{"report_id":"1acd369a-6aa8-4379-971d-df01ec3c813c","version":0,"status":"done","tags":[],"date":"2026-09-16T19:04:34Z","url":{"schema":"http","addr":"linuxsa.net/","fqdn":"linuxsa.net","domain":"linuxsa.net","tld":"net"},"ip":{"addr":"104.58.80.106","port":0,"asn":7018,"as":"AT\u0026T Enterprises, LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"linuxsa.net/","fqdn":"linuxsa.net","domain":"linuxsa.net","tld":"net"},"title":"TeKsyS Internet — Business Fibre Backed by Real Support","dom":{"size":19190,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (345)","md5":"3437586919dd118a69614df7e87ff26f","sha1":"8d533f63c2292612ab502a152d19844a09269afe","sha256":"9c2bd2bbbd449932ea199601bfde0917df93f6761d5f1816fd8e2587319cb0f4","sha512":"fd4db2d202eefab2119c6a35811d5cd00df867eb6365eee6aba6447e214ebf039bd14f590fbb7647a24deaedca7b9badd48e49b66828dcae07c78ec2be400342","ssdeep":"384:BriIINAglrrNBvFHGl5MqLdIQhW2EBQy6Cxe6klLcs:kIINAglPN5FHAqqBIQhW2EBQy6C0Lcs","tlshash":"70826511a1f52437416781c7aea51b277ebac147da490a00b37c07ed6fd3f8aed132a8","dom_hash":"domhash76da17cf9ea1ddce96c1ba6d81fcc268","first_seen":"2026-09-16T18:50:43.611727Z","last_seen":"2026-09-16T19:04:35.738308Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"linuxsa.net/","fqdn":"linuxsa.net","domain":"linuxsa.net","tld":"net"},"ip":{"addr":"104.58.80.106","port":0,"asn":7018,"as":"AT\u0026T Enterprises, LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-21T19:04:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"linuxsa.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"linuxsa.net","ip":{"addr":"104.58.80.106","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-16T18:50:39.409463Z","last_seen":"2026-09-16T18:50:39.409463Z","alert_count":35,"request_count":7,"received_data":47173,"sent_data":3400,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"linuxsa.net/js/main.js","fqdn":"linuxsa.net","domain":"linuxsa.net","tld":"net"},"ip":{"addr":"104.58.80.106","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40e955b9255fc4ba90e2973e8826edbd","sha1":"712ceac523a79d9425846db77609b2fb7ca2a473","sha256":"3b144fd15f5473d020f604ca4e47b4f32c05470c0d9c9a91ff18ea06dbcfd93d","sha512":"460711658fc3de0675e6f1268cee6d50aac8016c11cd83912929458be10df202340c8c6f1f1fd26d0082717ea0160fcf5c1900585299ef82b841e42bc118dc30","ssdeep":"","tlshash":"9d41240b3892107551fb79ba824f57003a7400431908c9123cacdbf66fb8d7aa97afdd","size":2159,"data":"","first_seen":"2026-09-16T18:50:43.62489Z","last_seen":"2026-09-16T19:04:35.760346Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"linuxsa.net/assets/images/logo.png","fqdn":"linuxsa.net","domain":"linuxsa.net","tld":"net"},"ip":{"addr":"104.58.80.106","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://linuxsa.net/","date":"2026-09-16T19:04:05.125Z","timestamp":1789585445125,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.linuxsa.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 02:09:00 GMT","end":"Tue, 10 Nov 2026 02:08:59 GMT"},"fingerprint":{"sha1":"48:77:6B:FE:E3:FE:F8:D1:1B:01:41:32:9A:3F:24:C4:B0:E9:75:09","sha256":"2A:D5:5A:DA:EA:AF:85:DE:6A:65:C4:AD:BA:FC:1D:FF:F6:9D:9D:08:F9:2E:81:0E:33:DA:3B:DC:6E:46:45:6F"}}},"request":{"raw":"GET /assets/images/logo.png HTTP/1.1\r\nHost: linuxsa.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://linuxsa.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Wed, 16 Sep 2026 19:04:05 GMT\r\nServer: Apache\r\nContent-Length: 358\r\nConnection: close\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":358,"size_decoded":522,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"54011b7adca4044805659b04f715ddb6","sha1":"611d29d307df28028b2c7beb6d4a0a33ae4ad3dd","sha256":"415ff807abb2fd49ce840d67bf14cb4d647e78afa9ab115c2b2dd8c8614928dd","sha512":"a2ff1f535dd98486fd1f3fce39e93a71063f6726642b267c7028f2fb8a7b9ae41832ae06dc641f89f6d7de0100fe2485b1b811524d55664d0ef2e40b1c1a2dd8","ssdeep":"","tlshash":"e9e0c05f916e521a5293e3c07dd01790e40262293dc216dda748a46790419bdc12a69c","first_seen":"2025-12-10T02:02:32.714406Z","last_seen":"2026-09-16T19:04:35.741755Z","times_seen":1980,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":210,"dns":0,"connect":114,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"linuxsa.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"linuxsa.net/assets/images/support.png","fqdn":"linuxsa.net","domain":"linuxsa.net","tld":"net"},"ip":{"addr":"104.58.80.106","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://linuxsa.net/","date":"2026-09-16T19:04:05.127Z","timestamp":1789585445127,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.linuxsa.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 02:09:00 GMT","end":"Tue, 10 Nov 2026 02:08:59 GMT"},"fingerprint":{"sha1":"48:77:6B:FE:E3:FE:F8:D1:1B:01:41:32:9A:3F:24:C4:B0:E9:75:09","sha256":"2A:D5:5A:DA:EA:AF:85:DE:6A:65:C4:AD:BA:FC:1D:FF:F6:9D:9D:08:F9:2E:81:0E:33:DA:3B:DC:6E:46:45:6F"}}},"request":{"raw":"GET /assets/images/support.png HTTP/1.1\r\nHost: linuxsa.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://linuxsa.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Wed, 16 Sep 2026 19:04:05 GMT\r\nServer: Apache\r\nContent-Length: 358\r\nConnection: close\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":358,"size_decoded":522,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"54011b7adca4044805659b04f715ddb6","sha1":"611d29d307df28028b2c7beb6d4a0a33ae4ad3dd","sha256":"415ff807abb2fd49ce840d67bf14cb4d647e78afa9ab115c2b2dd8c8614928dd","sha512":"a2ff1f535dd98486fd1f3fce39e93a71063f6726642b267c7028f2fb8a7b9ae41832ae06dc641f89f6d7de0100fe2485b1b811524d55664d0ef2e40b1c1a2dd8","ssdeep":"","tlshash":"e9e0c05f916e521a5293e3c07dd01790e40262293dc216dda748a46790419bdc12a69c","first_seen":"2025-12-10T02:02:32.714406Z","last_seen":"2026-09-16T19:04:35.741755Z","times_seen":1980,"resource_available":true,"data":null}},"time_used":553,"timings":{"blocked":209,"dns":0,"connect":112,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"linuxsa.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"linuxsa.net/assets/images/robot.jpg","fqdn":"linuxsa.net","domain":"linuxsa.net","tld":"net"},"ip":{"addr":"104.58.80.106","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://linuxsa.net/","date":"2026-09-16T19:04:05.128Z","timestamp":1789585445128,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.linuxsa.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 02:09:00 GMT","end":"Tue, 10 Nov 2026 02:08:59 GMT"},"fingerprint":{"sha1":"48:77:6B:FE:E3:FE:F8:D1:1B:01:41:32:9A:3F:24:C4:B0:E9:75:09","sha256":"2A:D5:5A:DA:EA:AF:85:DE:6A:65:C4:AD:BA:FC:1D:FF:F6:9D:9D:08:F9:2E:81:0E:33:DA:3B:DC:6E:46:45:6F"}}},"request":{"raw":"GET /assets/images/robot.jpg HTTP/1.1\r\nHost: linuxsa.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://linuxsa.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Wed, 16 Sep 2026 19:04:05 GMT\r\nServer: Apache\r\nContent-Length: 358\r\nConnection: close\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":358,"size_decoded":522,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"54011b7adca4044805659b04f715ddb6","sha1":"611d29d307df28028b2c7beb6d4a0a33ae4ad3dd","sha256":"415ff807abb2fd49ce840d67bf14cb4d647e78afa9ab115c2b2dd8c8614928dd","sha512":"a2ff1f535dd98486fd1f3fce39e93a71063f6726642b267c7028f2fb8a7b9ae41832ae06dc641f89f6d7de0100fe2485b1b811524d55664d0ef2e40b1c1a2dd8","ssdeep":"","tlshash":"e9e0c05f916e521a5293e3c07dd01790e40262293dc216dda748a46790419bdc12a69c","first_seen":"2025-12-10T02:02:32.714406Z","last_seen":"2026-09-16T19:04:35.741755Z","times_seen":1980,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":209,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"linuxsa.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"linuxsa.net/assets/images/wordmark.png","fqdn":"linuxsa.net","domain":"linuxsa.net","tld":"net"},"ip":{"addr":"104.58.80.106","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://linuxsa.net/","date":"2026-09-16T19:04:05.692Z","timestamp":1789585445692,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.linuxsa.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 02:09:00 GMT","end":"Tue, 10 Nov 2026 02:08:59 GMT"},"fingerprint":{"sha1":"48:77:6B:FE:E3:FE:F8:D1:1B:01:41:32:9A:3F:24:C4:B0:E9:75:09","sha256":"2A:D5:5A:DA:EA:AF:85:DE:6A:65:C4:AD:BA:FC:1D:FF:F6:9D:9D:08:F9:2E:81:0E:33:DA:3B:DC:6E:46:45:6F"}}},"request":{"raw":"GET /assets/images/wordmark.png HTTP/1.1\r\nHost: linuxsa.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://linuxsa.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Wed, 16 Sep 2026 19:04:05 GMT\r\nServer: Apache\r\nContent-Length: 358\r\nConnection: close\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":358,"size_decoded":522,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"54011b7adca4044805659b04f715ddb6","sha1":"611d29d307df28028b2c7beb6d4a0a33ae4ad3dd","sha256":"415ff807abb2fd49ce840d67bf14cb4d647e78afa9ab115c2b2dd8c8614928dd","sha512":"a2ff1f535dd98486fd1f3fce39e93a71063f6726642b267c7028f2fb8a7b9ae41832ae06dc641f89f6d7de0100fe2485b1b811524d55664d0ef2e40b1c1a2dd8","ssdeep":"","tlshash":"e9e0c05f916e521a5293e3c07dd01790e40262293dc216dda748a46790419bdc12a69c","first_seen":"2025-12-10T02:02:32.714406Z","last_seen":"2026-09-16T19:04:35.741755Z","times_seen":1980,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"linuxsa.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"linuxsa.net/","fqdn":"linuxsa.net","domain":"linuxsa.net","tld":"net"},"ip":{"addr":"104.58.80.106","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-16T19:04:04.279Z","timestamp":1789585444279,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.linuxsa.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 02:09:00 GMT","end":"Tue, 10 Nov 2026 02:08:59 GMT"},"fingerprint":{"sha1":"48:77:6B:FE:E3:FE:F8:D1:1B:01:41:32:9A:3F:24:C4:B0:E9:75:09","sha256":"2A:D5:5A:DA:EA:AF:85:DE:6A:65:C4:AD:BA:FC:1D:FF:F6:9D:9D:08:F9:2E:81:0E:33:DA:3B:DC:6E:46:45:6F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: linuxsa.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 16 Sep 2026 19:04:04 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 10 Aug 2026 14:56:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 18367\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":18367,"size_decoded":18611,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (319)","md5":"04324668c0ed6749fe4d1a5b4adea295","sha1":"80d811c999a3e629ba830acd84e577835639c1ef","sha256":"6d5936c943e680c47f627b80bab696cc21b2de5af35852ff6834289d9d4bf41b","sha512":"0e8e6961733701b72836fb55f5b2070f64c86ec23597b34827fe892293ca18ce9297beb54c9a48388aaccfd790159eadb5b3f80b3b9631959f0436c07469f9e1","ssdeep":"192:dumIISSsJ1gigpbt1fEx77R/tChxeVad8xEHjQf4:dtIIIRgpDfEdR2xea1p","tlshash":"7c826221a0f9603b416781d6ae6917272ff6c157d94d1a00b2bc4bec2fd3f86ed13299","first_seen":"2026-09-16T18:50:43.617773Z","last_seen":"2026-09-16T19:04:35.742836Z","times_seen":2,"resource_available":false,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":49,"connect":113,"send":0,"wait":221,"receive":3,"ssl":233},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"linuxsa.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"linuxsa.net/css/styles.css","fqdn":"linuxsa.net","domain":"linuxsa.net","tld":"net"},"ip":{"addr":"104.58.80.106","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://linuxsa.net/","date":"2026-09-16T19:04:05.116Z","timestamp":1789585445116,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.linuxsa.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 02:09:00 GMT","end":"Tue, 10 Nov 2026 02:08:59 GMT"},"fingerprint":{"sha1":"48:77:6B:FE:E3:FE:F8:D1:1B:01:41:32:9A:3F:24:C4:B0:E9:75:09","sha256":"2A:D5:5A:DA:EA:AF:85:DE:6A:65:C4:AD:BA:FC:1D:FF:F6:9D:9D:08:F9:2E:81:0E:33:DA:3B:DC:6E:46:45:6F"}}},"request":{"raw":"GET /css/styles.css HTTP/1.1\r\nHost: linuxsa.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://linuxsa.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 16 Sep 2026 19:04:05 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 27 Jul 2026 13:26:10 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 23824\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":23824,"size_decoded":24066,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (308)","md5":"77c8418aa65e0016fe602dd620ea9370","sha1":"14530147efb14afb0e2a5137c99600b810b21228","sha256":"94b9e5931c5a08763dfc2243e3ecb1b17f1206762df54896c986fc09c5a80b70","sha512":"749763c8a3d1523ceab54d64ffedd4295e3aa4f3826773f0b90a9f88e310befeda85bb1afc1ff369174589d0cf5366f9a62c05979df1c897dd283e90967fcec3","ssdeep":"384:u+bVy2Dwy1Ezh+LJEHcrxl+V+LEM6LvMLixmWssYDrHwyukMQMoxlc:fZy2Dwy1EF+Lwcrf+V+LyAixmWssgHwj","tlshash":"18b2b9165f101218b157d9a57dd7a74ef33da003920676bdae9e5088c3ce3ec827eb89","first_seen":"2026-09-16T18:50:43.622092Z","last_seen":"2026-09-16T19:04:35.75872Z","times_seen":2,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"linuxsa.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"linuxsa.net/js/main.js","fqdn":"linuxsa.net","domain":"linuxsa.net","tld":"net"},"ip":{"addr":"104.58.80.106","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://linuxsa.net/","date":"2026-09-16T19:04:05.118Z","timestamp":1789585445118,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.linuxsa.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 02:09:00 GMT","end":"Tue, 10 Nov 2026 02:08:59 GMT"},"fingerprint":{"sha1":"48:77:6B:FE:E3:FE:F8:D1:1B:01:41:32:9A:3F:24:C4:B0:E9:75:09","sha256":"2A:D5:5A:DA:EA:AF:85:DE:6A:65:C4:AD:BA:FC:1D:FF:F6:9D:9D:08:F9:2E:81:0E:33:DA:3B:DC:6E:46:45:6F"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: linuxsa.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://linuxsa.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 16 Sep 2026 19:04:05 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 08 Aug 2026 10:30:23 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2159\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2159,"size_decoded":2408,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"40e955b9255fc4ba90e2973e8826edbd","sha1":"712ceac523a79d9425846db77609b2fb7ca2a473","sha256":"3b144fd15f5473d020f604ca4e47b4f32c05470c0d9c9a91ff18ea06dbcfd93d","sha512":"460711658fc3de0675e6f1268cee6d50aac8016c11cd83912929458be10df202340c8c6f1f1fd26d0082717ea0160fcf5c1900585299ef82b841e42bc118dc30","ssdeep":"","tlshash":"9d41240b3892107551fb79ba824f57003a7400431908c9123cacdbf66fb8d7aa97afdd","first_seen":"2026-09-16T18:50:43.62489Z","last_seen":"2026-09-16T19:04:35.760346Z","times_seen":2,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":116,"send":0,"wait":116,"receive":0,"ssl":122},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"linuxsa.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"linuxsa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}