{"report_id":"21596ce1-2cf4-4552-84f8-5fbe7c5822d3","version":6,"status":"done","tags":[],"date":"2025-12-29T15:24:56Z","url":{"schema":"https","addr":"urldefense.com/v3/__https://email.givingbenefits.com/dc/8vJmAepKLdu-NGtlEkLsqh1lt-Hy3nywxocDWn3bBwUAuZehqP3MPPSXCyS-_Dwej7qe4tF_-QGCEjA1IKV36oEfpk3nCzu7w4wB-sHZp-MtlSFPTPN8TlEOE8571KsO/MzU5LUdRUi01MDIAAAGfCSyiOcUGNqSvf3kDpyK_HsNOl7sP5p8VfKWAbk9T5VEBIXBHgBWt_XSlCTBGB_k5U0JetWw=__;!!PE2eEA!nmaeVCeh_6_edzCTBRbt32PTRRw5xHAcfrBRwPLLikrixh0SncK7rZALGPLTAS0VeulR_OlSTg9gnFB7jViKrsknMFGSPQD8Nw$","fqdn":"urldefense.com","domain":"urldefense.com","tld":"com"},"ip":{"addr":"52.71.28.102","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"zenweb.proofpoint.com/urldefense/blocked?sig=wGx0tq3Y4iaP6Caz5rCfb95T6quCjiiQfGjcJntEwyw%3D","fqdn":"zenweb.proofpoint.com","domain":"proofpoint.com","tld":"com"},"title":"Proofpoint - ZenWeb™","dom":{"size":77692,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (53119)","md5":"30f24243c76508da341870254b51a577","sha1":"834f3f876711d2b88f1873374ada5a7a1fd11fec","sha256":"97f0072737c9874d011cefbdafa8647a6e67972ed953be50bcab710ad83ab0bb","sha512":"45d40199fdf364f6414b098166a653d02acabafab3abd5493fe1fb0b3d56cbfa903da6e070669887e5fa9f836826e48524f0c5f145eaf1a520ae7c3513baabcd","ssdeep":"1536:zrrufHDTToQOfHDT4p2dHvEc/2xlb61kIYFiT2S41xJa98z7FV9V8:Mj/otj97/2Hb6O5i56xgy7Fu","tlshash":"9973bf330e557eaa2f65081e26cf6de61e0ca7c7a316e898f05c36d0ef872351ce1598","dom_hash":"domhash19150261a758a07bcdafce2a1a130b3e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"urldefense.com/v3/__https://email.givingbenefits.com/dc/8vJmAepKLdu-NGtlEkLsqh1lt-Hy3nywxocDWn3bBwUAuZehqP3MPPSXCyS-_Dwej7qe4tF_-QGCEjA1IKV36oEfpk3nCzu7w4wB-sHZp-MtlSFPTPN8TlEOE8571KsO/MzU5LUdRUi01MDIAAAGfCSyiOcUGNqSvf3kDpyK_HsNOl7sP5p8VfKWAbk9T5VEBIXBHgBWt_XSlCTBGB_k5U0JetWw=__;!!PE2eEA!nmaeVCeh_6_edzCTBRbt32PTRRw5xHAcfrBRwPLLikrixh0SncK7rZALGPLTAS0VeulR_OlSTg9gnFB7jViKrsknMFGSPQD8Nw$","fqdn":"urldefense.com","domain":"urldefense.com","tld":"com"},"ip":{"addr":"52.71.28.102","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-02T15:24:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"urldefense.com","ip":{"addr":"52.204.90.22","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2017-09-08","domain_rank":3848,"first_seen":"2015-04-27T16:20:15Z","last_seen":"2025-12-25T09:38:51.576049Z","alert_count":0,"request_count":1,"received_data":78143,"sent_data":856,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zenweb.proofpoint.com","ip":{"addr":"13.62.237.215","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2001-08-08","domain_rank":0,"first_seen":"2025-11-17T07:24:14.889449Z","last_seen":"2025-12-25T09:38:51.511228Z","alert_count":0,"request_count":1,"received_data":78021,"sent_data":559,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"urldefense.com/v3/__https://email.givingbenefits.com/dc/8vJmAepKLdu-NGtlEkLsqh1lt-Hy3nywxocDWn3bBwUAuZehqP3MPPSXCyS-_Dwej7qe4tF_-QGCEjA1IKV36oEfpk3nCzu7w4wB-sHZp-MtlSFPTPN8TlEOE8571KsO/MzU5LUdRUi01MDIAAAGfCSyiOcUGNqSvf3kDpyK_HsNOl7sP5p8VfKWAbk9T5VEBIXBHgBWt_XSlCTBGB_k5U0JetWw=__;!!PE2eEA!nmaeVCeh_6_edzCTBRbt32PTRRw5xHAcfrBRwPLLikrixh0SncK7rZALGPLTAS0VeulR_OlSTg9gnFB7jViKrsknMFGSPQD8Nw$","fqdn":"urldefense.com","domain":"urldefense.com","tld":"com"},"ip":{"addr":"52.204.90.22","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-29T15:24:32.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.urldefense.com","organization":"Proofpoint, Inc."},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 10 Nov 2025 00:00:00 GMT","end":"Tue, 10 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B8:C8:D7:F6:B2:32:6F:60:5C:6B:0D:98:9F:56:44:B2:DB:14:BD:50","sha256":"A4:67:11:45:E1:64:88:F2:9B:65:46:98:36:C8:43:6E:42:4B:DC:E8:A1:10:04:EB:94:25:91:8C:82:15:44:93"}}},"request":{"raw":"GET /v3/__https://email.givingbenefits.com/dc/8vJmAepKLdu-NGtlEkLsqh1lt-Hy3nywxocDWn3bBwUAuZehqP3MPPSXCyS-_Dwej7qe4tF_-QGCEjA1IKV36oEfpk3nCzu7w4wB-sHZp-MtlSFPTPN8TlEOE8571KsO/MzU5LUdRUi01MDIAAAGfCSyiOcUGNqSvf3kDpyK_HsNOl7sP5p8VfKWAbk9T5VEBIXBHgBWt_XSlCTBGB_k5U0JetWw=__;!!PE2eEA!nmaeVCeh_6_edzCTBRbt32PTRRw5xHAcfrBRwPLLikrixh0SncK7rZALGPLTAS0VeulR_OlSTg9gnFB7jViKrsknMFGSPQD8Nw$ HTTP/1.1\r\nHost: urldefense.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 29 Dec 2025 15:24:32 GMT\r\ncontent-length: 0\r\nlocation: https://zenweb.proofpoint.com/urldefense/blocked?sig=wGx0tq3Y4iaP6Caz5rCfb95T6quCjiiQfGjcJntEwyw%3D\r\nstrict-transport-security: max-age=31536000\r\nx-robots-tag: noindex, nofollow\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src 'self';\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77717,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T02:58:52.640491Z","times_seen":16315450,"resource_available":true,"data":null}},"time_used":767,"timings":{"blocked":331,"dns":34,"connect":95,"send":0,"wait":104,"receive":0,"ssl":200},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenweb.proofpoint.com/urldefense/blocked?sig=wGx0tq3Y4iaP6Caz5rCfb95T6quCjiiQfGjcJntEwyw%3D","fqdn":"zenweb.proofpoint.com","domain":"proofpoint.com","tld":"com"},"ip":{"addr":"13.62.237.215","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-29T15:24:32.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenweb.proofpoint.com","organization":"Proofpoint, Inc."},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 09 Oct 2025 00:00:00 GMT","end":"Wed, 07 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:58:9A:B7:AC:48:27:3E:C2:3C:E7:02:21:38:8A:44:ED:C6:34:44","sha256":"16:65:6E:CC:C0:B8:BB:F6:C8:5E:BB:F7:22:BE:B2:5D:CB:7A:8C:D1:24:BE:73:43:D7:47:C6:92:8D:34:E2:F7"}}},"request":{"raw":"GET /urldefense/blocked?sig=wGx0tq3Y4iaP6Caz5rCfb95T6quCjiiQfGjcJntEwyw%3D HTTP/1.1\r\nHost: zenweb.proofpoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Mon, 29 Dec 2025 15:24:33 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-eb6315ceda581c370f5bb9a5da4f43af-a39a364d8801544f-01\"\r\naccess-control-expose-headers: Server-Timing\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":77717,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (53119)","md5":"3debf7cf4c576776bda4cc0da33dd11a","sha1":"f2feefd5fd92441ed91f13f5048a48c21631fbd4","sha256":"0f8d2108d3b34f7d01fb3645e495c74df3d54953ad55bf450ba116951019cca0","sha512":"6ea81f7987bfbe42944056524a67b87e128456af3f8d0b955e595606d177ba9337b5afe26d41e18e4a31b81fba70f39b4f5e9e185f6c68be6d90040db7447dc8","ssdeep":"1536:0r/hfHDTToQOfHDT4p2dHvEc/2xlb61kIYFiT2Sg1xJa98z7FVpV8:aj/otj97/2Hb6O5i5Cxgy7FK","tlshash":"1273bf330e557eaa2f65081e26cf6de61e0ca7c7a316e898f15c36d0ef832351ce1598","first_seen":"2025-12-29T15:16:28.00164Z","last_seen":"2026-02-05T16:22:25.985541Z","times_seen":4,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":92,"dns":35,"connect":10,"send":0,"wait":500,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}