{"report_id":"19490adc-64f7-4e9b-9090-5d387fe17b85","version":6,"status":"done","tags":[],"date":"2026-02-07T13:07:03Z","url":{"schema":"http","addr":"in-house-sf.com","fqdn":"in-house-sf.com","domain":"in-house-sf.com","tld":"com"},"ip":{"addr":"69.13.61.33","port":0,"asn":54489,"as":"CORESPACE-DAL","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"in-house-sf.com/","fqdn":"in-house-sf.com","domain":"in-house-sf.com","tld":"com"},"title":"Edit","dom":{"size":11035,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (384)","md5":"cd3f4f7f524ab66b04e4d7ef61878dff","sha1":"1f5d2bb811d4c287c478e850de360366c8ffb51c","sha256":"278acecd66435bb417053397f78fb7b88592592134a83634f7a121a5e72fda81","sha512":"07e13611a4d30b6403031cb05d1b64f9bd8e2788943b934a63199ca29a0dad0fb8692f4e114527e8278e5a4f9c0f2662b43eb35a0d89cbe25efa639a429fc995","ssdeep":"192:3K/LLGVJjpUYodiI1AxU0XGXjAMmeQdpQh47YDSOFitj:3dpUY6iI1EU0XGXjllQPUYj","tlshash":"7a32192030f82567a1998595b3a6eb122c99e407c35b0534febc0fd9afe7d22c85775c","dom_hash":"domhash2040571f124652194acde00b2cb9c464","first_seen":"2026-02-07T12:46:25.335624Z","last_seen":"2026-02-07T13:07:05.703165Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"in-house-sf.com","fqdn":"in-house-sf.com","domain":"in-house-sf.com","tld":"com"},"ip":{"addr":"69.13.61.33","port":0,"asn":54489,"as":"CORESPACE-DAL","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-14T13:07:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"in-house-sf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"in-house-sf.com","ip":{"addr":"69.13.61.33","port":443,"asn":54489,"as":"CORESPACE-DAL","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-07T12:46:20.879946Z","last_seen":"2026-02-07T12:46:20.879947Z","alert_count":40,"request_count":10,"received_data":845186,"sent_data":4452,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"in-house-sf.com/banivision.js","fqdn":"in-house-sf.com","domain":"in-house-sf.com","tld":"com"},"ip":{"addr":"69.13.61.33","port":443,"asn":54489,"as":"CORESPACE-DAL","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f27299d6dc6770e0c0e915b62824606","sha1":"3cde7a29a07fc146333c32873541b32a365d1a2f","sha256":"1d1cc059791d8702d67ca3ba71390ef2e8332e9e32db4c106907d388691d4932","sha512":"382002833bf1517c76960bee91d215482edbf40e7d98533f14d037cac844d451ae88abddc6601ee4e8fdc8a59990cd58ddff45e48d2e50df9f1a859a4a4b7a84","ssdeep":"6144:B8zmyhct7/7+TC1lmhTzeb15aYmD2zK8USJqdZQ/co/GqFyMgRSL/uaageNTIPfA:7H5aYmD4/+ZQ/co/GqFyLnTiPfLAC/Ar","tlshash":"5d54a4d8f78d112e423231aaed2e12cdbb7cd171561454aebd4d597c24a083c83baf7a","size":281454,"data":"","first_seen":"2026-02-07T12:46:25.337213Z","last_seen":"2026-06-09T09:09:26.891681Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"in-house-sf.com/banivision2.js","fqdn":"in-house-sf.com","domain":"in-house-sf.com","tld":"com"},"ip":{"addr":"69.13.61.33","port":443,"asn":54489,"as":"CORESPACE-DAL","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ab430d38f514cf477562d8fbb010386","sha1":"fad6b5add1d0e4c3816c489991a060aa142fa534","sha256":"eb52f427daea1adf6f122c905d82014e5469587aa24271486d72b348486cab94","sha512":"449020e4218bdba865935521b49a02c6abff62928f487a7538c46562cf53fc0b75cf5fe704311d18aadf83e4357e30a1dec5da143ed6ff99e4a1af0cce1c243b","ssdeep":"96:OYOL1MrUiVruf+Ji29NKji2uM3f+aNKFkSB:OLEXrJz9MMaQkSB","tlshash":"54f1db02b7fd2286773b30232a1b905d561d7d33a444bd41bcbdb4a24f5aab892de0dc","size":7839,"data":"","first_seen":"2026-02-07T12:46:25.338659Z","last_seen":"2026-02-07T13:07:05.7206Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"in-house-sf.com/","fqdn":"in-house-sf.com","domain":"in-house-sf.com","tld":"com"},"ip":{"addr":"69.13.61.33","port":443,"asn":54489,"as":"CORESPACE-DAL","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-07T13:06:42.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.in-house-sf.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 11:38:27 GMT","end":"Fri, 01 May 2026 11:38:26 GMT"},"fingerprint":{"sha1":"B7:67:39:22:5C:1A:5C:5D:C0:F2:AF:14:21:52:E4:51:33:D1:BC:EE","sha256":"EE:28:07:D8:F2:CB:7C:13:B3:F8:53:56:DB:B9:89:5F:32:67:09:C4:D2:DB:25:60:F4:40:DB:29:21:FA:27:CC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: in-house-sf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Feb 2026 13:06:42 GMT\r\nContent-Type: text/html\r\nContent-Length: 11039\r\nConnection: keep-alive\r\nLast-Modified: Thu, 05 Feb 2026 16:48:08 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11039,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (384), with CRLF, LF line terminators","md5":"4dca504e89d617a23decc75e7d1be410","sha1":"e344c2dd54e9148421fa50461125ac63e2389f34","sha256":"de1549ece382196226a77d70fe0cae800264645e8e95a37f31435f42a617edeb","sha512":"9ae91b92eca5e667694dcd32d5376917f08855bc475fb2430b4de18266bd8c3761b559bdf802f3c5aa78cd3882ffb7f1a9405fc3c48b723a6c5b45079af41859","ssdeep":"192:P/LLGVJjbUYodiI1AxUUXGXjHF3feZpDhBCYIujGztl:0bUY6iI1EUUXGXjlPeTfwl","tlshash":"b532393030f8286791998595b3a6eb022c99e507c71b0524bdfc0ed9bfe7d22c95779c","first_seen":"2026-02-07T12:46:25.347982Z","last_seen":"2026-02-07T13:07:05.706847Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1251,"timings":{"blocked":524,"dns":0,"connect":129,"send":0,"wait":200,"receive":1,"ssl":393},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"in-house-sf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"in-house-sf.com/banivision.js","fqdn":"in-house-sf.com","domain":"in-house-sf.com","tld":"com"},"ip":{"addr":"69.13.61.33","port":443,"asn":54489,"as":"CORESPACE-DAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://in-house-sf.com/","date":"2026-02-07T13:06:43.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.in-house-sf.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 11:38:27 GMT","end":"Fri, 01 May 2026 11:38:26 GMT"},"fingerprint":{"sha1":"B7:67:39:22:5C:1A:5C:5D:C0:F2:AF:14:21:52:E4:51:33:D1:BC:EE","sha256":"EE:28:07:D8:F2:CB:7C:13:B3:F8:53:56:DB:B9:89:5F:32:67:09:C4:D2:DB:25:60:F4:40:DB:29:21:FA:27:CC"}}},"request":{"raw":"GET /banivision.js HTTP/1.1\r\nHost: in-house-sf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://in-house-sf.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Feb 2026 13:06:43 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 281454\r\nConnection: keep-alive\r\nLast-Modified: Thu, 05 Feb 2026 16:48:08 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":281454,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"2f27299d6dc6770e0c0e915b62824606","sha1":"3cde7a29a07fc146333c32873541b32a365d1a2f","sha256":"1d1cc059791d8702d67ca3ba71390ef2e8332e9e32db4c106907d388691d4932","sha512":"382002833bf1517c76960bee91d215482edbf40e7d98533f14d037cac844d451ae88abddc6601ee4e8fdc8a59990cd58ddff45e48d2e50df9f1a859a4a4b7a84","ssdeep":"6144:B8zmyhct7/7+TC1lmhTzeb15aYmD2zK8USJqdZQ/co/GqFyMgRSL/uaageNTIPfA:7H5aYmD4/+ZQ/co/GqFyLnTiPfLAC/Ar","tlshash":"5d54a4d8f78d112e423231aaed2e12cdbb7cd171561454aebd4d597c24a083c83baf7a","first_seen":"2026-02-07T12:46:25.337213Z","last_seen":"2026-06-09T09:09:26.891681Z","times_seen":5,"resource_available":true,"data":null}},"time_used":745,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":561,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"in-house-sf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"in-house-sf.com/banivision.png","fqdn":"in-house-sf.com","domain":"in-house-sf.com","tld":"com"},"ip":{"addr":"69.13.61.33","port":443,"asn":54489,"as":"CORESPACE-DAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://in-house-sf.com/","date":"2026-02-07T13:06:43.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.in-house-sf.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 11:38:27 GMT","end":"Fri, 01 May 2026 11:38:26 GMT"},"fingerprint":{"sha1":"B7:67:39:22:5C:1A:5C:5D:C0:F2:AF:14:21:52:E4:51:33:D1:BC:EE","sha256":"EE:28:07:D8:F2:CB:7C:13:B3:F8:53:56:DB:B9:89:5F:32:67:09:C4:D2:DB:25:60:F4:40:DB:29:21:FA:27:CC"}}},"request":{"raw":"GET /banivision.png HTTP/1.1\r\nHost: in-house-sf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://in-house-sf.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Feb 2026 13:06:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 169979\r\nConnection: keep-alive\r\nLast-Modified: Thu, 05 Feb 2026 16:48:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169979,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3571 x 354, 8-bit/color RGBA, non-interlaced","md5":"1266bf8880ee9f0c1cf8f94658276e22","sha1":"54621921b23304510b0eb70b2c8d420ab4f2bba4","sha256":"df6c9ddf4e344ff9386f6cd0f81db72890857b378a6a1d8cd3693cb769c8ab30","sha512":"e84383dab4b6777fb31a1d2d98bbba38e681869c15e191023bfae54f54c2b8d07a83f205e7284fe9dccad82c1bf1a0d1b20e20b8e7ae7ab098d42c4c8b9a2fc3","ssdeep":"3072:4/dfbSF1iDMn0ByKyozt9u7iTau+JKwyItJQCi9vDVYcgMCgAHh304Y2:4mFF0ByGmi9+p9JQCiFZYcL6A2","tlshash":"90f38d13dd61646b26525429224736e297390e373180ce2e6fa7e4ba3e077f0eef6c05","first_seen":"2023-12-20T05:22:27Z","last_seen":"2026-06-09T09:09:26.888985Z","times_seen":74,"resource_available":false,"data":null}},"time_used":3085,"timings":{"blocked":1120,"dns":1,"connect":170,"send":0,"wait":329,"receive":507,"ssl":171},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"in-house-sf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"in-house-sf.com/banivision3.png","fqdn":"in-house-sf.com","domain":"in-house-sf.com","tld":"com"},"ip":{"addr":"69.13.61.33","port":443,"asn":54489,"as":"CORESPACE-DAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://in-house-sf.com/","date":"2026-02-07T13:06:43.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.in-house-sf.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 11:38:27 GMT","end":"Fri, 01 May 2026 11:38:26 GMT"},"fingerprint":{"sha1":"B7:67:39:22:5C:1A:5C:5D:C0:F2:AF:14:21:52:E4:51:33:D1:BC:EE","sha256":"EE:28:07:D8:F2:CB:7C:13:B3:F8:53:56:DB:B9:89:5F:32:67:09:C4:D2:DB:25:60:F4:40:DB:29:21:FA:27:CC"}}},"request":{"raw":"GET /banivision3.png HTTP/1.1\r\nHost: in-house-sf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://in-house-sf.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Feb 2026 13:06:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 1213\r\nConnection: keep-alive\r\nLast-Modified: Thu, 05 Feb 2026 16:48:08 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1213,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"e3b10d1680e116a705afff99d0fd7059","sha1":"12ca1426ad55ded4f1f3383da2452be14443a52d","sha256":"e2f8ccc8a603135d9669b71f5b695def341c88d73b622ab4827397c418805e7b","sha512":"3dfbfbac53052f701723d474ffc8f7d735cccb5a26fc6262022ea91b4123e33cd2c129ccf424973851d4e1b2e4707c1773f7c3ca4ccd985bea21125794e6968b","ssdeep":"","tlshash":"e62186f7fbe0a08801e0abb595dc55f0b0c853f21285274594826779035ef167ddc19d","first_seen":"2023-05-10T00:34:00Z","last_seen":"2026-06-09T09:09:26.88527Z","times_seen":103,"resource_available":false,"data":null}},"time_used":1282,"timings":{"blocked":1118,"dns":0,"connect":0,"send":0,"wait":163,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"in-house-sf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"in-house-sf.com/banivision.woff","fqdn":"in-house-sf.com","domain":"in-house-sf.com","tld":"com"},"ip":{"addr":"69.13.61.33","port":443,"asn":54489,"as":"CORESPACE-DAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://in-house-sf.com/","date":"2026-02-07T13:06:44.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.in-house-sf.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 11:38:27 GMT","end":"Fri, 01 May 2026 11:38:26 GMT"},"fingerprint":{"sha1":"B7:67:39:22:5C:1A:5C:5D:C0:F2:AF:14:21:52:E4:51:33:D1:BC:EE","sha256":"EE:28:07:D8:F2:CB:7C:13:B3:F8:53:56:DB:B9:89:5F:32:67:09:C4:D2:DB:25:60:F4:40:DB:29:21:FA:27:CC"}}},"request":{"raw":"GET /banivision.woff HTTP/1.1\r\nHost: in-house-sf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://in-house-sf.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Feb 2026 13:06:44 GMT\r\nContent-Type: font/woff\r\nContent-Length: 2916\r\nConnection: keep-alive\r\nLast-Modified: Thu, 05 Feb 2026 16:48:08 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2916,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 2916, version 1.0","md5":"56bed2e9341c4bdd4939e9b267a162da","sha1":"da234af07d1ea4351561591a8ae143793b7bcaa4","sha256":"3072decb347551f08e08ea3945bdff68d93b5a7c8a5c746a4336b0c2d4a2f547","sha512":"fb09eee8ae97e5932439e5e4b555bc7927bfb514728e822206b2308db6bd9897c2abcb9dc8700fdced6cd7d75ee850096f9aa2bfa1ba788f50a8eb953c58d4fe","ssdeep":"","tlshash":"055129a07e02ae0bf64228bab5c01e7febe9c216e21322d24c61d6759eca480d555d72","first_seen":"2026-02-07T12:46:25.349783Z","last_seen":"2026-06-09T09:09:26.887215Z","times_seen":5,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"in-house-sf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"in-house-sf.com/favicon.ico","fqdn":"in-house-sf.com","domain":"in-house-sf.com","tld":"com"},"ip":{"addr":"69.13.61.33","port":443,"asn":54489,"as":"CORESPACE-DAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://in-house-sf.com/","date":"2026-02-07T13:06:45.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.in-house-sf.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 11:38:27 GMT","end":"Fri, 01 May 2026 11:38:26 GMT"},"fingerprint":{"sha1":"B7:67:39:22:5C:1A:5C:5D:C0:F2:AF:14:21:52:E4:51:33:D1:BC:EE","sha256":"EE:28:07:D8:F2:CB:7C:13:B3:F8:53:56:DB:B9:89:5F:32:67:09:C4:D2:DB:25:60:F4:40:DB:29:21:FA:27:CC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: in-house-sf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://in-house-sf.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sat, 07 Feb 2026 13:06:45 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10388,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4070)","md5":"02822acc7fb7f90e2adf3cb32831d77e","sha1":"f54094b710cdf45fba13abdb12fd1449cf3f6671","sha256":"91513cd4ed06e372e8ca7305e5f5c7fe561cf8322956a513b28ec3c4237a00dc","sha512":"38f35cf5c940bb1952571de68cc8960ba0ed0d3cf5bbb65e0d8b76662fc4e05349e94d12ea72a99fae691a7de8bb6488c6232513c51b744d75c46c3a9562f16e","ssdeep":"192:rlYHC0HNXGZkHQU7ydPJq5S2KqQVX/uTK3w3DK+tMy47R/Ga0kVhFuPwf8Pn93JE:FVGaRF8I8kZx3","tlshash":"7322a5a71ae3000b740361b96bab3201ab69e543d11fcd647f4db3d8cf869818d93b4e","first_seen":"2026-02-07T13:07:05.717959Z","last_seen":"2026-02-07T13:07:05.717959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"in-house-sf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"in-house-sf.com/banivision2.js","fqdn":"in-house-sf.com","domain":"in-house-sf.com","tld":"com"},"ip":{"addr":"69.13.61.33","port":443,"asn":54489,"as":"CORESPACE-DAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://in-house-sf.com/","date":"2026-02-07T13:06:43.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.in-house-sf.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 11:38:27 GMT","end":"Fri, 01 May 2026 11:38:26 GMT"},"fingerprint":{"sha1":"B7:67:39:22:5C:1A:5C:5D:C0:F2:AF:14:21:52:E4:51:33:D1:BC:EE","sha256":"EE:28:07:D8:F2:CB:7C:13:B3:F8:53:56:DB:B9:89:5F:32:67:09:C4:D2:DB:25:60:F4:40:DB:29:21:FA:27:CC"}}},"request":{"raw":"GET /banivision2.js HTTP/1.1\r\nHost: in-house-sf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://in-house-sf.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Feb 2026 13:06:44 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 7839\r\nConnection: keep-alive\r\nLast-Modified: Thu, 05 Feb 2026 16:48:08 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7839,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"5ab430d38f514cf477562d8fbb010386","sha1":"fad6b5add1d0e4c3816c489991a060aa142fa534","sha256":"eb52f427daea1adf6f122c905d82014e5469587aa24271486d72b348486cab94","sha512":"449020e4218bdba865935521b49a02c6abff62928f487a7538c46562cf53fc0b75cf5fe704311d18aadf83e4357e30a1dec5da143ed6ff99e4a1af0cce1c243b","ssdeep":"96:OYOL1MrUiVruf+Ji29NKji2uM3f+aNKFkSB:OLEXrJz9MMaQkSB","tlshash":"54f1db02b7fd2286773b30232a1b905d561d7d33a444bd41bcbdb4a24f5aab892de0dc","first_seen":"2026-02-07T12:46:25.338659Z","last_seen":"2026-02-07T13:07:05.7206Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1466,"timings":{"blocked":335,"dns":1,"connect":168,"send":0,"wait":785,"receive":1,"ssl":172},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"in-house-sf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"in-house-sf.com/banivision2.png","fqdn":"in-house-sf.com","domain":"in-house-sf.com","tld":"com"},"ip":{"addr":"69.13.61.33","port":443,"asn":54489,"as":"CORESPACE-DAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://in-house-sf.com/","date":"2026-02-07T13:06:44.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.in-house-sf.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 11:38:27 GMT","end":"Fri, 01 May 2026 11:38:26 GMT"},"fingerprint":{"sha1":"B7:67:39:22:5C:1A:5C:5D:C0:F2:AF:14:21:52:E4:51:33:D1:BC:EE","sha256":"EE:28:07:D8:F2:CB:7C:13:B3:F8:53:56:DB:B9:89:5F:32:67:09:C4:D2:DB:25:60:F4:40:DB:29:21:FA:27:CC"}}},"request":{"raw":"GET /banivision2.png HTTP/1.1\r\nHost: in-house-sf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://in-house-sf.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Feb 2026 13:06:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 271219\r\nConnection: keep-alive\r\nLast-Modified: Thu, 05 Feb 2026 16:48:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":271219,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1582 x 1055, 8-bit/color RGBA, non-interlaced","md5":"fd7ee42c722a392d8149a11baf66495c","sha1":"3482b8b987851bd70761a3ae51fc1fdb4009fa36","sha256":"ddb6b5706f83f5a11d4de018b5b1d40164ee2703f95e4ed6ba93a656f6b17edd","sha512":"82508d2c0fcf0bbb52cbb0053c59926abacf78acd0361c45c3c88219a7c5b6f1760016b55b582dc5a9bac65002d060fcbd4c560db914eab9fc0b04840e4e5dd3","ssdeep":"6144:ZM17xgwBmZA+5QgRULy4jmsC/RnLrCVSvMhfFAsLz/o:Zm7xgimZp1RV9xeVcefFlnA","tlshash":"3e44d185cf464e6a613e2d50e811011ff7810f2b9962cffa9e9f255b1a0fb250fb6c52","first_seen":"2023-05-10T00:34:00Z","last_seen":"2026-06-09T09:09:26.886215Z","times_seen":108,"resource_available":false,"data":null}},"time_used":1503,"timings":{"blocked":499,"dns":0,"connect":0,"send":0,"wait":338,"receive":666,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"in-house-sf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"in-house-sf.com/banivision.css","fqdn":"in-house-sf.com","domain":"in-house-sf.com","tld":"com"},"ip":{"addr":"69.13.61.33","port":443,"asn":54489,"as":"CORESPACE-DAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://in-house-sf.com/","date":"2026-02-07T13:06:44.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.in-house-sf.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 11:38:27 GMT","end":"Fri, 01 May 2026 11:38:26 GMT"},"fingerprint":{"sha1":"B7:67:39:22:5C:1A:5C:5D:C0:F2:AF:14:21:52:E4:51:33:D1:BC:EE","sha256":"EE:28:07:D8:F2:CB:7C:13:B3:F8:53:56:DB:B9:89:5F:32:67:09:C4:D2:DB:25:60:F4:40:DB:29:21:FA:27:CC"}}},"request":{"raw":"GET /banivision.css HTTP/1.1\r\nHost: in-house-sf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://in-house-sf.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Feb 2026 13:06:44 GMT\r\nContent-Type: text/css\r\nContent-Length: 76529\r\nConnection: keep-alive\r\nLast-Modified: Thu, 05 Feb 2026 16:48:08 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76529,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7957d115a07d53e2fa3d42385951fb8d","sha1":"52b7f285aaaf1e2f5e44a2444e1c1dfea74132ca","sha256":"013eac97c17e1ebc59501e4696c890963290e99b85279a49b9b365a72db17025","sha512":"99cecbf6e3c39c81e9228473ceec3d0118ada337919c3963e13d236c415b869602d89857baf3e35525936e27d6ed6fcdf7e3d470b03e52b666fd430b999ec9fa","ssdeep":"768:jICW4hz7E5T3LGrcqpH5/l3b/nnGDdSWjse1Dw+EAkdyY39UB+2PWrA2XU6BMxoq:Mgulw+EhNUB+2PWrA2XU6BMxoAFiO62","tlshash":"fa7395d469243d26903b873570d1bd4b62212402e773bebff6622db9cf9968b0e31e45","first_seen":"2026-02-07T12:46:25.340871Z","last_seen":"2026-06-09T09:09:26.889866Z","times_seen":5,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":338,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"in-house-sf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"in-house-sf.com/banivision.woff2","fqdn":"in-house-sf.com","domain":"in-house-sf.com","tld":"com"},"ip":{"addr":"69.13.61.33","port":443,"asn":54489,"as":"CORESPACE-DAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://in-house-sf.com/","date":"2026-02-07T13:06:44.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.in-house-sf.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 11:38:27 GMT","end":"Fri, 01 May 2026 11:38:26 GMT"},"fingerprint":{"sha1":"B7:67:39:22:5C:1A:5C:5D:C0:F2:AF:14:21:52:E4:51:33:D1:BC:EE","sha256":"EE:28:07:D8:F2:CB:7C:13:B3:F8:53:56:DB:B9:89:5F:32:67:09:C4:D2:DB:25:60:F4:40:DB:29:21:FA:27:CC"}}},"request":{"raw":"GET /banivision.woff2 HTTP/1.1\r\nHost: in-house-sf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://in-house-sf.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sat, 07 Feb 2026 13:06:44 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10393,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4070)","md5":"328a3a4dd9d5b4918e8d244cc973d847","sha1":"fabe48e7b9ceedfc99153d306a1b1d65113e249c","sha256":"f3cd54d1e24b54b44e6185ce301671cd05ba153883527c51a77f7af7ba6d8029","sha512":"25df014feb51f63e14abac9fa3e5e61b25a0944ddd009ec2177895f8271bfde08eb8c3686ba96e80fdcc0e539cfa606ce71a7fb1ee349b81475c22ad97981a0a","ssdeep":"192:rlYHC0HNXGZkHQU7ydPJq5S2KqQVX/uTK3w3DK+tMy47R/Ga0kVhFuPwf8Pn93J4:FVGaRF8I8pUx3","tlshash":"8122a5a71ae3000b740761b96bab3201ab69e553d11fcd647f4db3d8cf869818d93b4e","first_seen":"2026-02-07T13:07:05.725926Z","last_seen":"2026-02-07T13:07:05.725926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":667,"timings":{"blocked":480,"dns":0,"connect":0,"send":0,"wait":186,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"in-house-sf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"in-house-sf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}