{"report_id":"18f4b256-9ab7-4bdb-a56c-a3ee00417e64","version":6,"status":"done","tags":["microsoft","phishing"],"date":"2026-03-19T12:14:36Z","url":{"schema":"http","addr":"download.invoice.23423423523523.goaware2026.gosecurity.ch","fqdn":"download.invoice.23423423523523.goaware2026.gosecurity.ch","domain":"gosecurity.ch","tld":"ch"},"ip":{"addr":"217.26.53.208","port":0,"asn":29097,"as":"Hostpoint AG","country":"Switzerland","country_code":"CH"},"final":{"url":{"schema":"https","addr":"download.invoice.23423423523523.goaware2026.gosecurity.ch/","fqdn":"download.invoice.23423423523523.goaware2026.gosecurity.ch","domain":"gosecurity.ch","tld":"ch"},"title":"Sign in to your account","dom":{"size":12508,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (625)","md5":"1a25cde9985fea62b8377b835e918a48","sha1":"c2f338d69ef231e4c3d781bcb0f624d586dad79f","sha256":"a792fcc85d84c0ecef144c1207a148aa55c10e718f2137a8d2b8838e7982b282","sha512":"ae143d6ff6623390d71f4063bc5d4665516959207c482c554c20618eac60823748e9be7e0be2897bd31a3429dcb10e03aaff11dc360378425c8193b07e238a97","ssdeep":"192:cOF/aI1I8J+awpxqgvtdufRCwEuDSppFbD4:dixpgetdufRCTuDSppFb8","tlshash":"2c42b5713862045a459b85bae1379b012154e81bae43bc65fcbc92c80fefc1ef57a972","dom_hash":"domhash01eb8618137015d4730c85f6a88e7c6b","first_seen":"2026-03-19T12:14:40.748599Z","last_seen":"2026-03-19T12:18:55.728232Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"download.invoice.23423423523523.goaware2026.gosecurity.ch","fqdn":"download.invoice.23423423523523.goaware2026.gosecurity.ch","domain":"gosecurity.ch","tld":"ch"},"ip":{"addr":"217.26.53.208","port":0,"asn":29097,"as":"Hostpoint AG","country":"Switzerland","country_code":"CH"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-23T12:14:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-19","alert":"Phishing Block","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"summary":[{"fqdn":"download.invoice.23423423523523.goaware2026.gosecurity.ch","ip":{"addr":"217.26.53.208","port":443,"asn":29097,"as":"Hostpoint AG","country":"Switzerland","country_code":"CH"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-19T12:14:36.494969Z","last_seen":"2026-03-19T12:14:36.494969Z","alert_count":32,"request_count":8,"received_data":166810,"sent_data":4198,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"download.invoice.23423423523523.goaware2026.gosecurity.ch/static/pwdstrength.js","fqdn":"download.invoice.23423423523523.goaware2026.gosecurity.ch","domain":"gosecurity.ch","tld":"ch"},"ip":{"addr":"217.26.53.208","port":443,"asn":29097,"as":"Hostpoint AG","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1c1fa454523dd2dfefcf8c172ca7350","sha1":"fb800e0341fdde0a1bd142394662dda77ad15076","sha256":"3196e383a4380b4af43ae83862c23ac2ce77aea0e645807b5e8be7aadf6d9ec8","sha512":"3f67aec5dd6819412387b368135dcb425d3e844e7ae8e016bf241be8845c069876a5f4818093c3e4fe34a5f8d8b941474c3712bf42d70c25af6b1d6c5dc95f5e","ssdeep":"","tlshash":"94e02b9724170e58a3e289111173a5b13e30c64936be65e6ef2c475db938f0f5981cac","size":405,"data":"","first_seen":"2026-03-19T12:14:40.754053Z","last_seen":"2026-03-19T12:18:55.741703Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"download.invoice.23423423523523.goaware2026.gosecurity.ch/static/converged.css","fqdn":"download.invoice.23423423523523.goaware2026.gosecurity.ch","domain":"gosecurity.ch","tld":"ch"},"ip":{"addr":"217.26.53.208","port":443,"asn":29097,"as":"Hostpoint AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://download.invoice.23423423523523.goaware2026.gosecurity.ch/","date":"2026-03-19T12:14:11.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"download.invoice.23423423523523.goaware2026.gosecurity.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 06:25:37 GMT","end":"Mon, 15 Jun 2026 06:25:36 GMT"},"fingerprint":{"sha1":"1A:FC:62:0E:26:3A:5E:44:29:3D:AB:B9:8E:EA:DC:2E:4D:93:AB:DE","sha256":"6D:14:55:CC:ED:84:84:CF:07:E1:82:CE:30:CD:B8:91:1E:B5:C6:C3:C3:7E:FF:FF:57:C9:FE:A6:3F:D1:93:37"}}},"request":{"raw":"GET /static/converged.css HTTP/1.1\r\nHost: download.invoice.23423423523523.goaware2026.gosecurity.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://download.invoice.23423423523523.goaware2026.gosecurity.ch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Mar 2026 12:14:11 GMT\r\nserver: Apache\r\nlast-modified: Thu, 26 Feb 2026 08:37:00 GMT\r\netag: \"18fab-64bb6062cebc1-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 18813\r\ncontent-type: text/css\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":102315,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (61123), with CRLF line terminators","md5":"5e0ef3959a3d3db63ca7931b7c31d0ad","sha1":"b225b7941058f04f08c68e5b31f29a50bc06f661","sha256":"6f9848c8684b34250871e881e27a565c14cc523fea9aa9eec8c33e22aa423b66","sha512":"3a6f3fd039ab7860046cd4be8952d2d25c2e9bbfa9c0707a5515b9579f18b3e7a96ec26714a8b943beb3509e87b54fd9c24da6802666e71cc69f9415966f5484","ssdeep":"1536:VCHLBYHuhw+E3mazA/PWrF7qvEAFiQcpmNtpHzyJRr:ZB4byJZ","tlshash":"21a3c8945d203d269037c73561c1bd87a2252503f637aebff6222db9cf9968b0b32e45","first_seen":"2026-03-19T12:14:40.749531Z","last_seen":"2026-03-19T12:18:55.731935Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-19","alert":"Phishing Block","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"download.invoice.23423423523523.goaware2026.gosecurity.ch/static/logo.png","fqdn":"download.invoice.23423423523523.goaware2026.gosecurity.ch","domain":"gosecurity.ch","tld":"ch"},"ip":{"addr":"217.26.53.208","port":443,"asn":29097,"as":"Hostpoint AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://download.invoice.23423423523523.goaware2026.gosecurity.ch/","date":"2026-03-19T12:14:11.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"download.invoice.23423423523523.goaware2026.gosecurity.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 06:25:37 GMT","end":"Mon, 15 Jun 2026 06:25:36 GMT"},"fingerprint":{"sha1":"1A:FC:62:0E:26:3A:5E:44:29:3D:AB:B9:8E:EA:DC:2E:4D:93:AB:DE","sha256":"6D:14:55:CC:ED:84:84:CF:07:E1:82:CE:30:CD:B8:91:1E:B5:C6:C3:C3:7E:FF:FF:57:C9:FE:A6:3F:D1:93:37"}}},"request":{"raw":"GET /static/logo.png HTTP/1.1\r\nHost: download.invoice.23423423523523.goaware2026.gosecurity.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://download.invoice.23423423523523.goaware2026.gosecurity.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Mar 2026 12:14:11 GMT\r\nserver: Apache\r\nlast-modified: Thu, 26 Feb 2026 08:37:00 GMT\r\netag: \"810-64bb6062cee2f\"\r\naccept-ranges: bytes\r\ncontent-length: 2064\r\ncontent-type: image/png\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2064,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced","md5":"2240b1d8427b6525074c644e55bdd8af","sha1":"947a1ec9b48d8888438660c3ab547e44973444cd","sha256":"c687601ce88f1ce8870b1a56db5cb4a03781eb135f9357fe11dff21e6f19d1ab","sha512":"a3e28a986670c3eb37572c6ca2c0682dad89bf1152ec721fb700d41202532a31d566cb4cd2352f04ea5889bd59ba48c56e051d2efa985a34fe9ab6d5274e6b56","ssdeep":"","tlshash":"4d412a9b9d5298b04cb4121871431bca9c3a0e544fb32e51bbbce4cb47ca74d9567b15","first_seen":"2026-03-19T12:14:40.750422Z","last_seen":"2026-03-19T12:18:55.744141Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-19","alert":"Phishing Block","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"download.invoice.23423423523523.goaware2026.gosecurity.ch/static/bottem_grey.png","fqdn":"download.invoice.23423423523523.goaware2026.gosecurity.ch","domain":"gosecurity.ch","tld":"ch"},"ip":{"addr":"217.26.53.208","port":443,"asn":29097,"as":"Hostpoint AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://download.invoice.23423423523523.goaware2026.gosecurity.ch/","date":"2026-03-19T12:14:11.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"download.invoice.23423423523523.goaware2026.gosecurity.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 06:25:37 GMT","end":"Mon, 15 Jun 2026 06:25:36 GMT"},"fingerprint":{"sha1":"1A:FC:62:0E:26:3A:5E:44:29:3D:AB:B9:8E:EA:DC:2E:4D:93:AB:DE","sha256":"6D:14:55:CC:ED:84:84:CF:07:E1:82:CE:30:CD:B8:91:1E:B5:C6:C3:C3:7E:FF:FF:57:C9:FE:A6:3F:D1:93:37"}}},"request":{"raw":"GET /static/bottem_grey.png HTTP/1.1\r\nHost: download.invoice.23423423523523.goaware2026.gosecurity.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://download.invoice.23423423523523.goaware2026.gosecurity.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Mar 2026 12:14:11 GMT\r\nserver: Apache\r\nlast-modified: Thu, 26 Feb 2026 08:37:00 GMT\r\netag: \"106-64bb6062ce577\"\r\naccept-ranges: bytes\r\ncontent-length: 262\r\ncontent-type: image/png\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":262,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"059236a5737a34f058874be376b615d3","sha1":"0dd3273d27dc8a728b56e15be32b7853dde5d3e2","sha256":"85b839e43ce3bf6c1d174a4fad5d27168548ee2fcce73be6d921fa3265665492","sha512":"7b052e558daa314c10abc50eb473f66c51e281e756d34b671c173985e45ecc029335355b20291e96d00448b08b730c1da6fe1291e7a2847b99519c870ba6ce7c","ssdeep":"","tlshash":"23d02bbf79522e6cc491537643614060b53371cd11876ab8032794ad7921b5921d1e50","first_seen":"2026-03-19T12:14:40.751218Z","last_seen":"2026-03-19T12:18:55.73478Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-19","alert":"Phishing Block","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"download.invoice.23423423523523.goaware2026.gosecurity.ch/favicon.ico","fqdn":"download.invoice.23423423523523.goaware2026.gosecurity.ch","domain":"gosecurity.ch","tld":"ch"},"ip":{"addr":"217.26.53.208","port":443,"asn":29097,"as":"Hostpoint AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://download.invoice.23423423523523.goaware2026.gosecurity.ch/","date":"2026-03-19T12:14:11.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"download.invoice.23423423523523.goaware2026.gosecurity.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 06:25:37 GMT","end":"Mon, 15 Jun 2026 06:25:36 GMT"},"fingerprint":{"sha1":"1A:FC:62:0E:26:3A:5E:44:29:3D:AB:B9:8E:EA:DC:2E:4D:93:AB:DE","sha256":"6D:14:55:CC:ED:84:84:CF:07:E1:82:CE:30:CD:B8:91:1E:B5:C6:C3:C3:7E:FF:FF:57:C9:FE:A6:3F:D1:93:37"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: download.invoice.23423423523523.goaware2026.gosecurity.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://download.invoice.23423423523523.goaware2026.gosecurity.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 19 Mar 2026 12:14:11 GMT\r\nserver: Apache\r\ncontent-length: 236\r\ncontent-type: text/html; charset=iso-8859-1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":236,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"54ddfcfcbac52ccc7451161d40934ad7","sha1":"3f9915360e96bd0c5c756209a62d99b0246a634d","sha256":"9448f8a1159c9b14e3e1b9d8eab1a6ddf88d26e1f888a34cef430c756e4e6e1e","sha512":"b5b31c06e9e8cfc08e09e90bc5ba77c970c5be644c109f14b4b430384d4cecefae4368e051ed96323cfd3fe7a0e9f4832025c2efd213aa64bf65c55625bd72e6","ssdeep":"","tlshash":"61d0a79e90939386415176907ec123d2654953ab78b143e96ec1944690086bdc0d919d","first_seen":"2025-12-07T09:00:18.523222Z","last_seen":"2026-08-21T22:39:01.79622Z","times_seen":7097,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-19","alert":"Phishing Block","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"download.invoice.23423423523523.goaware2026.gosecurity.ch/","fqdn":"download.invoice.23423423523523.goaware2026.gosecurity.ch","domain":"gosecurity.ch","tld":"ch"},"ip":{"addr":"217.26.53.208","port":443,"asn":29097,"as":"Hostpoint AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-19T12:14:11.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"download.invoice.23423423523523.goaware2026.gosecurity.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 06:25:37 GMT","end":"Mon, 15 Jun 2026 06:25:36 GMT"},"fingerprint":{"sha1":"1A:FC:62:0E:26:3A:5E:44:29:3D:AB:B9:8E:EA:DC:2E:4D:93:AB:DE","sha256":"6D:14:55:CC:ED:84:84:CF:07:E1:82:CE:30:CD:B8:91:1E:B5:C6:C3:C3:7E:FF:FF:57:C9:FE:A6:3F:D1:93:37"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: download.invoice.23423423523523.goaware2026.gosecurity.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Mar 2026 12:14:11 GMT\r\nserver: Apache\r\nlast-modified: Thu, 26 Feb 2026 10:01:44 GMT\r\netag: \"31ce-64bb7353e0a6b-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 3504\r\ncontent-type: text/html\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12750,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (621), with CRLF line terminators","md5":"5b82dc2d7d84ce4804e9154f97b76df3","sha1":"d18048be76c49d84f882b1359d1a0530ff2ea686","sha256":"c41e3c677273868c1ac6c3adc7f7763b04b1c27d451ce5e126d484e24abeebec","sha512":"b70aff65bf0ee4181ef7d91185d04e1eecfdc5bf704ac12eb3c4f956db8b475805652d16afa67d3a223d5b700a45cbef6666512fa6056e7f3c2229f3dd1a60e8","ssdeep":"192:gmTbTOWgO23GH27Pf0tqvUK2Z5wEpDl9p9QKmz:9LYGHAPstVK2Z5TpDl9p9QKS","tlshash":"d742827138220c1a45bb85bad1328700e158e71ba3039d26bcfda7ca0ff6c16f556d7a","first_seen":"2026-03-19T12:14:40.752645Z","last_seen":"2026-03-19T12:18:55.738849Z","times_seen":2,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":95,"dns":26,"connect":35,"send":0,"wait":43,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-19","alert":"Phishing Block","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"download.invoice.23423423523523.goaware2026.gosecurity.ch/static/pwdstrength.js","fqdn":"download.invoice.23423423523523.goaware2026.gosecurity.ch","domain":"gosecurity.ch","tld":"ch"},"ip":{"addr":"217.26.53.208","port":443,"asn":29097,"as":"Hostpoint AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://download.invoice.23423423523523.goaware2026.gosecurity.ch/","date":"2026-03-19T12:14:11.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"download.invoice.23423423523523.goaware2026.gosecurity.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 06:25:37 GMT","end":"Mon, 15 Jun 2026 06:25:36 GMT"},"fingerprint":{"sha1":"1A:FC:62:0E:26:3A:5E:44:29:3D:AB:B9:8E:EA:DC:2E:4D:93:AB:DE","sha256":"6D:14:55:CC:ED:84:84:CF:07:E1:82:CE:30:CD:B8:91:1E:B5:C6:C3:C3:7E:FF:FF:57:C9:FE:A6:3F:D1:93:37"}}},"request":{"raw":"GET /static/pwdstrength.js HTTP/1.1\r\nHost: download.invoice.23423423523523.goaware2026.gosecurity.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://download.invoice.23423423523523.goaware2026.gosecurity.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Mar 2026 12:14:11 GMT\r\nserver: Apache\r\nlast-modified: Thu, 26 Feb 2026 08:37:00 GMT\r\netag: \"195-64bb6062cf04d-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 221\r\ncontent-type: text/javascript\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":405,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"f1c1fa454523dd2dfefcf8c172ca7350","sha1":"fb800e0341fdde0a1bd142394662dda77ad15076","sha256":"3196e383a4380b4af43ae83862c23ac2ce77aea0e645807b5e8be7aadf6d9ec8","sha512":"3f67aec5dd6819412387b368135dcb425d3e844e7ae8e016bf241be8845c069876a5f4818093c3e4fe34a5f8d8b941474c3712bf42d70c25af6b1d6c5dc95f5e","ssdeep":"","tlshash":"94e02b9724170e58a3e289111173a5b13e30c64936be65e6ef2c475db938f0f5981cac","first_seen":"2026-03-19T12:14:40.754053Z","last_seen":"2026-03-19T12:18:55.741703Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-19","alert":"Phishing Block","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"download.invoice.23423423523523.goaware2026.gosecurity.ch/static/bottem_white.png","fqdn":"download.invoice.23423423523523.goaware2026.gosecurity.ch","domain":"gosecurity.ch","tld":"ch"},"ip":{"addr":"217.26.53.208","port":443,"asn":29097,"as":"Hostpoint AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://download.invoice.23423423523523.goaware2026.gosecurity.ch/","date":"2026-03-19T12:14:11.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"download.invoice.23423423523523.goaware2026.gosecurity.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 06:25:37 GMT","end":"Mon, 15 Jun 2026 06:25:36 GMT"},"fingerprint":{"sha1":"1A:FC:62:0E:26:3A:5E:44:29:3D:AB:B9:8E:EA:DC:2E:4D:93:AB:DE","sha256":"6D:14:55:CC:ED:84:84:CF:07:E1:82:CE:30:CD:B8:91:1E:B5:C6:C3:C3:7E:FF:FF:57:C9:FE:A6:3F:D1:93:37"}}},"request":{"raw":"GET /static/bottem_white.png HTTP/1.1\r\nHost: download.invoice.23423423523523.goaware2026.gosecurity.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://download.invoice.23423423523523.goaware2026.gosecurity.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Mar 2026 12:14:11 GMT\r\nserver: Apache\r\nlast-modified: Thu, 26 Feb 2026 08:37:00 GMT\r\netag: \"c2-64bb6062ce7ae\"\r\naccept-ranges: bytes\r\ncontent-length: 194\r\ncontent-type: image/png\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":194,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"8852a41d3f3f8dc3ed73e85a2d2d0cb1","sha1":"22b262b754e0273d4e79ebaf0939fb57f29838d7","sha256":"42ac19c9cf8d852fd66416487971c03cfd06461db4d758218405d20b5d8b5a60","sha512":"d9e0ad2581c06ea30ec5852286418117748886b9047241f920182cda18041a65f01d111c332e656ffe9955cdc6cd2b74504e043535fc2d112b7b54db8d1da7a8","ssdeep":"","tlshash":"6ec022c01783edf4d069913e230800a4ec330288a6c7946902d681ba1a90f68c2a1602","first_seen":"2026-03-19T12:14:40.754869Z","last_seen":"2026-03-19T12:18:55.746186Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-19","alert":"Phishing Block","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"download.invoice.23423423523523.goaware2026.gosecurity.ch/static/background.svg","fqdn":"download.invoice.23423423523523.goaware2026.gosecurity.ch","domain":"gosecurity.ch","tld":"ch"},"ip":{"addr":"217.26.53.208","port":443,"asn":29097,"as":"Hostpoint AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://download.invoice.23423423523523.goaware2026.gosecurity.ch/","date":"2026-03-19T12:14:11.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"download.invoice.23423423523523.goaware2026.gosecurity.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 06:25:37 GMT","end":"Mon, 15 Jun 2026 06:25:36 GMT"},"fingerprint":{"sha1":"1A:FC:62:0E:26:3A:5E:44:29:3D:AB:B9:8E:EA:DC:2E:4D:93:AB:DE","sha256":"6D:14:55:CC:ED:84:84:CF:07:E1:82:CE:30:CD:B8:91:1E:B5:C6:C3:C3:7E:FF:FF:57:C9:FE:A6:3F:D1:93:37"}}},"request":{"raw":"GET /static/background.svg HTTP/1.1\r\nHost: download.invoice.23423423523523.goaware2026.gosecurity.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://download.invoice.23423423523523.goaware2026.gosecurity.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Mar 2026 12:14:11 GMT\r\nserver: Apache\r\nlast-modified: Thu, 26 Feb 2026 09:21:27 GMT\r\netag: \"b5f3-64bb6a52cc64a-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 8704\r\ncontent-type: image/svg+xml\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":46579,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"145a07dcb971527a82b8d95ca2a1a3ee","sha1":"8b5baca5e87693484035d4e7bfd5eebbd73ac931","sha256":"b7872b9635702c64d0e30f951372d3d62383f52a0f3f01497d9c429e4c292338","sha512":"cbf9fbafc5f4e69bc348077ce16a6a8266e8b70802954506436a56d4a411c56244fce3bcf492467d31462e6e4d133ce8d9f967708bea50cf46ea9eed88ad1165","ssdeep":"768:stFVOr1cBhgbydHDaQTzHdLqKyIpFIo9JRMkgArZQn:stKpcBhgbydHDaQTzHdLqKyIpFIcJRMP","tlshash":"5823249ce16ca97ed54dc2fcc64b68b8310e41eba550835d906b6f0f29b85cb384dbe1","first_seen":"2025-08-13T09:49:20.296327Z","last_seen":"2026-08-21T17:56:42.773868Z","times_seen":16737,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-19","alert":"Phishing Block","trigger":"download.invoice.23423423523523.goaware2026.gosecurity.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}}]}