{"report_id":"1fe06012-e0db-4956-8be7-8a729271b0be","version":0,"status":"done","tags":[],"date":"2026-08-06T18:12:34Z","url":{"schema":"http","addr":"siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php","fqdn":"siayeo.com.sg","domain":"siayeo.com.sg","tld":"com.sg"},"ip":{"addr":"111.221.46.30","port":0,"asn":38001,"as":"NewMedia Express Pte Ltd","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php","fqdn":"siayeo.com.sg","domain":"siayeo.com.sg","tld":"com.sg"},"title":"PostNL","dom":{"size":78126,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1727)","md5":"fc947c3aaf38f2e43f17c06b034b4bf9","sha1":"4a4bdfaf8bd479b34df508ffbfacc54f497d6a24","sha256":"ab016eb3528e94a873834537c64fae10a7889e02bb5432e8b6fb28bc2a656ac9","sha512":"99d40a1a0fa6a661d7c3a326f4549ec1dc7897fd31d75939e246447c745fe4d2222cc019a7e58dbf07e44a64a90cbcdfb84976c873c5cc43ffc4f6d36fe6cac1","ssdeep":"768:+nJekNJUXBZLNpnt/JQx5Jk5/euya7hYeFWQ+E3lIhJ76Tf0:+nJzDcPznVIhJ76Tf0","tlshash":"2373917164f060360163cbd6e734ab677ec5b423ce8a0845babc5b952f93c97ba0b50d","dom_hash":"domhash4759a8f1e2363d152b0da3599dad9027","first_seen":"2026-08-06T18:12:35.729115Z","last_seen":"2026-08-06T18:12:35.729115Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php","fqdn":"siayeo.com.sg","domain":"siayeo.com.sg","tld":"com.sg"},"ip":{"addr":"111.221.46.30","port":0,"asn":38001,"as":"NewMedia Express Pte Ltd","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-10T18:12:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"siayeo.com.sg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"siayeo.com.sg","ip":{"addr":"111.221.46.30","port":443,"asn":38001,"as":"NewMedia Express Pte Ltd","country":"Singapore","country_code":"SG"},"domain_registered":"2004-09-15","domain_rank":3131851,"first_seen":"2026-08-06T12:41:27.162606Z","last_seen":"2026-08-06T12:41:27.162606Z","alert_count":7,"request_count":7,"received_data":584832,"sent_data":4227,"comment":"","tags":null,"fingerprints":[{"name":"SDL Tridion","description":"","website":"https://www.sdl.com/products/tridion","common_platform_enumeration":"","icon":"SDL Tridion.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"jouw.postnl.nl","ip":{"addr":"23.33.119.73","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-06-15","domain_rank":96381,"first_seen":"2015-03-09T07:35:38Z","last_seen":"2026-08-06T15:35:10.946104Z","alert_count":0,"request_count":1,"received_data":1375,"sent_data":512,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"cdn.postnl.nl","ip":{"addr":"23.33.119.73","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-06-15","domain_rank":1534980,"first_seen":"2023-02-02T09:25:57Z","last_seen":"2026-08-06T15:35:10.933325Z","alert_count":0,"request_count":2,"received_data":139380,"sent_data":1019,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.postnl.nl","ip":{"addr":"23.33.119.73","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-06-15","domain_rank":106630,"first_seen":"2017-02-01T11:37:32Z","last_seen":"2026-08-06T15:35:10.933987Z","alert_count":0,"request_count":4,"received_data":84915,"sent_data":2511,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/assets/js/local.js","fqdn":"siayeo.com.sg","domain":"siayeo.com.sg","tld":"com.sg"},"ip":{"addr":"111.221.46.30","port":443,"asn":38001,"as":"NewMedia Express Pte Ltd","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"80d1c4ba34bc9d3feadbcddc56f6a3f3","sha1":"b7a9c5c85fd61851ae111350508789dc41016593","sha256":"2db4a357dca3d38e5b72122c782ba098b8ba9016711799d7996562bd35e0faa4","sha512":"0e2ebab7f18947395b5731890a59a354c0b1031a26578f8b9d6ff8e27511ae9bc92f308101ab06f7c17d03da250157574a71558c99b7bf3a0c8b11859682443a","ssdeep":"","tlshash":"1761ce1e348161724c7767b8deba1588ff2e1063540792a5bd2cc605afb1c426b3afdc","size":3436,"data":"","first_seen":"2026-08-06T15:35:11.970997Z","last_seen":"2026-08-06T22:40:37.996991Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php","fqdn":"siayeo.com.sg","domain":"siayeo.com.sg","tld":"com.sg"},"ip":{"addr":"111.221.46.30","port":443,"asn":38001,"as":"NewMedia Express Pte Ltd","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-06T18:12:00.755Z","timestamp":1786039920755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.picasso.siayeo.com.sg","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:35:42 GMT","end":"Tue, 13 Oct 2026 21:35:41 GMT"},"fingerprint":{"sha1":"8C:82:78:16:A3:95:6D:4C:63:1C:2A:92:3C:10:6B:76:BC:4D:64:62","sha256":"8D:CC:06:CE:63:96:87:11:FF:06:06:11:7F:BB:7D:4A:F3:E1:5C:28:47:68:0E:98:11:41:89:F6:C5:75:93:8B"}}},"request":{"raw":"GET /gonl/billing.getmyparkticket.online/PostNL/index.php HTTP/1.1\r\nHost: siayeo.com.sg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/7.4.33\r\nset-cookie: POSTNL_SESS=272764fc63c1b9292b86d35c36ec83e6; expires=Thu, 13-Aug-2026 18:12:03 GMT; Max-Age=604800; path=/gonl/billing.getmyparkticket.online/PostNL/; secure; HttpOnly; SameSite=Lax\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 12062\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 06 Aug 2026 18:12:03 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"SDL Tridion","description":"","website":"https://www.sdl.com/products/tridion","common_platform_enumeration":"","icon":"SDL Tridion.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":78005,"size_decoded":13032,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1727)","md5":"4eb4112efdb67e59b14d9c94bc2c9424","sha1":"f0f0c0d99ed365f97cccd370e115e15ea18eed9c","sha256":"c829b23e9299a2776ff62fc8e227a45ede50df3f9a72c54966b3ad7227259cd7","sha512":"ae2602d7ed870ca0d90661e066586d2cd25298a4dee738a54e645b33cd1c83ec0fdacf80cbe3542382100df31b51086a7477a9d701bb7db09ceb49c8991742de","ssdeep":"768:NNkFapzUXYZLNpnt/Jag53ewya7mYDF5j0E5TIhJ7aTfa:NNksRcwznZIhJ7aTfa","tlshash":"b173927164f060360063cbd2e734ab677ec5b463ce8a0845babc5b952f93c97ba0b54d","first_seen":"2026-08-06T18:12:35.730384Z","last_seen":"2026-08-06T18:12:35.730384Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3562,"timings":{"blocked":-1,"dns":347,"connect":249,"send":0,"wait":1961,"receive":249,"ssl":756},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"siayeo.com.sg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jouw.postnl.nl/services/widgets/styles/postnl-fonts.css","fqdn":"jouw.postnl.nl","domain":"postnl.nl","tld":"nl"},"ip":{"addr":"23.33.119.73","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php","date":"2026-08-06T18:12:04.240Z","timestamp":1786039924240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postnl.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 09:28:25 GMT","end":"Sun, 30 Aug 2026 09:28:24 GMT"},"fingerprint":{"sha1":"06:20:4A:04:97:C8:27:97:1F:81:94:E1:DF:BA:F5:5B:52:4B:C5:9B","sha256":"7B:E4:3A:A7:D5:0F:4D:59:0A:31:F9:6D:D0:32:A2:00:30:76:11:F8:F2:C1:9D:44:06:4B:90:1F:1E:E3:73:A7"}}},"request":{"raw":"GET /services/widgets/styles/postnl-fonts.css HTTP/1.1\r\nHost: jouw.postnl.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://siayeo.com.sg/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 324\r\nserver: Apache\r\naccept-ranges: bytes\r\ncache-control: max-age=600\r\netag: \"1dd232ede897260-gzip\"\r\nlast-modified: Mon, 03 Aug 2026 10:00:10 GMT\r\nvary: Origin,Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1;mode=block\r\naccess-control-max-age: 1\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ndate: Thu, 06 Aug 2026 18:12:04 GMT\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":864,"size_decoded":835,"mime_type":"text/css","magic":"ASCII text, with very long lines (863)","md5":"8d864cdaefe96bd7ab4e2f401c1c44ba","sha1":"13d5cd71b2a75ad843f78a3a4ee917bbb693cc21","sha256":"41297e2200a5fcd17ee5b6b9e2b7321fc3df468ecddc1faa168738876a327c91","sha512":"c5fd4aa3dee775b3c6e56955341c2c096cf378b553882e354ae89e6787a96a23d4124864b9a1e352fd11a7038ead1abc14320c83a83995e82cd0e09dfbe66c02","ssdeep":"","tlshash":"021148a5502fa585c6530c8334de35222c699d2b88959c23d62f0e1ecee36f763c9f2c","first_seen":"2026-03-25T04:47:18.223998Z","last_seen":"2026-08-06T22:40:37.996137Z","times_seen":15,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":27,"connect":1,"send":0,"wait":99,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/assets/images/women.webp","fqdn":"siayeo.com.sg","domain":"siayeo.com.sg","tld":"com.sg"},"ip":{"addr":"111.221.46.30","port":443,"asn":38001,"as":"NewMedia Express Pte Ltd","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php","date":"2026-08-06T18:12:04.328Z","timestamp":1786039924328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.picasso.siayeo.com.sg","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:35:42 GMT","end":"Tue, 13 Oct 2026 21:35:41 GMT"},"fingerprint":{"sha1":"8C:82:78:16:A3:95:6D:4C:63:1C:2A:92:3C:10:6B:76:BC:4D:64:62","sha256":"8D:CC:06:CE:63:96:87:11:FF:06:06:11:7F:BB:7D:4A:F3:E1:5C:28:47:68:0E:98:11:41:89:F6:C5:75:93:8B"}}},"request":{"raw":"GET /gonl/billing.getmyparkticket.online/PostNL/assets/images/women.webp HTTP/1.1\r\nHost: siayeo.com.sg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: POSTNL_SESS=272764fc63c1b9292b86d35c36ec83e6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 13 Aug 2026 18:12:04 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 08 Jun 2026 20:40:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 80178\r\ndate: Thu, 06 Aug 2026 18:12:04 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80178,"size_decoded":80726,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 720x342, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"31895e67a6a3f545d4095d615b06f9df","sha1":"dbc56ad4cc71c805183b24f7b601202226a79c98","sha256":"c01d0593761e595f407663dc63d469a2311f826ee80450b4bc067ccc183bd16a","sha512":"a97e0ef3516a1f68e9b400d4f5d11938a3f652e885ae79eaaf3a4489c47ed360aa5916106765136539f5dce88db55ab9a6ba20089874e9132402f882fdb065f2","ssdeep":"1536:9TjFijFm3Y44LMKpcm2EmvALvSdM0kUDKo4DHImWHPHNYGZsvtGn6bMGuTvjq:9TjCFmP9KpQILqdRD32IBPtY2svk6ym","tlshash":"ad7312cea8bdb6ea0377148d637b954031f9cd233a8bc06f337839f5ea6255a1990446","first_seen":"2026-08-06T15:35:11.964118Z","last_seen":"2026-08-06T22:40:37.987625Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3376,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1661,"receive":1715,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"siayeo.com.sg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.postnl.nl/fonts/Hanken-Grotesk.woff2","fqdn":"cdn.postnl.nl","domain":"postnl.nl","tld":"nl"},"ip":{"addr":"23.33.119.73","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php","date":"2026-08-06T18:12:05.620Z","timestamp":1786039925620,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postnl.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 09:28:25 GMT","end":"Sun, 30 Aug 2026 09:28:24 GMT"},"fingerprint":{"sha1":"06:20:4A:04:97:C8:27:97:1F:81:94:E1:DF:BA:F5:5B:52:4B:C5:9B","sha256":"7B:E4:3A:A7:D5:0F:4D:59:0A:31:F9:6D:D0:32:A2:00:30:76:11:F8:F2:C1:9D:44:06:4B:90:1F:1E:E3:73:A7"}}},"request":{"raw":"GET /fonts/Hanken-Grotesk.woff2 HTTP/1.1\r\nHost: cdn.postnl.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://siayeo.com.sg\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jouw.postnl.nl/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nContent-Type: font/woff2\r\nETag: \"c0e10bde6c3ff0761ec3c4a1045db295:1701300033.052169\"\r\nLast-Modified: Wed, 29 Nov 2023 23:20:33 GMT\r\nServer: AkamaiNetStorage\r\nContent-Length: 56336\r\nCache-Control: max-age=19848597\r\nDate: Thu, 06 Aug 2026 18:12:05 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://siayeo.com.sg\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56336,"size_decoded":56718,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 56336, version 1.0","md5":"c0e10bde6c3ff0761ec3c4a1045db295","sha1":"ba872755a15e1cff9605a943bfdc2fa55cd1e3a6","sha256":"f63069aeb776b2695bbe683905e0e112c9f39ddbfc6db3dd423c86e0975d699b","sha512":"1855ddbe2037be795d5487e54836a90407bd00d0c01cd767debb4a0eebc7030e53cf27dc2a915fe5364bb255b8760832b18b8085a2f2adb5c2480e211223810c","ssdeep":"1536:9UaX1tpfn8E+hxkTH3RtDoR0o+quJ1N5hf/6qKwy1Z4:9VFfIQBtDoR0oiRJKc","tlshash":"4443020a9dbc545f059c44a6200f8f0396ade65ba7738de037aa10f5e73385a875b8b4","first_seen":"2024-09-19T22:57:37.340642Z","last_seen":"2026-08-06T22:40:37.997688Z","times_seen":43,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":11,"connect":1,"send":0,"wait":20,"receive":2,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.postnl.nl/api/assets/blt43aa441bfc1e29f2/blt6a361b840262baa3/6643abdab76b4c7f013df5ca/card_postcard_flowers.svg","fqdn":"www.postnl.nl","domain":"postnl.nl","tld":"nl"},"ip":{"addr":"23.33.119.73","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php","date":"2026-08-06T18:12:05.628Z","timestamp":1786039925628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postnl.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 09:28:25 GMT","end":"Sun, 30 Aug 2026 09:28:24 GMT"},"fingerprint":{"sha1":"06:20:4A:04:97:C8:27:97:1F:81:94:E1:DF:BA:F5:5B:52:4B:C5:9B","sha256":"7B:E4:3A:A7:D5:0F:4D:59:0A:31:F9:6D:D0:32:A2:00:30:76:11:F8:F2:C1:9D:44:06:4B:90:1F:1E:E3:73:A7"}}},"request":{"raw":"GET /api/assets/blt43aa441bfc1e29f2/blt6a361b840262baa3/6643abdab76b4c7f013df5ca/card_postcard_flowers.svg HTTP/1.1\r\nHost: www.postnl.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://siayeo.com.sg/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 4623\r\nx-dns-prefetch-control: on\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\npermissions-policy: camera=(), microphone=(), geolocation=(self), payment=()\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-tag: blt43aa441bfc1e29f2.sys_assets blt43aa441bfc1e29f2.sys_assets.blt6a361b840262baa3.download\r\ncontent-disposition: inline; filename=card_postcard_flowers.svg\r\nfastly-io-error: not a supported image format\r\nfastly-io-served-by: vpop-ehle2110032\r\nfastly-stats: io=1\r\nserver: contentstack\r\nx-contentstack-organization: blt3dce8d368c86a9e2\r\nx-request-id: 44dce89c129ec78f98395aca8bd6b1ea\r\nx-runtime: 100ms\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-served-by: cache-ams21042-AMS, cache-dub4390-DUB\r\nx-cache-hits: 0, 0\r\nx-timer: S1755200155.795944,VS0,VE274\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: content-disposition, content-type, cache-control, status, content-length\r\naccess-control-allow-origin: *\r\ncache-control: max-age=20482337\r\ndate: Thu, 06 Aug 2026 18:12:05 GMT\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11586,"size_decoded":5824,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7295654b580a282f19940787c37dff17","sha1":"89c61cb68c5e3e8161765b300cd315dae4246b98","sha256":"5d6a93e24af23c57f20e79e6be26b03e46f7a24e332eed3339fe5a0700718a50","sha512":"7240192126eecee3bcf888961d54e3cab4b65bb3696deb17ea126e357d030fd793b129696f42045cc74c6fa9192f2d394be8b6567513cecf734379da20825567","ssdeep":"192:hUVs5bBl3cz5bQ/aY9hLP2UYgcDQFpBQmPzeyo3TU4uVr:KChB9gb8aY/LP2UYgcD+OYzjojU4cr","tlshash":"083202ed7b144ce1cd8593fbdb5a10dd7027a4fe29810b64c2586f1938929becc49ec6","first_seen":"2026-08-06T15:35:11.972819Z","last_seen":"2026-08-06T22:40:37.989783Z","times_seen":3,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":11,"connect":1,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.postnl.nl/api/assets/blt43aa441bfc1e29f2/blte5ed5a9706bfd7f7/6643abda6ee25f64cebcf9cf/phone_tracktrace.svg","fqdn":"www.postnl.nl","domain":"postnl.nl","tld":"nl"},"ip":{"addr":"23.33.119.73","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php","date":"2026-08-06T18:12:05.631Z","timestamp":1786039925631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postnl.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 09:28:25 GMT","end":"Sun, 30 Aug 2026 09:28:24 GMT"},"fingerprint":{"sha1":"06:20:4A:04:97:C8:27:97:1F:81:94:E1:DF:BA:F5:5B:52:4B:C5:9B","sha256":"7B:E4:3A:A7:D5:0F:4D:59:0A:31:F9:6D:D0:32:A2:00:30:76:11:F8:F2:C1:9D:44:06:4B:90:1F:1E:E3:73:A7"}}},"request":{"raw":"GET /api/assets/blt43aa441bfc1e29f2/blte5ed5a9706bfd7f7/6643abda6ee25f64cebcf9cf/phone_tracktrace.svg HTTP/1.1\r\nHost: www.postnl.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://siayeo.com.sg/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 1329\r\nx-dns-prefetch-control: on\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\npermissions-policy: camera=(), microphone=(), geolocation=(self), payment=()\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-tag: blt43aa441bfc1e29f2.sys_assets blt43aa441bfc1e29f2.sys_assets.blte5ed5a9706bfd7f7.download\r\ncontent-disposition: inline; filename=phone_tracktrace.svg\r\nfastly-io-error: not a supported image format\r\nfastly-io-served-by: img05-europe-west1\r\nfastly-stats: io=1\r\nserver: contentstack\r\nx-contentstack-organization: blt3dce8d368c86a9e2\r\nx-request-id: 0e8c9440ce888fa4bcd1d2b1a4eb59aa\r\nx-runtime: 81ms\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-served-by: cache-ams2100096-AMS, cache-dub4351-DUB\r\nx-cache-hits: 0, 0\r\nx-timer: S1755200154.457764,VS0,VE149\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: content-disposition, content-type, cache-control, status, content-length\r\naccess-control-allow-origin: *\r\ncache-control: max-age=21720379\r\ndate: Thu, 06 Aug 2026 18:12:05 GMT\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4223,"size_decoded":2528,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8ee37268df5781ba8f48add3d71e5942","sha1":"e04c4bb545863be39baefd055c154a063965fed5","sha256":"5a4130394ac5b79dc37587b8d59fd69ac5811d53083b091f7ad342969184cf30","sha512":"a8aa7b08d7c4ded69295941f49504ef0ef1e5bfaa82ae8315893c0c919bbdc80824a1dd4de3153c7595afceeaf44caf8b947250d2c60b99c69820fad2dc01fb6","ssdeep":"96:zG+psKwSesjRiOLYN+o2GKLAJvtlKrPgsATM3C:zxVvjRiO8N+ozvt8zAyC","tlshash":"9791bce86d3588d1c80552ffeb7d55c7b02fa8be208449a4f3a43e1c3c5567a4d29ec6","first_seen":"2025-10-27T11:32:40.178676Z","last_seen":"2026-08-06T22:40:37.990558Z","times_seen":4,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":8,"connect":2,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.postnl.nl/api/assets/blt43aa441bfc1e29f2/bltcf674d2ec5445357/667d26764939304507d1f8aa/brief-in-brievenbus.jpg?width=552\u0026format=webp","fqdn":"www.postnl.nl","domain":"postnl.nl","tld":"nl"},"ip":{"addr":"23.33.119.73","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php","date":"2026-08-06T18:12:05.632Z","timestamp":1786039925632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postnl.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 09:28:25 GMT","end":"Sun, 30 Aug 2026 09:28:24 GMT"},"fingerprint":{"sha1":"06:20:4A:04:97:C8:27:97:1F:81:94:E1:DF:BA:F5:5B:52:4B:C5:9B","sha256":"7B:E4:3A:A7:D5:0F:4D:59:0A:31:F9:6D:D0:32:A2:00:30:76:11:F8:F2:C1:9D:44:06:4B:90:1F:1E:E3:73:A7"}}},"request":{"raw":"GET /api/assets/blt43aa441bfc1e29f2/bltcf674d2ec5445357/667d26764939304507d1f8aa/brief-in-brievenbus.jpg?width=552\u0026format=webp HTTP/1.1\r\nHost: www.postnl.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://siayeo.com.sg/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 58846\r\naccess-control-expose-headers: content-disposition, content-type, cache-control, status, content-length\r\nserver-timing: traceparent;desc=\"00-987f447456369ee2b5dac4f7efe5c418-1d68df17bf58f4a2-01\"\r\nx-dns-prefetch-control: on\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\npermissions-policy: camera=(), microphone=(), geolocation=(self), payment=()\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-tag: blt43aa441bfc1e29f2.sys_assets blt43aa441bfc1e29f2.sys_assets.bltcf674d2ec5445357.download\r\netag: \"9kQgQMhcTmR4s/+mMDUEp6VNP/dJRgF3QaWvlIIyGTA\"\r\nfastly-io-info: ifsz=198636 idim=5184x3456 ifmt=jpeg ofsz=58846 odim=552x368 ofmt=webp\r\nfastly-io-served-by: vpop-ehle2110034\r\nfastly-io-stats: ifsz=198636 ofsz=58846 ofmt=webp\r\nfastly-stats: io=1\r\nserver: contentstack\r\nx-contentstack-organization: blt3dce8d368c86a9e2\r\nx-request-id: 02c50cf4a9ba1a639553b467db634a45\r\nx-runtime: 108ms\r\naccept-ranges: bytes\r\nx-served-by: cache-ams21079-AMS, cache-dub4326-DUB\r\nx-cache-hits: 0, 0\r\nx-timer: S1761835351.294844,VS0,VE1\r\naccess-control-allow-origin: *\r\nfilename1: custom\r\ncontent-disposition: inline; filename=brief-in-brievenbus.webp\r\ncache-control: max-age=20216328\r\ndate: Thu, 06 Aug 2026 18:12:05 GMT\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58846,"size_decoded":60250,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 552x368, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"908fa70281baf39c6b4e413fe3b45f5f","sha1":"d925ee9b0ad4dbfefa8c08cc1c89233bc96840d6","sha256":"f74a4e55257379baf6aa95412fbbcd52ac6d0468f3254e4e1335fcb79678c97e","sha512":"14059d1bfec7b1a104c33a87e1dcf15ea640c685221ea06873524fd81ebdc73fc754971982de791bd6fc82e0d7aafcbee8646afeb0ea30f556cad3cd2cdf6707","ssdeep":"1536:AhTGLdoYorAi2eCBzCz4GhLhvrOcoIZ1IQlPwEpnnko6uy:AcdfmAi2evz429acv5e+A","tlshash":"aa43022ce06f696db086efe8c60cc55b6b9401b6bb7edbf539b61463a803f50d6200d4","first_seen":"2026-08-06T15:35:11.974835Z","last_seen":"2026-08-06T22:40:37.976703Z","times_seen":3,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":7,"connect":1,"send":0,"wait":108,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/assets/css/a7d69d926e4f042a.css","fqdn":"siayeo.com.sg","domain":"siayeo.com.sg","tld":"com.sg"},"ip":{"addr":"111.221.46.30","port":443,"asn":38001,"as":"NewMedia Express Pte Ltd","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php","date":"2026-08-06T18:12:04.239Z","timestamp":1786039924239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.picasso.siayeo.com.sg","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:35:42 GMT","end":"Tue, 13 Oct 2026 21:35:41 GMT"},"fingerprint":{"sha1":"8C:82:78:16:A3:95:6D:4C:63:1C:2A:92:3C:10:6B:76:BC:4D:64:62","sha256":"8D:CC:06:CE:63:96:87:11:FF:06:06:11:7F:BB:7D:4A:F3:E1:5C:28:47:68:0E:98:11:41:89:F6:C5:75:93:8B"}}},"request":{"raw":"GET /gonl/billing.getmyparkticket.online/PostNL/assets/css/a7d69d926e4f042a.css HTTP/1.1\r\nHost: siayeo.com.sg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: POSTNL_SESS=272764fc63c1b9292b86d35c36ec83e6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 13 Aug 2026 18:12:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 08 Jun 2026 20:40:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 49220\r\ndate: Thu, 06 Aug 2026 18:12:04 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":406814,"size_decoded":49811,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ebd4312f187f9f95aba0dbf1417e695a","sha1":"f3213016ca67d79f73c3e71f410211debc13bfee","sha256":"ec2724d986e6cea63cc18ea9d89516025c71b894e7271411fc8d594f1306e1cd","sha512":"fe455debd540a24883d91e6f8dae20b01322398e649844c477d9bd3c5628852d3d811386b2353d3a068fb3d41b87240070dc6657838c33a74d824ac41deea757","ssdeep":"1536:x6xmgpgBQohhUKz2HZ6U+/4C0nmtKgn7x+GfhW4qQtsNXFGXFDGopT2XtCQ7sFpF:GohuKz24hTYXtCQ7sFplMC8MLksUW","tlshash":"7a84c765a220d2387837d9761b6cf66c355cb872ce4399e4e624b3089acf7f73526708","first_seen":"2026-06-24T07:30:10.274001Z","last_seen":"2026-08-06T22:40:37.980752Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":752,"receive":576,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"siayeo.com.sg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/assets/css/local.css","fqdn":"siayeo.com.sg","domain":"siayeo.com.sg","tld":"com.sg"},"ip":{"addr":"111.221.46.30","port":443,"asn":38001,"as":"NewMedia Express Pte Ltd","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php","date":"2026-08-06T18:12:04.242Z","timestamp":1786039924242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.picasso.siayeo.com.sg","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:35:42 GMT","end":"Tue, 13 Oct 2026 21:35:41 GMT"},"fingerprint":{"sha1":"8C:82:78:16:A3:95:6D:4C:63:1C:2A:92:3C:10:6B:76:BC:4D:64:62","sha256":"8D:CC:06:CE:63:96:87:11:FF:06:06:11:7F:BB:7D:4A:F3:E1:5C:28:47:68:0E:98:11:41:89:F6:C5:75:93:8B"}}},"request":{"raw":"GET /gonl/billing.getmyparkticket.online/PostNL/assets/css/local.css HTTP/1.1\r\nHost: siayeo.com.sg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: POSTNL_SESS=272764fc63c1b9292b86d35c36ec83e6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 13 Aug 2026 18:12:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 08 Jun 2026 20:40:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 956\r\ndate: Thu, 06 Aug 2026 18:12:04 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2911,"size_decoded":1545,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"bf15e2da028ba7a0406578c0a6be75e5","sha1":"6e09f720d806a07c8596d1d89135f4d4fc57c5d8","sha256":"f9ad730adea625a794c47fb827e6357c4b06cc76f892cd578d1726fab6172c49","sha512":"e617b7eb3e218cd301e229b32ead99766b4847881d204fb1ca06e8d5e7e106120dd0f9f83e130b2c1b2751f42448a9e37b31b778c2649a25de74b52f1a3c0064","ssdeep":"","tlshash":"40510f1d5d8a1c0175368f7d9ba54624fe9a3013ca0ba1d8bff851588fba0787828fcc","first_seen":"2026-06-24T07:30:10.259662Z","last_seen":"2026-08-06T22:40:37.982485Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"siayeo.com.sg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/assets/images/logo.svg","fqdn":"siayeo.com.sg","domain":"siayeo.com.sg","tld":"com.sg"},"ip":{"addr":"111.221.46.30","port":443,"asn":38001,"as":"NewMedia Express Pte Ltd","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php","date":"2026-08-06T18:12:04.325Z","timestamp":1786039924325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.picasso.siayeo.com.sg","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:35:42 GMT","end":"Tue, 13 Oct 2026 21:35:41 GMT"},"fingerprint":{"sha1":"8C:82:78:16:A3:95:6D:4C:63:1C:2A:92:3C:10:6B:76:BC:4D:64:62","sha256":"8D:CC:06:CE:63:96:87:11:FF:06:06:11:7F:BB:7D:4A:F3:E1:5C:28:47:68:0E:98:11:41:89:F6:C5:75:93:8B"}}},"request":{"raw":"GET /gonl/billing.getmyparkticket.online/PostNL/assets/images/logo.svg HTTP/1.1\r\nHost: siayeo.com.sg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: POSTNL_SESS=272764fc63c1b9292b86d35c36ec83e6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 13 Aug 2026 18:12:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 08 Jun 2026 20:40:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3372\r\ndate: Thu, 06 Aug 2026 18:12:04 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8236,"size_decoded":3967,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"afc4d973f9c783022141e82c08e2451c","sha1":"dd9739f095e4db29efe03b4db063f309fd81f6b6","sha256":"81c34eab987d5690727831f7c81e03a703d4cc00024d60c3ee5a1b879a6729ff","sha512":"87235d3ef31ce66b6dea6c0dbe788a52a9a03bfa648e68d4cbd4835c464f95a5d7a2e4d8ebe536fe7ebdd0a5e222ee3de7e5c682a3e40c88635176ebd6359e7f","ssdeep":"192:+wWdUcd9R/zs66RK41ZRGaIlXfJ4FhrEy40Ntc+8LIM7VR3t/5cdXlr/OnSQ:XWdUcfRrcJ1ZRGaIlXfOFdS+4IM7z3tz","tlshash":"67029584b37d83fcf009f6fc0292a8753e5a2ae76521c4a9c7f71ca5c99141d9d928d3","first_seen":"2024-09-19T22:57:37.386867Z","last_seen":"2026-08-06T22:40:37.986257Z","times_seen":45,"resource_available":false,"data":null}},"time_used":1663,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1663,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"siayeo.com.sg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/assets/js/local.js","fqdn":"siayeo.com.sg","domain":"siayeo.com.sg","tld":"com.sg"},"ip":{"addr":"111.221.46.30","port":443,"asn":38001,"as":"NewMedia Express Pte Ltd","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php","date":"2026-08-06T18:12:04.327Z","timestamp":1786039924327,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.picasso.siayeo.com.sg","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:35:42 GMT","end":"Tue, 13 Oct 2026 21:35:41 GMT"},"fingerprint":{"sha1":"8C:82:78:16:A3:95:6D:4C:63:1C:2A:92:3C:10:6B:76:BC:4D:64:62","sha256":"8D:CC:06:CE:63:96:87:11:FF:06:06:11:7F:BB:7D:4A:F3:E1:5C:28:47:68:0E:98:11:41:89:F6:C5:75:93:8B"}}},"request":{"raw":"GET /gonl/billing.getmyparkticket.online/PostNL/assets/js/local.js HTTP/1.1\r\nHost: siayeo.com.sg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: POSTNL_SESS=272764fc63c1b9292b86d35c36ec83e6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 08 Jun 2026 20:40:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 909\r\ndate: Thu, 06 Aug 2026 18:12:04 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3436,"size_decoded":1426,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"80d1c4ba34bc9d3feadbcddc56f6a3f3","sha1":"b7a9c5c85fd61851ae111350508789dc41016593","sha256":"2db4a357dca3d38e5b72122c782ba098b8ba9016711799d7996562bd35e0faa4","sha512":"0e2ebab7f18947395b5731890a59a354c0b1031a26578f8b9d6ff8e27511ae9bc92f308101ab06f7c17d03da250157574a71558c99b7bf3a0c8b11859682443a","ssdeep":"","tlshash":"1761ce1e348161724c7767b8deba1588ff2e1063540792a5bd2cc605afb1c426b3afdc","first_seen":"2026-08-06T15:35:11.970997Z","last_seen":"2026-08-06T22:40:37.996991Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"siayeo.com.sg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.postnl.nl/fonts/ABCROM-Bold.woff2","fqdn":"cdn.postnl.nl","domain":"postnl.nl","tld":"nl"},"ip":{"addr":"23.33.119.73","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php","date":"2026-08-06T18:12:05.621Z","timestamp":1786039925621,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postnl.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 09:28:25 GMT","end":"Sun, 30 Aug 2026 09:28:24 GMT"},"fingerprint":{"sha1":"06:20:4A:04:97:C8:27:97:1F:81:94:E1:DF:BA:F5:5B:52:4B:C5:9B","sha256":"7B:E4:3A:A7:D5:0F:4D:59:0A:31:F9:6D:D0:32:A2:00:30:76:11:F8:F2:C1:9D:44:06:4B:90:1F:1E:E3:73:A7"}}},"request":{"raw":"GET /fonts/ABCROM-Bold.woff2 HTTP/1.1\r\nHost: cdn.postnl.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://siayeo.com.sg\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jouw.postnl.nl/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nContent-Type: font/woff2\r\nETag: \"1577c8dffb007997f748bae466ab6b73:1701300033.069509\"\r\nLast-Modified: Wed, 29 Nov 2023 23:20:33 GMT\r\nServer: AkamaiNetStorage\r\nContent-Length: 82280\r\nCache-Control: max-age=28438337\r\nDate: Thu, 06 Aug 2026 18:12:05 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://siayeo.com.sg\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82280,"size_decoded":82662,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 82280, version 1.0","md5":"1577c8dffb007997f748bae466ab6b73","sha1":"e9c6695f4183b352cc4b76554d2dd1e5127f909d","sha256":"16bd208b515ed3fa39103a84c70d3a2d904403b0100cb06da245bb3b4eb422a8","sha512":"e8063f9d4ced84d44e7b142a959c4ffeddf68da6eaac96e36b314a8127d467985884956dd51ca109088580ddf801706275b43830c1f1ed1bb4a486615f3c9b31","ssdeep":"1536:5kjGmje4NEEul2D0CGM23YAH7ACN33fZSEsDR+6NENR8nPls4uc4fcc:5kHqZ33Ymp3fZSEsN+9eiyXc","tlshash":"4b83120e2585f10ee3ab923cbb84d99a45743015c229b3d4dcdb8213cefabd29b175c2","first_seen":"2024-09-19T22:57:37.342049Z","last_seen":"2026-08-06T22:40:37.988761Z","times_seen":35,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":10,"connect":1,"send":0,"wait":17,"receive":2,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.postnl.nl/api/assets/blt43aa441bfc1e29f2/blt00f6e0a371d1cd83/6643abdaa0e6da3fbfda6c7a/package_large.svg","fqdn":"www.postnl.nl","domain":"postnl.nl","tld":"nl"},"ip":{"addr":"23.33.119.73","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php","date":"2026-08-06T18:12:05.630Z","timestamp":1786039925630,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postnl.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 09:28:25 GMT","end":"Sun, 30 Aug 2026 09:28:24 GMT"},"fingerprint":{"sha1":"06:20:4A:04:97:C8:27:97:1F:81:94:E1:DF:BA:F5:5B:52:4B:C5:9B","sha256":"7B:E4:3A:A7:D5:0F:4D:59:0A:31:F9:6D:D0:32:A2:00:30:76:11:F8:F2:C1:9D:44:06:4B:90:1F:1E:E3:73:A7"}}},"request":{"raw":"GET /api/assets/blt43aa441bfc1e29f2/blt00f6e0a371d1cd83/6643abdaa0e6da3fbfda6c7a/package_large.svg HTTP/1.1\r\nHost: www.postnl.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://siayeo.com.sg/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 1887\r\nx-dns-prefetch-control: on\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\npermissions-policy: camera=(), microphone=(), geolocation=(self), payment=()\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-tag: blt43aa441bfc1e29f2.sys_assets blt43aa441bfc1e29f2.sys_assets.blt00f6e0a371d1cd83.download\r\ncontent-disposition: inline; filename=package_large.svg\r\nfastly-io-error: not a supported image format\r\nfastly-io-served-by: vpop-ehle2110036\r\nfastly-stats: io=1\r\nserver: contentstack\r\nx-contentstack-organization: blt3dce8d368c86a9e2\r\nx-request-id: 646d50114ee2e2618e335912f6ec86e4\r\nx-runtime: 66ms\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-served-by: cache-ams21049-AMS, cache-dub4389-DUB\r\nx-cache-hits: 0, 0\r\nx-timer: S1755200154.469227,VS0,VE114\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: content-disposition, content-type, cache-control, status, content-length\r\naccess-control-allow-origin: *\r\ncache-control: max-age=20482337\r\ndate: Thu, 06 Aug 2026 18:12:05 GMT\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5264,"size_decoded":3079,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b13627ceff6c63a67d6fe55dbeaa944b","sha1":"8678b26322b1777add7b753a80804af8df045198","sha256":"a8145e62f56dc0186af4e6cb0968e6a9b7fbae2da2338a807788a0c77fd8201b","sha512":"cc88c306e45e3a5d96982c40f923334260378e1ad8243c1c7ffa50995a7d2283d3dae89a226a06c799a791790c54159fa7b93e682b01c98c6d63834e416275de","ssdeep":"96:zQt6/k076nLbDeVqMWAqFeWxQZSWkQYr6cZZ2oR0DhSan:ze68w6nLbIUF5+ZjkfrD2oRaSan","tlshash":"8ab1d0fc16724dc6c8c8dbf6bf68a6e9302356bf5418494c92b85e2c3c449bda4187d3","first_seen":"2026-08-06T15:35:11.966711Z","last_seen":"2026-08-06T22:40:37.973715Z","times_seen":3,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":9,"connect":2,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siayeo.com.sg/favicon.ico","fqdn":"siayeo.com.sg","domain":"siayeo.com.sg","tld":"com.sg"},"ip":{"addr":"111.221.46.30","port":443,"asn":38001,"as":"NewMedia Express Pte Ltd","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php","date":"2026-08-06T18:12:05.956Z","timestamp":1786039925956,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.picasso.siayeo.com.sg","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:35:42 GMT","end":"Tue, 13 Oct 2026 21:35:41 GMT"},"fingerprint":{"sha1":"8C:82:78:16:A3:95:6D:4C:63:1C:2A:92:3C:10:6B:76:BC:4D:64:62","sha256":"8D:CC:06:CE:63:96:87:11:FF:06:06:11:7F:BB:7D:4A:F3:E1:5C:28:47:68:0E:98:11:41:89:F6:C5:75:93:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: siayeo.com.sg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://siayeo.com.sg/gonl/billing.getmyparkticket.online/PostNL/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Thu, 06 Aug 2026 18:12:05 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":796,"size_decoded":1442,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-08-11T21:00:19.207356Z","times_seen":53394,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"siayeo.com.sg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}