{"report_id":"1539486a-07ec-455d-9ed5-5558e93e5a0d","version":0,"status":"done","tags":[],"date":"2026-08-12T01:43:58Z","url":{"schema":"http","addr":"messenger-security-notification-ads.one/","fqdn":"messenger-security-notification-ads.one","domain":"messenger-security-notification-ads.one","tld":"one"},"ip":{"addr":"82.47.180.17","port":0,"asn":5089,"as":"Virgin Media","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"messenger-security-notification-ads.one/","fqdn":"messenger-security-notification-ads.one","domain":"messenger-security-notification-ads.one","tld":"one"},"title":"Verification Required","dom":{"size":4643,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0c9d4a3cdba4ce750c5d55aab36bae5c","sha1":"a7129460bd58b01984248cf05b7c5152ce35d527","sha256":"732a6889bc496f9ccdbc834a81952b87b7c7b5ee9a4f291195b56ebecd391ac2","sha512":"827b0ea9ad65a7a96fa9af7e14f68797aabc99ad78ea21e3bd133e9ac0c087dbab8b5ca06027ad072629f10e6c406902e465d76fa1923f594abbc99d40ec9370","ssdeep":"96:nrM3Fbeewi2VyLqnUHokugMMgbt1pB1vvcZwnG:rM3Jeu2VyLqnUH9uwEt1pBRjG","tlshash":"51a143371aa2101679a3e1a43b928b4a76319103d14ac9393fdd5694cf8e7c989f378c","dom_hash":"domhash4ec9c9c2ec7ba5f45b6a78a76717b3a1","first_seen":"2026-06-16T06:07:35.487839Z","last_seen":"2026-08-12T01:43:58.553963Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"messenger-security-notification-ads.one/","fqdn":"messenger-security-notification-ads.one","domain":"messenger-security-notification-ads.one","tld":"one"},"ip":{"addr":"82.47.180.17","port":0,"asn":5089,"as":"Virgin Media","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-16T01:43:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"messenger-security-notification-ads.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"messenger-security-notification-ads.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"messenger-security-notification-ads.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"messenger-security-notification-ads.one","ip":{"addr":"82.47.180.17","port":443,"asn":5089,"as":"Virgin Media","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-08-06","domain_rank":0,"first_seen":"2026-08-12T01:10:13.986787Z","last_seen":"2026-08-12T01:10:13.986788Z","alert_count":6,"request_count":2,"received_data":5319,"sent_data":1062,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-08-09T23:11:55.336398Z","alert_count":0,"request_count":1,"received_data":3022,"sent_data":579,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"messenger-security-notification-ads.one/","fqdn":"messenger-security-notification-ads.one","domain":"messenger-security-notification-ads.one","tld":"one"},"ip":{"addr":"82.47.180.17","port":443,"asn":5089,"as":"Virgin Media","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"a989defd56793f400a55ea1ee058d1b5","sha1":"e6624dcf9aa392fd564d920b1be2cf3c0450b995","sha256":"a096869ddf68bb50598563ff417b858a13650c5098eadfaa93e1d8e90e9a9c3b","sha512":"93c751d72b2ea5562bd5b120fe29b7373745303d36c9e4cbf7a9817fe1bce687883e88e7062ef094a5164f8df359c44542bb1bdd681d00db6b7480f27050d4b8","ssdeep":"","tlshash":"e3f08c8924a3407c19f3d83202e75d8c32250a9785c8ca603abec9450f56389b2b73c8","size":482,"data":"","first_seen":"2026-06-16T06:07:35.497202Z","last_seen":"2026-08-12T01:43:58.568243Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"messenger-security-notification-ads.one/","fqdn":"messenger-security-notification-ads.one","domain":"messenger-security-notification-ads.one","tld":"one"},"ip":{"addr":"82.47.180.17","port":443,"asn":5089,"as":"Virgin Media","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-12T01:43:30.796Z","timestamp":1786499010796,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"messenger-security-notification-ads.one","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 01:21:46 GMT","end":"Wed, 04 Nov 2026 01:21:45 GMT"},"fingerprint":{"sha1":"A2:4D:F4:3B:FF:0C:AA:85:8B:A1:62:65:C9:E1:15:08:83:2E:EB:94","sha256":"CB:FA:E0:D2:83:13:4D:DF:48:2B:C2:63:92:1B:A2:6A:0B:C1:2D:C1:55:FB:93:4E:D8:A6:FB:A6:0A:0C:67:D4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: messenger-security-notification-ads.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 12 Aug 2026 01:43:31 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Cookie\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4685,"size_decoded":1793,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"2e5ee150eae237e561def499fa06c724","sha1":"c69d6893c33005d06e6247300e6c9fb7369eb859","sha256":"46760b7b78a9b36937016423f4b888854a6a24dd14ccc1c3f5d2dd21309afdf2","sha512":"6cd6281567e26e8a36c76ffe4ea35a7d824da160148d643ce31c1c9c04f5b8716fef1727cb4d099a9716670d126a490eb75ff0207f607164c011b566ac9fea54","ssdeep":"96:tM3Fbeewi2VyLqnUHokugMMgbt1pB1vvcZwne:tM3Jeu2VyLqnUH9uwEt1pBRje","tlshash":"02a142261ab2101679a3e1a42b929b4a36319103e14ac9393fdd5694cfce6c989f378c","first_seen":"2026-06-16T06:07:35.491622Z","last_seen":"2026-08-12T01:43:58.558139Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1144,"timings":{"blocked":0,"dns":116,"connect":256,"send":0,"wait":257,"receive":0,"ssl":515},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"messenger-security-notification-ads.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"messenger-security-notification-ads.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"messenger-security-notification-ads.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://messenger-security-notification-ads.one/","date":"2026-08-12T01:43:32.275Z","timestamp":1786499012275,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://messenger-security-notification-ads.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Aug 2026 02:29:48 GMT\r\nexpires: Thu, 13 Aug 2026 02:29:48 GMT\r\ncache-control: public, max-age=604800\r\nage: 515624\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2228,"size_decoded":3022,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-08-12T13:40:29.388278Z","times_seen":706943,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":17,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"messenger-security-notification-ads.one/favicon.ico","fqdn":"messenger-security-notification-ads.one","domain":"messenger-security-notification-ads.one","tld":"one"},"ip":{"addr":"82.47.180.17","port":443,"asn":5089,"as":"Virgin Media","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://messenger-security-notification-ads.one/","date":"2026-08-12T01:43:32.279Z","timestamp":1786499012279,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"messenger-security-notification-ads.one","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 01:21:46 GMT","end":"Wed, 04 Nov 2026 01:21:45 GMT"},"fingerprint":{"sha1":"A2:4D:F4:3B:FF:0C:AA:85:8B:A1:62:65:C9:E1:15:08:83:2E:EB:94","sha256":"CB:FA:E0:D2:83:13:4D:DF:48:2B:C2:63:92:1B:A2:6A:0B:C1:2D:C1:55:FB:93:4E:D8:A6:FB:A6:0A:0C:67:D4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: messenger-security-notification-ads.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://messenger-security-notification-ads.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 NOT FOUND\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 12 Aug 2026 01:43:32 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"NOT FOUND","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":207,"size_decoded":383,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"e46c4e5e1fbc64b1bae9ebd9bcef7fcf","sha1":"d767b3cb0ad66544c649e4165fc4b37e3c17e370","sha256":"e9639e3c4681ce85f852fbac48e2eeee5ba51296dbfec57c200d59b76237ab80","sha512":"d82048fdcff225197a7e9f0b7f22d470518420a4b10ea3327d604804d04d0d97efadafc84a0aaa23650146f59d94373438dc18bb822e26fd60283c384940ddb9","ssdeep":"","tlshash":"dad0224ed30a032b0a20071035c11beb998f1322757612398f42583e6185b2d81e23c8","first_seen":"2023-04-05T03:09:50Z","last_seen":"2026-08-12T13:34:12.025738Z","times_seen":17322,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"messenger-security-notification-ads.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"messenger-security-notification-ads.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"messenger-security-notification-ads.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}