{"report_id":"15a573f9-9c9e-4f11-abc1-584edaea3762","version":0,"status":"done","tags":["chase","financial","phishing","dyndns","suspicious"],"date":"2026-08-31T09:03:15Z","url":{"schema":"http","addr":"mail.rstelecompa.com.br/chase/login.php","fqdn":"mail.rstelecompa.com.br","domain":"rstelecompa.com.br","tld":"com.br"},"ip":{"addr":"204.157.110.186","port":0,"asn":174,"as":"COGENT-174","country":"Brazil","country_code":"BR"},"final":{"url":{"schema":"https","addr":"mail.rstelecompa.com.br/chase/login.php","fqdn":"mail.rstelecompa.com.br","domain":"rstelecompa.com.br","tld":"com.br"},"title":"chase","dom":{"size":1129,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"bcc42dd681d28389f39cc024c82f98d4","sha1":"5d07aa3d631af2cf7b39a5918e0fe7aa4d5e265d","sha256":"fc845813fabe1a210d505f53e5ca14a7ccc9c326bb813a7f1e1b85fe4c98cb16","sha512":"48c2378bb9a4c1126f0b4043f7d7c89e975769d362f001734e9b5c14079877a6de2fedd30252cb67e5eadf6b33f4a17fa29d0aabfb6a0aa719d20b2c4618e7c7","ssdeep":"","tlshash":"7f21141294f168a24051d4b14dd1f5085ec5c613c74b4c00baecafdd2fe5dc6cd4766d","dom_hash":"domhashba4422545ba3cc708930bfa1df6f9dbd","first_seen":"2026-08-30T00:32:05.448108Z","last_seen":"2026-08-31T11:55:04.864751Z","times_seen":8,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mail.rstelecompa.com.br/chase/login.php","fqdn":"mail.rstelecompa.com.br","domain":"rstelecompa.com.br","tld":"com.br"},"ip":{"addr":"204.157.110.186","port":0,"asn":174,"as":"COGENT-174","country":"Brazil","country_code":"BR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T09:03:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":4,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"mail.rstelecompa.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"mail.rstelecompa.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"mail.rstelecompa.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"telegrambotcheck.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"telegrambotcheck.duckdns.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"telegrambotcheck.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Chase","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Chase phishing","tags":["chase","financial","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"mail.rstelecompa.com.br","ip":{"addr":"204.157.110.186","port":443,"asn":174,"as":"COGENT-174","country":"Brazil","country_code":"BR"},"domain_registered":"2018-08-11","domain_rank":0,"first_seen":"2026-08-30T00:32:02.140193Z","last_seen":"2026-08-30T00:32:04.034575Z","alert_count":25,"request_count":6,"received_data":681362,"sent_data":3113,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"telegrambotcheck.duckdns.org","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2013-04-12","domain_rank":0,"first_seen":"2024-05-03T19:21:27Z","last_seen":"2026-08-30T16:32:26.765076Z","alert_count":4,"request_count":1,"received_data":0,"sent_data":592,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Chase","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Chase phishing","tags":["chase","financial","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"mail.rstelecompa.com.br/chase/login.php","fqdn":"mail.rstelecompa.com.br","domain":"rstelecompa.com.br","tld":"com.br"},"ip":{"addr":"204.157.110.186","port":443,"asn":174,"as":"COGENT-174","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"eee378cdbaaf9a90845a674be2bdd5d4","sha1":"c7ed4b567dc9e635dd0167011c4131a63866b111","sha256":"d4b828b856b40d9f4f0b3ac2545490c439cc163865df69b2e3bef437981a65a9","sha512":"8636d77de4467c44be6625026d95c5de88208b6f7f04a6c3525e5545147c27f57b50b8eb9b42660a2b011ec88574d3b7b2709b3f65c9d545303255789583b99f","ssdeep":"","tlshash":"a4a022033802008a080bc0cb08c3b2282c03088008800802020abfc20028003c203ac0","size":59,"data":"","first_seen":"2026-08-30T00:32:05.458541Z","last_seen":"2026-08-31T11:55:04.874261Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.rstelecompa.com.br/chase/res/jq.js","fqdn":"mail.rstelecompa.com.br","domain":"rstelecompa.com.br","tld":"com.br"},"ip":{"addr":"204.157.110.186","port":443,"asn":174,"as":"COGENT-174","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b474ebe504a9f439726d5ec696a64dae","sha1":"47d69f02c67a82fbc654642b8bb1738334ab7876","sha256":"d9b25f5ed5a4e51c2cb6f07f77e130a24632ecbedffa430888fff41cda8ad009","sha512":"7900b78ff77cf9a296f574670b5ac359afbf390251561dc1a95c614d058956ebcd16d8310bc48b1d168a709051bd19eb500c4dfb150c4db61755af85d70a240f","ssdeep":"3072:IM5LwijORnUkXCvM5LwijORnUkXCvM5LwijOhqvAnUkXCvM5LwijORnUkXCs:REiEpCUEiEpCUEi+qYpCUEiEpCs","tlshash":"2c7494cdf6d2b0a257e37674403f510bf23bae54b45a8090e266e1d16cbd94a807bf39","size":369368,"data":"","first_seen":"2024-05-27T08:59:51Z","last_seen":"2026-08-31T11:55:04.868537Z","times_seen":443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.rstelecompa.com.br/chase/login.php","fqdn":"mail.rstelecompa.com.br","domain":"rstelecompa.com.br","tld":"com.br"},"ip":{"addr":"204.157.110.186","port":443,"asn":174,"as":"COGENT-174","country":"Brazil","country_code":"BR"},"introduction_type":"Function","is_inline":false,"md5":"e9261cd1aa7db7f1db8f03a87ab114d5","sha1":"02021974ae8984673c838f14d828c7ef6b8019c1","sha256":"41e93f575acad57cd7b7ad2780ed1e527b6e4018af0d7de0775085625b779795","sha512":"a09a1834970c713b988db54457b59d1bdae396ecc12bf562217115bb43b2fb64539ddb7ceac12bf1ec67f084dd01dc181bd655ed4d5dc21fe820023b6b9ba7cd","ssdeep":"","tlshash":"5e11ccb223260aed5fe104c29d6f25860ce58b305d89e0a85b11fc139ae0fc292adf30","size":916,"data":"","first_seen":"2024-05-27T08:59:51Z","last_seen":"2026-08-31T11:55:04.875559Z","times_seen":452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.rstelecompa.com.br/chase/login.php","fqdn":"mail.rstelecompa.com.br","domain":"rstelecompa.com.br","tld":"com.br"},"ip":{"addr":"204.157.110.186","port":443,"asn":174,"as":"COGENT-174","country":"Brazil","country_code":"BR"},"introduction_type":"Function","is_inline":false,"md5":"b79f65fca5868f7ec0debf8bd34e072f","sha1":"bb2297acd97ad0633ee07784ffb5076db605cc5a","sha256":"433b1cd3c494c0a787f779ae9e9b64d578970ab0e8483857f6f644ce0ced121b","sha512":"c3f28f3f64c66098402d36e2e612f6b4a515347f86a4ca60c71e08c5a8ae20c9c052a6dab666f6e887276a52a385e6ca32bbbfe8e70b1b29709f7a2e4a16b5fc","ssdeep":"","tlshash":"7a41e308387d77a8c3b35832085f0aadd156ae21a607ed44c14b9e987e71236375fdeb","size":2237,"data":"","first_seen":"2024-05-27T08:59:51Z","last_seen":"2026-08-31T11:55:04.877118Z","times_seen":452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"Error:NetworkError when attempting to fetch resource.","filename":"https://mail.rstelecompa.com.br/chase/res/jq.js line 4 \u003e Function","line_number":3,"column_number":1943}]},"http":[{"url":{"schema":"https","addr":"mail.rstelecompa.com.br/chase/res/jq.js","fqdn":"mail.rstelecompa.com.br","domain":"rstelecompa.com.br","tld":"com.br"},"ip":{"addr":"204.157.110.186","port":443,"asn":174,"as":"COGENT-174","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.rstelecompa.com.br/chase/login.php","date":"2026-08-31T09:02:44.491Z","timestamp":1788166964491,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.rstelecompa.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 17:54:03 GMT","end":"Fri, 30 Oct 2026 17:54:02 GMT"},"fingerprint":{"sha1":"90:DA:31:FB:81:4D:08:D0:E7:DC:90:16:91:DC:81:C2:94:10:98:C1","sha256":"4D:7A:11:FF:3C:F3:94:FF:54:CE:90:B1:91:9A:64:79:7A:01:5D:E1:76:1A:01:A3:89:70:83:27:7E:B0:66:C9"}}},"request":{"raw":"GET /chase/res/jq.js HTTP/1.1\r\nHost: mail.rstelecompa.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.rstelecompa.com.br/chase/login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 31 Aug 2026 09:02:44 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 19 Jun 2024 11:23:58 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 369368\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":369368,"size_decoded":369618,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65434), with no line terminators","md5":"b474ebe504a9f439726d5ec696a64dae","sha1":"47d69f02c67a82fbc654642b8bb1738334ab7876","sha256":"d9b25f5ed5a4e51c2cb6f07f77e130a24632ecbedffa430888fff41cda8ad009","sha512":"7900b78ff77cf9a296f574670b5ac359afbf390251561dc1a95c614d058956ebcd16d8310bc48b1d168a709051bd19eb500c4dfb150c4db61755af85d70a240f","ssdeep":"3072:IM5LwijORnUkXCvM5LwijORnUkXCvM5LwijOhqvAnUkXCvM5LwijORnUkXCs:REiEpCUEiEpCUEi+qYpCUEiEpCs","tlshash":"2c7494cdf6d2b0a257e37674403f510bf23bae54b45a8090e266e1d16cbd94a807bf39","first_seen":"2024-05-27T08:59:51Z","last_seen":"2026-08-31T11:55:04.868537Z","times_seen":443,"resource_available":true,"data":null}},"time_used":1304,"timings":{"blocked":-1,"dns":0,"connect":216,"send":0,"wait":218,"receive":870,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"mail.rstelecompa.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"mail.rstelecompa.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"mail.rstelecompa.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Chase","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Chase phishing","tags":["chase","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mail.rstelecompa.com.br/chase/res/img/logo.svg","fqdn":"mail.rstelecompa.com.br","domain":"rstelecompa.com.br","tld":"com.br"},"ip":{"addr":"204.157.110.186","port":443,"asn":174,"as":"COGENT-174","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.rstelecompa.com.br/chase/login.php","date":"2026-08-31T09:02:44.500Z","timestamp":1788166964500,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.rstelecompa.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 17:54:03 GMT","end":"Fri, 30 Oct 2026 17:54:02 GMT"},"fingerprint":{"sha1":"90:DA:31:FB:81:4D:08:D0:E7:DC:90:16:91:DC:81:C2:94:10:98:C1","sha256":"4D:7A:11:FF:3C:F3:94:FF:54:CE:90:B1:91:9A:64:79:7A:01:5D:E1:76:1A:01:A3:89:70:83:27:7E:B0:66:C9"}}},"request":{"raw":"GET /chase/res/img/logo.svg HTTP/1.1\r\nHost: mail.rstelecompa.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.rstelecompa.com.br/chase/login.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 31 Aug 2026 09:02:45 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 19 Jun 2024 11:23:58 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1409\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1409,"size_decoded":1656,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b55b042f907bc7108f5dca2103a8476b","sha1":"9fcdcc86bfe1f3c7d4f774775670fbd08fe7556c","sha256":"d3bf9c143e5e360da41736b1d4e833b5ac6b6f7093ddc91ffc538233a78488d0","sha512":"45aa66abb6c075a1b3f5c76c1273ea21e7855b99031d46bfbcd7b8882f58e9f5612b556e218b41c902ada7fe0f77ed9f3849e8e675bbdddb21ae5397624b2c7c","ssdeep":"","tlshash":"ea21a485531aafd49d9801686d383481b5daac9cf170f6f4fd877415e06d0c9d4d4da2","first_seen":"2023-04-30T18:08:02Z","last_seen":"2026-09-11T08:22:19.699816Z","times_seen":2614,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":207,"dns":0,"connect":224,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"mail.rstelecompa.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"mail.rstelecompa.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"mail.rstelecompa.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Chase","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Chase phishing","tags":["chase","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mail.rstelecompa.com.br/chase/res/img/back.png","fqdn":"mail.rstelecompa.com.br","domain":"rstelecompa.com.br","tld":"com.br"},"ip":{"addr":"204.157.110.186","port":443,"asn":174,"as":"COGENT-174","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.rstelecompa.com.br/chase/login.php","date":"2026-08-31T09:02:44.718Z","timestamp":1788166964718,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.rstelecompa.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 17:54:03 GMT","end":"Fri, 30 Oct 2026 17:54:02 GMT"},"fingerprint":{"sha1":"90:DA:31:FB:81:4D:08:D0:E7:DC:90:16:91:DC:81:C2:94:10:98:C1","sha256":"4D:7A:11:FF:3C:F3:94:FF:54:CE:90:B1:91:9A:64:79:7A:01:5D:E1:76:1A:01:A3:89:70:83:27:7E:B0:66:C9"}}},"request":{"raw":"GET /chase/res/img/back.png HTTP/1.1\r\nHost: mail.rstelecompa.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.rstelecompa.com.br/chase/res/css/chase.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 31 Aug 2026 09:02:45 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 19 Jun 2024 11:23:58 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 306152\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":306152,"size_decoded":306397,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3","md5":"ff4ccdb7a4428ead513943583665aa4e","sha1":"07bec642d24ae6fbc965251e147992df17bb71f0","sha256":"01978e63789284edde4bb064e7d3215fad57fb5b7ea373b031b5b97021868085","sha512":"f744783528c74871371ff5a51e5b257cd71999405757465292d395114ac056eededc7d9f90fb52251c855802b1299b6e9bc0525e775ca5d2f8fccf56eab4cc56","ssdeep":"6144:zP56h0fPhqOVfsXWp8QrBY75I4YxWATMenb/:zxPqIfZ5Y7i4P5K","tlshash":"885423755be9b1c686c1a6d2bed0273762d70d0c2b807a2c258266ccc24f77ca1cc4bb","first_seen":"2023-05-13T21:15:54Z","last_seen":"2026-08-31T11:55:04.871774Z","times_seen":1910,"resource_available":false,"data":null}},"time_used":1567,"timings":{"blocked":444,"dns":0,"connect":0,"send":0,"wait":229,"receive":894,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"mail.rstelecompa.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"mail.rstelecompa.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"mail.rstelecompa.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Chase","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Chase phishing","tags":["chase","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"telegrambotcheck.duckdns.org:1001/receive_token?referrer=sarfita","fqdn":"telegrambotcheck.duckdns.org","domain":"telegrambotcheck.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mail.rstelecompa.com.br/chase/login.php","date":"2026-08-31T09:02:46.089Z","timestamp":1788166966089,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /receive_token?referrer=sarfita HTTP/1.1\r\nHost: telegrambotcheck.duckdns.org:1001\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mail.rstelecompa.com.br/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 54\r\nOrigin: https://mail.rstelecompa.com.br\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T00:48:27.090956Z","times_seen":18576228,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"telegrambotcheck.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"telegrambotcheck.duckdns.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"telegrambotcheck.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mail.rstelecompa.com.br/favicon.ico","fqdn":"mail.rstelecompa.com.br","domain":"rstelecompa.com.br","tld":"com.br"},"ip":{"addr":"204.157.110.186","port":443,"asn":174,"as":"COGENT-174","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.rstelecompa.com.br/chase/login.php","date":"2026-08-31T09:02:46.284Z","timestamp":1788166966284,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.rstelecompa.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 17:54:03 GMT","end":"Fri, 30 Oct 2026 17:54:02 GMT"},"fingerprint":{"sha1":"90:DA:31:FB:81:4D:08:D0:E7:DC:90:16:91:DC:81:C2:94:10:98:C1","sha256":"4D:7A:11:FF:3C:F3:94:FF:54:CE:90:B1:91:9A:64:79:7A:01:5D:E1:76:1A:01:A3:89:70:83:27:7E:B0:66:C9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mail.rstelecompa.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.rstelecompa.com.br/chase/login.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 31 Aug 2026 09:02:46 GMT\r\nServer: Apache\r\nContent-Length: 315\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":515,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-09-20T19:20:12.611209Z","times_seen":147066,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"mail.rstelecompa.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"mail.rstelecompa.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"mail.rstelecompa.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Chase","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Chase phishing","tags":["chase","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mail.rstelecompa.com.br/chase/login.php","fqdn":"mail.rstelecompa.com.br","domain":"rstelecompa.com.br","tld":"com.br"},"ip":{"addr":"204.157.110.186","port":443,"asn":174,"as":"COGENT-174","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T09:02:43.357Z","timestamp":1788166963357,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.rstelecompa.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 17:54:03 GMT","end":"Fri, 30 Oct 2026 17:54:02 GMT"},"fingerprint":{"sha1":"90:DA:31:FB:81:4D:08:D0:E7:DC:90:16:91:DC:81:C2:94:10:98:C1","sha256":"4D:7A:11:FF:3C:F3:94:FF:54:CE:90:B1:91:9A:64:79:7A:01:5D:E1:76:1A:01:A3:89:70:83:27:7E:B0:66:C9"}}},"request":{"raw":"GET /chase/login.php HTTP/1.1\r\nHost: mail.rstelecompa.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 31 Aug 2026 09:02:44 GMT\r\nServer: Apache\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1197,"size_decoded":1393,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"fb1fd7beb4f25276b7e28161e4f2a6ab","sha1":"29033854e4959485d45f2f53a13efa055acb2603","sha256":"6b3b90f1823d06c89e182a7cd94b12f4e60e94426d51fe29789c8a04130d7842","sha512":"6ab4a1209b0b55c71ec6df4f2176d8b09f9b3bd57f3e106c1ac221e349f43bb23065f8e12e774aac457c1ea7bfd34ca79312f740daffa54b75b4c433dec56306","ssdeep":"","tlshash":"0021c92a14c36c554272d0b14d91ae58ef86c253c387080075ec6b9b3ff6d49ce8366c","first_seen":"2026-08-30T00:32:05.451863Z","last_seen":"2026-08-31T11:55:04.866456Z","times_seen":8,"resource_available":true,"data":null}},"time_used":934,"timings":{"blocked":-1,"dns":57,"connect":217,"send":0,"wait":221,"receive":0,"ssl":439},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"mail.rstelecompa.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"mail.rstelecompa.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"mail.rstelecompa.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Chase","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Chase phishing","tags":["chase","financial","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"mail.rstelecompa.com.br/chase/res/css/chase.css","fqdn":"mail.rstelecompa.com.br","domain":"rstelecompa.com.br","tld":"com.br"},"ip":{"addr":"204.157.110.186","port":443,"asn":174,"as":"COGENT-174","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.rstelecompa.com.br/chase/login.php","date":"2026-08-31T09:02:44.489Z","timestamp":1788166964489,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.rstelecompa.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 17:54:03 GMT","end":"Fri, 30 Oct 2026 17:54:02 GMT"},"fingerprint":{"sha1":"90:DA:31:FB:81:4D:08:D0:E7:DC:90:16:91:DC:81:C2:94:10:98:C1","sha256":"4D:7A:11:FF:3C:F3:94:FF:54:CE:90:B1:91:9A:64:79:7A:01:5D:E1:76:1A:01:A3:89:70:83:27:7E:B0:66:C9"}}},"request":{"raw":"GET /chase/res/css/chase.css HTTP/1.1\r\nHost: mail.rstelecompa.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.rstelecompa.com.br/chase/login.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 31 Aug 2026 09:02:44 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 19 Jun 2024 11:23:58 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1542\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1542,"size_decoded":1783,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3f580fe9fc12600196e8f8053ab3a3fd","sha1":"5bdffb5b7cec8b38b1eee3ff11eeaf8b58f860f4","sha256":"2633590e4759069d4b0c1887ef2fd0a845716c02ac1dc2e8627a21708449037d","sha512":"d97ba079a3fabc6b17efb64a87a0c6e5fc0beabf52bb2ba1b36ec37ab44d694ac6949fadecbc7aba42ee07ec55a6d7a5a789c3c0262d88e15affc39cf8c4ed38","ssdeep":"","tlshash":"1631cd05ea410686f233dd94af765794db5808074b0207a9bfe872e08f7a1acc572fcc","first_seen":"2024-06-16T07:26:13Z","last_seen":"2026-08-31T11:55:04.867189Z","times_seen":380,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"mail.rstelecompa.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"mail.rstelecompa.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"mail.rstelecompa.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Chase","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Chase phishing","tags":["chase","financial","phishing"],"meta":null}]}}]}