{"report_id":"49a8189e-b0e5-4ec4-bb8a-255a656b157e","version":6,"status":"done","tags":[],"date":"2026-03-16T12:31:33Z","url":{"schema":"http","addr":"requirements-approved-renewal.xyz","fqdn":"requirements-approved-renewal.xyz","domain":"requirements-approved-renewal.xyz","tld":"xyz"},"ip":{"addr":"38.97.40.99","port":0,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"requirements-approved-renewal.xyz/required","fqdn":"requirements-approved-renewal.xyz","domain":"requirements-approved-renewal.xyz","tld":"xyz"},"title":"Account Center","dom":{"size":55120,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52907)","md5":"fb70e6bdb0ba3d46901419fcdcb3b863","sha1":"57e044a813530a57215b4d2b30612338c1e2b416","sha256":"db49216410c9b816a2290f054b63c5d63f8335a2baacae4e737c059776c5c7d6","sha512":"8c24e7c7c355f4f813682a81cc6b639e3c1708da0cefa1bd2902c1513a3da1c4ecaf0ae3c9b1eb33f40fd0c2fb7f32a5bf7f23dfe91c1ff77d4fe6a414e7c1b2","ssdeep":"768:yHubn37yGhbn37yG+EAzKZPO2dP/h6VSvIbg6x:t2U2t3qLvOx","tlshash":"ac33b8f8715a11f55217ced8ed233bc5b27afeb7dac5e0d083a8d09c4eda8a65d01890","dom_hash":"domhashf096227224da3e974a20828ca3543d93","first_seen":"2026-03-16T12:31:38.537172Z","last_seen":"2026-03-16T13:04:36.555318Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"requirements-approved-renewal.xyz","fqdn":"requirements-approved-renewal.xyz","domain":"requirements-approved-renewal.xyz","tld":"xyz"},"ip":{"addr":"38.97.40.99","port":0,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-20T12:31:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-16T12:31:12Z","timestamp":1773664272,"ip_dst":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":37450,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)","source":"{\"timestamp\":\"2026-03-16T12:31:12.803631+0000\",\"flow_id\":671191586074437,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":37450,\"dest_ip\":\"34.117.59.81\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025331,\"rev\":5,\"signature\":\"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Linux\",\"Mac_OSX\",\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2018_02_07\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0043\"],\"mitre_tactic_name\":[\"Reconnaissance\"],\"mitre_technique_id\":[\"T1590\"],\"mitre_technique_name\":[\"Gather_Victim_Network_Information\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_09_19\"]}},\"tls\":{\"sni\":\"ipinfo.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":911,\"bytes_toclient\":3424,\"start\":\"2026-03-16T12:31:12.749381+0000\"}}"}],"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-16","alert":"Phishing Block","trigger":"requirements-approved-renewal.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"requirements-approved-renewal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"requirements-approved-renewal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"requirements-approved-renewal.xyz","ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"2026-03-16","domain_rank":0,"first_seen":"2026-03-16T12:31:34.687929Z","last_seen":"2026-03-16T12:31:34.687929Z","alert_count":30,"request_count":10,"received_data":2192234,"sent_data":4934,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-15T22:34:11.913686Z","alert_count":0,"request_count":2,"received_data":287302,"sent_data":943,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ipinfo.io","ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2013-04-23","domain_rank":1327,"first_seen":"2013-12-16T07:25:53Z","last_seen":"2026-03-11T15:04:02.056807Z","alert_count":0,"request_count":1,"received_data":494,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@18.2.1/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e243d9abb51d431ff2184d2a9a40c5b","sha1":"c4c2883bfc1614540d0955957ff6cfd3f873126f","sha256":"b80ed4d13bf572a788637e2e5e5d73519c4d65a2a9a70c27e41c893cc6fdc90e","sha512":"b99652f2bb044d72505fa272e7b65d73b3c098ff371828c2d45fcb5f4c548f5db06394a57d45fe0959d81445fcf5da2eb503de15b23d163502929b935aa941c2","ssdeep":"768:kqD7GRXOoS+D45YPI3QW6O2Eix0Pthyv4pII2iCJm1R:ZfRQWB2xothfIIZCO","tlshash":"74d22a9973512237a89ae0a1587f16476ebf34015684cc9cb8becdc80feced9a1b5734","size":31006,"data":"","first_seen":"2023-08-03T08:00:52Z","last_seen":"2026-08-19T00:30:41.891805Z","times_seen":2198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@18.2.1/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"66361e32c06f29cacc63c0648bf7f31e","sha1":"265b72ed843253c595ee629d0c9201dbe5328d7e","sha256":"7b8fa25cbe5eda2c2e19eb168b100fffd42d2f75a0dcafe808ac61d139cb626e","sha512":"de8ba753ba0a78bf79f88df466705be9b580612e11b57096ee406da7cfc93aa5cb76124d2c20e47a18bd7b43bc7308d607147a1cb0af02d0cab2501c962ba749","ssdeep":"3072:3PB30j8BAJjFs3OwPss3MwP2m9OOVS2x0T3TdxQgnGHIpUsW5jkmLNjoopuDs/vq:3PB3RyBu5x0T3Tdxsnbm","tlshash":"1444e0ebd63c9737a1d97b35968eb3cd5a8cbca3c848567826c3b54f52788e0706c205","size":254105,"data":"","first_seen":"2023-09-12T01:07:29Z","last_seen":"2026-08-17T18:51:46.808075Z","times_seen":1998,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"requirements-approved-renewal.xyz/assets/index-B9NEM2g6.js","fqdn":"requirements-approved-renewal.xyz","domain":"requirements-approved-renewal.xyz","tld":"xyz"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"31399b3c18d1b2503557d7fb19e5808b","sha1":"af27344b6629d87e5f8c66aea85ad860d30bc952","sha256":"c86da9ca0b3f6e53ca557d77ebf29ef62d5239285f33b89619a9bbe026e10590","sha512":"39a846edf5848320693e3edc3c8f5d1aac1b1171ad9496a46f5185c2a17870612ab86eac774a0ca47d85e56f891fe8e4f48816638b046b7feaad51f641abac69","ssdeep":"6144:Rgnup9uY10YzChSXxu40VCAQ/m5BOYjnBWZVwfj5zgOuJBgkmMFv6/YQmUOzqRqZ:KnGWYzph9gBOfwfaIkcKqRq49Po","tlshash":"bde48dfa31417337a2b67aa4a667714af6ad1c54fc44c0d4b1facccb1da2912113af78","size":671655,"data":"","first_seen":"2026-03-16T12:31:38.568767Z","last_seen":"2026-03-16T13:04:36.5683Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"requirements-approved-renewal.xyz/","fqdn":"requirements-approved-renewal.xyz","domain":"requirements-approved-renewal.xyz","tld":"xyz"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-16T12:31:11.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.requirements-approved-renewal.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 02:42:16 GMT","end":"Sun, 14 Jun 2026 02:42:15 GMT"},"fingerprint":{"sha1":"0C:B5:12:19:1D:B8:36:62:AD:B1:CE:11:F8:31:68:D0:AF:A5:99:54","sha256":"E4:2B:C6:B5:FE:26:91:A6:29:B3:96:57:1B:9C:17:10:90:CE:F8:36:44:5E:B4:A5:B6:74:B7:8B:E4:18:7D:FE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: requirements-approved-renewal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html\r\ncontent-length: 771\r\ndate: Mon, 16 Mar 2026 12:31:11 GMT\r\nserver: LiteSpeed\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nlocation: https://requirements-approved-renewal.xyz/required\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2303,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T20:30:39.684428Z","times_seen":17998449,"resource_available":true,"data":null}},"time_used":596,"timings":{"blocked":246,"dns":34,"connect":103,"send":0,"wait":103,"receive":0,"ssl":107},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-16","alert":"Phishing Block","trigger":"requirements-approved-renewal.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"requirements-approved-renewal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"requirements-approved-renewal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@18.2.1/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://requirements-approved-renewal.xyz/required","date":"2026-03-16T12:31:12.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/intl-tel-input@18.2.1/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://requirements-approved-renewal.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Mar 2026 12:31:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 11528\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 18.2.1\r\nx-jsd-version-type: version\r\netag: W/\"791e-xMKIO/wWFFQNCVWVf/bP0/hzEm8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220137-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 4519295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hzifFmDX%2F09WX%2B59GnvNQaFO9EEYdWSYJkaeMUwCulC3B9uu4YGbEywsRRz1TFHK3ByBUv%2FmE2nJVrh7BiOmh1e5OJa3rjwtaFt04oNlZw%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9dd3c604fbf38deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31006,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27345)","md5":"5e243d9abb51d431ff2184d2a9a40c5b","sha1":"c4c2883bfc1614540d0955957ff6cfd3f873126f","sha256":"b80ed4d13bf572a788637e2e5e5d73519c4d65a2a9a70c27e41c893cc6fdc90e","sha512":"b99652f2bb044d72505fa272e7b65d73b3c098ff371828c2d45fcb5f4c548f5db06394a57d45fe0959d81445fcf5da2eb503de15b23d163502929b935aa941c2","ssdeep":"768:kqD7GRXOoS+D45YPI3QW6O2Eix0Pthyv4pII2iCJm1R:ZfRQWB2xothfIIZCO","tlshash":"74d22a9973512237a89ae0a1587f16476ebf34015684cc9cb8becdc80feced9a1b5734","first_seen":"2023-08-03T08:00:52Z","last_seen":"2026-08-19T00:30:41.891805Z","times_seen":2198,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":13,"receive":1,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"requirements-approved-renewal.xyz/assets/index-Id2et-bV.css","fqdn":"requirements-approved-renewal.xyz","domain":"requirements-approved-renewal.xyz","tld":"xyz"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://requirements-approved-renewal.xyz/required","date":"2026-03-16T12:31:12.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.requirements-approved-renewal.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 02:42:16 GMT","end":"Sun, 14 Jun 2026 02:42:15 GMT"},"fingerprint":{"sha1":"0C:B5:12:19:1D:B8:36:62:AD:B1:CE:11:F8:31:68:D0:AF:A5:99:54","sha256":"E4:2B:C6:B5:FE:26:91:A6:29:B3:96:57:1B:9C:17:10:90:CE:F8:36:44:5E:B4:A5:B6:74:B7:8B:E4:18:7D:FE"}}},"request":{"raw":"GET /assets/index-Id2et-bV.css HTTP/1.1\r\nHost: requirements-approved-renewal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://requirements-approved-renewal.xyz/required\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:31:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Mar 2026 03:11:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 40802\r\ndate: Mon, 16 Mar 2026 12:31:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":156354,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (50733)","md5":"79381b1f0fa9b5e4348ab65110713bfe","sha1":"916acd2c1a5a908deb2d21df1a1c6ef874a14728","sha256":"5dbe127ff080e52c85b8eca293351aa0dd8077a8c538b42db4adb88885566466","sha512":"8b590f4b9aed4588438be8b52733b5449717e9597d756ca5e46cc948474c6d44e50ddf9b881a5a461f3a0c9b85076819fcbd0a9c527979508e4396279f36e5cf","ssdeep":"3072:jnrV+pz600I4RuH5In0sH02W4bTSLibQ2:jncpz600I4RuH5In02G2U2","tlshash":"79e3d683b7c1202de953c1a5a0e17afc357fa904e3529cea9447776e87c27c609a3e4c","first_seen":"2026-03-16T12:31:38.547091Z","last_seen":"2026-03-16T13:04:36.557337Z","times_seen":2,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"requirements-approved-renewal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"requirements-approved-renewal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-16","alert":"Phishing Block","trigger":"requirements-approved-renewal.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"requirements-approved-renewal.xyz/assets/bn-50HRykLR.jpg","fqdn":"requirements-approved-renewal.xyz","domain":"requirements-approved-renewal.xyz","tld":"xyz"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://requirements-approved-renewal.xyz/required","date":"2026-03-16T12:31:12.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.requirements-approved-renewal.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 02:42:16 GMT","end":"Sun, 14 Jun 2026 02:42:15 GMT"},"fingerprint":{"sha1":"0C:B5:12:19:1D:B8:36:62:AD:B1:CE:11:F8:31:68:D0:AF:A5:99:54","sha256":"E4:2B:C6:B5:FE:26:91:A6:29:B3:96:57:1B:9C:17:10:90:CE:F8:36:44:5E:B4:A5:B6:74:B7:8B:E4:18:7D:FE"}}},"request":{"raw":"GET /assets/bn-50HRykLR.jpg HTTP/1.1\r\nHost: requirements-approved-renewal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://requirements-approved-renewal.xyz/required\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:31:12 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 03:11:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74135\r\ndate: Mon, 16 Mar 2026 12:31:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74135,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1026x688, components 3","md5":"38054c5065231fef77f877d99a37f05d","sha1":"ef27b361a8adf9f3eb90b4db68c51c385f45854b","sha256":"ac9a620bde49295e439214953607cef0fca67e13c6d4426e1c9e6da518297fae","sha512":"798b141be24149f95d60df6bd66288159b0d6cb00f8b0824a19bc9d8189b3364b89c8198692f582cea8e9820ec33634327ecd4020beeb3ffeb5dbfda852c4929","ssdeep":"1536:yeHPwxTU2azM7yJAtfKVbfyfuKPLKQkfF9WMzILJ:GSDMOO1fuKPetTWJ","tlshash":"6473e027ad00cad3ef2c0af9e45ade5d6ca16f4d25c6b26dc94f0e863609b871c5b11c","first_seen":"2026-03-16T12:31:38.549779Z","last_seen":"2026-03-16T13:04:36.56547Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"requirements-approved-renewal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"requirements-approved-renewal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-16","alert":"Phishing Block","trigger":"requirements-approved-renewal.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"requirements-approved-renewal.xyz/assets/icon-women-B7CD8CEL.png","fqdn":"requirements-approved-renewal.xyz","domain":"requirements-approved-renewal.xyz","tld":"xyz"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://requirements-approved-renewal.xyz/required","date":"2026-03-16T12:31:12.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.requirements-approved-renewal.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 02:42:16 GMT","end":"Sun, 14 Jun 2026 02:42:15 GMT"},"fingerprint":{"sha1":"0C:B5:12:19:1D:B8:36:62:AD:B1:CE:11:F8:31:68:D0:AF:A5:99:54","sha256":"E4:2B:C6:B5:FE:26:91:A6:29:B3:96:57:1B:9C:17:10:90:CE:F8:36:44:5E:B4:A5:B6:74:B7:8B:E4:18:7D:FE"}}},"request":{"raw":"GET /assets/icon-women-B7CD8CEL.png HTTP/1.1\r\nHost: requirements-approved-renewal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://requirements-approved-renewal.xyz/required\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:31:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Mar 2026 03:11:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16099\r\ndate: Mon, 16 Mar 2026 12:31:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16099,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"5c16d06d4b48457e8b6e838b4ed29696","sha1":"b8d400caf154787827f80edd7be2598718aa1d27","sha256":"008beba70db4cc9ef1d7dc34635cef19620822da0722fd4670d36a1dfee543da","sha512":"a99cc696d4733d030d8f3184b31dd4367b3c1b46b6352ad479f0f28973fe4f36b99951dc570bc4cb75ca64e9ef25973c8639b4ca3e3ac720a80ef44426fb23b0","ssdeep":"384:xMOLcQo2hkjx7FYNBsy2TQ01kKVaWHzg9IXBioeIm6C2t:eIFhUxhMj0ESc+x8n6jt","tlshash":"6a72d0b784c4c8eb9a5dbf0b8cb9151c5331496e334618ab1d7a7731d7f9ab83c62086","first_seen":"2024-06-29T10:46:39Z","last_seen":"2026-07-17T19:12:27.657836Z","times_seen":3831,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"requirements-approved-renewal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-16","alert":"Phishing Block","trigger":"requirements-approved-renewal.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"requirements-approved-renewal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipinfo.io/json?token=1a1487102e7dd6","fqdn":"ipinfo.io","domain":"ipinfo.io","tld":"io"},"ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://requirements-approved-renewal.xyz/required","date":"2026-03-16T12:31:12.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipinfo.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 18:32:48 GMT","end":"Sun, 03 May 2026 18:32:47 GMT"},"fingerprint":{"sha1":"D6:C6:99:F0:9D:3C:4D:DB:17:CC:F6:1F:9E:10:27:32:82:1E:E4:32","sha256":"B0:81:7B:00:5F:B0:92:5F:B1:AD:D8:F3:12:C4:48:25:52:CA:DD:E7:15:32:9A:C9:8C:DD:BE:10:4C:2C:63:DE"}}},"request":{"raw":"GET /json?token=1a1487102e7dd6 HTTP/1.1\r\nHost: ipinfo.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://requirements-approved-renewal.xyz/\r\nOrigin: https://requirements-approved-renewal.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\ndate: Mon, 16 Mar 2026 12:31:12 GMT\r\nvary: accept-encoding\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":235,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ac779bc45309c95092b4622f37ecbfb6","sha1":"74c59641df79f8953bf4253f6d1f03e2f9a2a172","sha256":"c5ce984eb68eb145babf790332e7f9d0741be53365f0171fbffe425c558b63d6","sha512":"66e8d19ca03bd3a4e306c4eff30ecc30790f2370772a3b0ae517728dad35ee180786c57712ae6cbcbb7379acc9abbce0d57e1f0e5c7b2db389b8854cbc7cfff1","ssdeep":"","tlshash":"20d0a72521342f7baded561c8405991321646e1b5702369a0fe72b0c240d533247576f","first_seen":"2023-05-17T18:19:49Z","last_seen":"2026-06-07T05:48:28.769014Z","times_seen":2727,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":128,"dns":64,"connect":26,"send":0,"wait":152,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"requirements-approved-renewal.xyz/assets/icon-docs-BNk_K0qK.png","fqdn":"requirements-approved-renewal.xyz","domain":"requirements-approved-renewal.xyz","tld":"xyz"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://requirements-approved-renewal.xyz/required","date":"2026-03-16T12:31:12.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.requirements-approved-renewal.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 02:42:16 GMT","end":"Sun, 14 Jun 2026 02:42:15 GMT"},"fingerprint":{"sha1":"0C:B5:12:19:1D:B8:36:62:AD:B1:CE:11:F8:31:68:D0:AF:A5:99:54","sha256":"E4:2B:C6:B5:FE:26:91:A6:29:B3:96:57:1B:9C:17:10:90:CE:F8:36:44:5E:B4:A5:B6:74:B7:8B:E4:18:7D:FE"}}},"request":{"raw":"GET /assets/icon-docs-BNk_K0qK.png HTTP/1.1\r\nHost: requirements-approved-renewal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://requirements-approved-renewal.xyz/required\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:31:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Mar 2026 03:11:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6318\r\ndate: Mon, 16 Mar 2026 12:31:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6318,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"d553b17fa779d5bf82a1ee3d89c0a840","sha1":"3ba5bfc7904f4659550ca29c2edecaa7afcbe8fa","sha256":"7969126db3b2ce7e191e2d35fffc92a74421911e51a0c9d57916984882bf1e2f","sha512":"c91d95c4f3a5194b257cb186fbf46d040496960211c89cf2cf8059550a4c96968cb2f6b8d68e9d010654d07128e9591cb3dac47ae8ae71ea05d2beebb3f0aad3","ssdeep":"96:6SJopVWGp/d/q0f6YwP3ibVeW79FUlHXKF3yQI0EEfC3JoYSXYRmx5H:6SKpc0Bq0f4PSpVtLI09fWoYSYcx5H","tlshash":"cdd1aecd23f89d51e3a4b405c83614b41eeb3ca805b285848871d22fbbc1dbbde13b0a","first_seen":"2024-07-21T22:23:16Z","last_seen":"2026-07-17T19:12:27.655555Z","times_seen":3658,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"requirements-approved-renewal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"requirements-approved-renewal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-16","alert":"Phishing Block","trigger":"requirements-approved-renewal.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"requirements-approved-renewal.xyz/favicon-32x32.png","fqdn":"requirements-approved-renewal.xyz","domain":"requirements-approved-renewal.xyz","tld":"xyz"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://requirements-approved-renewal.xyz/required","date":"2026-03-16T12:31:13.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.requirements-approved-renewal.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 02:42:16 GMT","end":"Sun, 14 Jun 2026 02:42:15 GMT"},"fingerprint":{"sha1":"0C:B5:12:19:1D:B8:36:62:AD:B1:CE:11:F8:31:68:D0:AF:A5:99:54","sha256":"E4:2B:C6:B5:FE:26:91:A6:29:B3:96:57:1B:9C:17:10:90:CE:F8:36:44:5E:B4:A5:B6:74:B7:8B:E4:18:7D:FE"}}},"request":{"raw":"GET /favicon-32x32.png HTTP/1.1\r\nHost: requirements-approved-renewal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://requirements-approved-renewal.xyz/required\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:31:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 09 Feb 2025 09:11:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 884\r\ndate: Mon, 16 Mar 2026 12:31:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":884,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"b73e4aede5df2ecaf604a0f54edde634","sha1":"7d6033ba56fd6b497b6e5df9649ba951e0ac2cd4","sha256":"06dabd8be112873120e4aede4295429ebda91a8bcbc6d802b9af6087570b9009","sha512":"b4b16d1911645599be4bf94fe25763dfdb3e9c7eccf086b5486e117bb6f1b6db927c6922e0697ff152087e1e1203c7b8aac149748bd06cb617db6b1f4452135a","ssdeep":"","tlshash":"161196ce1bc8ce5dcc673e6b1c0ba822ac634b6d10538685a932d681192fd34b06fb49","first_seen":"2025-02-23T19:07:28.444456Z","last_seen":"2026-07-16T08:17:17.940706Z","times_seen":627,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-16","alert":"Phishing Block","trigger":"requirements-approved-renewal.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"requirements-approved-renewal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"requirements-approved-renewal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"requirements-approved-renewal.xyz/required","fqdn":"requirements-approved-renewal.xyz","domain":"requirements-approved-renewal.xyz","tld":"xyz"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-16T12:31:11.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.requirements-approved-renewal.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 02:42:16 GMT","end":"Sun, 14 Jun 2026 02:42:15 GMT"},"fingerprint":{"sha1":"0C:B5:12:19:1D:B8:36:62:AD:B1:CE:11:F8:31:68:D0:AF:A5:99:54","sha256":"E4:2B:C6:B5:FE:26:91:A6:29:B3:96:57:1B:9C:17:10:90:CE:F8:36:44:5E:B4:A5:B6:74:B7:8B:E4:18:7D:FE"}}},"request":{"raw":"GET /required HTTP/1.1\r\nHost: requirements-approved-renewal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 16 Mar 2026 03:11:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 515\r\ndate: Mon, 16 Mar 2026 12:31:11 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":2303,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"8dd910ec91efd6a779292f7776881749","sha1":"13f6067264f9a3ed529e2fad742cb8d4f5692856","sha256":"faaa030a6d5d64fe1dbd8d55fdf2c0a1eb6722be1699e77700eefb11e8724060","sha512":"23168fb1195e70f7d1809c561ac19cc28aedf5bcd84b596fbe80f89b1b16b463f1a1eaa0aa6c3cd68201c6d78a95389ff2401f80e55a50492620cfb50885c7c1","ssdeep":"","tlshash":"bc41216bc9048c1293206634bcc3f048e126e5db97b67998eded618d48d4fd8c6fb6b0","first_seen":"2026-03-16T12:31:38.560151Z","last_seen":"2026-03-16T13:04:36.567464Z","times_seen":2,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-16","alert":"Phishing Block","trigger":"requirements-approved-renewal.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"requirements-approved-renewal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"requirements-approved-renewal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@18.2.1/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://requirements-approved-renewal.xyz/required","date":"2026-03-16T12:31:12.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/intl-tel-input@18.2.1/build/js/utils.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://requirements-approved-renewal.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Mar 2026 12:31:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 59897\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 18.2.1\r\nx-jsd-version-type: version\r\netag: W/\"3e099-Jlty7YQyU8WV7mKdDJIB2+UyjX4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220151-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3243421\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=meAauwew4Vo1OXCenyBanHRygzzWwzCICSwhUs6JkJG0Rg%2FtsKi%2Bd26cdSLpmsY1jAq0NS6B8iIXQ9sSaGmdOVkYAImjmTeRSC6E9FIhSg%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9dd3c6050c458deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":254105,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1454)","md5":"66361e32c06f29cacc63c0648bf7f31e","sha1":"265b72ed843253c595ee629d0c9201dbe5328d7e","sha256":"7b8fa25cbe5eda2c2e19eb168b100fffd42d2f75a0dcafe808ac61d139cb626e","sha512":"de8ba753ba0a78bf79f88df466705be9b580612e11b57096ee406da7cfc93aa5cb76124d2c20e47a18bd7b43bc7308d607147a1cb0af02d0cab2501c962ba749","ssdeep":"3072:3PB30j8BAJjFs3OwPss3MwP2m9OOVS2x0T3TdxQgnGHIpUsW5jkmLNjoopuDs/vq:3PB3RyBu5x0T3Tdxsnbm","tlshash":"1444e0ebd63c9737a1d97b35968eb3cd5a8cbca3c848567826c3b54f52788e0706c205","first_seen":"2023-09-12T01:07:29Z","last_seen":"2026-08-17T18:51:46.808075Z","times_seen":1998,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":5,"dns":1,"connect":8,"send":0,"wait":14,"receive":3,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"requirements-approved-renewal.xyz/assets/index-B9NEM2g6.js","fqdn":"requirements-approved-renewal.xyz","domain":"requirements-approved-renewal.xyz","tld":"xyz"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://requirements-approved-renewal.xyz/required","date":"2026-03-16T12:31:12.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.requirements-approved-renewal.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 02:42:16 GMT","end":"Sun, 14 Jun 2026 02:42:15 GMT"},"fingerprint":{"sha1":"0C:B5:12:19:1D:B8:36:62:AD:B1:CE:11:F8:31:68:D0:AF:A5:99:54","sha256":"E4:2B:C6:B5:FE:26:91:A6:29:B3:96:57:1B:9C:17:10:90:CE:F8:36:44:5E:B4:A5:B6:74:B7:8B:E4:18:7D:FE"}}},"request":{"raw":"GET /assets/index-B9NEM2g6.js HTTP/1.1\r\nHost: requirements-approved-renewal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://requirements-approved-renewal.xyz/required\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 16 Mar 2026 03:11:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 175130\r\ndate: Mon, 16 Mar 2026 12:31:12 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":671655,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17222)","md5":"63b66c5748e5706a44d2c1ced57e1aad","sha1":"e30494386b3aa72dea420f1a61a6c42f705fc945","sha256":"de11a9acbbefefbd69510a565a6770a7be2acb090a419df9d5ab121df965271e","sha512":"9a11d279ceac9b3f6070ae06d86525ea08eecd87d4ea17e10795b36974b61e5fa8169b05cefb46095c37139a838d7c7bd9d5356e481688f8b02c02b1fc3f6255","ssdeep":"6144:Rgnup9uY10YzChSXxu40VCAcuJGsUOYj7aWZVwfj5zgOuJBgkmMFv6/YQmUOzqRQ:KnGWYzph9l7OQwfaIkcKqRq49Po","tlshash":"eee46df97271a3325ee23aa4ad53d346ff6c0d54f888c09ca1f9c8cb1d96c61512af64","first_seen":"2026-03-16T12:31:38.564185Z","last_seen":"2026-03-16T12:31:38.564185Z","times_seen":1,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":281,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"requirements-approved-renewal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"requirements-approved-renewal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-16","alert":"Phishing Block","trigger":"requirements-approved-renewal.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"requirements-approved-renewal.xyz/assets/loading-logo-BjZazASD.gif","fqdn":"requirements-approved-renewal.xyz","domain":"requirements-approved-renewal.xyz","tld":"xyz"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://requirements-approved-renewal.xyz/required","date":"2026-03-16T12:31:12.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.requirements-approved-renewal.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 02:42:16 GMT","end":"Sun, 14 Jun 2026 02:42:15 GMT"},"fingerprint":{"sha1":"0C:B5:12:19:1D:B8:36:62:AD:B1:CE:11:F8:31:68:D0:AF:A5:99:54","sha256":"E4:2B:C6:B5:FE:26:91:A6:29:B3:96:57:1B:9C:17:10:90:CE:F8:36:44:5E:B4:A5:B6:74:B7:8B:E4:18:7D:FE"}}},"request":{"raw":"GET /assets/loading-logo-BjZazASD.gif HTTP/1.1\r\nHost: requirements-approved-renewal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://requirements-approved-renewal.xyz/required\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:31:12 GMT\r\ncontent-type: image/gif\r\nlast-modified: Mon, 16 Mar 2026 03:11:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1258265\r\ndate: Mon, 16 Mar 2026 12:31:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1258265,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1920 x 1080","md5":"6be3b823c3d12efcb7af4297bee297ac","sha1":"0224e616c020e0de4c64a5d2606868cbc33bd73a","sha256":"d376fb8f2eeef97914c66c8badeb1385f1fa789c3931c80e1233f0c4b3def896","sha512":"d230fc1449e86236e713808421945f9420b7c08521ec1c876cfbbe4f556bae6273a310d235470e0a68bc80e20cb71c50374ead257ea492b956989533306cc21b","ssdeep":"24576:P62FyvkoNoDlbiySCeSAS0J6IM0i+AD1gmgzo37QmgXi:l7oUF5IS0GJxBbgS","tlshash":"3a2533dfe2e8ac86d03a7c3c39370ab7c54729c5c83466d1b681f4e36b2251cd6aa751","first_seen":"2024-05-10T17:10:26Z","last_seen":"2026-08-20T17:29:49.608842Z","times_seen":2838,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":393,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"requirements-approved-renewal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-16","alert":"Phishing Block","trigger":"requirements-approved-renewal.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"requirements-approved-renewal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"requirements-approved-renewal.xyz/favicon-32x32.png","fqdn":"requirements-approved-renewal.xyz","domain":"requirements-approved-renewal.xyz","tld":"xyz"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://requirements-approved-renewal.xyz/required","date":"2026-03-16T12:31:13.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.requirements-approved-renewal.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 02:42:16 GMT","end":"Sun, 14 Jun 2026 02:42:15 GMT"},"fingerprint":{"sha1":"0C:B5:12:19:1D:B8:36:62:AD:B1:CE:11:F8:31:68:D0:AF:A5:99:54","sha256":"E4:2B:C6:B5:FE:26:91:A6:29:B3:96:57:1B:9C:17:10:90:CE:F8:36:44:5E:B4:A5:B6:74:B7:8B:E4:18:7D:FE"}}},"request":{"raw":"GET /favicon-32x32.png HTTP/1.1\r\nHost: requirements-approved-renewal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://requirements-approved-renewal.xyz/required\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:31:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 09 Feb 2025 09:11:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 884\r\ndate: Mon, 16 Mar 2026 12:31:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":884,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"b73e4aede5df2ecaf604a0f54edde634","sha1":"7d6033ba56fd6b497b6e5df9649ba951e0ac2cd4","sha256":"06dabd8be112873120e4aede4295429ebda91a8bcbc6d802b9af6087570b9009","sha512":"b4b16d1911645599be4bf94fe25763dfdb3e9c7eccf086b5486e117bb6f1b6db927c6922e0697ff152087e1e1203c7b8aac149748bd06cb617db6b1f4452135a","ssdeep":"","tlshash":"161196ce1bc8ce5dcc673e6b1c0ba822ac634b6d10538685a932d681192fd34b06fb49","first_seen":"2025-02-23T19:07:28.444456Z","last_seen":"2026-07-16T08:17:17.940706Z","times_seen":627,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-16","alert":"Phishing Block","trigger":"requirements-approved-renewal.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"requirements-approved-renewal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"requirements-approved-renewal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}
