{"report_id":"4cdfe488-6882-4abd-b92d-22d23978fb0e","version":0,"status":"done","tags":[],"date":"2026-09-24T02:27:08Z","url":{"schema":"http","addr":"track.careweigh.com/","fqdn":"track.careweigh.com","domain":"careweigh.com","tld":"com"},"ip":{"addr":"35.153.122.250","port":0,"asn":14618,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"track.careweigh.com/","fqdn":"track.careweigh.com","domain":"careweigh.com","tld":"com"},"title":"JangoMail","dom":{"size":1098,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"8830bf6d2324f4ecbf589817b8dadd85","sha1":"a5a21ce0681bfdc35263d636f7206c027e5156ce","sha256":"b626d9f7122d29d30179247bfe10e46f89e2d01e2a9ad30fa4c572efd6cfb404","sha512":"f39e22e957914775009ac947cffaf3205074e83602c4d39392cea27f4447a590c19a8ae056e46db33d3990c59361f19ff14d2e3e140f885dd321c1443af0248c","ssdeep":"","tlshash":"ed1123b6714db2b42643b2c130d3fb14e583e0b65f64a460dd121397b0c5acaf5a73d9","dom_hash":"domhash40dbfbcf3dd1985eaff6fc0fd4c5de39","first_seen":"2026-06-08T17:54:35.914827Z","last_seen":"2026-09-24T02:27:30.153767Z","times_seen":5,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"track.careweigh.com/","fqdn":"track.careweigh.com","domain":"careweigh.com","tld":"com"},"ip":{"addr":"35.153.122.250","port":0,"asn":14618,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-29T02:27:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"track.careweigh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"track.careweigh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"track.careweigh.com","ip":{"addr":"54.172.204.61","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2024-07-14","domain_rank":0,"first_seen":"2025-08-12T18:55:59.121361Z","last_seen":"2026-01-08T03:59:38.235567Z","alert_count":6,"request_count":3,"received_data":19849,"sent_data":1631,"comment":"","tags":null,"fingerprints":[{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"track.careweigh.com/","fqdn":"track.careweigh.com","domain":"careweigh.com","tld":"com"},"ip":{"addr":"54.172.204.61","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-24T02:26:38.953Z","timestamp":1790216798953,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"track.careweigh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 15 Sep 2026 19:03:12 GMT","end":"Mon, 14 Dec 2026 19:03:11 GMT"},"fingerprint":{"sha1":"70:EA:79:DD:B1:66:92:EB:A8:AD:61:BE:EE:1B:DE:4A:C3:4A:5B:FF","sha256":"A9:E5:31:72:43:C6:F4:AB:B3:15:BB:03:5D:7A:E9:22:BF:19:11:16:9B:93:8B:31:7F:B9:3E:21:B2:68:76:E4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: track.careweigh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Powered-By: Express\r\ndate: Thu, 24 Sep 2026 02:26:39 GMT\r\ncontent-type: text/html\r\ncontent-length: 1207\r\nconnection: close\r\ncache-control: private,private, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: Microsoft-IIS/8.5\r\nset-cookie: ASPSESSIONIDASCQDQBC=ADOBNEBCKKLFGPIONPCALPMH; path=/\r\nx-frame-options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":[{"name":"ASPSESSIONIDASCQDQBC","value":"ADOBNEBCKKLFGPIONPCALPMH","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"ASPSESSIONIDASCQDQBC=ADOBNEBCKKLFGPIONPCALPMH; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1207,"size_decoded":1553,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"300fd7214ef47d87f56a6a2e43442c09","sha1":"fe008c44ab5b5fe87978b1f9826900d2d35050e6","sha256":"97436463503c883a924a9631b54f660c108fb89a26ce8d1d3cc09d841e210d63","sha512":"00518b8575c94c80da61816a863d23fef0d5530e061d90312d04e9e6b9febfaa978a7cb1da7669ba8b287a98da74f9c355e06ee41b2182150d43ddc43f533a25","ssdeep":"","tlshash":"0921243a714dbda48363b3b431e3fb69d58390b15ea41050ec101383b0c26cb65a338a","first_seen":"2023-10-19T09:06:29Z","last_seen":"2026-09-24T02:27:30.155439Z","times_seen":44,"resource_available":true,"data":null}},"time_used":709,"timings":{"blocked":0,"dns":417,"connect":93,"send":0,"wait":101,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"track.careweigh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"track.careweigh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"track.careweigh.com/main-logo.png","fqdn":"track.careweigh.com","domain":"careweigh.com","tld":"com"},"ip":{"addr":"54.172.204.61","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://track.careweigh.com/","date":"2026-09-24T02:26:39.814Z","timestamp":1790216799814,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"track.careweigh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 15 Sep 2026 19:03:12 GMT","end":"Mon, 14 Dec 2026 19:03:11 GMT"},"fingerprint":{"sha1":"70:EA:79:DD:B1:66:92:EB:A8:AD:61:BE:EE:1B:DE:4A:C3:4A:5B:FF","sha256":"A9:E5:31:72:43:C6:F4:AB:B3:15:BB:03:5D:7A:E9:22:BF:19:11:16:9B:93:8B:31:7F:B9:3E:21:B2:68:76:E4"}}},"request":{"raw":"GET /main-logo.png HTTP/1.1\r\nHost: track.careweigh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://track.careweigh.com/\r\nCookie: ASPSESSIONIDASCQDQBC=ADOBNEBCKKLFGPIONPCALPMH\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Powered-By: Express\r\ndate: Thu, 24 Sep 2026 02:26:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 16158\r\nconnection: close\r\ncache-control: private, must-revalidate, max-age=0\r\npragma: no-cache\r\nlast-modified: Thu, 23 May 2024 15:28:06 GMT\r\naccept-ranges: bytes\r\netag: \"047dcf25adda1:0\"\r\nserver: Microsoft-IIS/8.5\r\nx-frame-options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":16158,"size_decoded":16523,"mime_type":"image/png","magic":"PNG image data, 281 x 67, 8-bit/color RGBA, non-interlaced","md5":"f8188f322b004505c40c0b5cd5a986f8","sha1":"c711e8cb9aa0ea4ea77521ca2f5894ecd6aa5d9f","sha256":"48afc85c5bdd5ec73db44e331db4691982a79818289a03b98e64c9484751e1c3","sha512":"f38cafe8495e3f302be00a47dd47d4ff22e1fcd39c6d2498731b36c2c965e471495ea5ec8a76451fa75f9f5072ee0cd71f3b07f83b59ddcb4c7e7f2f0ede5645","ssdeep":"384:Qx1YBShpqbusgPuPKdmZjpOMqS2oaeMMJpW:QPYBShpkbyYZY5S2iMMy","tlshash":"0672e1cf52574fa2fa9f320e5192e9385e285cd7c16bd800f8684689b29b156e1a13e4","first_seen":"2024-05-01T16:33:33Z","last_seen":"2026-09-24T02:27:30.157655Z","times_seen":25,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":0,"dns":0,"connect":93,"send":0,"wait":103,"receive":92,"ssl":98},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"track.careweigh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"track.careweigh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"track.careweigh.com/favicon.ico","fqdn":"track.careweigh.com","domain":"careweigh.com","tld":"com"},"ip":{"addr":"54.172.204.61","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://track.careweigh.com/","date":"2026-09-24T02:26:39.911Z","timestamp":1790216799911,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"track.careweigh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 15 Sep 2026 19:03:12 GMT","end":"Mon, 14 Dec 2026 19:03:11 GMT"},"fingerprint":{"sha1":"70:EA:79:DD:B1:66:92:EB:A8:AD:61:BE:EE:1B:DE:4A:C3:4A:5B:FF","sha256":"A9:E5:31:72:43:C6:F4:AB:B3:15:BB:03:5D:7A:E9:22:BF:19:11:16:9B:93:8B:31:7F:B9:3E:21:B2:68:76:E4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: track.careweigh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://track.careweigh.com/\r\nCookie: ASPSESSIONIDASCQDQBC=ADOBNEBCKKLFGPIONPCALPMH\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Powered-By: Express\r\ndate: Thu, 24 Sep 2026 02:26:40 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1406\r\nconnection: close\r\ncache-control: private, must-revalidate, max-age=0\r\npragma: no-cache\r\nlast-modified: Thu, 23 May 2024 15:28:06 GMT\r\naccept-ranges: bytes\r\netag: \"047dcf25adda1:0\"\r\nserver: Microsoft-IIS/8.5\r\nx-frame-options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":1406,"size_decoded":1773,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16","md5":"011201ab56695ce86ea2f190bce2670b","sha1":"bb8fad6accf293e619360935047c23f00da3c769","sha256":"a9bc1ab7f7c0c6bc5d097050968993474e32346cffa537be1e0335a19645f12e","sha512":"56d53a1219e58ad045c96dc81d71c63c0cf5a9766add778d34895fdaa7fda8dead44161ec291f0ed3d10a405322b7973b56c6b211d68a8d82a8510b5b7c0456c","ssdeep":"","tlshash":"71210082bb20c02cc82c0b300802eba82388f00ac8e8330b30c80b8e0c0008c8ef8ae0","first_seen":"2023-04-05T07:23:52Z","last_seen":"2026-09-24T06:14:05.48529Z","times_seen":22800,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":0,"dns":0,"connect":93,"send":0,"wait":102,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"track.careweigh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"track.careweigh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}