{"report_id":"2c81ea85-a912-49fb-923b-a4e2cb475a5b","version":0,"status":"done","tags":[],"date":"2026-06-08T02:03:04Z","url":{"schema":"https","addr":"icuwtzw.cloudaccess.host/Datenswizerland-fox/19-05-2026.html","fqdn":"icuwtzw.cloudaccess.host","domain":"icuwtzw.cloudaccess.host","tld":"cloudaccess.host"},"ip":{"addr":"104.37.86.66","port":0,"asn":54456,"as":"CLOUDACCESS-NETWORK","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"icuwtzw.cloudaccess.host/Datenswizerland-fox/19-05-2026.html","fqdn":"icuwtzw.cloudaccess.host","domain":"icuwtzw.cloudaccess.host","tld":"cloudaccess.host"},"title":"Rechnung Apple-ID","dom":{"size":7628,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (957)","md5":"8ffe206374487680af8e435cb1475043","sha1":"d62fc78d286b10d1429af559c1677173ac9fde58","sha256":"f2b092e2b4dddf71ef2aa0df2ec7d87f11d2db10b51b9d5f71e7515abf888b19","sha512":"07cd06a4606339ae87fea5283e8b63032fb1d106dd1ca288390fd61507fa47ba343d68c2d9a80fa605a7d4cdf8d9574033b42c2d7934415145af70b1cbda9e7a","ssdeep":"96:2kOXK/Jet3Je+DdddddddddddddddddddddddddddddddddddddddEddddddddds:4WJu3JHc3cmKqawkn86Tg/U","tlshash":"4bf183125a00bd39500b0a53f2746edf4ef615d9a322e718d9fea0e98bc07dc592d359","dom_hash":"domhash75acbab80f561bb1a1e068bd3118dc0e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"icuwtzw.cloudaccess.host/Datenswizerland-fox/19-05-2026.html","fqdn":"icuwtzw.cloudaccess.host","domain":"icuwtzw.cloudaccess.host","tld":"cloudaccess.host"},"ip":{"addr":"104.37.86.66","port":0,"asn":54456,"as":"CLOUDACCESS-NETWORK","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-13T02:03:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"icuwtzw.cloudaccess.host","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"icuwtzw.cloudaccess.host","ip":{"addr":"104.37.86.66","port":443,"asn":54456,"as":"CLOUDACCESS-NETWORK","country":"United States","country_code":"US"},"domain_registered":"2014-12-22","domain_rank":0,"first_seen":"2026-05-20T07:17:43.817281Z","last_seen":"2026-06-03T03:06:29.958555Z","alert_count":36,"request_count":9,"received_data":106644,"sent_data":5042,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"fdoipgsu.cloudaccess.host","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2014-12-22","domain_rank":0,"first_seen":"2026-05-20T07:17:43.826509Z","last_seen":"2026-06-03T03:06:29.958584Z","alert_count":0,"request_count":3,"received_data":0,"sent_data":1666,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"icuwtzw.cloudaccess.host/Datenswizerland-fox/dk/scr4.js","fqdn":"icuwtzw.cloudaccess.host","domain":"icuwtzw.cloudaccess.host","tld":"cloudaccess.host"},"ip":{"addr":"104.37.86.66","port":443,"asn":54456,"as":"CLOUDACCESS-NETWORK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb0f31a03525bdf797597bad169f083f","sha1":"0401eaaec40170672104814807693b8ea18af964","sha256":"23e3ca8349931478ce6cc6ffb2b4b759871e6e54fb098884a3862487abb0a461","sha512":"868144da3fe5afd2431f69b5016c85fe984e0838b707585580519c25e0e1dd9a99368128e273db258d7a72ba5de0893210b9497fe8262adebe1794ec704ac046","ssdeep":"1536:e8TmGKV9xMNWnjrzboeL930X13bTB8bq9TGA3zE8tlsBBLju0Xdl3e/qvPsrwWn9:e8Za9fg4ql+Bvd0/qvPs+OH","tlshash":"fc931a89b6d67137c7e731b824ef4106f079a8a5a80c4854f078e8e4bdb4a55807bf7c","size":90499,"data":"","first_seen":"2023-03-09T13:18:52Z","last_seen":"2026-06-08T02:03:05.867742Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icuwtzw.cloudaccess.host/Datenswizerland-fox/19-05-2026.html","fqdn":"icuwtzw.cloudaccess.host","domain":"icuwtzw.cloudaccess.host","tld":"cloudaccess.host"},"ip":{"addr":"104.37.86.66","port":443,"asn":54456,"as":"CLOUDACCESS-NETWORK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"90a6aef8ddb6bb3b45969955884a031f","sha1":"f2cebabb05892dfcba0aa6716d6c8c9d7a656a88","sha256":"e32a2f776c78e93a3861403ff762ea3003592cc78182b5ff2917e0828d0e696a","sha512":"7b8cfea5d115cd48044d570147593f39f0c2c65d40282cc085b22616ba6f94c4bd37c7f4b0f794c742de7c6b4540181c0062c94b12e2353951961e7d6ab3ac56","ssdeep":"","tlshash":"8f80000b2e8888e203aa238022aaa20a202000202280b2c020a20003200aacf2c00c80","size":29,"data":"","first_seen":"2026-06-08T02:03:05.868498Z","last_seen":"2026-06-08T02:03:05.868498Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"icuwtzw.cloudaccess.host/Datenswizerland-fox/19-05-2026.html","fqdn":"icuwtzw.cloudaccess.host","domain":"icuwtzw.cloudaccess.host","tld":"cloudaccess.host"},"ip":{"addr":"104.37.86.66","port":443,"asn":54456,"as":"CLOUDACCESS-NETWORK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-08T02:02:41.148Z","timestamp":1780884161148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudaccess.host","organization":""},"issuer":{"commonName":"PerfectSSL","organization":"PerfectSSL"},"validity":{"start":"Tue, 17 Mar 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7F:03:65:13:FA:4A:15:82:AC:9A:06:56:C5:90:63:95:3F:8F:78:1F","sha256":"95:B5:52:90:35:B1:36:F0:CC:57:0E:A3:D2:80:05:AE:F1:42:CD:78:64:5A:B5:C2:C5:AF:2E:AB:0D:FA:46:36"}}},"request":{"raw":"GET /Datenswizerland-fox/19-05-2026.html HTTP/1.1\r\nHost: icuwtzw.cloudaccess.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 19 May 2026 13:41:39 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 2009\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 08 Jun 2026 02:02:41 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7249,"size_decoded":2274,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (943)","md5":"38f05afe5c23f5a5129b4b47882b1efa","sha1":"4b401fdd3e432e1eade409932b9df59e76a0fd05","sha256":"1f4622be46075ada8107c3cf06e75a50fb969ed5d97dd38aae347f89e2bc4a13","sha512":"ceafcece63893a23e95f8bbd6885caf893ae7c23a003d383b9222fea04b8797961663d3ff8f9cde4b45cf8141add8a3004ef057017f27857a360af29d0ef3bdb","ssdeep":"96:oO7HdmKceImKAetzeG/e5aeP0De6S1EafNQddddddddddddddddddddddddddddS:p7HdmKceIUuzpzp6uQnY8IUhLEhO0Vd2","tlshash":"d7e17555db40fd1f203fa257f2180dcf6cb509e853b6dbc9dab8a48852c2a8d602e74d","first_seen":"2026-05-20T07:17:45.763951Z","last_seen":"2026-06-08T02:03:05.861037Z","times_seen":5,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":25,"connect":111,"send":0,"wait":113,"receive":0,"ssl":227},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"icuwtzw.cloudaccess.host","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icuwtzw.cloudaccess.host/Datenswizerland-fox/dk/style.css","fqdn":"icuwtzw.cloudaccess.host","domain":"icuwtzw.cloudaccess.host","tld":"cloudaccess.host"},"ip":{"addr":"104.37.86.66","port":443,"asn":54456,"as":"CLOUDACCESS-NETWORK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icuwtzw.cloudaccess.host/Datenswizerland-fox/19-05-2026.html","date":"2026-06-08T02:02:41.897Z","timestamp":1780884161897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudaccess.host","organization":""},"issuer":{"commonName":"PerfectSSL","organization":"PerfectSSL"},"validity":{"start":"Tue, 17 Mar 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7F:03:65:13:FA:4A:15:82:AC:9A:06:56:C5:90:63:95:3F:8F:78:1F","sha256":"95:B5:52:90:35:B1:36:F0:CC:57:0E:A3:D2:80:05:AE:F1:42:CD:78:64:5A:B5:C2:C5:AF:2E:AB:0D:FA:46:36"}}},"request":{"raw":"GET /Datenswizerland-fox/dk/style.css HTTP/1.1\r\nHost: icuwtzw.cloudaccess.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icuwtzw.cloudaccess.host/Datenswizerland-fox/19-05-2026.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 19 May 2026 13:41:43 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 508\r\ncontent-type: text/css\r\ndate: Mon, 08 Jun 2026 02:02:41 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":959,"size_decoded":756,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"4852b9ea4141d46e52296635fba99d6d","sha1":"af7aade2ad7f7b1548cec3d0fce5f6df0f75016f","sha256":"3027be183d76090288de1293f37fc372429179a05de71a425179a34926ceb8bf","sha512":"a0f45ecc54fb22fafd88df18b21add09d97f5c8a0b4020703cd5a4c83225af2d0fa0faa0b8b4ffdb3739ab16d58dcdedf0bd1c8d52c693c26aaf6b54e2396350","ssdeep":"","tlshash":"d611c225d683240ff41384656f721b46221dc8439102ce7d75bab9b8efc90d9847334e","first_seen":"2023-04-08T19:52:39Z","last_seen":"2026-06-08T02:03:05.862152Z","times_seen":14,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"icuwtzw.cloudaccess.host","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fdoipgsu.cloudaccess.host/ap.png","fqdn":"fdoipgsu.cloudaccess.host","domain":"fdoipgsu.cloudaccess.host","tld":"cloudaccess.host"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icuwtzw.cloudaccess.host/Datenswizerland-fox/19-05-2026.html","date":"2026-06-08T02:02:42.156Z","timestamp":1780884162156,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ap.png HTTP/1.1\r\nHost: fdoipgsu.cloudaccess.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icuwtzw.cloudaccess.host/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T02:51:48.557212Z","times_seen":17519369,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdoipgsu.cloudaccess.host/Apfl.jpg","fqdn":"fdoipgsu.cloudaccess.host","domain":"fdoipgsu.cloudaccess.host","tld":"cloudaccess.host"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icuwtzw.cloudaccess.host/Datenswizerland-fox/19-05-2026.html","date":"2026-06-08T02:02:42.160Z","timestamp":1780884162160,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Apfl.jpg HTTP/1.1\r\nHost: fdoipgsu.cloudaccess.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icuwtzw.cloudaccess.host/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T02:51:48.557212Z","times_seen":17519369,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icuwtzw.cloudaccess.host/Datenswizerland-fox/dk/msc.jpg","fqdn":"icuwtzw.cloudaccess.host","domain":"icuwtzw.cloudaccess.host","tld":"cloudaccess.host"},"ip":{"addr":"104.37.86.66","port":443,"asn":54456,"as":"CLOUDACCESS-NETWORK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icuwtzw.cloudaccess.host/Datenswizerland-fox/19-05-2026.html","date":"2026-06-08T02:02:42.161Z","timestamp":1780884162161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudaccess.host","organization":""},"issuer":{"commonName":"PerfectSSL","organization":"PerfectSSL"},"validity":{"start":"Tue, 17 Mar 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7F:03:65:13:FA:4A:15:82:AC:9A:06:56:C5:90:63:95:3F:8F:78:1F","sha256":"95:B5:52:90:35:B1:36:F0:CC:57:0E:A3:D2:80:05:AE:F1:42:CD:78:64:5A:B5:C2:C5:AF:2E:AB:0D:FA:46:36"}}},"request":{"raw":"GET /Datenswizerland-fox/dk/msc.jpg HTTP/1.1\r\nHost: icuwtzw.cloudaccess.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icuwtzw.cloudaccess.host/Datenswizerland-fox/19-05-2026.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 19 May 2026 13:41:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 943\r\ncontent-type: image/jpeg\r\ndate: Mon, 08 Jun 2026 02:02:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":943,"size_decoded":1146,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 50x21, components 3","md5":"cdbe112d9764a3e731b58d09dad9786a","sha1":"6ac1bbc80c4bc78a76483989b79b60fdf2129dbb","sha256":"588fb35a5e9c0b68560696b1b53b8f7f821c8f96f56e8af85c9ae3901c36573e","sha512":"0755c90b2fa3d9dd1d50829ab281c0416e94dfcdef265ffd9cd2401252358198fcd9fca5b106f0d6b1003216e00ea7036e324295148e2a0714dd0e16006f82c9","ssdeep":"","tlshash":"e611b367bfa3e0dee62334308fbf23c15222150296428efb03489506e6b0e5b137b176","first_seen":"2023-07-16T00:20:26Z","last_seen":"2026-06-08T02:03:05.864221Z","times_seen":15,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"icuwtzw.cloudaccess.host","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icuwtzw.cloudaccess.host/Datenswizerland-fox/dk/vbv.gif","fqdn":"icuwtzw.cloudaccess.host","domain":"icuwtzw.cloudaccess.host","tld":"cloudaccess.host"},"ip":{"addr":"104.37.86.66","port":443,"asn":54456,"as":"CLOUDACCESS-NETWORK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icuwtzw.cloudaccess.host/Datenswizerland-fox/19-05-2026.html","date":"2026-06-08T02:02:42.162Z","timestamp":1780884162162,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudaccess.host","organization":""},"issuer":{"commonName":"PerfectSSL","organization":"PerfectSSL"},"validity":{"start":"Tue, 17 Mar 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7F:03:65:13:FA:4A:15:82:AC:9A:06:56:C5:90:63:95:3F:8F:78:1F","sha256":"95:B5:52:90:35:B1:36:F0:CC:57:0E:A3:D2:80:05:AE:F1:42:CD:78:64:5A:B5:C2:C5:AF:2E:AB:0D:FA:46:36"}}},"request":{"raw":"GET /Datenswizerland-fox/dk/vbv.gif HTTP/1.1\r\nHost: icuwtzw.cloudaccess.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icuwtzw.cloudaccess.host/Datenswizerland-fox/19-05-2026.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 19 May 2026 13:41:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1602\r\ncontent-type: image/gif\r\ndate: Mon, 08 Jun 2026 02:02:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1602,"size_decoded":1805,"mime_type":"image/gif","magic":"GIF image data, version 89a, 45 x 21","md5":"0cf55c6e696371c39548e0e47dd2cf32","sha1":"78e974cc6491013179137289e2c45155a7d20818","sha256":"17aace29a159013e8057221b1838f10046b9d87f285e3480108b59198d973bf0","sha512":"3b8d7168efc2254dea856b646f39254078607c4364c72974108b8ae3db6e71a6e744655498a89bab7147975ca63095294b47189389753863f07a6cc92307776f","ssdeep":"","tlshash":"eb313a3ab0912228d3ca2e66309987e2087d3a8486ac00a550c0f66b13db19e5f1cf5f","first_seen":"2023-07-16T00:20:26Z","last_seen":"2026-06-08T02:03:05.865131Z","times_seen":15,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"icuwtzw.cloudaccess.host","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icuwtzw.cloudaccess.host/Datenswizerland-fox/dk/cvv2.jpg","fqdn":"icuwtzw.cloudaccess.host","domain":"icuwtzw.cloudaccess.host","tld":"cloudaccess.host"},"ip":{"addr":"104.37.86.66","port":443,"asn":54456,"as":"CLOUDACCESS-NETWORK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icuwtzw.cloudaccess.host/Datenswizerland-fox/19-05-2026.html","date":"2026-06-08T02:02:42.163Z","timestamp":1780884162163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudaccess.host","organization":""},"issuer":{"commonName":"PerfectSSL","organization":"PerfectSSL"},"validity":{"start":"Tue, 17 Mar 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7F:03:65:13:FA:4A:15:82:AC:9A:06:56:C5:90:63:95:3F:8F:78:1F","sha256":"95:B5:52:90:35:B1:36:F0:CC:57:0E:A3:D2:80:05:AE:F1:42:CD:78:64:5A:B5:C2:C5:AF:2E:AB:0D:FA:46:36"}}},"request":{"raw":"GET /Datenswizerland-fox/dk/cvv2.jpg HTTP/1.1\r\nHost: icuwtzw.cloudaccess.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icuwtzw.cloudaccess.host/Datenswizerland-fox/19-05-2026.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 19 May 2026 13:41:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2373\r\ncontent-type: image/jpeg\r\ndate: Mon, 08 Jun 2026 02:02:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2373,"size_decoded":2577,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 34x20, components 3","md5":"23e041af39b76f3660a68cc28064015c","sha1":"1c85f59ddd1b044697b30f0b9796ef34bd33fcde","sha256":"b89f1d205a75911c66cd92f108b0e1e1769b7f2bd09dd1e59faa4d8a2adf6975","sha512":"2717ff0ce9de6402313ace0a11c9ee07854adf7eb750b198bc3c50389503270f9f66eb0576b6af14632f5e837478cac8963b8adf8acd5a66df9ee1033d4a99d8","ssdeep":"","tlshash":"0241b819e51330a2f811ba735cea16081423e3409ac3e19f9db5c803e8b02b65e5bdd7","first_seen":"2023-07-16T00:20:26Z","last_seen":"2026-06-08T02:03:05.866085Z","times_seen":14,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"icuwtzw.cloudaccess.host","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icuwtzw.cloudaccess.host/Datenswizerland-fox/dk/img/header-bg.png","fqdn":"icuwtzw.cloudaccess.host","domain":"icuwtzw.cloudaccess.host","tld":"cloudaccess.host"},"ip":{"addr":"104.37.86.66","port":443,"asn":54456,"as":"CLOUDACCESS-NETWORK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icuwtzw.cloudaccess.host/Datenswizerland-fox/19-05-2026.html","date":"2026-06-08T02:02:42.205Z","timestamp":1780884162205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudaccess.host","organization":""},"issuer":{"commonName":"PerfectSSL","organization":"PerfectSSL"},"validity":{"start":"Tue, 17 Mar 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7F:03:65:13:FA:4A:15:82:AC:9A:06:56:C5:90:63:95:3F:8F:78:1F","sha256":"95:B5:52:90:35:B1:36:F0:CC:57:0E:A3:D2:80:05:AE:F1:42:CD:78:64:5A:B5:C2:C5:AF:2E:AB:0D:FA:46:36"}}},"request":{"raw":"GET /Datenswizerland-fox/dk/img/header-bg.png HTTP/1.1\r\nHost: icuwtzw.cloudaccess.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icuwtzw.cloudaccess.host/Datenswizerland-fox/dk/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-length: 390\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Mon, 08 Jun 2026 02:02:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":390,"size_decoded":544,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a168ee0ccf06676b3228516708bab780","sha1":"4e1f7f9a12d47eba8f3ed9451c4d6223f7154991","sha256":"30efa6c15511b367dd0206a9c1b87a9ffb7d0b0528e3da22d944aa30a3a3be07","sha512":"ba4b9ca42819b9c3eb2169f96c164eec3de21f7c72d25def1dbce57477738ea5cd389ba94b236dfa686ec026a8d178cbcafa9a79ac147854b744e58e0ae10784","ssdeep":"","tlshash":"53e0f88f024b73930812914038c00182a24022ee3524a0b83ac9e8a71358c3ccdab3cc","first_seen":"2026-05-20T07:17:45.753448Z","last_seen":"2026-06-08T02:03:05.866979Z","times_seen":5,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"icuwtzw.cloudaccess.host","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icuwtzw.cloudaccess.host/Datenswizerland-fox/dk/scr4.js","fqdn":"icuwtzw.cloudaccess.host","domain":"icuwtzw.cloudaccess.host","tld":"cloudaccess.host"},"ip":{"addr":"104.37.86.66","port":443,"asn":54456,"as":"CLOUDACCESS-NETWORK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icuwtzw.cloudaccess.host/Datenswizerland-fox/19-05-2026.html","date":"2026-06-08T02:02:41.902Z","timestamp":1780884161902,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudaccess.host","organization":""},"issuer":{"commonName":"PerfectSSL","organization":"PerfectSSL"},"validity":{"start":"Tue, 17 Mar 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7F:03:65:13:FA:4A:15:82:AC:9A:06:56:C5:90:63:95:3F:8F:78:1F","sha256":"95:B5:52:90:35:B1:36:F0:CC:57:0E:A3:D2:80:05:AE:F1:42:CD:78:64:5A:B5:C2:C5:AF:2E:AB:0D:FA:46:36"}}},"request":{"raw":"GET /Datenswizerland-fox/dk/scr4.js HTTP/1.1\r\nHost: icuwtzw.cloudaccess.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icuwtzw.cloudaccess.host/Datenswizerland-fox/19-05-2026.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 19 May 2026 13:41:43 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 30061\r\ncontent-type: application/javascript\r\ndate: Mon, 08 Jun 2026 02:02:41 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":90499,"size_decoded":30325,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fb0f31a03525bdf797597bad169f083f","sha1":"0401eaaec40170672104814807693b8ea18af964","sha256":"23e3ca8349931478ce6cc6ffb2b4b759871e6e54fb098884a3862487abb0a461","sha512":"868144da3fe5afd2431f69b5016c85fe984e0838b707585580519c25e0e1dd9a99368128e273db258d7a72ba5de0893210b9497fe8262adebe1794ec704ac046","ssdeep":"1536:e8TmGKV9xMNWnjrzboeL930X13bTB8bq9TGA3zE8tlsBBLju0Xdl3e/qvPsrwWn9:e8Za9fg4ql+Bvd0/qvPs+OH","tlshash":"fc931a89b6d67137c7e731b824ef4106f079a8a5a80c4854f078e8e4bdb4a55807bf7c","first_seen":"2023-03-09T13:18:52Z","last_seen":"2026-06-08T02:03:05.867742Z","times_seen":14,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"icuwtzw.cloudaccess.host","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fdoipgsu.cloudaccess.host/itun.png","fqdn":"fdoipgsu.cloudaccess.host","domain":"fdoipgsu.cloudaccess.host","tld":"cloudaccess.host"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icuwtzw.cloudaccess.host/Datenswizerland-fox/19-05-2026.html","date":"2026-06-08T02:02:42.158Z","timestamp":1780884162158,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /itun.png HTTP/1.1\r\nHost: fdoipgsu.cloudaccess.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icuwtzw.cloudaccess.host/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T02:51:48.557212Z","times_seen":17519369,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icuwtzw.cloudaccess.host/Datenswizerland-fox/dk/img/bg.jpg","fqdn":"icuwtzw.cloudaccess.host","domain":"icuwtzw.cloudaccess.host","tld":"cloudaccess.host"},"ip":{"addr":"104.37.86.66","port":443,"asn":54456,"as":"CLOUDACCESS-NETWORK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icuwtzw.cloudaccess.host/Datenswizerland-fox/19-05-2026.html","date":"2026-06-08T02:02:42.202Z","timestamp":1780884162202,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudaccess.host","organization":""},"issuer":{"commonName":"PerfectSSL","organization":"PerfectSSL"},"validity":{"start":"Tue, 17 Mar 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7F:03:65:13:FA:4A:15:82:AC:9A:06:56:C5:90:63:95:3F:8F:78:1F","sha256":"95:B5:52:90:35:B1:36:F0:CC:57:0E:A3:D2:80:05:AE:F1:42:CD:78:64:5A:B5:C2:C5:AF:2E:AB:0D:FA:46:36"}}},"request":{"raw":"GET /Datenswizerland-fox/dk/img/bg.jpg HTTP/1.1\r\nHost: icuwtzw.cloudaccess.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icuwtzw.cloudaccess.host/Datenswizerland-fox/dk/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-length: 390\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Mon, 08 Jun 2026 02:02:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":390,"size_decoded":544,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a168ee0ccf06676b3228516708bab780","sha1":"4e1f7f9a12d47eba8f3ed9451c4d6223f7154991","sha256":"30efa6c15511b367dd0206a9c1b87a9ffb7d0b0528e3da22d944aa30a3a3be07","sha512":"ba4b9ca42819b9c3eb2169f96c164eec3de21f7c72d25def1dbce57477738ea5cd389ba94b236dfa686ec026a8d178cbcafa9a79ac147854b744e58e0ae10784","ssdeep":"","tlshash":"53e0f88f024b73930812914038c00182a24022ee3524a0b83ac9e8a71358c3ccdab3cc","first_seen":"2026-05-20T07:17:45.753448Z","last_seen":"2026-06-08T02:03:05.866979Z","times_seen":5,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"icuwtzw.cloudaccess.host","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icuwtzw.cloudaccess.host/favicon.ico","fqdn":"icuwtzw.cloudaccess.host","domain":"icuwtzw.cloudaccess.host","tld":"cloudaccess.host"},"ip":{"addr":"104.37.86.66","port":443,"asn":54456,"as":"CLOUDACCESS-NETWORK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icuwtzw.cloudaccess.host/Datenswizerland-fox/19-05-2026.html","date":"2026-06-08T02:02:42.334Z","timestamp":1780884162334,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudaccess.host","organization":""},"issuer":{"commonName":"PerfectSSL","organization":"PerfectSSL"},"validity":{"start":"Tue, 17 Mar 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7F:03:65:13:FA:4A:15:82:AC:9A:06:56:C5:90:63:95:3F:8F:78:1F","sha256":"95:B5:52:90:35:B1:36:F0:CC:57:0E:A3:D2:80:05:AE:F1:42:CD:78:64:5A:B5:C2:C5:AF:2E:AB:0D:FA:46:36"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: icuwtzw.cloudaccess.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icuwtzw.cloudaccess.host/Datenswizerland-fox/19-05-2026.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-length: 390\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Mon, 08 Jun 2026 02:02:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":390,"size_decoded":544,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a168ee0ccf06676b3228516708bab780","sha1":"4e1f7f9a12d47eba8f3ed9451c4d6223f7154991","sha256":"30efa6c15511b367dd0206a9c1b87a9ffb7d0b0528e3da22d944aa30a3a3be07","sha512":"ba4b9ca42819b9c3eb2169f96c164eec3de21f7c72d25def1dbce57477738ea5cd389ba94b236dfa686ec026a8d178cbcafa9a79ac147854b744e58e0ae10784","ssdeep":"","tlshash":"53e0f88f024b73930812914038c00182a24022ee3524a0b83ac9e8a71358c3ccdab3cc","first_seen":"2026-05-20T07:17:45.753448Z","last_seen":"2026-06-08T02:03:05.866979Z","times_seen":5,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"icuwtzw.cloudaccess.host","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"icuwtzw.cloudaccess.host","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}