{"report_id":"3772fe11-c0d4-4d6a-8b16-98904e03dd52","version":6,"status":"done","tags":["microsoft","phishing"],"date":"2026-03-23T12:46:02Z","url":{"schema":"http","addr":"notifyhubss.net/e134909daw5aff43e5e84311b9dq8f7b3a68.html","fqdn":"notifyhubss.net","domain":"notifyhubss.net","tld":"net"},"ip":{"addr":"104.26.9.237","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"notifyhubss.net/e134909daw5aff43e5e84311b9dq8f7b3a68.html","fqdn":"notifyhubss.net","domain":"notifyhubss.net","tld":"net"},"title":"Sign in to your account","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"df8b5df771d2bfb67e806c845653e304","sha1":"d9c33a0dd062a78379966f87efdd92581133b558","sha256":"81ed79c9f48334c194bc05b5f9e954e3d43200e354fc7f53b8329bf365bf7131","sha512":"298feb424f38a7bc8e41fdf57388cbf18f05a43878cea85a7a397656cc02b21d556b4a7815d8497decc71000f74d5e119950725869e4fc89e38fd4088ec37d00","ssdeep":"","tlshash":"eae026ea1db6c83668e4128a20f2e39c162065a0bb11e64442d8ec7b9e10fe38c92948","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"notifyhubss.net/e134909daw5aff43e5e84311b9dq8f7b3a68.html","fqdn":"notifyhubss.net","domain":"notifyhubss.net","tld":"net"},"ip":{"addr":"104.26.9.237","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-27T12:46:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"notifyhubss.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"summary":[{"fqdn":"lp.cybeready.net","ip":{"addr":"104.26.9.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-26","domain_rank":0,"first_seen":"2015-12-30T08:46:43Z","last_seen":"2026-03-21T00:29:58.833727Z","alert_count":4,"request_count":4,"received_data":11106,"sent_data":1925,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"notifyhubss.net","ip":{"addr":"172.67.72.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-30","domain_rank":3218567,"first_seen":"2021-07-09T13:55:09Z","last_seen":"2026-03-18T00:03:35.882191Z","alert_count":28,"request_count":4,"received_data":91465,"sent_data":2217,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"notifyhubss.net/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"notifyhubss.net","domain":"notifyhubss.net","tld":"net"},"ip":{"addr":"172.67.72.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"61ea6395d994f43ce8481f7098052b33","sha1":"af55ef7c175f2a502065a627bc22a7494fd8d224","sha256":"caef37a2ccb691d9269fb6a9910ca01fff6fd92429e616b2fecb2514175f0da2","sha512":"b92c8cc64ad214f7020303bf7f496219c35962750b2010e4a36373e3e96fa3f8ceec27e13f1610d0d21f8c8df337fc9b1a962f99ba07c49a156e723418ef7f44","ssdeep":"768:fRf75V39Wk0p1o8e9I4ziyTAbn5OSfQYcb4xQ6vVKlMz92:fR1V39WkYJe9I4ziyTAbn5YY84DV0Z","tlshash":"29d2c787b5eab11aa33d68fc547736cb72fdbc9438045319c210daf4b961386b466f48","size":29344,"data":"","first_seen":"2026-03-23T11:52:02.264511Z","last_seen":"2026-03-23T12:46:03.564765Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notifyhubss.net/e134909daw5aff43e5e84311b9dq8f7b3a68.html","fqdn":"notifyhubss.net","domain":"notifyhubss.net","tld":"net"},"ip":{"addr":"172.67.72.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"570f5bda069bf84a7bc7e99e536bfccc","sha1":"e2eca95043b9d07cd11344e1e6988fdd3bb5d4d8","sha256":"59b7724cb9c0e63da3722b3ac9699d5d2a6d21e993ee9f011021ac3e465422ff","sha512":"e9cb0cf88b84422c89f045ee23f70e926a961ac04031f406ef324d91b5cda49fc46aac468c32c127e5ca9bb7ac53f46cb3b752ae709a4d6e8e6b7b32a43d64a5","ssdeep":"","tlshash":"2ea022f322e0320a03838c2000af022ec33c3280800b02883f20b800b2028000020eca","size":63,"data":"","first_seen":"2026-03-23T12:46:03.569264Z","last_seen":"2026-03-23T12:46:03.569264Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notifyhubss.net/e134909daw5aff43e5e84311b9dq8f7b3a68.html","fqdn":"notifyhubss.net","domain":"notifyhubss.net","tld":"net"},"ip":{"addr":"172.67.72.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ccd7f81c0699ce2abdff139e23862c3","sha1":"7f8331209d8d0dbb61126c7824f68b99f313cc74","sha256":"af8fb4406418472ff72b946aba8d2e6675083d90b28c875158a778ba25de83b8","sha512":"5f8e57b2bd73dd3279be1a3187fe121d54832fbd0aff95846b55b3da95b21347ef2786ea98e2923f2c24e842323981aeb9018ee519a23a4ddeaedf1b8889adee","ssdeep":"","tlshash":"9111f63a7193047049ab65eb73e343853438414b3d16d669782cc2274fa2e6279f67bc","size":1079,"data":"","first_seen":"2025-06-18T12:47:46.405796Z","last_seen":"2026-04-04T08:54:50.517803Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notifyhubss.net/e134909daw5aff43e5e84311b9dq8f7b3a68.html","fqdn":"notifyhubss.net","domain":"notifyhubss.net","tld":"net"},"ip":{"addr":"172.67.72.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d8db828648a737c62db5d0b6dd925c5","sha1":"b26e38b366035af621a68dcf311e77a62d0a46ed","sha256":"2e9ebd3fe7bc9307e185e699e1821b1537d4014bf44c1995d78f200934544617","sha512":"083307b74d0ff9e902ba615e3f2ccc2787305dd66504bf490781d18ac7d867b583673fe58aacdb62e33443470c3988c7db5f57b30e7c1906fbe17fb698f3632b","ssdeep":"","tlshash":"9c11c0793b2a5534c9c5418b31bee7a93d3260617b02a084c36cdc395d18e9714efcbe","size":902,"data":"","first_seen":"2026-03-23T12:46:03.572026Z","last_seen":"2026-03-23T12:46:03.572026Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fdb649137d7476e4d9eee7fece8f3fbb","sha1":"80ead63912f1d73aca80f84a23692c2e46330fb5","sha256":"f137e8027167fe88375bd01be12e874fd55cf8bf9db56df1e9507f25ca852fe2","sha512":"9c220fb1a5476da474dec16350986d186866b16384a016655b367cb1ff604ac9db93364d20e119d6037dc0ee6c83803cfef53d9f68128cbfaa53f96a16285064","ssdeep":"","tlshash":"4cd0a76919b585325598014a50b7d394256125507711a54481c8dc7b6a11f9354e1558","size":217,"data":"","first_seen":"2026-03-23T12:46:03.573963Z","last_seen":"2026-03-23T12:46:03.573963Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"lp.cybeready.net/beefree_images/cybeready_images/microsoft_arrow_left.svg","fqdn":"lp.cybeready.net","domain":"cybeready.net","tld":"net"},"ip":{"addr":"104.26.9.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://notifyhubss.net/e134909daw5aff43e5e84311b9dq8f7b3a68.html","date":"2026-03-23T12:45:40.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cybeready.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 15:55:17 GMT","end":"Sat, 25 Apr 2026 15:55:16 GMT"},"fingerprint":{"sha1":"BC:16:06:A0:CC:46:53:0B:13:11:68:F4:3B:86:14:AC:18:83:E0:A3","sha256":"08:C0:2A:93:73:3C:F4:18:ED:67:61:3A:6D:E5:85:AC:CC:47:99:24:E6:36:A6:9A:BC:DF:D6:1B:A8:FE:15:CF"}}},"request":{"raw":"GET /beefree_images/cybeready_images/microsoft_arrow_left.svg HTTP/1.1\r\nHost: lp.cybeready.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://notifyhubss.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 12:45:40 GMT\r\ncontent-type: image/svg+xml\r\nx-amz-id-2: 42WO6pOMMoSMANNcgoyjsTPvGFzpPPiyRPvniWcHcZ83zesSFpYyP4sgS7hQPhtAXcYKIUTWv1Y=\r\nx-amz-request-id: PGYP3F4CEG990Y82\r\nlast-modified: Tue, 10 Jun 2025 15:13:53 GMT\r\nvary: accept-encoding\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: KtZkBd1OFuJVqyYn1zxG0g5YcUgKC04K\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kpU%2FI24uGymOPkh%2Fr9p9UtcpMyCYu6gbEC%2F%2FDc3rerYsEGGDC8MS87puQKENbGuptZSoYdilG5DTazh%2FbA5ZTshnenzPRwd%2BTi%2FjszYkUQ%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 2747\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a9cc2824ef3517b6c4160dcf8ff7d410\"\r\ncontent-encoding: br\r\ncf-ray: 9e0d88d97a55c3b8-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":513,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a9cc2824ef3517b6c4160dcf8ff7d410","sha1":"8db9aebad84ca6e4225bfdd2458ff3821cc4f064","sha256":"34f9db946e89f031a80dfca7b16b2b686469c9886441261ae70a44da1dfa2d58","sha512":"aa3ddab0a1cff9533f9a668aba4fb5e3d75ed9f8aff8a1caa4c29f9126d85ff4529e82712c0119d2e81035d1ce1cc491ff9473384d211317d4d00e0e234ad97f","ssdeep":"","tlshash":"29f0598a41c8fb142ce08050dff8ea28540270c3fb4e5008b1922b18e2ef383f6406f5","first_seen":"2023-04-19T20:10:52Z","last_seen":"2026-04-05T01:26:06.639167Z","times_seen":29654,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":42,"dns":1,"connect":10,"send":0,"wait":18,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"lp.cybeready.net/beefree_images/cybeready_images/microsoft_signinoptions.svg","fqdn":"lp.cybeready.net","domain":"cybeready.net","tld":"net"},"ip":{"addr":"104.26.9.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://notifyhubss.net/e134909daw5aff43e5e84311b9dq8f7b3a68.html","date":"2026-03-23T12:45:40.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cybeready.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 15:55:17 GMT","end":"Sat, 25 Apr 2026 15:55:16 GMT"},"fingerprint":{"sha1":"BC:16:06:A0:CC:46:53:0B:13:11:68:F4:3B:86:14:AC:18:83:E0:A3","sha256":"08:C0:2A:93:73:3C:F4:18:ED:67:61:3A:6D:E5:85:AC:CC:47:99:24:E6:36:A6:9A:BC:DF:D6:1B:A8:FE:15:CF"}}},"request":{"raw":"GET /beefree_images/cybeready_images/microsoft_signinoptions.svg HTTP/1.1\r\nHost: lp.cybeready.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://notifyhubss.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 12:45:40 GMT\r\ncontent-type: image/svg+xml\r\nx-amz-id-2: T+Q4oUZMie9WK6NWOQDM1mZz5M1CFaVwsHZG3oqkZAgu4jsgI9fjo5pZ09KR0t1LJBUdqkWmkPU=\r\nx-amz-request-id: Q5M2BV87EWQZVE7G\r\nlast-modified: Tue, 10 Jun 2025 15:13:54 GMT\r\nvary: accept-encoding\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: wU8cUxM.CPzJAeWx5ZZ85SiUX5Ik75p7\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LWTUFIsEkBMsfjoV%2BdVVSS1Jl3GFHL8nOhN0j%2FXC6%2F0sPt49IRUjYf02ueOxqz6WNCD%2BtZ24cc5btRHtfoUpGpQJJj557HCdAuZVaoT%2FuQ%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 2747\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4e48046ce74f4b89d45037c90576bfac\"\r\ncontent-encoding: br\r\ncf-ray: 9e0d88d97a5cc3b8-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1592,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e48046ce74f4b89d45037c90576bfac","sha1":"4a41b3b51ed787f7b33294202da72220c7cd2c32","sha256":"8e6db1634f1812d42516778fc890010aa57f3e39914fb4803df2c38abbf56d93","sha512":"b2bba2a68edaa1a08cfa31ed058afb5e6a3150aabb9a78db9f5ccc2364186d44a015986a57707b57e2cc855fa7da57861ad19fc4e7006c2c239c98063fe903cf","ssdeep":"","tlshash":"b931787f43b45ae7239017741760626c13f4ee917169d0b4dba30c9a8d4bd33327843a","first_seen":"2023-04-14T20:16:11Z","last_seen":"2026-04-05T08:31:31.053912Z","times_seen":71720,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":42,"dns":0,"connect":9,"send":0,"wait":18,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"lp.cybeready.net/beefree_images/cybeready_images/microsoft_background.svg","fqdn":"lp.cybeready.net","domain":"cybeready.net","tld":"net"},"ip":{"addr":"104.26.9.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://notifyhubss.net/e134909daw5aff43e5e84311b9dq8f7b3a68.html","date":"2026-03-23T12:45:40.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cybeready.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 15:55:17 GMT","end":"Sat, 25 Apr 2026 15:55:16 GMT"},"fingerprint":{"sha1":"BC:16:06:A0:CC:46:53:0B:13:11:68:F4:3B:86:14:AC:18:83:E0:A3","sha256":"08:C0:2A:93:73:3C:F4:18:ED:67:61:3A:6D:E5:85:AC:CC:47:99:24:E6:36:A6:9A:BC:DF:D6:1B:A8:FE:15:CF"}}},"request":{"raw":"GET /beefree_images/cybeready_images/microsoft_background.svg HTTP/1.1\r\nHost: lp.cybeready.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://notifyhubss.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 12:45:40 GMT\r\ncontent-type: image/svg+xml\r\nx-amz-id-2: rvDxih6K73TyhrG1c7CF4H/N7ZHRFA9qKbhtUH2FZJfvkIOob+b0vcPIwLhzhNOEaOZWUAYsNnc=\r\nx-amz-request-id: PGYGGT01V9PJHW50\r\nlast-modified: Tue, 10 Jun 2025 15:13:53 GMT\r\nvary: accept-encoding\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: HE2BsMHDGkQP7rguCXj9ECUOB52D_6DE\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FPvWr9XKeCB194Icwsts5KznIKIjRpOEb10V4KH3S8IZDCJ7EQK5xStVab039tfQmqZoPUOfjmm5GJN%2F9cAz0gjk3s6NdI%2B22%2FKLvBMEvw%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 2747\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"bc3d32a696895f78c19df6c717586a5d\"\r\ncontent-encoding: br\r\ncf-ray: 9e0d88d97a7cc3b8-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1864,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc3d32a696895f78c19df6c717586a5d","sha1":"9191cb156a30a3ed79c44c0a16c95159e8ff689d","sha256":"0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68","sha512":"8d4f38907f3423a86d90575772b292680f7970527d2090fc005f9b096cc81d3f279d59ad76eafca30c3d4bbaf2276bbaa753e2a46a149424cf6f1c319ded5a64","ssdeep":"","tlshash":"4e310059c51d3566ec04c3aceae1d468315e71efa8a581c961849b3f95b0dce0eccb70","first_seen":"2023-04-12T23:20:27Z","last_seen":"2026-04-05T01:07:18.682505Z","times_seen":102174,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":42,"dns":2,"connect":17,"send":0,"wait":18,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"notifyhubss.net/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"notifyhubss.net","domain":"notifyhubss.net","tld":"net"},"ip":{"addr":"172.67.72.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://notifyhubss.net/e134909daw5aff43e5e84311b9dq8f7b3a68.html","date":"2026-03-23T12:45:40.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notifyhubss.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 23:57:08 GMT","end":"Mon, 15 Jun 2026 00:57:05 GMT"},"fingerprint":{"sha1":"A7:BD:27:A6:93:09:E4:71:B1:95:F0:8F:89:2D:F0:68:93:55:D3:7B","sha256":"10:B0:16:FB:F1:A3:ED:FF:6B:8C:24:18:0C:06:57:DA:3B:22:2C:20:E0:73:C8:86:F6:98:21:4E:55:B8:97:11"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: notifyhubss.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: requestid=05a53adfd12ffb4818c2b09f6a6644e6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 23 Mar 2026 12:45:40 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 9e0d88daae595621-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29344,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T08:47:05.766455Z","times_seen":13367613,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"notifyhubss.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"notifyhubss.net/cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?","fqdn":"notifyhubss.net","domain":"notifyhubss.net","tld":"net"},"ip":{"addr":"172.67.72.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://notifyhubss.net/e134909daw5aff43e5e84311b9dq8f7b3a68.html","date":"2026-03-23T12:45:40.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notifyhubss.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 23:57:08 GMT","end":"Mon, 15 Jun 2026 00:57:05 GMT"},"fingerprint":{"sha1":"A7:BD:27:A6:93:09:E4:71:B1:95:F0:8F:89:2D:F0:68:93:55:D3:7B","sha256":"10:B0:16:FB:F1:A3:ED:FF:6B:8C:24:18:0C:06:57:DA:3B:22:2C:20:E0:73:C8:86:F6:98:21:4E:55:B8:97:11"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js? HTTP/1.1\r\nHost: notifyhubss.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: requestid=05a53adfd12ffb4818c2b09f6a6644e6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 12:45:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e0d88daef405621-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29344,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (29344), with no line terminators","md5":"61ea6395d994f43ce8481f7098052b33","sha1":"af55ef7c175f2a502065a627bc22a7494fd8d224","sha256":"caef37a2ccb691d9269fb6a9910ca01fff6fd92429e616b2fecb2514175f0da2","sha512":"b92c8cc64ad214f7020303bf7f496219c35962750b2010e4a36373e3e96fa3f8ceec27e13f1610d0d21f8c8df337fc9b1a962f99ba07c49a156e723418ef7f44","ssdeep":"768:fRf75V39Wk0p1o8e9I4ziyTAbn5OSfQYcb4xQ6vVKlMz92:fR1V39WkYJe9I4ziyTAbn5YY84DV0Z","tlshash":"29d2c787b5eab11aa33d68fc547736cb72fdbc9438045319c210daf4b961386b466f48","first_seen":"2026-03-23T11:52:02.264511Z","last_seen":"2026-03-23T12:46:03.564765Z","times_seen":7,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"notifyhubss.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"notifyhubss.net/cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.30319282295668687:1774265994:VxEbnvvAFVQVEH5DOjWrSXpSUXxU4Yy4O1xb7RhsWRM/9e0d88d74d225621","fqdn":"notifyhubss.net","domain":"notifyhubss.net","tld":"net"},"ip":{"addr":"172.67.72.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://notifyhubss.net/e134909daw5aff43e5e84311b9dq8f7b3a68.html","date":"2026-03-23T12:45:41.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notifyhubss.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 23:57:08 GMT","end":"Mon, 15 Jun 2026 00:57:05 GMT"},"fingerprint":{"sha1":"A7:BD:27:A6:93:09:E4:71:B1:95:F0:8F:89:2D:F0:68:93:55:D3:7B","sha256":"10:B0:16:FB:F1:A3:ED:FF:6B:8C:24:18:0C:06:57:DA:3B:22:2C:20:E0:73:C8:86:F6:98:21:4E:55:B8:97:11"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.30319282295668687:1774265994:VxEbnvvAFVQVEH5DOjWrSXpSUXxU4Yy4O1xb7RhsWRM/9e0d88d74d225621 HTTP/1.1\r\nHost: notifyhubss.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12221\r\nOrigin: https://notifyhubss.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://notifyhubss.net/e134909daw5aff43e5e84311b9dq8f7b3a68.html\r\nCookie: requestid=05a53adfd12ffb4818c2b09f6a6644e6\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 12:45:41 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: h+ZCRLubcoGNG47ZK0lnAw==$HAp0PHGMiJTegCuc9b6ekA==\r\nset-cookie: cf_clearance=M6cJfi04k3zrZhgRrg_7QXLOK3bHATgSvw5aaBBLV40-1774269941-1.2.1.1-yfNZsoubX3cEgRzN2S3Y0b5dXLnP8kEZHBfzmLHPrfgwMlmGvMIHUtwXOLcPHvfEd9V_7JnFnKULb_fKeF0wJSkcdiGEfMiaUylojXg.GLXlI54cmk6lT7nR0MyMLnTXjYZ3z.GyX.26SMUgHxnKQyxLM32COlQfB3ZnCFN3dOqGHKob2L2s2d2eo2_tTKNTGJ2mOTwv9WvZYNI8zvUQWgojNDeMeUac8YvswDIQClQ; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=notifyhubss.net; Expires=Tue, 23 Mar 2027 12:45:41 GMT\r\ntiming-allow-origin: https://notifyhubss.net\r\nserver: cloudflare\r\ncf-ray: 9e0d88dbfa6f5621-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T08:47:05.766455Z","times_seen":13367613,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"notifyhubss.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"notifyhubss.net/e134909daw5aff43e5e84311b9dq8f7b3a68.html","fqdn":"notifyhubss.net","domain":"notifyhubss.net","tld":"net"},"ip":{"addr":"172.67.72.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-23T12:45:40.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notifyhubss.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 23:57:08 GMT","end":"Mon, 15 Jun 2026 00:57:05 GMT"},"fingerprint":{"sha1":"A7:BD:27:A6:93:09:E4:71:B1:95:F0:8F:89:2D:F0:68:93:55:D3:7B","sha256":"10:B0:16:FB:F1:A3:ED:FF:6B:8C:24:18:0C:06:57:DA:3B:22:2C:20:E0:73:C8:86:F6:98:21:4E:55:B8:97:11"}}},"request":{"raw":"GET /e134909daw5aff43e5e84311b9dq8f7b3a68.html HTTP/1.1\r\nHost: notifyhubss.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 12:45:40 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nx-amz-expiration: expiry-date=\"Thu, 16 Apr 2026 00:00:00 GMT\", rule-id=\"DeleteAfter30Days\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: GKlBJmZdS9VAaYZVxaEyVvzFvLtuGf0_\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B8f98%2BGsnOizJqudCU1RYYFMSeAvsPVubXNg9OriTp3Opon5DyfK9mkE4SwC4uVxTPcsrkSRKlbstBU%2Fe%2FiS4khFRYAQu74bVj67NQLZ\"}]}\r\nset-cookie: requestid=05a53adfd12ffb4818c2b09f6a6644e6\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e0d88d74d225621-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":30647,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (926), with CRLF, LF line terminators","md5":"4066a0f296553da77d0f4749efd53a92","sha1":"95d601cb9f366fb3b1e2745d2ea2040056527319","sha256":"17f875865a60d05e60b080116f5da5e346f0e944d530e24a8e2bcf49bae79a48","sha512":"41aebc812dc8f9ca1e42e7f33c2a9239aec6512b81a11c6d0042f1f21c41f2739b7e0f83cb332845eefe2549a894439aeef19a565b1c5b849e44440d85eae14a","ssdeep":"384:TBWKfYedKDww4mYCyJEUVjiMxnkQqgBg/SR+WfeBUrlDiXiAtnx/k:sFedKDSbCekMntr8SAFx/k","tlshash":"23d28520730d100b938242e973b97b67ee0cc912d61791bff4b496aacbd99544b29ff1","first_seen":"2026-03-23T12:46:03.565875Z","last_seen":"2026-03-23T12:46:03.565875Z","times_seen":1,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":33,"dns":1,"connect":8,"send":0,"wait":92,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"notifyhubss.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"notifyhubss.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"lp.cybeready.net/beefree_images/cybeready_images/microsoft_logo.svg","fqdn":"lp.cybeready.net","domain":"cybeready.net","tld":"net"},"ip":{"addr":"104.26.9.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://notifyhubss.net/e134909daw5aff43e5e84311b9dq8f7b3a68.html","date":"2026-03-23T12:45:40.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cybeready.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 15:55:17 GMT","end":"Sat, 25 Apr 2026 15:55:16 GMT"},"fingerprint":{"sha1":"BC:16:06:A0:CC:46:53:0B:13:11:68:F4:3B:86:14:AC:18:83:E0:A3","sha256":"08:C0:2A:93:73:3C:F4:18:ED:67:61:3A:6D:E5:85:AC:CC:47:99:24:E6:36:A6:9A:BC:DF:D6:1B:A8:FE:15:CF"}}},"request":{"raw":"GET /beefree_images/cybeready_images/microsoft_logo.svg HTTP/1.1\r\nHost: lp.cybeready.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://notifyhubss.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 12:45:40 GMT\r\ncontent-type: image/svg+xml\r\nx-amz-id-2: 4EsB1HgFVjCKqjG8Vo9Zmx8jScGH40KitDAdHuT9gl536x2rHwg6BCr6m1pmho/MCL96sq6WKxc=\r\nx-amz-request-id: RHBGW1X4VVQ3MSJ0\r\nlast-modified: Tue, 10 Jun 2025 15:13:54 GMT\r\nvary: accept-encoding\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 1dePIZSyGBclK0kMZn.Nqv9_fbjCvZLm\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2FiANeillHbHND8vyoSov6wT2eSVVp87CvWdXzlh7IiwdItr9rTn9EhfJQdFTRV4E%2BddmXI55RSpD%2BgAbMxhjcz8fIbrBG2vedRlVMOgWg%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 2747\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ee5c8d9fb6248c938fd0dc19370e90bd\"\r\ncontent-encoding: br\r\ncf-ray: 9e0d88d96a43c3b8-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3651,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee5c8d9fb6248c938fd0dc19370e90bd","sha1":"d01a22720918b781338b5bbf9202b241a5f99ee4","sha256":"04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a","sha512":"c77215b729d0e60c97f075998e88775cd0f813b4d094dc2fdd13e5711d16f4e5993d4521d0fbd5bf7150b0dbe253d88b1b1ff60901f053113c5d7c1919852d58","ssdeep":"","tlshash":"6371117b132887dae9d4a78c2e997b8d377095c4b1b24290874328a5bc086f7f038d60","first_seen":"2023-04-06T08:44:24Z","last_seen":"2026-04-05T07:19:26.221165Z","times_seen":122166,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":39,"dns":1,"connect":8,"send":0,"wait":22,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}}]}