{"report_id":"31779361-8f2a-4545-a419-3353d9adcd0b","version":0,"status":"done","tags":[],"date":"2026-08-15T18:33:31Z","url":{"schema":"http","addr":"apptalktalk.mailhelpdesksupport.com/","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"35.157.26.135","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"apptalktalk.mailhelpdesksupport.com/","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"title":"Talktalk | Mailbox Manager","dom":{"size":7636,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4008)","md5":"0ef9fb2fd0850535df1b80335cc481ba","sha1":"5817e5ff949f1e9d75e1ac5eaccff62549c55a95","sha256":"3fb40af182a8e27003c84173215949cacb397ad17287cf547df8b00aa4f5cb44","sha512":"b835b8cd761fe28a47dc58c36d423cb5c50a3b212cce8ca0687b9a3137e609c0883bbb0a8f5161564753a7941a9993e3169b46cba1e53e73ce4024e3a675eb16","ssdeep":"96:nGWu1IqDQsklAzCylQi/lQtXBQKhxbrx1ZWTNwTkdWdCfDgEr5OFl:GWu1IKkk+++tTBrTZWTNwe9sl","tlshash":"70f1d871e52008bf04e717a9f5a5b606b8a4820fcd07a83cb1acc16d2f99df9c556ee4","dom_hash":"domhashefb80b115e723d418f3c5a79bae77a17","first_seen":"2026-08-15T08:16:53.015554Z","last_seen":"2026-08-15T18:33:32.563249Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"apptalktalk.mailhelpdesksupport.com/","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"35.157.26.135","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-19T18:33:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"apptalktalk.mailhelpdesksupport.com","ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2026-03-07","domain_rank":0,"first_seen":"2026-08-15T08:16:49.003918Z","last_seen":"2026-08-15T08:16:49.003918Z","alert_count":36,"request_count":9,"received_data":356632,"sent_data":4590,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-09T22:20:44.514027Z","alert_count":0,"request_count":1,"received_data":73777,"sent_data":577,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-09T22:23:43.881052Z","alert_count":0,"request_count":1,"received_data":5571,"sent_data":581,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"apptalktalk.mailhelpdesksupport.com/","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"262ef98fd37d96f0fe4df55e33e9882f","sha1":"f3562b7a0e09f030640f0b4cd90951475a09ff6e","sha256":"9f50fd7195f0e1935289447eebff2ee0a0ba331eca0856fd49c240f14d147612","sha512":"2fe59926f1408243fbf978b3bccd618747812f23262812c9f4775092d9aab1bb3ecfd4ffda9ee0f58fe1da71e637e5e3e27ab22586d66d273f2cdd13882c715f","ssdeep":"","tlshash":"60f0500fd74c16368dff41596d74b392b0ad91ea2d4e065a39a1041c357dd7f83097c0","size":509,"data":"","first_seen":"2026-06-26T15:40:02.122258Z","last_seen":"2026-08-15T18:33:32.572658Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apptalktalk.mailhelpdesksupport.com/","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"a96bcb20741f5329e1466dcab187a311","sha1":"b3c11777b350c70c25ae7327e1925f27a560553a","sha256":"5cb4f53194b95130778f2c229a61b9714f7196ceef7bebd0989165f5c75f8d83","sha512":"3eb4c8cca88d15112718c60682e849e15fe42a948368759686cc1da592b32ca513fc0bc33d71f8c3dca1a5dc999b754aff41bc9de05db4188f9dbeed8eceb5ce","ssdeep":"","tlshash":"56e0d83418291af95ac322dc5717bf1a731846435105953199ecdabd24d38eea023cf8","size":353,"data":"","first_seen":"2026-06-26T15:40:02.123191Z","last_seen":"2026-08-15T18:33:32.573415Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apptalktalk.mailhelpdesksupport.com/","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3e3e350f78cf22bd7b335d70b41a58a","sha1":"cce22220b6a8dff76692755cc45439b4ec474a4d","sha256":"ee6bb81f4e9fc030a39a7c71affc4d1f2b900baa4b4c7af83361388d7c39599b","sha512":"15b6cbf8bd67e82a4952004138ebc95c44e4d373317826f1560eeec13416cc1d6a38d834609ef4b713e7a9c92d1b1bbf84de08e2e4061ed3d1e3891982c25b0a","ssdeep":"","tlshash":"3f90025ff2302063a756122b166f15456421626565550869123830eb4955148474265c","size":57,"data":"","first_seen":"2025-06-30T14:23:19.448274Z","last_seen":"2026-08-15T22:03:50.711795Z","times_seen":67884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apptalktalk.mailhelpdesksupport.com/","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"937cc33b77f72d3ff900446da72038b2","sha1":"6bfc1c054581fee1d3422724c5281394406ce00f","sha256":"76e85ac56348fba400ba450c9a562b925f7b5fe7b4a71a1b9304be4e9639fc24","sha512":"7347a8dbc2d277e834792ff67682e525d93a83b7b4b21171f186ac99cc1d49a4836b9a38441108311381bcb8ec84070047263da7a33dc200434fa0a33433daa5","ssdeep":"","tlshash":"c6c09b24991e96e10dd25d5d1915ee3431d449510152ea5f5005c51954f34d5e053cf5","size":135,"data":"","first_seen":"2025-04-24T00:11:13.723838Z","last_seen":"2026-08-15T18:33:32.574889Z","times_seen":1691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apptalktalk.mailhelpdesksupport.com/","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"00933d3d76fccf8f1d330b001b6dc118","sha1":"72a3f9f693a7d05bb6f1b38fd381a0f4e8bb5c7a","sha256":"4009527b06902e2fcd3c2ce78c0652caf43bda1783d1577198d0c3919782c607","sha512":"8fce1ced1efcaf7f17f0fbc71664f0ca59f5f7bddc682fdbc8b9ef3862def740a845bc3cd5cc3926c09b98782296d14c9b38d50b2dd6cb53b296ec76ba558602","ssdeep":"","tlshash":"090156a9f328199a66d92fbfa06a570c7460603e380600319507edfa1700de021cbd8e","size":845,"data":"","first_seen":"2025-08-20T23:30:20.291724Z","last_seen":"2026-08-15T22:03:50.712341Z","times_seen":52101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apptalktalk.mailhelpdesksupport.com/","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0699d9362a4e2603cb8ff2bd6ddd2f4","sha1":"5a735efe15b3ec9246eb2ea710a664e7c850190c","sha256":"44164d886dd9b5bdba5e2ffaf7e55179c53804f86b7f172fb292d7311aeb08d1","sha512":"6a7de46450e6dbba8903543d163632bb33c985f7d5e2a61cd8c22781f9487d01dc468174af39aaf2a7e421f9efd29a80c2c3ff347805331254865fd9c357fa2d","ssdeep":"","tlshash":"c8900220542902aa5ae2815d5612fe3977441985110984620154d60b24d20d690369e4","size":53,"data":"","first_seen":"2025-01-19T19:20:19.81482Z","last_seen":"2026-08-15T18:33:32.575875Z","times_seen":10723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apptalktalk.mailhelpdesksupport.com/","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"4533235bc340f56829dea0a7d50f01e1","sha1":"57e36d2d5ea0be6ffc8e6001b28f5b4f3b865a43","sha256":"a7b184efc6db3070eb138216ce988c4adb40b13a54bbbc308b9ff0be71f9e0eb","sha512":"dd0bfc5260b16d9a9b387ef134ba454aa5ed7636fab9b79e5034e229418ca5f0e6fd99dca3c881fa091df55204dfaf7e77e4526050a60e8110ed49b41ea4e831","ssdeep":"","tlshash":"1c60000000c000ff0000f0c03ccf0c000c0cf000300c00000003c3000000000030300c","size":16,"data":"","first_seen":"2023-03-08T20:20:25Z","last_seen":"2026-08-15T22:06:24.054294Z","times_seen":29686,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apptalktalk.mailhelpdesksupport.com/assets/jsx-runtime-D3n6tQSC.js","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcefb0a98939b1e9d615d48551f178cd","sha1":"02b37a1461675a2d33b51598e2fca908f245690a","sha256":"7f17b0327cdbc628927edf3da8317da435a066a89dd49e18c15b8ed3a152abba","sha512":"1a1b7863621a5a33f5d19c9c69099e9eb50fe99a9a27a24a6738e03f14abbdbbab8456e30a10e38d113728f330b49d0450b723add277625b517e75d993d7e879","ssdeep":"768:/lLQIPcWcjgndn2QUQrpnD5S5hYGduBQd1tTBf2uOSMIHqSRE99EL3zs/OVmw9X5:2ngndnO2poYGdCe3ymqK3zs8Gc","tlshash":"c6831afa3295b0654beb43e280bf0015f3362cea246e8015b26cd95e34b5d4c96b7f75","size":82084,"data":"","first_seen":"2026-07-24T05:57:14.192804Z","last_seen":"2026-08-15T18:33:32.568786Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apptalktalk.mailhelpdesksupport.com/assets/entry.client-DBkxfk1I.js","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7215f799fec5f4722abd4699c890bc66","sha1":"04cf3f1398338e4557a4fb84de8c80864ce3ca97","sha256":"7e3ce4bfc4fe4751b0085bb1254de2e18655c311b3d0567cf42bb0bee2e5a971","sha512":"619a8c39430eab2eafdf5310a6a98c3570eac1d1be050911dd67cc0caa7b72ef62cd350e5128021f2eb184603a5b058555545ce365a0688d7145f6407d371f56","ssdeep":"3072:ul88OJzXpoilxIKHAHY9LQfd0tQekvO5OXMu8q9uog3:uydLVlXgHY9ketQxvO5qMrq9uog3","tlshash":"09042cec31a9b6626f9356b6006f1a07733929231c0d4860b110feae7bf544651bbfed","size":185897,"data":"","first_seen":"2026-07-24T05:57:14.191323Z","last_seen":"2026-08-15T18:33:32.571692Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apptalktalk.mailhelpdesksupport.com/assets/home-DtdgwXyv.js","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0f302d3bbb5dfa09badb7c8b377f3fb","sha1":"c47ba6c9d607a2f97c253076be7f683ef7e41a1d","sha256":"bfbca192a8b1f3ce8ea185ab27f5b495d52926c845b019c25d79af4a84cae90b","sha512":"5607a7aecae80cd1fa01d5007b3649f7335625f39774168494f66969dd1a2037f0cb00aae4f75b743cd910a1b7796ca2c277d4ca8903a9a5777880084bb4204a","ssdeep":"96:g6fqhYtQQlwMyGaPtQQlPBoeKtS7bJlAulKJl1SrUZzFx2QB:XC8DyTJtBvHo0uD2QB","tlshash":"0bf13247b06169ddfc5b8964606fc00ef45fd148ca0b486db9fdb0212946cdaab7bbc8","size":7845,"data":"","first_seen":"2026-08-15T08:16:53.042815Z","last_seen":"2026-08-15T18:33:32.566018Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apptalktalk.mailhelpdesksupport.com/assets/root-BQ6L_8jU.js","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"64b9e0463395e5601f5514d3325d51f9","sha1":"6b34e66691467c3b756e6c7b4c0cb34b7c8a311d","sha256":"1791097b91228b3ab42b744994cd320f75d596a4213dcd1e3d54308039ccac80","sha512":"72d2d1ced0d8cd793158eae760c72601c9ed03f92f8adb008cdaf3ad5589d4a4415e466f3588d4f5504bb4e029201b820d015553417a42ad10fe5f9c6c396e7b","ssdeep":"192:u7M2IojErL4967XOeB7KBJcBE8ZyTcl1bPsbvqz0x9/DqF/H1NszGV:uHIojELRRB74JcXyTclK9/DCEyV","tlshash":"1832e9eeb19074b05faf83e541f70068b17a14e42dae402531b49c4a35b9d99337bfea","size":11530,"data":"","first_seen":"2026-08-15T08:16:53.038894Z","last_seen":"2026-08-15T18:33:32.564939Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apptalktalk.mailhelpdesksupport.com/assets/errorBoundaries-DHmrlYz_.js","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3832e506d24bb7d220943708054c5b8a","sha1":"908e2a04a8a1cc7185a1f229d73d89bb433fefe5","sha256":"faae20b65cb6fc28799f0463eb60d4fcd58e09e9c80eb034f1de14d0c34f7ecf","sha512":"5750c809bab92d36084c862d956a657bd21f9ce10d366a0c4f33cd2cc633eda2a86015676f583380e4fb436fcf4af6665e5850f8cf0e3a01b08f93a1ca65c3fe","ssdeep":"768:1Iyb+DwfSB5EAcjXzjtkhzGsQSLO3QbBSUMI6s5X1QFT8qpWscKdX:+AfSB5EAQzjtkhzGsogbBSUM+X1y4scQ","tlshash":"bde2f7f23695b03e87dd1366c06b8504f7e94999a82d4010f28cd89f3ab5d84dafaf74","size":33362,"data":"","first_seen":"2026-07-24T05:57:14.200296Z","last_seen":"2026-08-15T18:33:32.564386Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"apptalktalk.mailhelpdesksupport.com/assets/errorBoundaries-DHmrlYz_.js","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apptalktalk.mailhelpdesksupport.com/","date":"2026-08-15T18:33:04.488Z","timestamp":1786818784488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apptalktalk.mailhelpdesksupport.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 12:01:36 GMT","end":"Thu, 12 Nov 2026 12:01:35 GMT"},"fingerprint":{"sha1":"BB:FD:01:28:F8:EB:11:0A:43:75:17:01:8C:A4:9A:EB:6F:55:82:1D","sha256":"AD:9F:B4:0F:F6:7A:E2:70:3C:4D:36:E0:C6:54:51:3F:1B:7D:1B:C2:C4:56:ED:B5:B5:05:57:40:3E:9F:35:20"}}},"request":{"raw":"GET /assets/errorBoundaries-DHmrlYz_.js HTTP/1.1\r\nHost: apptalktalk.mailhelpdesksupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apptalktalk.mailhelpdesksupport.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sat, 15 Aug 2026 18:33:04 GMT\r\netag: \"24ccc3be1f079c5e7fbe3e00eb80fb1f-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M03B5V7F4V2GAREGER8R3RSQ\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":33362,"size_decoded":11844,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26810)","md5":"3832e506d24bb7d220943708054c5b8a","sha1":"908e2a04a8a1cc7185a1f229d73d89bb433fefe5","sha256":"faae20b65cb6fc28799f0463eb60d4fcd58e09e9c80eb034f1de14d0c34f7ecf","sha512":"5750c809bab92d36084c862d956a657bd21f9ce10d366a0c4f33cd2cc633eda2a86015676f583380e4fb436fcf4af6665e5850f8cf0e3a01b08f93a1ca65c3fe","ssdeep":"768:1Iyb+DwfSB5EAcjXzjtkhzGsQSLO3QbBSUMI6s5X1QFT8qpWscKdX:+AfSB5EAQzjtkhzGsogbBSUM+X1y4scQ","tlshash":"bde2f7f23695b03e87dd1366c06b8504f7e94999a82d4010f28cd89f3ab5d84dafaf74","first_seen":"2026-07-24T05:57:14.200296Z","last_seen":"2026-08-15T18:33:32.564386Z","times_seen":3,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apptalktalk.mailhelpdesksupport.com/assets/root-BQ6L_8jU.js","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apptalktalk.mailhelpdesksupport.com/","date":"2026-08-15T18:33:04.489Z","timestamp":1786818784489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apptalktalk.mailhelpdesksupport.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 12:01:36 GMT","end":"Thu, 12 Nov 2026 12:01:35 GMT"},"fingerprint":{"sha1":"BB:FD:01:28:F8:EB:11:0A:43:75:17:01:8C:A4:9A:EB:6F:55:82:1D","sha256":"AD:9F:B4:0F:F6:7A:E2:70:3C:4D:36:E0:C6:54:51:3F:1B:7D:1B:C2:C4:56:ED:B5:B5:05:57:40:3E:9F:35:20"}}},"request":{"raw":"GET /assets/root-BQ6L_8jU.js HTTP/1.1\r\nHost: apptalktalk.mailhelpdesksupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apptalktalk.mailhelpdesksupport.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sat, 15 Aug 2026 18:33:04 GMT\r\netag: \"72fa98711ef7970f00346ac68b8b0567-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M03B5V7GYXTC87G5V8NMTPRR\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":11530,"size_decoded":4955,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11530), with no line terminators","md5":"64b9e0463395e5601f5514d3325d51f9","sha1":"6b34e66691467c3b756e6c7b4c0cb34b7c8a311d","sha256":"1791097b91228b3ab42b744994cd320f75d596a4213dcd1e3d54308039ccac80","sha512":"72d2d1ced0d8cd793158eae760c72601c9ed03f92f8adb008cdaf3ad5589d4a4415e466f3588d4f5504bb4e029201b820d015553417a42ad10fe5f9c6c396e7b","ssdeep":"192:u7M2IojErL4967XOeB7KBJcBE8ZyTcl1bPsbvqz0x9/DqF/H1NszGV:uHIojELRRB74JcXyTclK9/DCEyV","tlshash":"1832e9eeb19074b05faf83e541f70068b17a14e42dae402531b49c4a35b9d99337bfea","first_seen":"2026-08-15T08:16:53.038894Z","last_seen":"2026-08-15T18:33:32.564939Z","times_seen":2,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apptalktalk.mailhelpdesksupport.com/assets/home-DtdgwXyv.js","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apptalktalk.mailhelpdesksupport.com/","date":"2026-08-15T18:33:04.490Z","timestamp":1786818784490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apptalktalk.mailhelpdesksupport.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 12:01:36 GMT","end":"Thu, 12 Nov 2026 12:01:35 GMT"},"fingerprint":{"sha1":"BB:FD:01:28:F8:EB:11:0A:43:75:17:01:8C:A4:9A:EB:6F:55:82:1D","sha256":"AD:9F:B4:0F:F6:7A:E2:70:3C:4D:36:E0:C6:54:51:3F:1B:7D:1B:C2:C4:56:ED:B5:B5:05:57:40:3E:9F:35:20"}}},"request":{"raw":"GET /assets/home-DtdgwXyv.js HTTP/1.1\r\nHost: apptalktalk.mailhelpdesksupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apptalktalk.mailhelpdesksupport.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sat, 15 Aug 2026 18:33:04 GMT\r\netag: \"2c4e5729aa30dbea7673ed5d66dda3ef-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M03B5V7HWCYBGEGD1ZXXJQRS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":7845,"size_decoded":2584,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7843), with no line terminators","md5":"f0f302d3bbb5dfa09badb7c8b377f3fb","sha1":"c47ba6c9d607a2f97c253076be7f683ef7e41a1d","sha256":"bfbca192a8b1f3ce8ea185ab27f5b495d52926c845b019c25d79af4a84cae90b","sha512":"5607a7aecae80cd1fa01d5007b3649f7335625f39774168494f66969dd1a2037f0cb00aae4f75b743cd910a1b7796ca2c277d4ca8903a9a5777880084bb4204a","ssdeep":"96:g6fqhYtQQlwMyGaPtQQlPBoeKtS7bJlAulKJl1SrUZzFx2QB:XC8DyTJtBvHo0uD2QB","tlshash":"0bf13247b06169ddfc5b8964606fc00ef45fd148ca0b486db9fdb0212946cdaab7bbc8","first_seen":"2026-08-15T08:16:53.042815Z","last_seen":"2026-08-15T18:33:32.566018Z","times_seen":2,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apptalktalk.mailhelpdesksupport.com/","date":"2026-08-15T18:33:04.826Z","timestamp":1786818784826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://apptalktalk.mailhelpdesksupport.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 09 Aug 2026 10:34:06 GMT\r\nexpires: Mon, 09 Aug 2027 10:34:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 547138\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":73777,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-15T21:57:18.390396Z","times_seen":32057,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":29,"send":0,"wait":16,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apptalktalk.mailhelpdesksupport.com/","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-15T18:33:03.746Z","timestamp":1786818783746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apptalktalk.mailhelpdesksupport.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 12:01:36 GMT","end":"Thu, 12 Nov 2026 12:01:35 GMT"},"fingerprint":{"sha1":"BB:FD:01:28:F8:EB:11:0A:43:75:17:01:8C:A4:9A:EB:6F:55:82:1D","sha256":"AD:9F:B4:0F:F6:7A:E2:70:3C:4D:36:E0:C6:54:51:3F:1B:7D:1B:C2:C4:56:ED:B5:B5:05:57:40:3E:9F:35:20"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: apptalktalk.mailhelpdesksupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 1\r\ncache-control: no-cache\r\ncache-status: \"Netlify Durable\"; fwd=bypass, \"Netlify Edge\"; fwd=miss; fwd-status=200\r\ncontent-encoding: br\r\ncontent-type: text/html\r\ndate: Sat, 15 Aug 2026 18:33:04 GMT\r\nnetlify-vary: query\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-nf-request-id: 01M03B5TQQ36Y4BPKTF3HAEVED\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":7747,"size_decoded":2999,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4003)","md5":"40376c9378e83e8b4bb847279461796f","sha1":"993d3da7084cbea609aa54dc2f0b5e64db365c89","sha256":"f259a0a4336c4443c43c6c3d63a0c9cd9d46f9423b8b61888c712e9eb85392c3","sha512":"e7fe1ca9779c171deda69a83fe964eaafb239fa13f4d1e5276ac2eb08680862b99eeb7cbb6021dd96e5a50efd479faec58891fc76eb0722f4eaf01644c24b435","ssdeep":"96:TmLYp9IR0HTaXq1LqDQsk2lAYCylQn/lQGXBQbhxbrx1ZWTNwTkdWdCflgBOFOrp:Pt1LKn9+/+G+BrTZWTNwkBO1","tlshash":"27f1da71e52048ef04a717b9f1a4f606b8a9820b8d0ba83cb5dcc16d2f85df9c559fe4","first_seen":"2026-08-15T08:16:53.054461Z","last_seen":"2026-08-15T18:33:32.567524Z","times_seen":2,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":-1,"dns":62,"connect":27,"send":0,"wait":334,"receive":0,"ssl":147},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apptalktalk.mailhelpdesksupport.com/assets/jsx-runtime-D3n6tQSC.js","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apptalktalk.mailhelpdesksupport.com/","date":"2026-08-15T18:33:04.486Z","timestamp":1786818784486,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apptalktalk.mailhelpdesksupport.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 12:01:36 GMT","end":"Thu, 12 Nov 2026 12:01:35 GMT"},"fingerprint":{"sha1":"BB:FD:01:28:F8:EB:11:0A:43:75:17:01:8C:A4:9A:EB:6F:55:82:1D","sha256":"AD:9F:B4:0F:F6:7A:E2:70:3C:4D:36:E0:C6:54:51:3F:1B:7D:1B:C2:C4:56:ED:B5:B5:05:57:40:3E:9F:35:20"}}},"request":{"raw":"GET /assets/jsx-runtime-D3n6tQSC.js HTTP/1.1\r\nHost: apptalktalk.mailhelpdesksupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apptalktalk.mailhelpdesksupport.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sat, 15 Aug 2026 18:33:04 GMT\r\netag: \"a0237192e9f1354b8e33f64515760641-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M03B5V7D4HZWK5N7755EGHPX\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":82084,"size_decoded":26893,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fcefb0a98939b1e9d615d48551f178cd","sha1":"02b37a1461675a2d33b51598e2fca908f245690a","sha256":"7f17b0327cdbc628927edf3da8317da435a066a89dd49e18c15b8ed3a152abba","sha512":"1a1b7863621a5a33f5d19c9c69099e9eb50fe99a9a27a24a6738e03f14abbdbbab8456e30a10e38d113728f330b49d0450b723add277625b517e75d993d7e879","ssdeep":"768:/lLQIPcWcjgndn2QUQrpnD5S5hYGduBQd1tTBf2uOSMIHqSRE99EL3zs/OVmw9X5:2ngndnO2poYGdCe3ymqK3zs8Gc","tlshash":"c6831afa3295b0654beb43e280bf0015f3362cea246e8015b26cd95e34b5d4c96b7f75","first_seen":"2026-07-24T05:57:14.192804Z","last_seen":"2026-08-15T18:33:32.568786Z","times_seen":3,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apptalktalk.mailhelpdesksupport.com/assets/root-EdMw-N6B.css","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apptalktalk.mailhelpdesksupport.com/","date":"2026-08-15T18:33:04.666Z","timestamp":1786818784666,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apptalktalk.mailhelpdesksupport.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 12:01:36 GMT","end":"Thu, 12 Nov 2026 12:01:35 GMT"},"fingerprint":{"sha1":"BB:FD:01:28:F8:EB:11:0A:43:75:17:01:8C:A4:9A:EB:6F:55:82:1D","sha256":"AD:9F:B4:0F:F6:7A:E2:70:3C:4D:36:E0:C6:54:51:3F:1B:7D:1B:C2:C4:56:ED:B5:B5:05:57:40:3E:9F:35:20"}}},"request":{"raw":"GET /assets/root-EdMw-N6B.css HTTP/1.1\r\nHost: apptalktalk.mailhelpdesksupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apptalktalk.mailhelpdesksupport.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Sat, 15 Aug 2026 18:33:04 GMT\r\netag: \"de1e57d37a12e96f2c7f8e2613d46a93-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M03B5VD2SR34RZRRT2A2XR27\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14159,"size_decoded":4110,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (14092)","md5":"aabce5fa73030f7a128106b00d91875e","sha1":"15ee954f577af207296f438647fad21d387418b1","sha256":"7ff81dfe259b1d451e0bacd1aa67a3531c0abf6928e3cb4880876af3b9cbae29","sha512":"f0a0910b99bbf68f56a784f8a45fb7a17c93b359d845a29defffb84005acaabde8818c41a45e28ee0f8aebca656a9974defc04eb7c96f1676691f92052845d79","ssdeep":"192:cqzQg1+WTdCwZKI2zTi4VWMCYNGeNA51lOk3fYiBwS1Ex19YU6LHcFmLVoWb:K9IITzWMCYN50wVrS1Em","tlshash":"3652f665f325cdbfac638cb6b75cf42c620465818d3167e8ff0365029acbaf2499a315","first_seen":"2026-07-24T05:57:14.196497Z","last_seen":"2026-08-15T18:33:32.569287Z","times_seen":3,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apptalktalk.mailhelpdesksupport.com/","date":"2026-08-15T18:33:04.668Z","timestamp":1786818784668,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apptalktalk.mailhelpdesksupport.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 18:33:04 GMT\r\ndate: Sat, 15 Aug 2026 18:33:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":1390,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-08-15T20:43:27.935029Z","times_seen":20840,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":35,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apptalktalk.mailhelpdesksupport.com/talktalk-logo.webp","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apptalktalk.mailhelpdesksupport.com/","date":"2026-08-15T18:33:04.672Z","timestamp":1786818784672,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apptalktalk.mailhelpdesksupport.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 12:01:36 GMT","end":"Thu, 12 Nov 2026 12:01:35 GMT"},"fingerprint":{"sha1":"BB:FD:01:28:F8:EB:11:0A:43:75:17:01:8C:A4:9A:EB:6F:55:82:1D","sha256":"AD:9F:B4:0F:F6:7A:E2:70:3C:4D:36:E0:C6:54:51:3F:1B:7D:1B:C2:C4:56:ED:B5:B5:05:57:40:3E:9F:35:20"}}},"request":{"raw":"GET /talktalk-logo.webp HTTP/1.1\r\nHost: apptalktalk.mailhelpdesksupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apptalktalk.mailhelpdesksupport.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-type: image/webp\r\ndate: Sat, 15 Aug 2026 18:33:04 GMT\r\netag: \"ffc917004f495b9886576fd1792ce363-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M03B5VD89G8MKWM4VWT70GC5\r\ncontent-length: 9116\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":9116,"size_decoded":9532,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"be3030daa03f4a4ee9189fdcff2eb06d","sha1":"68bb51f34c66b1a7cd67997c9224990932bf4a03","sha256":"694b10b37a00acdf6daca9ff1ebe50c20753f596e5c2d2203da6449f49388507","sha512":"c88438c77a77ad5f1d9872e0c04958002925b670621fa6fe202a546ca0594f26e2891f19b56412ad16950858ce34ce4d1c8acaf15b326043f66ea36028de3f59","ssdeep":"192:O773h9c2sHYd1t3iJ01aFVQXRVEHNjwDWhYCewnzA0lK6CXAeZJ0Ap:OQ271tyu1qggHaDWhYWAXJ0Ap","tlshash":"4612ae4774219a7afe21041be6225365e6c4c88f8fd219a4803d91f637b27b43ab9d11","first_seen":"2026-07-24T05:57:14.202236Z","last_seen":"2026-08-15T18:33:32.570321Z","times_seen":3,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apptalktalk.mailhelpdesksupport.com/favicon.svg","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apptalktalk.mailhelpdesksupport.com/","date":"2026-08-15T18:33:04.951Z","timestamp":1786818784951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apptalktalk.mailhelpdesksupport.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 12:01:36 GMT","end":"Thu, 12 Nov 2026 12:01:35 GMT"},"fingerprint":{"sha1":"BB:FD:01:28:F8:EB:11:0A:43:75:17:01:8C:A4:9A:EB:6F:55:82:1D","sha256":"AD:9F:B4:0F:F6:7A:E2:70:3C:4D:36:E0:C6:54:51:3F:1B:7D:1B:C2:C4:56:ED:B5:B5:05:57:40:3E:9F:35:20"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: apptalktalk.mailhelpdesksupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apptalktalk.mailhelpdesksupport.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 1\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-type: image/svg+xml\r\ndate: Sat, 15 Aug 2026 18:33:05 GMT\r\netag: \"fee9c052b1f72fe7a47058ce9fe465bc-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M03B5VNY4Z8GZ787GQ4P2T5B\r\ncontent-length: 835\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":835,"size_decoded":1253,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31a321328ca62a76c29fb3b168533bc2","sha1":"89072115c5d65e6bc61733e65ce35bbf4bb61bf1","sha256":"238648a34c53d10a0823873024da64b851416b260293a7b157bdcccb280da068","sha512":"dbc7d90a4961cd4b7f2a905a8742dff3ebab0a564ba92abe5139891f0a489077c0389f0f794fa86d94b41df1440c4b3c51692cb1bb727658b13f02527f80870a","ssdeep":"","tlshash":"2901efa0b2a9c0eedd009f81cb343553f8ba64787f68827a8791f9b4622600f4540c84","first_seen":"2025-01-16T13:34:06.602133Z","last_seen":"2026-08-15T18:33:32.570838Z","times_seen":7,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apptalktalk.mailhelpdesksupport.com/assets/entry.client-DBkxfk1I.js","fqdn":"apptalktalk.mailhelpdesksupport.com","domain":"mailhelpdesksupport.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apptalktalk.mailhelpdesksupport.com/","date":"2026-08-15T18:33:04.485Z","timestamp":1786818784485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apptalktalk.mailhelpdesksupport.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 12:01:36 GMT","end":"Thu, 12 Nov 2026 12:01:35 GMT"},"fingerprint":{"sha1":"BB:FD:01:28:F8:EB:11:0A:43:75:17:01:8C:A4:9A:EB:6F:55:82:1D","sha256":"AD:9F:B4:0F:F6:7A:E2:70:3C:4D:36:E0:C6:54:51:3F:1B:7D:1B:C2:C4:56:ED:B5:B5:05:57:40:3E:9F:35:20"}}},"request":{"raw":"GET /assets/entry.client-DBkxfk1I.js HTTP/1.1\r\nHost: apptalktalk.mailhelpdesksupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apptalktalk.mailhelpdesksupport.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sat, 15 Aug 2026 18:33:04 GMT\r\netag: \"d46b6a913aa2fe42927bd1791f88b273-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M03B5V7CQVK5CXXMAV9V5D3G\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":185897,"size_decoded":56808,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (51877)","md5":"7215f799fec5f4722abd4699c890bc66","sha1":"04cf3f1398338e4557a4fb84de8c80864ce3ca97","sha256":"7e3ce4bfc4fe4751b0085bb1254de2e18655c311b3d0567cf42bb0bee2e5a971","sha512":"619a8c39430eab2eafdf5310a6a98c3570eac1d1be050911dd67cc0caa7b72ef62cd350e5128021f2eb184603a5b058555545ce365a0688d7145f6407d371f56","ssdeep":"3072:ul88OJzXpoilxIKHAHY9LQfd0tQekvO5OXMu8q9uog3:uydLVlXgHY9ketQxvO5qMrq9uog3","tlshash":"09042cec31a9b6626f9356b6006f1a07733929231c0d4860b110feae7bf544651bbfed","first_seen":"2026-07-24T05:57:14.191323Z","last_seen":"2026-08-15T18:33:32.571692Z","times_seen":3,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"apptalktalk.mailhelpdesksupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}
