73a","ssdeep":"768:4+eggfNuadIdh6ZdBobW/l/P3/bL/bE/yUJm9eFDanybqw70Ay0tIB9:4ZggfNuadIdhydQipPvb7bkyX4ayq0tE","tlshash":"e9e2d5d1f38e107341baa02eda6f10c96b7d40f4b021ac23fc69dd846be9a4e5751b99","dom_hash":"domhash0d98ce50f2b5c761057334caae5f6280","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"setupdish.zone/","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":0,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T12:30:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"setupdish.zone","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"setupdish.zone","ip":{"addr":"155.2.192.172","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-13T03:23:55.061144Z","last_seen":"2026-02-13T03:23:55.061144Z","alert_count":12,"request_count":12,"received_data":2334787,"sent_data":6110,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"setupdish.zone/","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"123357abeadcb34d97d32ce82c1df7d9","sha1":"441fb971fe9ff97931ef4e13eb140ce10159bac1","sha256":"675f11617820fc44579016832b8d3cb506495a05fd3f768ded177b5ac4915feb","sha512":"81c2486b7101e3f6255723a2fb31e8c6a1df7a785b62a5b53f20176d25d0642f188f0501e5c17c5a0eabce91c4470b696f6df89f27d66d733ce78a8354db38f5","ssdeep":"","tlshash":"45019e48634d107821ecf16c6e3b7049a73aeedc35f0f49159d28254766173f96c49a5","size":784,"data":"","first_seen":"2024-04-30T03:57:53Z","last_seen":"2026-06-05T15:49:40.918214Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setupdish.zone/Script.ashx?__Cache=9f2e1c45-c4a2-462e-ae0e-c2cd1a058f3d","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"85db5c8af154a2c256d8b32632a4abc7","sha1":"aa0dca2558ecedad494328e2ad11c364a7e8e118","sha256":"2d3cfa5b933bafcc88dfed1a29c1e965dbe904ea79e2ad155d4b5b0cb2747f91","sha512":"330e83310b0ec5437e0b9aaa0f2f287ad50319d53b4b7b9e82c8c1a753f265cc95d3e85f8d183ce72c0c41539a4b2919df430e8ba22e0ae4220903f2dc4d962a","ssdeep":"1536:tZUXf9AsQi4KVzJJXBfE4h2639Nu37VeEZDVtNUsShdAHLffhv5FW5jNc4XA95:qJHvhf/u37VeE7tNUxhdchv5FW5JA95","tlshash":"1e6473056bfe34ba310341a7ec37d8af3aec6598671dc4a3bdbf9219d34945401e239a","size":315483,"data":"","first_seen":"2026-02-13T03:23:59.965207Z","last_seen":"2026-02-14T12:30:57.540164Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setupdish.zone/Scripts/SC.main.ts?ScriptImportType=Classic\u0026__Cache=15878ef7-4cf3-4066-9868-39ef9fd10f78","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcf59e776af764bc0acfb14e1c208f29","sha1":"03e5e7fab97c80e2d7eb3924650c155fbc3219e9","sha256":"573722f6cd6dc1cc1ec45d1f5c89696ecbc45943b62d3d6c07a96dedb2f1ef74","sha512":"fdff32da2ed3369a4f1cb0c24905bafce5e93f220073e89ce2c5ec87c1672e679ed7a1940e172952f5459ec5bf95fb1ed5328cddaa4329cf51a119d9b2e89187","ssdeep":"6144:RITRvTL92lQFp/a7i++jri4iviSj//9RBSdFMKSF:Gbp6v","tlshash":"d544c589b5fb22b282b7713d8b6f4009763542431409dc257c6c9b846f6d92da1fafce","size":271228,"data":"","first_seen":"2025-06-03T11:41:42.299788Z","last_seen":"2026-07-26T02:22:27.161712Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setupdish.zone/","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b8aed2094f3553d80196ccb2141b399b","sha1":"60461c96ea2c65c4ebe99b16fc0a35279456bee5","sha256":"afe15e55d9bc4002950bda9bc4c3c6ab8fbff636a63b4546eb0b6944e1c503e6","sha512":"80c9fbe4ef0ba62e9d4ab2d02931343d44d8f2d76adbca8f69cdeac50f5004f38e5442a305dbc3538438fb0ab0ae751d9acd7268764d5b6dce2ac3a260e5385f","ssdeep":"","tlshash":"d7f0dd9da54e4e7ff1c105c3d222784803ddb862b1ccce28c6789f642ad31aa49b2a42","size":630,"data":"","first_seen":"2026-02-14T12:30:57.554392Z","last_seen":"2026-02-14T12:30:57.554392Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setupdish.zone/","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"61126dfecdaf40d876f20d40f0a589c7","sha1":"e97dad5729333488695c44c56c10ae19cb05193f","sha256":"08ed41607c222dabcb0126cc4a3130d3c5cf6fc2a6cbb4daeb769ff5da26b301","sha512":"42de9949915cd3dd1d95e49cb89861e41bee15eb41b6629ca467f8a61a1ed28520317d68294c386992f235fe93fd747503bb668d927ae21508fb552a557e0974","ssdeep":"","tlshash":"4a510fda8f8e205794ea2139de0f518c8e3d01b5d4007d72bc5cf284a5881ad13bae7a","size":2442,"data":"","first_seen":"2024-05-16T12:51:22Z","last_seen":"2026-07-26T02:22:27.170915Z","times_seen":518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setupdish.zone/","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"da06705106b9234f224ad7be4709e78e","sha1":"fdb4cd5a01ed43d928f175eae4644453178d01c7","sha256":"a1b21336401e5f1c0c3fa29f5fbac682c3709a3d7c6564bda220f8077d7ff855","sha512":"18e2d14bac684cbf5a291d18ba1a89216b7665db74e327b65445438367236c8f4c5b48c85ccfff8523b7879fad63a3ba62e6b246414b9b4ba60beb4c68a4077e","ssdeep":"","tlshash":"1590041044cd5134cc311cdc345173d03d71f0453005f400c03f41145054c114d0dcd4","size":44,"data":"","first_seen":"2023-03-07T01:31:35Z","last_seen":"2026-06-07T03:53:14.791854Z","times_seen":617,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setupdish.zone/","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ea0053564be75ebb7190361a2d0b887","sha1":"c3db7a7218a2539eb56eabbe98b23bd8fb78f3f6","sha256":"23c39711c9fd1194e0d77bf056fae391ba0fea97b58fa7bc23dd9ba2401d3dc6","sha512":"de7d3178dfbe43736b5fa14b35b5d15a00347843e4278ce83c5bf542cf9cc133a4c0c60ba4e1385053a4a89bbddae0f03d66ba733831910af06b5330b0260952","ssdeep":"","tlshash":"54a024c03c0dc71137f10040143351fdf7c140c4004cfc17045100c430c44570c41131","size":75,"data":"","first_seen":"2023-03-07T01:31:35Z","last_seen":"2026-06-05T15:49:40.928851Z","times_seen":498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setupdish.zone/","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"28bb7e2b8995951d00f59fb1ec5c4e03","sha1":"7cccf9bc9559d2c1772a50c3b2400d3455850aec","sha256":"90d4cd67c2069af96cff44fa4ee08b987d102b09322221e0fc48f7734e8c7f37","sha512":"e3f13d19ba41dd290c97b4ac87053b1a3ff42b12146c10cfef4daaa2cf7b38994da33606e4dc5ce46327bdb814bd4befc125f3fb17fe1fe481ed7037b34b8a26","ssdeep":"192:TV28APIKKBovzRz6zL/ORM/PWQRr/bhbVFQdRgHWm/bg9sJGF/y2LJmhU:TV28ZKKBobW/ORM/PtRr/blVedRu/b5m","tlshash":"1a223092f3cd1072a1bee04e99be10c66b3c91b0b471bc26fc64d9c46be961b1751b8c","size":9946,"data":"","first_seen":"2024-04-30T03:57:53Z","last_seen":"2026-06-05T15:49:40.929229Z","times_seen":404,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setupdish.zone/","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d1f72c47fd825c3408e5faf4b35d8b1","sha1":"a33b64e0f871e1fe88b714e0c2806071839946e1","sha256":"d10969facc54978611d65a4ca239682176ab8ee3d4179bbeacafc5a015549f78","sha512":"00f78086d05acc05de47488ab2d0d47ae2dc151b59917fd1b4f6535d2a2c9ccd92cff0c2c65f1de756d394cd22e0209e38ed5fed62ede0fafac58afae1721612","ssdeep":"384:2DuEeFDYjQFiJybq15c8ASULFyTD5uy0tIkZ71SCT:QeFDanybqw70Ay0tIBw","tlshash":"3c72c8e1f39f64b3457e903eda0e00c5ab3e40f1d0119c37fc3a9d8859e998d5296b99","size":16313,"data":"","first_seen":"2025-04-08T23:27:50.238316Z","last_seen":"2026-06-05T06:03:51.187839Z","times_seen":259,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"setupdish.zone/Images/Applications.svg","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://setupdish.zone/","date":"2026-02-14T12:30:29.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"setupdish.zone","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 23:40:48 GMT","end":"Mon, 04 May 2026 23:40:47 GMT"},"fingerprint":{"sha1":"84:FA:FF:F6:13:9B:90:95:35:24:56:D2:CB:C5:BC:84:96:09:3E:53","sha256":"7F:AF:D5:70:99:DB:55:0E:20:AD:1B:98:D5:2E:41:53:E3:50:9F:F3:FE:96:8F:69:79:2D:98:A7:45:6F:C8:2F"}}},"request":{"raw":"GET /Images/Applications.svg HTTP/1.1\r\nHost: setupdish.zone\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://setupdish.zone/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\ncontent-length: 821\r\ncontent-type: image/svg+xml\r\nexpires: Sun, 15 Feb 2026 12:30:29 GMT\r\nlast-modified: Fri, 28 Mar 2025 02:12:54 GMT\r\naccept-ranges: bytes\r\netag: \"1DB9F86EA209700\"\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sat, 14 Feb 2026 12:30:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":821,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2599340bf60ee89b13e6b91beefe1199","sha1":"4e0babcd7fdcabc1759ed0f130e06972340c5127","sha256":"5bf4f707f250958980d313203989f1fca55b9446f34d667e7256f853d52e494d","sha512":"b22ab922530cbabc1c9a2800218f620060b1be8b69ef67d47a8aba5f3897b1e651d1cf8025e933cfa70cc26fa8e50f8ac0f4318e51d3f876f2cef3f6b278ad19","ssdeep":"","tlshash":"8f018c6882e92a3e61136678d39085c53493f0c2ebb40918e8e4311983b4c43ef6db6f","first_seen":"2023-05-09T20:48:12Z","last_seen":"2026-07-26T02:22:27.165034Z","times_seen":635,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"setupdish.zone","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"setupdish.zone/FavIcon.axd?__Cache=db07651e-5a90-4b4f-bd42-3f40f1a46b26","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://setupdish.zone/","date":"2026-02-14T12:30:30.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"setupdish.zone","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 23:40:48 GMT","end":"Mon, 04 May 2026 23:40:47 GMT"},"fingerprint":{"sha1":"84:FA:FF:F6:13:9B:90:95:35:24:56:D2:CB:C5:BC:84:96:09:3E:53","sha256":"7F:AF:D5:70:99:DB:55:0E:20:AD:1B:98:D5:2E:41:53:E3:50:9F:F3:FE:96:8F:69:79:2D:98:A7:45:6F:C8:2F"}}},"request":{"raw":"GET /FavIcon.axd?__Cache=db07651e-5a90-4b4f-bd42-3f40f1a46b26 HTTP/1.1\r\nHost: setupdish.zone\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://setupdish.zone/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=3600\r\ncontent-length: 1538\r\ncontent-type: image/vnd.microsoft.icon\r\nexpires: Sat, 14 Feb 2026 13:30:30 GMT\r\nvary: Accept-Encoding\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sat, 14 Feb 2026 12:30:30 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":1538,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 2 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 4 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 4 bits/pixel","md5":"d9c91e92af6776e767700c6f0c258ec0","sha1":"d083b5b8f069abd44ba4c30d806220375ce3e7ee","sha256":"0b95167676069a859a7535ce88e2b9f82520485d0102400d6d3e38a21f7c1f72","sha512":"06db40e54216ddc7f20de265a4c1b4d6cd054e64e305aa9d1300b9024662dd43a0796715bb95b88680cd6d4b94041159680e8888bb356a007177959bb1b591f0","ssdeep":"","tlshash":"5d3129c98342143cd04d53380c675212fec3914a4a83ba651f4f1a661533b169ff7ad0","first_seen":"2024-12-20T23:35:34.287272Z","last_seen":"2026-07-24T09:33:42.760465Z","times_seen":455,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"setupdish.zone","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"setupdish.zone/","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T12:30:27.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"setupdish.zone","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 23:40:48 GMT","end":"Mon, 04 May 2026 23:40:47 GMT"},"fingerprint":{"sha1":"84:FA:FF:F6:13:9B:90:95:35:24:56:D2:CB:C5:BC:84:96:09:3E:53","sha256":"7F:AF:D5:70:99:DB:55:0E:20:AD:1B:98:D5:2E:41:53:E3:50:9F:F3:FE:96:8F:69:79:2D:98:A7:45:6F:C8:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: setupdish.zone\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private\r\ncontent-length: 7512\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\np3p: CP=\"NON CUR OUR STP STA PRE\"\r\ndate: Sat, 14 Feb 2026 12:30:28 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":32471,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (647), with CRLF line terminators","md5":"86438dcb7a7766bd30c0e185c4de95d6","sha1":"e17cd226e738a71c9ad54ebc6f569bfb4b08f47f","sha256":"b4d147c20c1c4f7ce30141df8091c8b9ece236626f549f1573fdc720c6d8cc2e","sha512":"dc76bf86edce53a91353705676b0055f3dae7bc05e3b87aea619b34da42012855176bbd1690ae43be064fbd949dfd7081a8512629d03f96d0d1b56065c699a73","ssdeep":"768:7QXvOwZW/e/1h/Q0/Qg/pkkkuGe4GfjMmAKgxVO/D:0fOPK19Q0QIpyzcMRVO/D","tlshash":"99e2c7e5b18f10b745fe922ad57b1084ef3dc0f0a021a432f86add846be968e5751bcd","first_seen":"2026-02-14T12:30:57.537578Z","last_seen":"2026-02-14T12:30:57.537578Z","times_seen":1,"resource_available":false,"data":null}},"time_used":644,"timings":{"blocked":264,"dns":39,"connect":108,"send":0,"wait":113,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"setupdish.zone","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"setupdish.zone/Script.ashx?__Cache=9f2e1c45-c4a2-462e-ae0e-c2cd1a058f3d","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://setupdish.zone/","date":"2026-02-14T12:30:28.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"setupdish.zone","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 23:40:48 GMT","end":"Mon, 04 May 2026 23:40:47 GMT"},"fingerprint":{"sha1":"84:FA:FF:F6:13:9B:90:95:35:24:56:D2:CB:C5:BC:84:96:09:3E:53","sha256":"7F:AF:D5:70:99:DB:55:0E:20:AD:1B:98:D5:2E:41:53:E3:50:9F:F3:FE:96:8F:69:79:2D:98:A7:45:6F:C8:2F"}}},"request":{"raw":"GET /Script.ashx?__Cache=9f2e1c45-c4a2-462e-ae0e-c2cd1a058f3d HTTP/1.1\r\nHost: setupdish.zone\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://setupdish.zone/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=3600\r\ncontent-length: 47615\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\nexpires: Sat, 14 Feb 2026 13:30:28 GMT\r\nvary: Accept-Encoding, Accept-Language, Host, X-Forwarded-Host, X-Forwarded-Port, X-Forwarded-Proto\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sat, 14 Feb 2026 12:30:28 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":315483,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (33317), with CRLF line terminators","md5":"85db5c8af154a2c256d8b32632a4abc7","sha1":"aa0dca2558ecedad494328e2ad11c364a7e8e118","sha256":"2d3cfa5b933bafcc88dfed1a29c1e965dbe904ea79e2ad155d4b5b0cb2747f91","sha512":"330e83310b0ec5437e0b9aaa0f2f287ad50319d53b4b7b9e82c8c1a753f265cc95d3e85f8d183ce72c0c41539a4b2919df430e8ba22e0ae4220903f2dc4d962a","ssdeep":"1536:tZUXf9AsQi4KVzJJXBfE4h2639Nu37VeEZDVtNUsShdAHLffhv5FW5jNc4XA95:qJHvhf/u37VeE7tNUxhdchv5FW5JA95","tlshash":"1e6473056bfe34ba310341a7ec37d8af3aec6598671dc4a3bdbf9219d34945401e239a","first_seen":"2026-02-13T03:23:59.965207Z","last_seen":"2026-02-14T12:30:57.540164Z","times_seen":2,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"setupdish.zone","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"setupdish.zone/App_Themes/DarkTeal/Default.css?__Cache=27d1066e-829c-4a15-bc44-8b47ffa2ec4b","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://setupdish.zone/","date":"2026-02-14T12:30:28.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"setupdish.zone","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 23:40:48 GMT","end":"Mon, 04 May 2026 23:40:47 GMT"},"fingerprint":{"sha1":"84:FA:FF:F6:13:9B:90:95:35:24:56:D2:CB:C5:BC:84:96:09:3E:53","sha256":"7F:AF:D5:70:99:DB:55:0E:20:AD:1B:98:D5:2E:41:53:E3:50:9F:F3:FE:96:8F:69:79:2D:98:A7:45:6F:C8:2F"}}},"request":{"raw":"GET /App_Themes/DarkTeal/Default.css?__Cache=27d1066e-829c-4a15-bc44-8b47ffa2ec4b HTTP/1.1\r\nHost: setupdish.zone\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://setupdish.zone/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=3600\r\ncontent-length: 135697\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\nexpires: Sat, 14 Feb 2026 13:30:28 GMT\r\nvary: Accept-Encoding\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sat, 14 Feb 2026 12:30:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":512909,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (27376), with CRLF line terminators","md5":"9c5bff236820967942f20c3d68c2b772","sha1":"133c7c5e7fb0c0d0fbf65e825eec2aec0a1febb6","sha256":"be306eec4d7a9b779f38fec8a840431e301765a51d0d5e92d322d62a2b0f211d","sha512":"bc9f9ace9d2ed76b279f364c0c57e46dd274e41e30e41a2823df516b3742b4954b7cfe443c1637265aa7de081b23f5d1e602dd69a8f5c563a63842e62c55ce2c","ssdeep":"3072:g8B+8+a+WGg59pfbE5RvRVwJ9eEQfgNaFH5MtjEirNzpwKOBpUJpbxS:BRUWGg+jvxFH5MlpwKEj","tlshash":"a7b4e826fb8f56e4c7da452a57b19250de2dc0b1164307f1786a98088f8b3943fa73db","first_seen":"2025-06-03T11:41:42.309544Z","last_seen":"2026-07-21T05:18:18.005397Z","times_seen":47,"resource_available":false,"data":null}},"time_used":1519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1408,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"setupdish.zone","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"setupdish.zone/Images/Extras.svg","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://setupdish.zone/","date":"2026-02-14T12:30:29.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"setupdish.zone","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 23:40:48 GMT","end":"Mon, 04 May 2026 23:40:47 GMT"},"fingerprint":{"sha1":"84:FA:FF:F6:13:9B:90:95:35:24:56:D2:CB:C5:BC:84:96:09:3E:53","sha256":"7F:AF:D5:70:99:DB:55:0E:20:AD:1B:98:D5:2E:41:53:E3:50:9F:F3:FE:96:8F:69:79:2D:98:A7:45:6F:C8:2F"}}},"request":{"raw":"GET /Images/Extras.svg HTTP/1.1\r\nHost: setupdish.zone\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://setupdish.zone/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\ncontent-length: 322\r\ncontent-type: image/svg+xml\r\nexpires: Sun, 15 Feb 2026 12:30:29 GMT\r\nlast-modified: Fri, 28 Mar 2025 02:12:54 GMT\r\naccept-ranges: bytes\r\netag: \"1DB9F86EA209700\"\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sat, 14 Feb 2026 12:30:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":322,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"813c72f0a4741978669871e3800d5279","sha1":"ae5e036f992577f8afca3d99a352f44a217c2c2a","sha256":"8fce4aad3b04f9b76a08bad9b2459e355bbf16a470486d689fa801b9a30e3061","sha512":"bcb4de8eba321bfe1ec092e53c87275143508b2e3298a099ae0bc90449557ae741ad34b36795538c6a10493e9937c36fe2fb230513ff56fac05f2aae5ee8f796","ssdeep":"","tlshash":"3be08c40cf18378c7a5885942b2ce4990493e2abb0ce82d5a1cd1038f74476ae9f3292","first_seen":"2023-05-09T20:48:12Z","last_seen":"2026-07-26T02:22:27.163582Z","times_seen":632,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"setupdish.zone","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"setupdish.zone/Services/PageService.ashx/GetLiveData","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://setupdish.zone/","date":"2026-02-14T12:30:29.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"setupdish.zone","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 23:40:48 GMT","end":"Mon, 04 May 2026 23:40:47 GMT"},"fingerprint":{"sha1":"84:FA:FF:F6:13:9B:90:95:35:24:56:D2:CB:C5:BC:84:96:09:3E:53","sha256":"7F:AF:D5:70:99:DB:55:0E:20:AD:1B:98:D5:2E:41:53:E3:50:9F:F3:FE:96:8F:69:79:2D:98:A7:45:6F:C8:2F"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: setupdish.zone\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: N4SF9eIDI+uf4Ip2Ld067nWDqNUrZYU2POwqQATaQ6MBAADGGcjDRMItQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 60\r\nOrigin: https://setupdish.zone\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://setupdish.zone/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":60,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},0]"}},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 144\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://setupdish.zone\r\naccess-control-allow-credentials: true\r\ndate: Sat, 14 Feb 2026 12:30:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b8d7810b588776e66f87807654d07bf7","sha1":"60992bab7801ea5eb1f5902715b44fa78af2bb58","sha256":"05c64155c90b63694e08b5e01e408583a1c5f155156643fcc0e05412f76e9b37","sha512":"3bb46e5d39389db32b675984b971c87d42daa6615d84c260f4293a8171aa622f2443f8f711baf5768d405c9ba45d5592df4de24a56e688b7ac7d93a49b269566","ssdeep":"","tlshash":"38c02bbf863034ba004cc3384d772850c7b032013074e4fb029700d8039137d0390379","first_seen":"2026-02-14T12:30:57.546607Z","last_seen":"2026-02-14T12:30:57.546607Z","times_seen":1,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"setupdish.zone","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"setupdish.zone/Images/ActivityIndicator.gif","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://setupdish.zone/","date":"2026-02-14T12:30:29.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"setupdish.zone","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 23:40:48 GMT","end":"Mon, 04 May 2026 23:40:47 GMT"},"fingerprint":{"sha1":"84:FA:FF:F6:13:9B:90:95:35:24:56:D2:CB:C5:BC:84:96:09:3E:53","sha256":"7F:AF:D5:70:99:DB:55:0E:20:AD:1B:98:D5:2E:41:53:E3:50:9F:F3:FE:96:8F:69:79:2D:98:A7:45:6F:C8:2F"}}},"request":{"raw":"GET /Images/ActivityIndicator.gif HTTP/1.1\r\nHost: setupdish.zone\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://setupdish.zone/App_Themes/DarkTeal/Default.css?__Cache=27d1066e-829c-4a15-bc44-8b47ffa2ec4b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\ncontent-length: 27503\r\ncontent-type: image/gif\r\nexpires: Sun, 15 Feb 2026 12:30:29 GMT\r\nlast-modified: Fri, 28 Mar 2025 02:12:54 GMT\r\naccept-ranges: bytes\r\netag: \"1DB9F86EA209700\"\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sat, 14 Feb 2026 12:30:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":27503,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"c63792b958d231654ab54542fea871db","sha1":"c21cfffa5cbd2a7c94076324fe28c4596df92e0c","sha256":"9d070c98f02f1d6287952256b47f7cd72eda89bda25ef99782325214a042f01a","sha512":"adf5f76d848c6ecc5c0fc00e51f6ad76d716a3daea6417b533a7a0d00004dd0bba2a7f9c2743fd4a5b83fc4c1ce4178dcc64808254ba110a1774fc0208d78760","ssdeep":"384:ZPEb1PVCcijMhRFO9eiHcptlHdEw6ZCI1wsas2B/uyPs83VRKwaT+zJuXd:ZPAfCLMhzCxKdw1mpJT3bL0auN","tlshash":"61c2f14e883d941e94f546207b212b8c65126eea68dc01fdca9bfa289cdf73cb119dd1","first_seen":"2023-05-09T20:48:12Z","last_seen":"2026-07-26T02:22:27.163098Z","times_seen":649,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"setupdish.zone","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"setupdish.zone/App_Themes/DarkTeal/Default.css?r=Page.Background\u0026__Cache=1167577","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://setupdish.zone/","date":"2026-02-14T12:30:29.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"setupdish.zone","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 23:40:48 GMT","end":"Mon, 04 May 2026 23:40:47 GMT"},"fingerprint":{"sha1":"84:FA:FF:F6:13:9B:90:95:35:24:56:D2:CB:C5:BC:84:96:09:3E:53","sha256":"7F:AF:D5:70:99:DB:55:0E:20:AD:1B:98:D5:2E:41:53:E3:50:9F:F3:FE:96:8F:69:79:2D:98:A7:45:6F:C8:2F"}}},"request":{"raw":"GET /App_Themes/DarkTeal/Default.css?r=Page.Background\u0026__Cache=1167577 HTTP/1.1\r\nHost: setupdish.zone\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://setupdish.zone/App_Themes/DarkTeal/Default.css?__Cache=27d1066e-829c-4a15-bc44-8b47ffa2ec4b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=3600\r\ncontent-length: 1167577\r\ncontent-type: image/png\r\nexpires: Sat, 14 Feb 2026 13:30:29 GMT\r\nvary: Accept-Encoding\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sat, 14 Feb 2026 12:30:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":1167577,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1350 x 832, 8-bit/color RGBA, non-interlaced","md5":"30526db545db88f273bd0fd0b3b97f07","sha1":"dc198f030b25441cd12bbd598163b0df65c8406c","sha256":"bb87e0a2b06d73e78797a269a15561e0600efacd420e677350665382c5e37954","sha512":"47ef1aaff384f33897acb382803700ec1631cd017a3c4e264e55b9848c22245d6529b8db61019628f9f2e952eb02e0cee1b0e51f6674b8d06028bd8afb7902ec","ssdeep":"24576:cO3/js4WC//Dr2yD7ibZKVMqn+NxGGP4pC2IYr9pKMBX:c6s4WC/QboVMdrhdYrzKIX","tlshash":"1f25332e7e221053654de92d379a3c1cdcca3e7462168924bfd81a736650fbcf89b19c","first_seen":"2025-07-27T05:51:54.932579Z","last_seen":"2026-07-26T02:22:27.167354Z","times_seen":167,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"setupdish.zone","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"setupdish.zone/Services/PageService.ashx/GetLiveData","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://setupdish.zone/","date":"2026-02-14T12:30:31.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"setupdish.zone","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 23:40:48 GMT","end":"Mon, 04 May 2026 23:40:47 GMT"},"fingerprint":{"sha1":"84:FA:FF:F6:13:9B:90:95:35:24:56:D2:CB:C5:BC:84:96:09:3E:53","sha256":"7F:AF:D5:70:99:DB:55:0E:20:AD:1B:98:D5:2E:41:53:E3:50:9F:F3:FE:96:8F:69:79:2D:98:A7:45:6F:C8:2F"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: setupdish.zone\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: N4SF9eIDI+uf4Ip2Ld067nWDqNUrZYU2POwqQATaQ6MBAADGGcjDRMItQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://setupdish.zone\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://setupdish.zone/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},396061355]"}},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 144\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://setupdish.zone\r\naccess-control-allow-credentials: true\r\ndate: Sat, 14 Feb 2026 12:30:30 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68f8d07581e11c8e3eb207f2f9017680","sha1":"6fe82ba5ece6c05cc701b79272703dbf99614fda","sha256":"e27138e564c4c0d9fae090a8409a875175e54146316dc6f74c8e3ca84ca88956","sha512":"1e9661786b774657a5697f1730cc726f8463fe4283a8ed8168db0e7d696eb4df55385048849444073cb3378b33ba55ed716cc3f9eb3ac79c293ff859350d91aa","ssdeep":"","tlshash":"3fc02bbf863034f9004cc3384d772850c7b0220130b8e8fa03a700c8039137c035027d","first_seen":"2026-02-14T12:30:57.550294Z","last_seen":"2026-02-14T12:30:57.550294Z","times_seen":1,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"setupdish.zone","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"setupdish.zone/Scripts/SC.main.ts?ScriptImportType=Classic\u0026__Cache=15878ef7-4cf3-4066-9868-39ef9fd10f78","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://setupdish.zone/","date":"2026-02-14T12:30:28.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"setupdish.zone","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 23:40:48 GMT","end":"Mon, 04 May 2026 23:40:47 GMT"},"fingerprint":{"sha1":"84:FA:FF:F6:13:9B:90:95:35:24:56:D2:CB:C5:BC:84:96:09:3E:53","sha256":"7F:AF:D5:70:99:DB:55:0E:20:AD:1B:98:D5:2E:41:53:E3:50:9F:F3:FE:96:8F:69:79:2D:98:A7:45:6F:C8:2F"}}},"request":{"raw":"GET /Scripts/SC.main.ts?ScriptImportType=Classic\u0026__Cache=15878ef7-4cf3-4066-9868-39ef9fd10f78 HTTP/1.1\r\nHost: setupdish.zone\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://setupdish.zone/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=3600\r\ncontent-length: 53414\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\nexpires: Sat, 14 Feb 2026 13:30:28 GMT\r\nvary: Accept-Encoding\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sat, 14 Feb 2026 12:30:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":271228,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"fcf59e776af764bc0acfb14e1c208f29","sha1":"03e5e7fab97c80e2d7eb3924650c155fbc3219e9","sha256":"573722f6cd6dc1cc1ec45d1f5c89696ecbc45943b62d3d6c07a96dedb2f1ef74","sha512":"fdff32da2ed3369a4f1cb0c24905bafce5e93f220073e89ce2c5ec87c1672e679ed7a1940e172952f5459ec5bf95fb1ed5328cddaa4329cf51a119d9b2e89187","ssdeep":"6144:RITRvTL92lQFp/a7i++jri4iviSj//9RBSdFMKSF:Gbp6v","tlshash":"d544c589b5fb22b282b7713d8b6f4009763542431409dc257c6c9b846f6d92da1fafce","first_seen":"2025-06-03T11:41:42.299788Z","last_seen":"2026-07-26T02:22:27.161712Z","times_seen":74,"resource_available":true,"data":null}},"time_used":1123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1013,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"setupdish.zone","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"setupdish.zone/Images/ActionCenter.svg","fqdn":"setupdish.zone","domain":"setupdish.zone","tld":"zone"},"ip":{"addr":"155.2.192.172","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://setupdish.zone/","date":"2026-02-14T12:30:29.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"setupdish.zone","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 23:40:48 GMT","end":"Mon, 04 May 2026 23:40:47 GMT"},"fingerprint":{"sha1":"84:FA:FF:F6:13:9B:90:95:35:24:56:D2:CB:C5:BC:84:96:09:3E:53","sha256":"7F:AF:D5:70:99:DB:55:0E:20:AD:1B:98:D5:2E:41:53:E3:50:9F:F3:FE:96:8F:69:79:2D:98:A7:45:6F:C8:2F"}}},"request":{"raw":"GET /Images/ActionCenter.svg HTTP/1.1\r\nHost: setupdish.zone\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://setupdish.zone/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\ncontent-length: 346\r\ncontent-type: image/svg+xml\r\nexpires: Sun, 15 Feb 2026 12:30:29 GMT\r\nlast-modified: Fri, 28 Mar 2025 02:12:54 GMT\r\naccept-ranges: bytes\r\netag: \"1DB9F86EA209700\"\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sat, 14 Feb 2026 12:30:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":346,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76fa773933e8313a93f5dee59e919d83","sha1":"db438d4795023149a335dfe1c7dcfa1c5f09fee6","sha256":"81fce97d96268840367d7f9119333c8bfccf3a633a68006a87240288a085b0b1","sha512":"797b037627c3f3ebedcb4629ff8019b68d525c707fe969c9b8a7e2d816816009dd8cc470ce6447031f1b8835b05ebc30116a4f41e9c20b34e026e920a89428d7","ssdeep":"","tlshash":"cbe02d11a2ac4d1c7f220310cf7cb2f1023232ae234d124ce85c323c840850eb837ee8","first_seen":"2024-04-30T03:57:53Z","last_seen":"2026-07-26T02:22:27.164553Z","times_seen":588,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"setupdish.zone","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}