{"report_id":"1eb44ad6-988d-495d-9fa0-f427d7de6a34","version":0,"status":"done","tags":["google"],"date":"2026-10-07T07:45:12Z","url":{"schema":"http","addr":"azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":0,"asn":205759,"as":"Ghosty Networks LLC","country":"Seychelles","country_code":"SC"},"final":{"url":{"schema":"https","addr":"azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"title":"Sign in - Google Accounts","dom":{"size":291818,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (494)","md5":"befc1a56c99d80f9ce1bca68ad7cc2e2","sha1":"34d93d539ec2fe64f9e34828895cb7810910a78d","sha256":"5f762e0edc2f730da2bd4cc398aafd1083168a678620c005ac807ec5c8d8bc21","sha512":"2d3107ce58a8d6c252ae021436459862100223dbb4458309e5d0b142b2e2d32fb1681f8cf488ac12e4524fa59eec6a660511de3acb2d6180f5611a6cccd46f43","ssdeep":"3072:wM56Oo+UQ/4t4z2yurKb3LjXoUfwvBU2/4t4z2yurKb3LjXoUfwvBUPKKACO:wM5jo+Us4BubnXoUIvr4BubnXoUIvKK7","tlshash":"05546bfadd72105ba823317a12efc658af78d843e519afa17dcc3106cf887e914a6741","dom_hash":"domhash425b263e0d23e706e180ea11318b4c3e","first_seen":"2026-10-05T04:55:38.982895Z","last_seen":"2026-10-07T07:45:15.490307Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":0,"asn":205759,"as":"Ghosty Networks LLC","country":"Seychelles","country_code":"SC"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T07:45:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]},"summary":[{"fqdn":"azure-sync.tools","ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-05T04:55:35.047681Z","last_seen":"2026-10-05T04:55:35.047681Z","alert_count":148,"request_count":50,"received_data":352149,"sent_data":24446,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a9ac5a682e4924270e60252e5639ccc","sha1":"facbca7a2cd660f3ed2a129cbf59818a2f0a0312","sha256":"c6a28dc1854d40dd8fa036c7c7cd5ce0da3104e74be5603884eae613444a2ca9","sha512":"57e7c76bad56cf29bfc1cab7c22b7a28e9ce2115e6a8fcb3f335306c4ccddbe3fc4bcd29ee89989af76cddb284cb0c2e2f30719dc47199fa897fab1a0647f0d2","ssdeep":"","tlshash":"b6018ce7610706b00eeb81ec784a783050b74146313cdad37936e5053e18e4a033b9ec","size":851,"data":"","first_seen":"2026-10-05T04:55:38.99509Z","last_seen":"2026-10-07T07:45:15.504517Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"acf72c01685495008dde335ed7532469","sha1":"a2d878c1f6b247cd33c4d8a5920eff202b8a4c6a","sha256":"cff8460e9445e52a869abf421d9ab42eaa9161afb4fdeb7137028813b8592b44","sha512":"f4d4f1a928bb5e54328e3074fed3af7c814325f7a1a587df4951eeb75f520884be2238ae69ea384b3de27fa9c21991b3868bf95e76dc1337c993397a8f4bacea","ssdeep":"","tlshash":"3bb012998901206415b902c4e3132a0025d6c40010085f85d19082561d47807801c4e3","size":88,"data":"","first_seen":"2026-10-05T04:55:38.996487Z","last_seen":"2026-10-07T07:45:15.50761Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"09c5c4f968cf59fdf2e56887f627b6f2","sha1":"a5854aa8a5c095d88947179998764ec06c6c8c9b","sha256":"ee3b25ebf6d2734454fb12ad86a1a6c965679a742f83db14b4b1e6e8b3fbd005","sha512":"1cf3d558c251b5a231315546a2ca31371411e189ddb695e3ff6ca037ac0ef37bf791b2c5233ed40966b58231878dbf794c022b6ad0367ff9d0311fdfc9189a35","ssdeep":"","tlshash":"f501cbbfb90a025515b710bce96b40085933c3030d25cad7b689e1821f38b2d264f8ad","size":722,"data":"","first_seen":"2026-10-05T04:55:38.997806Z","last_seen":"2026-10-07T07:45:15.508997Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"azure-sync.tools/js/template-client.js?v=73","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"972c7c6217d29b78758497e4c4ac7500","sha1":"7f859e13d661b62136931882c254e3d3198541e3","sha256":"f6aad89e7c5769ebc742201352ce390f7a82449bf0461ae0043c539aff8b2964","sha512":"92bde69e6d8d39d133a444fac3b13694e7c5b00bb6ecd1cb63df32336a7c0217aa6cfee63007a95022203c77b6eb072b40f6237111d11a9d4faf2384421ce648","ssdeep":"384:T/3+KZ9/D8kUFjysMRruecaLI7C/Ro6hV1Srs203vimpqdgiOJPw7Ut6LwiK9gIh:TvPBcFGrueczC/N4N2K0N+K","tlshash":"6b03a59aa9f325b5d5a3713c4bef6018323780172409cd51bdacd3586fa0fa5037abda","size":41230,"data":"","first_seen":"2026-10-05T04:55:38.993572Z","last_seen":"2026-10-07T07:45:41.555515Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:51.520Z","timestamp":1791359091520,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:51 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=78\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:59.534Z","timestamp":1791359099534,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:59 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=69\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:59.935Z","timestamp":1791359099935,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:59 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=68\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1267,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bot-relay","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:45.563Z","timestamp":1791359085563,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"POST /bot-relay HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 84\r\nOrigin: https://azure-sync.tools\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"POST","post_data":{"size":84,"data":"{\"type\":\"ensure_bot\",\"value\":\"\",\"email\":\"\",\"uid\":\"84a51fa8c99fde41594ebb170eebbd43\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:45 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=84\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":59,"size_decoded":294,"mime_type":"application/json","magic":"JSON text data","md5":"71b7d3a59f7299a4356931629f23f811","sha1":"11f6c95189e1c926d9e1bf17be8373367db9cac3","sha256":"e97e417056632638d382ad6ee296b3f14ab60803f3d26cd751643d32b3c842f4","sha512":"056bb293b92a5dd341f61c947d299368f9e8ef7fec2f93f3b5341217e3eb5d21b03809d0cfde711cbc69819ebeaeb07872aef1d2fec7037f7a2074dea3ece1ce","ssdeep":"","tlshash":"81a002036505817ac2026284197d3f15197c04b3800009dc658d13449535f435447457","first_seen":"2026-10-05T04:55:38.991126Z","last_seen":"2026-10-07T07:45:41.556147Z","times_seen":3,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359092381","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:52.383Z","timestamp":1791359092383,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359092381 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:51 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":309,"mime_type":"application/json","magic":"JSON text data","md5":"3498c6c9e5c57b538a326c93ffb5f383","sha1":"6efdcaed88ab707379493de57fd3db03e78ee1de","sha256":"f8df518f4aef15474105c24bb1460be346e4c254452ae65db102385125e2cb31","sha512":"bb94f0772e6c347bdcae295323040b5c8502fb936d7157fc5f747c2fe4252a79a25ba27c75de289123746144c98208ab1783d5533611711d2c33f9a35ec1d7d3","ssdeep":"","tlshash":"509002092000053bc4d5014585003f6a06bc07337000398c78195522356748d2191157","first_seen":"2026-10-05T04:55:38.988657Z","last_seen":"2026-10-07T07:45:41.551543Z","times_seen":3,"resource_available":true,"data":null}},"time_used":731,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":731,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T07:44:33.732Z","timestamp":1791359073732,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:33 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: text/html; charset=utf-8\r\nCache-Control: no-cache, no-store, must-revalidate\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nSet-Cookie: _gsid=84a51fa8c99fde41594ebb170eebbd43; Path=/; HttpOnly; SameSite=Lax\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43","quoted":false,"path":"/","secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"_gsid=84a51fa8c99fde41594ebb170eebbd43; Path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":291867,"size_decoded":131012,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (494)","md5":"96493f61d80944e164702e555776c9aa","sha1":"1fe7c25390210d141766ea09f74158d14294fac1","sha256":"f8f0f8bb43a9e3b58521fadf7a97d8b2c15177a58c279ea18e45eb183dbac08c","sha512":"21bcd5d9d9cd9ac682847cf1d650a533d108fd9c05c8e4e76819f887d3b1e71b2b0d3fbaee36596111b48fecf4be23223f885b6f8434679498c66d7cbf8c5683","ssdeep":"3072:EM56Oo+UQ/4t4z2yurKb3LjXoUfwvBU2/4t4z2yurKb3LjXoUfwvBUPKKyCO:EM5jo+Us4BubnXoUIvr4BubnXoUIvKK3","tlshash":"4b546bfadd72105ba823317a12efc658af78d843e519afa17dcc3106cf887e914a6741","first_seen":"2026-10-05T04:55:38.985348Z","last_seen":"2026-10-07T07:45:15.499866Z","times_seen":2,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359076312","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:36.315Z","timestamp":1791359076315,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359076312 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:35 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":309,"mime_type":"application/json","magic":"JSON text data","md5":"3498c6c9e5c57b538a326c93ffb5f383","sha1":"6efdcaed88ab707379493de57fd3db03e78ee1de","sha256":"f8df518f4aef15474105c24bb1460be346e4c254452ae65db102385125e2cb31","sha512":"bb94f0772e6c347bdcae295323040b5c8502fb936d7157fc5f747c2fe4252a79a25ba27c75de289123746144c98208ab1783d5533611711d2c33f9a35ec1d7d3","ssdeep":"","tlshash":"509002092000053bc4d5014585003f6a06bc07337000398c78195522356748d2191157","first_seen":"2026-10-05T04:55:38.988657Z","last_seen":"2026-10-07T07:45:41.551543Z","times_seen":3,"resource_available":true,"data":null}},"time_used":829,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":829,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:39.449Z","timestamp":1791359079449,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:39 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:45.914Z","timestamp":1791359085914,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:45 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=83\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359088345","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:48.347Z","timestamp":1791359088347,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359088345 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:47 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":309,"mime_type":"application/json","magic":"JSON text data","md5":"3498c6c9e5c57b538a326c93ffb5f383","sha1":"6efdcaed88ab707379493de57fd3db03e78ee1de","sha256":"f8df518f4aef15474105c24bb1460be346e4c254452ae65db102385125e2cb31","sha512":"bb94f0772e6c347bdcae295323040b5c8502fb936d7157fc5f747c2fe4252a79a25ba27c75de289123746144c98208ab1783d5533611711d2c33f9a35ec1d7d3","ssdeep":"","tlshash":"509002092000053bc4d5014585003f6a06bc07337000398c78195522356748d2191157","first_seen":"2026-10-05T04:55:38.988657Z","last_seen":"2026-10-07T07:45:41.551543Z","times_seen":3,"resource_available":true,"data":null}},"time_used":806,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":806,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T07:44:33.442Z","timestamp":1791359073442,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Wed, 07 Oct 2026 07:44:33 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLocation: /login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1\r\nCache-Control: no-cache, no-store, must-revalidate\r\nSet-Cookie: _gsid=84a51fa8c99fde41594ebb170eebbd43; Path=/; HttpOnly; SameSite=Lax\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43","quoted":false,"path":"/","secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"_gsid=84a51fa8c99fde41594ebb170eebbd43; Path=/; HttpOnly; SameSite=Lax"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T09:40:59.908662Z","times_seen":18910667,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":100,"connect":41,"send":0,"wait":43,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359086381","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:46.383Z","timestamp":1791359086383,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359086381 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:45 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":309,"mime_type":"application/json","magic":"JSON text data","md5":"3498c6c9e5c57b538a326c93ffb5f383","sha1":"6efdcaed88ab707379493de57fd3db03e78ee1de","sha256":"f8df518f4aef15474105c24bb1460be346e4c254452ae65db102385125e2cb31","sha512":"bb94f0772e6c347bdcae295323040b5c8502fb936d7157fc5f747c2fe4252a79a25ba27c75de289123746144c98208ab1783d5533611711d2c33f9a35ec1d7d3","ssdeep":"","tlshash":"509002092000053bc4d5014585003f6a06bc07337000398c78195522356748d2191157","first_seen":"2026-10-05T04:55:38.988657Z","last_seen":"2026-10-07T07:45:41.551543Z","times_seen":3,"resource_available":true,"data":null}},"time_used":758,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":758,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:47.485Z","timestamp":1791359087485,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:47 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=82\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:47.883Z","timestamp":1791359087883,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:47 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=81\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:49.896Z","timestamp":1791359089896,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:49 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=79\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1269,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359090357","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:50.359Z","timestamp":1791359090359,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359090357 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:49 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":309,"mime_type":"application/json","magic":"JSON text data","md5":"3498c6c9e5c57b538a326c93ffb5f383","sha1":"6efdcaed88ab707379493de57fd3db03e78ee1de","sha256":"f8df518f4aef15474105c24bb1460be346e4c254452ae65db102385125e2cb31","sha512":"bb94f0772e6c347bdcae295323040b5c8502fb936d7157fc5f747c2fe4252a79a25ba27c75de289123746144c98208ab1783d5533611711d2c33f9a35ec1d7d3","ssdeep":"","tlshash":"509002092000053bc4d5014585003f6a06bc07337000398c78195522356748d2191157","first_seen":"2026-10-05T04:55:38.988657Z","last_seen":"2026-10-07T07:45:41.551543Z","times_seen":3,"resource_available":true,"data":null}},"time_used":819,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":819,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:45:01.558Z","timestamp":1791359101558,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:45:01 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=67\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"wss","addr":"wss://azure-sync.tools/bot-ws","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:35.126Z","timestamp":1791359075126,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bot-ws HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://azure-sync.tools\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Gd4uT9T8sUFtOaNh/lU7lA==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nSec-WebSocket-Accept: XQ8cBpHXgxOiBEBDFSMydLCz3NE=\r\nConnection: Upgrade\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":129,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T09:40:59.908662Z","times_seen":18910667,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":44,"send":0,"wait":45,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:36.131Z","timestamp":1791359076131,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:35 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1013,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1013,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bot-relay","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:37.547Z","timestamp":1791359077547,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"POST /bot-relay HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 84\r\nOrigin: https://azure-sync.tools\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"POST","post_data":{"size":84,"data":"{\"type\":\"ensure_bot\",\"value\":\"\",\"email\":\"\",\"uid\":\"84a51fa8c99fde41594ebb170eebbd43\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:37 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":59,"size_decoded":294,"mime_type":"application/json","magic":"JSON text data","md5":"71b7d3a59f7299a4356931629f23f811","sha1":"11f6c95189e1c926d9e1bf17be8373367db9cac3","sha256":"e97e417056632638d382ad6ee296b3f14ab60803f3d26cd751643d32b3c842f4","sha512":"056bb293b92a5dd341f61c947d299368f9e8ef7fec2f93f3b5341217e3eb5d21b03809d0cfde711cbc69819ebeaeb07872aef1d2fec7037f7a2074dea3ece1ce","ssdeep":"","tlshash":"81a002036505817ac2026284197d3f15197c04b3800009dc658d13449535f435447457","first_seen":"2026-10-05T04:55:38.991126Z","last_seen":"2026-10-07T07:45:41.556147Z","times_seen":3,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359082360","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:42.362Z","timestamp":1791359082362,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359082360 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:41 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":309,"mime_type":"application/json","magic":"JSON text data","md5":"3498c6c9e5c57b538a326c93ffb5f383","sha1":"6efdcaed88ab707379493de57fd3db03e78ee1de","sha256":"f8df518f4aef15474105c24bb1460be346e4c254452ae65db102385125e2cb31","sha512":"bb94f0772e6c347bdcae295323040b5c8502fb936d7157fc5f747c2fe4252a79a25ba27c75de289123746144c98208ab1783d5533611711d2c33f9a35ec1d7d3","ssdeep":"","tlshash":"509002092000053bc4d5014585003f6a06bc07337000398c78195522356748d2191157","first_seen":"2026-10-05T04:55:38.988657Z","last_seen":"2026-10-07T07:45:41.551543Z","times_seen":3,"resource_available":true,"data":null}},"time_used":810,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":810,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:58.237Z","timestamp":1791359098237,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:57 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=70\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":941,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":941,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359098301","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:58.302Z","timestamp":1791359098302,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359098301 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:57 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=88\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":309,"mime_type":"application/json","magic":"JSON text data","md5":"3498c6c9e5c57b538a326c93ffb5f383","sha1":"6efdcaed88ab707379493de57fd3db03e78ee1de","sha256":"f8df518f4aef15474105c24bb1460be346e4c254452ae65db102385125e2cb31","sha512":"bb94f0772e6c347bdcae295323040b5c8502fb936d7157fc5f747c2fe4252a79a25ba27c75de289123746144c98208ab1783d5533611711d2c33f9a35ec1d7d3","ssdeep":"","tlshash":"509002092000053bc4d5014585003f6a06bc07337000398c78195522356748d2191157","first_seen":"2026-10-05T04:55:38.988657Z","last_seen":"2026-10-07T07:45:41.551543Z","times_seen":3,"resource_available":true,"data":null}},"time_used":873,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":873,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/img/google-g.svg","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:34.093Z","timestamp":1791359074093,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /img/google-g.svg HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:33 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: image/svg+xml\r\nCache-Control: public, max-age=3600\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3949,"size_decoded":4187,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"75db013d66bf0b088f966d46cb5c2fda","sha1":"f84ffcf92bd17836fd1aa98b9e5f96e930057970","sha256":"e0b34d56b5676a35f583195ec90f3e7494be9364d26fc1bf7a25b0ce9c73b501","sha512":"4882b17a5243eda1b87a9967e9168a0731a8a145f9cdd665e800afab02f92dcc3ba47c5cbbb72e166a0330ddc5c981dc47d4aab51081571945c259803e8c41ad","ssdeep":"","tlshash":"2e814b72820ce6add2be91646a36cc64e84a35dd339b17cb36496712704cdb49aa9c84","first_seen":"2026-08-04T02:39:40.836954Z","last_seen":"2026-10-07T10:24:15.176516Z","times_seen":1964,"resource_available":false,"data":null}},"time_used":1009,"timings":{"blocked":-1,"dns":0,"connect":45,"send":0,"wait":919,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:35.327Z","timestamp":1791359075327,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:35 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:37.897Z","timestamp":1791359077897,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:37 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:39.848Z","timestamp":1791359079848,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:39 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=90\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359080311","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:40.312Z","timestamp":1791359080312,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359080311 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:39 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":309,"mime_type":"application/json","magic":"JSON text data","md5":"3498c6c9e5c57b538a326c93ffb5f383","sha1":"6efdcaed88ab707379493de57fd3db03e78ee1de","sha256":"f8df518f4aef15474105c24bb1460be346e4c254452ae65db102385125e2cb31","sha512":"bb94f0772e6c347bdcae295323040b5c8502fb936d7157fc5f747c2fe4252a79a25ba27c75de289123746144c98208ab1783d5533611711d2c33f9a35ec1d7d3","ssdeep":"","tlshash":"509002092000053bc4d5014585003f6a06bc07337000398c78195522356748d2191157","first_seen":"2026-10-05T04:55:38.988657Z","last_seen":"2026-10-07T07:45:41.551543Z","times_seen":3,"resource_available":true,"data":null}},"time_used":844,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":844,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:41.895Z","timestamp":1791359081895,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:41 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=88\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:43.515Z","timestamp":1791359083515,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:43 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=87\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:43.914Z","timestamp":1791359083914,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:43 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=86\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:45.516Z","timestamp":1791359085516,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:45 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=85\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:53.458Z","timestamp":1791359093458,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:53 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=76\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:53.856Z","timestamp":1791359093856,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:53 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=75\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1307,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359094318","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:54.320Z","timestamp":1791359094320,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359094318 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:53 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=90\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":309,"mime_type":"application/json","magic":"JSON text data","md5":"3498c6c9e5c57b538a326c93ffb5f383","sha1":"6efdcaed88ab707379493de57fd3db03e78ee1de","sha256":"f8df518f4aef15474105c24bb1460be346e4c254452ae65db102385125e2cb31","sha512":"bb94f0772e6c347bdcae295323040b5c8502fb936d7157fc5f747c2fe4252a79a25ba27c75de289123746144c98208ab1783d5533611711d2c33f9a35ec1d7d3","ssdeep":"","tlshash":"509002092000053bc4d5014585003f6a06bc07337000398c78195522356748d2191157","first_seen":"2026-10-05T04:55:38.988657Z","last_seen":"2026-10-07T07:45:41.551543Z","times_seen":3,"resource_available":true,"data":null}},"time_used":857,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":857,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:55.525Z","timestamp":1791359095525,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:55 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=74\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:55.925Z","timestamp":1791359095925,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:55 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=73\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359096380","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:56.382Z","timestamp":1791359096382,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359096380 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:55 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=89\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":49,"size_decoded":309,"mime_type":"application/json","magic":"JSON text data","md5":"3498c6c9e5c57b538a326c93ffb5f383","sha1":"6efdcaed88ab707379493de57fd3db03e78ee1de","sha256":"f8df518f4aef15474105c24bb1460be346e4c254452ae65db102385125e2cb31","sha512":"bb94f0772e6c347bdcae295323040b5c8502fb936d7157fc5f747c2fe4252a79a25ba27c75de289123746144c98208ab1783d5533611711d2c33f9a35ec1d7d3","ssdeep":"","tlshash":"509002092000053bc4d5014585003f6a06bc07337000398c78195522356748d2191157","first_seen":"2026-10-05T04:55:38.988657Z","last_seen":"2026-10-07T07:45:41.551543Z","times_seen":3,"resource_available":true,"data":null}},"time_used":714,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":714,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:57.436Z","timestamp":1791359097436,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:57 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=72\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359074080","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:34.098Z","timestamp":1791359074098,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359074080 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:33 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":310,"mime_type":"application/json","magic":"JSON text data","md5":"3498c6c9e5c57b538a326c93ffb5f383","sha1":"6efdcaed88ab707379493de57fd3db03e78ee1de","sha256":"f8df518f4aef15474105c24bb1460be346e4c254452ae65db102385125e2cb31","sha512":"bb94f0772e6c347bdcae295323040b5c8502fb936d7157fc5f747c2fe4252a79a25ba27c75de289123746144c98208ab1783d5533611711d2c33f9a35ec1d7d3","ssdeep":"","tlshash":"509002092000053bc4d5014585003f6a06bc07337000398c78195522356748d2191157","first_seen":"2026-10-05T04:55:38.988657Z","last_seen":"2026-10-07T07:45:41.551543Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1009,"timings":{"blocked":-1,"dns":0,"connect":42,"send":0,"wait":922,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:35.732Z","timestamp":1791359075732,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:35 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:37.499Z","timestamp":1791359077499,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:37 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:49.498Z","timestamp":1791359089498,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:49 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=80\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:51.918Z","timestamp":1791359091918,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:51 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=77\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1185,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:57.836Z","timestamp":1791359097836,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:57 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=71\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359100379","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:45:00.381Z","timestamp":1791359100381,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359100379 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:59 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=87\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":309,"mime_type":"application/json","magic":"JSON text data","md5":"3498c6c9e5c57b538a326c93ffb5f383","sha1":"6efdcaed88ab707379493de57fd3db03e78ee1de","sha256":"f8df518f4aef15474105c24bb1460be346e4c254452ae65db102385125e2cb31","sha512":"bb94f0772e6c347bdcae295323040b5c8502fb936d7157fc5f747c2fe4252a79a25ba27c75de289123746144c98208ab1783d5533611711d2c33f9a35ec1d7d3","ssdeep":"","tlshash":"509002092000053bc4d5014585003f6a06bc07337000398c78195522356748d2191157","first_seen":"2026-10-05T04:55:38.988657Z","last_seen":"2026-10-07T07:45:41.551543Z","times_seen":3,"resource_available":true,"data":null}},"time_used":838,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":838,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359084376","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:44.378Z","timestamp":1791359084378,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359084376 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:43 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":309,"mime_type":"application/json","magic":"JSON text data","md5":"3498c6c9e5c57b538a326c93ffb5f383","sha1":"6efdcaed88ab707379493de57fd3db03e78ee1de","sha256":"f8df518f4aef15474105c24bb1460be346e4c254452ae65db102385125e2cb31","sha512":"bb94f0772e6c347bdcae295323040b5c8502fb936d7157fc5f747c2fe4252a79a25ba27c75de289123746144c98208ab1783d5533611711d2c33f9a35ec1d7d3","ssdeep":"","tlshash":"509002092000053bc4d5014585003f6a06bc07337000398c78195522356748d2191157","first_seen":"2026-10-05T04:55:38.988657Z","last_seen":"2026-10-07T07:45:41.551543Z","times_seen":3,"resource_available":true,"data":null}},"time_used":799,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":799,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/js/template-client.js?v=73","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:34.089Z","timestamp":1791359074089,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /js/template-client.js?v=73 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:33 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/javascript\r\nCache-Control: public, max-age=3600\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 10273\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":41236,"size_decoded":10561,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (302)","md5":"972c7c6217d29b78758497e4c4ac7500","sha1":"7f859e13d661b62136931882c254e3d3198541e3","sha256":"f6aad89e7c5769ebc742201352ce390f7a82449bf0461ae0043c539aff8b2964","sha512":"92bde69e6d8d39d133a444fac3b13694e7c5b00bb6ecd1cb63df32336a7c0217aa6cfee63007a95022203c77b6eb072b40f6237111d11a9d4faf2384421ce648","ssdeep":"384:T/3+KZ9/D8kUFjysMRruecaLI7C/Ro6hV1Srs203vimpqdgiOJPw7Ut6LwiK9gIh:TvPBcFGrueczC/N4N2K0N+K","tlshash":"6b03a59aa9f325b5d5a3713c4bef6018323780172409cd51bdacd3586fa0fa5037abda","first_seen":"2026-10-05T04:55:38.993572Z","last_seen":"2026-10-07T07:45:41.555515Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1019,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1015,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359078349","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:38.351Z","timestamp":1791359078351,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /tgate?uid=84a51fa8c99fde41594ebb170eebbd43\u0026_=1791359078349 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:37 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":309,"mime_type":"application/json","magic":"JSON text data","md5":"3498c6c9e5c57b538a326c93ffb5f383","sha1":"6efdcaed88ab707379493de57fd3db03e78ee1de","sha256":"f8df518f4aef15474105c24bb1460be346e4c254452ae65db102385125e2cb31","sha512":"bb94f0772e6c347bdcae295323040b5c8502fb936d7157fc5f747c2fe4252a79a25ba27c75de289123746144c98208ab1783d5533611711d2c33f9a35ec1d7d3","ssdeep":"","tlshash":"509002092000053bc4d5014585003f6a06bc07337000398c78195522356748d2191157","first_seen":"2026-10-05T04:55:38.988657Z","last_seen":"2026-10-07T07:45:41.551543Z","times_seen":3,"resource_available":true,"data":null}},"time_used":756,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":756,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"azure-sync.tools/bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43","fqdn":"azure-sync.tools","domain":"azure-sync.tools","tld":"tools"},"ip":{"addr":"196.251.121.25","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://azure-sync.tools/login?uid=84a51fa8c99fde41594ebb170eebbd43\u0026s=loading\u0026verifying=1\u0026riskPending=1\u0026gateHold=1","date":"2026-10-07T07:44:41.496Z","timestamp":1791359081496,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"azure-sync.tools","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 22:55:48 GMT","end":"Tue, 10 Nov 2026 22:55:47 GMT"},"fingerprint":{"sha1":"D1:E2:70:75:CE:1D:1C:98:D2:FF:85:98:AE:4B:98:E1:4E:0C:23:D3","sha256":"81:6A:09:54:C4:A8:33:A8:07:50:21:89:67:FD:81:22:CD:52:54:75:D5:83:56:AA:5D:72:01:F4:05:27:C2:2E"}}},"request":{"raw":"GET /bitm/step?uid=84a51fa8c99fde41594ebb170eebbd43 HTTP/1.1\r\nHost: azure-sync.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gsid=84a51fa8c99fde41594ebb170eebbd43\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gsid","value":"84a51fa8c99fde41594ebb170eebbd43"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 07:44:41 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Type: application/json\r\nCache-Control: no-store\r\nKeep-Alive: timeout=5, max=89\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":301,"mime_type":"application/json","magic":"JSON text data","md5":"44ca7e953c52bf841ec51d0147adad7c","sha1":"e6a75ba3050f0c15fa5ed5c3c1bc25aa6b092210","sha256":"9af985f6c2f3f46aa6748469100a841396bffd872e8abe83b690af4da72df34b","sha512":"9c083c7dba10f8f3eff11059d7ded1a352c65991a0b64dc22f374cdaad64a9deab7f1706240802abf28e58e7ffe248853cd16e046a8de6bbe72aec3fe12e21c0","ssdeep":"","tlshash":"cfa0026b7519503c8635d8869151273702149d3164207dddc19cd50460df2d48125697","first_seen":"2026-10-05T04:55:38.987114Z","last_seen":"2026-10-07T07:45:41.550781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"azure-sync.tools","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"azure-sync.tools","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}}]}