{"report_id":"57c3d5fc-8d21-4b78-9c83-50061247075f","version":6,"status":"done","tags":[],"date":"2026-03-31T00:50:01Z","url":{"schema":"http","addr":"asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","fqdn":"asig-zgafp.campaign-view.com","domain":"campaign-view.com","tld":"com"},"ip":{"addr":"204.141.42.68","port":0,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","fqdn":"asig-zgafp.campaign-view.com","domain":"campaign-view.com","tld":"com"},"title":"Boost Your Operations with Reliable Manpower This Week","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","fqdn":"asig-zgafp.campaign-view.com","domain":"campaign-view.com","tld":"com"},"ip":{"addr":"204.141.42.68","port":0,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-05T00:50:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"asig-zgafp.campaign-view.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"asig-zgafp.campaign-view.com","ip":{"addr":"204.141.42.68","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"domain_registered":"2012-08-09","domain_rank":0,"first_seen":"2026-03-31T00:50:01.532305Z","last_seen":"2026-03-31T00:50:01.532305Z","alert_count":5,"request_count":5,"received_data":212585,"sent_data":3667,"comment":"","tags":null,"fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:1.11.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:1.2.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"img.zohostatic.com","ip":{"addr":"204.141.42.123","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"domain_registered":"2007-02-23","domain_rank":546775,"first_seen":"2012-07-08T19:11:03Z","last_seen":"2026-03-24T09:28:24.857557Z","alert_count":0,"request_count":7,"received_data":14028,"sent_data":3357,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"campaigns.zoho.com","ip":{"addr":"204.141.42.148","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"domain_registered":"2004-01-16","domain_rank":547743,"first_seen":"2013-08-31T17:11:04Z","last_seen":"2026-03-25T10:57:50.045872Z","alert_count":0,"request_count":1,"received_data":73802,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","fqdn":"asig-zgafp.campaign-view.com","domain":"campaign-view.com","tld":"com"},"ip":{"addr":"204.141.42.68","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d06d00f784b4c487ad5717351745922a","sha1":"a5e2b45a8bc86e9021f063a964714bc961c44b57","sha256":"dbe0b8dc17d311cf2e562b510fe18ea88649dc4c453d826a6537cdc059e95816","sha512":"262da861d233ddf177f63f3e3c842ab8c033db60e06d2189ad51b6b55235df50353c75d4be5ab8b3ec9e5cd55ba765416757362aa1fc6da63229131e7df90a20","ssdeep":"384:xQmi9iXiAiuBAwH+AThXjeZrX2MWlEKuo3DjPiu886PJeSoaalUglFhtcLY:asSduewHAarSoawUgJ","tlshash":"d6d26005f5a8db1e003b227d69bf20c5934d447ab0d94e8afd3361ba4921f673a1ee1c","size":28391,"data":"","first_seen":"2026-03-31T00:50:03.592593Z","last_seen":"2026-03-31T00:50:03.592593Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","fqdn":"asig-zgafp.campaign-view.com","domain":"campaign-view.com","tld":"com"},"ip":{"addr":"204.141.42.68","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"403d9fdbdce1186a48de1a4a79d31961","sha1":"5b1669a5c3db85ee9258dd1ec2014bb0b3d9b5dc","sha256":"66c92c544c0b18c20405d092ac82af1772059f86e424161885a332dd13bd1d71","sha512":"deb141aa1170c5c6fd5ebebe62b0a0c5c151eb76bee56af4636a5be571188ed4df9f55948f6996467258557a5aa73f9d4951aece997524854cd1f77ec6ca2407","ssdeep":"","tlshash":"aa41acc4ff1d367e537f312d850b44dd527cb57269004ea2bc98e98069b0ba927bb534","size":2012,"data":"","first_seen":"2023-03-09T05:07:35Z","last_seen":"2026-03-31T00:50:03.595213Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asig-zgafp.campaign-view.com/js/jquery-1.11.0.min.js","fqdn":"asig-zgafp.campaign-view.com","domain":"campaign-view.com","tld":"com"},"ip":{"addr":"204.141.42.68","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fc25e27d42774aeae6edbc0a18b72aa","sha1":"b66ed708717bf0b4a005a4d0113af8843ef3b8ff","sha256":"b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682","sha512":"87d90a665c15d71ac872bd8bc003d9863964c7ec7ada6370b902b93c0bbd7770fe25730d946c7c6a465baa95efa74bc0e78af3f83aea615af35060cc8702a6c1","ssdeep":"1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Yn:bIO/e2D5c4LgtImLja98HrK","tlshash":"cc93e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","size":96381,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-05T15:11:10.514901Z","times_seen":22948,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","fqdn":"asig-zgafp.campaign-view.com","domain":"campaign-view.com","tld":"com"},"ip":{"addr":"204.141.42.68","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c8759f4b92aa5da38f1abaef3b12e3c","sha1":"a7a52498f3f9e0d6558c1c6dc6eadb56fca5623d","sha256":"0148212fbddbf924b7ac73fc9a2dc0e9f3bc307ac9bae84737ec7c1b7a27e858","sha512":"a88915bf67bd479cee368e6a6e612100c41ded7975b541ad6b544f531e69f426d3b86978c8db2adac77dfee3975f8dc027f25d09438ebe826d63179d9952e2aa","ssdeep":"","tlshash":"73012dc0bf1c377e53777108854b44c9526d757265004e53bca4e9802ef1b6973b3a70","size":824,"data":"","first_seen":"2023-03-09T05:07:35Z","last_seen":"2026-04-03T06:58:59.068723Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","fqdn":"asig-zgafp.campaign-view.com","domain":"campaign-view.com","tld":"com"},"ip":{"addr":"204.141.42.68","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c72ae9c6c167ebac6903433f5e25a1cf","sha1":"5c6f9c66da7f36b8e80d47e956fbfb97ab0e2b83","sha256":"a2d226aebca8c44d02799d50e0a058965cd4ff0a508f67e6ef2fbc733f15198c","sha512":"9eaeb5e89203c54209c47308d84b8ac0c6dfae1cfe3038d5e660aca50302436e86a9dfbd288490d28f6b4d811b17fc608f941f7104f9b05bac4d8bb6a4bec6ec","ssdeep":"","tlshash":"500128c47f1c37ae973b2108840b44c9476cb67216004e92fc64e1806ff4ba932fb530","size":815,"data":"","first_seen":"2023-03-09T05:07:35Z","last_seen":"2026-04-03T06:58:59.071632Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asig-zgafp.campaign-view.com/js/jquery-migrate-1.2.1.min.js","fqdn":"asig-zgafp.campaign-view.com","domain":"campaign-view.com","tld":"com"},"ip":{"addr":"204.141.42.68","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","size":7199,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-04-05T14:16:42.365035Z","times_seen":19841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","fqdn":"asig-zgafp.campaign-view.com","domain":"campaign-view.com","tld":"com"},"ip":{"addr":"204.141.42.68","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0371caf16329d1502a532dc811179819","sha1":"9781d67aba1a2bc4773d2da20ded5e354ad7b0d6","sha256":"5b90d1529aad6654570fc456faf10ed7deb7263e45b7c6d9769c0e440cd3d89f","sha512":"171a67f6349ad4c7f493b0d5773f5d55a11d8b52cb3b40226574d279253b5d0bf30b10f2afa5140e4c92ea782a1ea2f71e610c781021dd7d87dcecd58023930f","ssdeep":"","tlshash":"5cd0a7c5ae5f4412cd69001b59588556701d237491518f1abc48c81c1f21a948d6ade9","size":272,"data":"","first_seen":"2023-03-09T05:07:35Z","last_seen":"2026-04-03T06:58:59.083438Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","fqdn":"asig-zgafp.campaign-view.com","domain":"campaign-view.com","tld":"com"},"ip":{"addr":"204.141.42.68","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1de86b69a4eb1abb98c61dd4df255780","sha1":"bb210081a46eb51c5c3d04c29f560d20ba49246a","sha256":"fc44368db8334ffcf0a536d0caa367ec0292023981defa45ee3ac2d474611473","sha512":"7706865b78b95f366a6db303f7b9f72d03928b64b5a7a56475cc43ae4da0ad5a044d206f1f22b433a22aea77c2d0520acc8981d06a32cf1bb7d1f6b8db75e2a9","ssdeep":"","tlshash":"9b2106c0ff0c7b6e577a2119448f85d9812c763296104de3bc54e2446df276a72bf971","size":1340,"data":"","first_seen":"2023-03-09T05:07:35Z","last_seen":"2026-04-03T06:58:59.092725Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","fqdn":"asig-zgafp.campaign-view.com","domain":"campaign-view.com","tld":"com"},"ip":{"addr":"204.141.42.68","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0a336dee7269b995210b7aa17ce22bd1","sha1":"67b3fb60a4d312dc6eca11c3420ae7dc8e9a09fa","sha256":"285a1b194e23ef658a53d3479f26e7d0d46e5243bb8d7b92cef207afba7478a2","sha512":"1979613d603d655af54643fbca96b6c57e9e83425422117b28ec266c5932994b05ad4af39b184e7adae5337220f24d9e95e3bae8621fcebb679ca59db0f268ed","ssdeep":"","tlshash":"03c080787570ef6bd83250057357d34953d133113763c538553c94f03da15179b31154","size":172,"data":"","first_seen":"2023-03-09T05:07:35Z","last_seen":"2026-04-03T06:58:59.104584Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"asig-zgafp.campaign-view.com/favicon.ico","fqdn":"asig-zgafp.campaign-view.com","domain":"campaign-view.com","tld":"com"},"ip":{"addr":"204.141.42.68","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","date":"2026-03-31T00:49:40.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zctracker.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:56:14 GMT","end":"Thu, 04 Jun 2026 03:56:13 GMT"},"fingerprint":{"sha1":"5B:D4:75:AF:06:45:FA:81:DA:15:3D:86:A8:D7:7F:01:7A:D3:CF:7A","sha256":"2C:1C:79:CB:92:56:F1:98:A2:CF:CB:49:1B:63:6F:6A:E4:AA:48:F1:EC:8D:E6:03:43:E5:BA:A1:D4:AA:B7:99"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: asig-zgafp.campaign-view.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1\r\nCookie: zalb_c72887300d=798e3fc06859342be72d127ee7dcfad0; ZCAMPAIGN_CSRF_TOKEN=9e93ab27-2ea6-482b-ac11-ae14ce599841\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 \r\nServer: ZGS\r\nDate: Tue, 31 Mar 2026 00:49:40 GMT\r\nContent-Type: text/html;charset=UTF-8\r\nContent-Length: 447\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nSet-Cookie: JSESSIONID=CB7F2A902CAC48755CF5DDB2F574D1E5; Path=/; Secure; HttpOnly\r\nContent-Language: en-US\r\nStrict-Transport-Security: max-age=64072000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (325)","md5":"776a4a5d86ea141421ad2176f6b10f3e","sha1":"3a5ef185c2d5632065107ba9e20faaa0e41b706b","sha256":"4915464eda6dc7a174db40504653029a9073de87e407e4b448bdf4846baf561a","sha512":"f82755f5dd2c4242cdb52898343e0bc670c5b5fa8c7a9fd3a89bf622b261439668c69463bdd13b3045574443424263fa6c819f1337d554e87b2ed633142caf89","ssdeep":"","tlshash":"59f054215142b33fce1e61c1c3651e6052c1043fdbb344545aef525543fcc555ea9178","first_seen":"2024-06-07T08:54:21Z","last_seen":"2026-04-02T11:07:37.774015Z","times_seen":552,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"asig-zgafp.campaign-view.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","fqdn":"asig-zgafp.campaign-view.com","domain":"campaign-view.com","tld":"com"},"ip":{"addr":"204.141.42.68","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-31T00:49:38.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zctracker.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:56:14 GMT","end":"Thu, 04 Jun 2026 03:56:13 GMT"},"fingerprint":{"sha1":"5B:D4:75:AF:06:45:FA:81:DA:15:3D:86:A8:D7:7F:01:7A:D3:CF:7A","sha256":"2C:1C:79:CB:92:56:F1:98:A2:CF:CB:49:1B:63:6F:6A:E4:AA:48:F1:EC:8D:E6:03:43:E5:BA:A1:D4:AA:B7:99"}}},"request":{"raw":"GET /ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1 HTTP/1.1\r\nHost: asig-zgafp.campaign-view.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: ZGS\r\nDate: Tue, 31 Mar 2026 00:49:39 GMT\r\nContent-Type: text/html;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nSet-Cookie: zalb_c72887300d=798e3fc06859342be72d127ee7dcfad0; Path=/; Secure; HttpOnly\nZCAMPAIGN_CSRF_TOKEN=9e93ab27-2ea6-482b-ac11-ae14ce599841;path=/;SameSite=Strict;Secure;priority=high\r\nCache-Control: private,no-cache,no-store,max-age=0,must-revalidate\r\nPragma: no-cache\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nAccess-Control-Allow-Headers: Cache-Control, Pragma, Origin, Authorization, Content-Type, X-Requested-With\r\nAccess-Control-Allow-Methods: GET,POST,OPTIONS\r\nVary: sec-fetch-dest,sec-fetch-mode,sec-fetch-site,sec-fetch-user,accept-encoding\r\nContent-Encoding: gzip\r\nContent-Language: en-US\r\nStrict-Transport-Security: max-age=64072000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:1.11.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:1.2.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":104294,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1235)","md5":"8d04204adc44eeba2c53544d74bf7ff7","sha1":"e5ae1301662ccc158108175e4b719da26e94881b","sha256":"baa5260debe860a7cd767799c2e2531cb700f4630e6cff4be5c0bb911c016e4a","sha512":"7198243e897ee4eb01a39222e789affdca3681b005cf181ade5a07d1907c8268e7ada4b4407b410fd4425492d1293a79800c9de0fe8b5d09584f6b2a02a42f24","ssdeep":"1536:9Qe6sSdhwiMSOoszu5ASiFFFN80GmzEAC7iHf9I3bCeUQzi9iP8FO+eyBFieC:t6sSdgVzEfH","tlshash":"f5a30901fb08171e107b5056f0636ad53628463bf6630e74b57fa269ebc5fb2260eb5c","first_seen":"2026-03-31T00:50:03.565877Z","last_seen":"2026-03-31T00:50:03.565877Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1267,"timings":{"blocked":329,"dns":0,"connect":161,"send":0,"wait":448,"receive":161,"ssl":165},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"asig-zgafp.campaign-view.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asig-zgafp.campaign-view.com/js/jquery-1.11.0.min.js","fqdn":"asig-zgafp.campaign-view.com","domain":"campaign-view.com","tld":"com"},"ip":{"addr":"204.141.42.68","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","date":"2026-03-31T00:49:39.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zctracker.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:56:14 GMT","end":"Thu, 04 Jun 2026 03:56:13 GMT"},"fingerprint":{"sha1":"5B:D4:75:AF:06:45:FA:81:DA:15:3D:86:A8:D7:7F:01:7A:D3:CF:7A","sha256":"2C:1C:79:CB:92:56:F1:98:A2:CF:CB:49:1B:63:6F:6A:E4:AA:48:F1:EC:8D:E6:03:43:E5:BA:A1:D4:AA:B7:99"}}},"request":{"raw":"GET /js/jquery-1.11.0.min.js HTTP/1.1\r\nHost: asig-zgafp.campaign-view.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1\r\nCookie: zalb_c72887300d=798e3fc06859342be72d127ee7dcfad0; ZCAMPAIGN_CSRF_TOKEN=9e93ab27-2ea6-482b-ac11-ae14ce599841\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: ZGS\r\nDate: Tue, 31 Mar 2026 00:49:39 GMT\r\nContent-Type: application/javascript;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nAccept-Ranges: bytes\r\nETag: W/\"96381-1774425586000\"\r\nLast-Modified: Wed, 25 Mar 2026 07:59:46 GMT\r\nvary: accept-encoding\r\nContent-Encoding: gzip\r\nContent-Language: en-US\r\nStrict-Transport-Security: max-age=64072000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96381,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32341)","md5":"8fc25e27d42774aeae6edbc0a18b72aa","sha1":"b66ed708717bf0b4a005a4d0113af8843ef3b8ff","sha256":"b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682","sha512":"87d90a665c15d71ac872bd8bc003d9863964c7ec7ada6370b902b93c0bbd7770fe25730d946c7c6a465baa95efa74bc0e78af3f83aea615af35060cc8702a6c1","ssdeep":"1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Yn:bIO/e2D5c4LgtImLja98HrK","tlshash":"cc93e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-05T15:11:10.514901Z","times_seen":22948,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"asig-zgafp.campaign-view.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.zohostatic.com/campaigns/static8/images/spacer.gif","fqdn":"img.zohostatic.com","domain":"zohostatic.com","tld":"com"},"ip":{"addr":"204.141.42.123","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","date":"2026-03-31T00:49:39.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohostatic.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 08 Apr 2025 00:00:00 GMT","end":"Fri, 08 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7E:09:D8:0C:89:4D:AB:D1:05:DE:41:AA:B3:D8:A5:A1:3D:41:D1:91","sha256":"F9:62:81:50:38:63:BE:0A:56:74:BD:4B:69:7C:94:FC:DB:09:6C:CE:26:61:25:EF:81:3B:D8:00:55:C9:C0:93"}}},"request":{"raw":"GET /campaigns/static8/images/spacer.gif HTTP/1.1\r\nHost: img.zohostatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asig-zgafp.campaign-view.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: ZGS\r\nDate: Tue, 31 Mar 2026 00:49:39 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nLast-Modified: Mon, 30 Mar 2026 09:57:49 GMT\r\nConnection: keep-alive\r\nETag: \"69ca491d-2b\"\r\nExpires: Wed, 31 Mar 2027 00:49:39 GMT\r\nCache-Control: max-age=31536000\r\nX-Robots-Tag: noindex, nofollow, nosnippet, noarchive\r\nAccess-Control-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nStrict-Transport-Security: max-age=64072000; includeSubDomains; preload\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-04-05T14:50:00.578966Z","times_seen":76071,"resource_available":true,"data":null}},"time_used":1008,"timings":{"blocked":426,"dns":35,"connect":150,"send":0,"wait":149,"receive":0,"ssl":245},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.zohostatic.com/campaigns/static8/images/linkedin.png","fqdn":"img.zohostatic.com","domain":"zohostatic.com","tld":"com"},"ip":{"addr":"204.141.42.123","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","date":"2026-03-31T00:49:39.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohostatic.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 08 Apr 2025 00:00:00 GMT","end":"Fri, 08 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7E:09:D8:0C:89:4D:AB:D1:05:DE:41:AA:B3:D8:A5:A1:3D:41:D1:91","sha256":"F9:62:81:50:38:63:BE:0A:56:74:BD:4B:69:7C:94:FC:DB:09:6C:CE:26:61:25:EF:81:3B:D8:00:55:C9:C0:93"}}},"request":{"raw":"GET /campaigns/static8/images/linkedin.png HTTP/1.1\r\nHost: img.zohostatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asig-zgafp.campaign-view.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: ZGS\r\nDate: Tue, 31 Mar 2026 00:49:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 1807\r\nLast-Modified: Mon, 30 Mar 2026 09:57:49 GMT\r\nConnection: keep-alive\r\nETag: \"69ca491d-70f\"\r\nExpires: Wed, 31 Mar 2027 00:49:39 GMT\r\nCache-Control: max-age=31536000\r\nX-Robots-Tag: noindex, nofollow, nosnippet, noarchive\r\nAccess-Control-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nStrict-Transport-Security: max-age=64072000; includeSubDomains; preload\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1807,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"17b679a808950ddbe894710850666e24","sha1":"2bc7cc70e69078592450b15da80d30f230d3dd01","sha256":"32df1c9103cd81d473e10c2bfbcc9553ef62582224553e2fdcd91827897c632d","sha512":"dc2a3b088afdbfe841555eff151ca0e516a93246907748b05ed9483d371ac27c599772fd7dce421ae71dd3c58c32b2823313e04cc67187aafcf076333f57b6b3","ssdeep":"","tlshash":"7131e9cffa90f8421246a14275f5683394b35dc4ead4c75c9ecac4464c3627e842d5e7","first_seen":"2025-05-19T06:58:36.748664Z","last_seen":"2026-03-31T00:50:03.578135Z","times_seen":7,"resource_available":false,"data":null}},"time_used":700,"timings":{"blocked":552,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.zohostatic.com/campaigns/static8/images/twt_icon.png","fqdn":"img.zohostatic.com","domain":"zohostatic.com","tld":"com"},"ip":{"addr":"204.141.42.123","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","date":"2026-03-31T00:49:39.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohostatic.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 08 Apr 2025 00:00:00 GMT","end":"Fri, 08 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7E:09:D8:0C:89:4D:AB:D1:05:DE:41:AA:B3:D8:A5:A1:3D:41:D1:91","sha256":"F9:62:81:50:38:63:BE:0A:56:74:BD:4B:69:7C:94:FC:DB:09:6C:CE:26:61:25:EF:81:3B:D8:00:55:C9:C0:93"}}},"request":{"raw":"GET /campaigns/static8/images/twt_icon.png HTTP/1.1\r\nHost: img.zohostatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asig-zgafp.campaign-view.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: ZGS\r\nDate: Tue, 31 Mar 2026 00:49:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 2229\r\nLast-Modified: Mon, 30 Mar 2026 09:57:49 GMT\r\nConnection: keep-alive\r\nETag: \"69ca491d-8b5\"\r\nExpires: Wed, 31 Mar 2027 00:49:39 GMT\r\nCache-Control: max-age=31536000\r\nX-Robots-Tag: noindex, nofollow, nosnippet, noarchive\r\nAccess-Control-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nStrict-Transport-Security: max-age=64072000; includeSubDomains; preload\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2229,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced","md5":"454aa6d5caba5b773bda0cc4ef4e3017","sha1":"81aaa7ab193bc72de1b18d80b8108605bfbbbdf5","sha256":"ba97374c3977921b353dff36c01bea517f3db8c652ad5286dab8b5ce69f16649","sha512":"b053efa0221b2efde7833f4040a22375b1cb6998ec842c4b64a299197f83293b7466215e14b94e6500150c6ca8caa306688f18cd667418de9a2af5c384deb25e","ssdeep":"","tlshash":"6741f984ea80ac1691dbdec158f94c67d4264d40aac0f024becf8c364ab25f6445b8cb","first_seen":"2026-03-31T00:50:03.582849Z","last_seen":"2026-03-31T00:50:03.582849Z","times_seen":1,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":12,"connect":150,"send":0,"wait":149,"receive":0,"ssl":243},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.zohostatic.com/campaigns/static8/images/zc_tmblrpost.jpg","fqdn":"img.zohostatic.com","domain":"zohostatic.com","tld":"com"},"ip":{"addr":"204.141.42.123","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","date":"2026-03-31T00:49:39.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohostatic.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 08 Apr 2025 00:00:00 GMT","end":"Fri, 08 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7E:09:D8:0C:89:4D:AB:D1:05:DE:41:AA:B3:D8:A5:A1:3D:41:D1:91","sha256":"F9:62:81:50:38:63:BE:0A:56:74:BD:4B:69:7C:94:FC:DB:09:6C:CE:26:61:25:EF:81:3B:D8:00:55:C9:C0:93"}}},"request":{"raw":"GET /campaigns/static8/images/zc_tmblrpost.jpg HTTP/1.1\r\nHost: img.zohostatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asig-zgafp.campaign-view.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: ZGS\r\nDate: Tue, 31 Mar 2026 00:49:39 GMT\r\nContent-Type: text/html\r\nContent-Length: 118\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=64072000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":1016,"timings":{"blocked":423,"dns":33,"connect":161,"send":0,"wait":161,"receive":1,"ssl":235},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.zohostatic.com/campaigns/static8/images/videoclose.png","fqdn":"img.zohostatic.com","domain":"zohostatic.com","tld":"com"},"ip":{"addr":"204.141.42.123","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","date":"2026-03-31T00:49:39.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohostatic.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 08 Apr 2025 00:00:00 GMT","end":"Fri, 08 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7E:09:D8:0C:89:4D:AB:D1:05:DE:41:AA:B3:D8:A5:A1:3D:41:D1:91","sha256":"F9:62:81:50:38:63:BE:0A:56:74:BD:4B:69:7C:94:FC:DB:09:6C:CE:26:61:25:EF:81:3B:D8:00:55:C9:C0:93"}}},"request":{"raw":"GET /campaigns/static8/images/videoclose.png HTTP/1.1\r\nHost: img.zohostatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asig-zgafp.campaign-view.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: ZGS\r\nDate: Tue, 31 Mar 2026 00:49:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 2967\r\nLast-Modified: Mon, 30 Mar 2026 09:57:49 GMT\r\nConnection: keep-alive\r\nETag: \"69ca491d-b97\"\r\nExpires: Wed, 31 Mar 2027 00:49:39 GMT\r\nCache-Control: max-age=31536000\r\nX-Robots-Tag: noindex, nofollow, nosnippet, noarchive\r\nAccess-Control-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nStrict-Transport-Security: max-age=64072000; includeSubDomains; preload\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2967,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 29 x 29, 8-bit/color RGBA, non-interlaced","md5":"83430d09f4198e39837be9814728f879","sha1":"ad722835d1f655c5177222f773d447dacdc57161","sha256":"4230d6dc8edebdd4ad8b85c009fe33f77e1b11a33d9176983eb283e2145a2232","sha512":"80553c8cc55672be81810de88ce8a8f2bbbf779de8c15efc8c9b9f76459fcb0a60ae029b5c8b07ab4e4e9951d3d2593863e16486c0a4b862e374a62b212eaf86","ssdeep":"","tlshash":"c251490bffc3a4d22009e1c511cbf0ab5653848483c045b26ccaadae95318ca19d7dea","first_seen":"2023-05-04T17:35:13Z","last_seen":"2026-04-04T11:37:15.043274Z","times_seen":701,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":-1,"dns":32,"connect":161,"send":0,"wait":161,"receive":0,"ssl":236},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campaigns.zoho.com/imgView/zx126a7777e_bIdNN18:6265841814876502982_imId307853000010278013.png","fqdn":"campaigns.zoho.com","domain":"zoho.com","tld":"com"},"ip":{"addr":"204.141.42.148","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","date":"2026-03-31T00:49:39.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zoho.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 22 Sep 2025 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"39:3C:16:96:A4:A3:22:77:4E:35:38:4F:CE:3D:DA:07:19:F8:E7:00","sha256":"95:F8:65:83:A2:BE:E7:FC:5C:67:D4:92:07:6C:9D:C5:02:C7:51:A7:E2:D2:D3:3C:90:46:BA:63:D5:C2:3F:C8"}}},"request":{"raw":"GET /imgView/zx126a7777e_bIdNN18:6265841814876502982_imId307853000010278013.png HTTP/1.1\r\nHost: campaigns.zoho.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asig-zgafp.campaign-view.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: ZGS\r\nDate: Tue, 31 Mar 2026 00:49:39 GMT\r\nContent-Type: image/png;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nSet-Cookie: zalb_355b4a0ae7=ea3f6801d767ca78de65c2fd8a55fd3e; Path=/; Secure; HttpOnly\nZCAMPAIGN_CSRF_TOKEN=a1c248ac-b5cc-4d77-b065-cad6994dcf1f;path=/;SameSite=Strict;Secure;priority=high\r\nX-Frame-Options: SAMEORIGIN\r\nVary: Sec-Fetch-Dest,Sec-Fetch-Mode,Sec-Fetch-Site,Sec-Fetch-User\r\nCache-Control: max-age=36000\r\nContent-Language: en-US\r\nStrict-Transport-Security: max-age=64072000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73197,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 2046 x 592, 8-bit colormap, non-interlaced","md5":"22a5018ed78f90e23180d3bd622ebfb1","sha1":"886f999d0229534111613ce7a8592b841cffd7b7","sha256":"54d1b5570807101c0bfee37e373322226f1e4bb71e5c0a64da6fab1c9637edd2","sha512":"aec535c1b4b9b2a7366068aed2a5faf3fd6b43ab88ddbe3ba0bc6a81467efe0b78694754253f725b5773913a50946fa3415afa9c9db73d340d5a1bcb564efb60","ssdeep":"1536:Z+Rb64dso8uJV4zOIvjK5uSeXe5GyHGrCYMMLRMl2GfMFjYILdamNx:XMsV03IvjeRYe5GrCYMWMltEiIp7","tlshash":"8163020b18e7d026cd775a2300a160b6f4e41e9b57483c9f64ccf69a5631b93c73baad","first_seen":"2026-03-31T00:50:03.586622Z","last_seen":"2026-03-31T00:50:03.586622Z","times_seen":1,"resource_available":false,"data":null}},"time_used":844,"timings":{"blocked":-1,"dns":12,"connect":160,"send":0,"wait":166,"receive":321,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.zohostatic.com/campaigns/static8/images/fb_icon.png","fqdn":"img.zohostatic.com","domain":"zohostatic.com","tld":"com"},"ip":{"addr":"204.141.42.123","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","date":"2026-03-31T00:49:39.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohostatic.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 08 Apr 2025 00:00:00 GMT","end":"Fri, 08 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7E:09:D8:0C:89:4D:AB:D1:05:DE:41:AA:B3:D8:A5:A1:3D:41:D1:91","sha256":"F9:62:81:50:38:63:BE:0A:56:74:BD:4B:69:7C:94:FC:DB:09:6C:CE:26:61:25:EF:81:3B:D8:00:55:C9:C0:93"}}},"request":{"raw":"GET /campaigns/static8/images/fb_icon.png HTTP/1.1\r\nHost: img.zohostatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asig-zgafp.campaign-view.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: ZGS\r\nDate: Tue, 31 Mar 2026 00:49:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 2114\r\nLast-Modified: Mon, 30 Mar 2026 09:57:49 GMT\r\nConnection: keep-alive\r\nETag: \"69ca491d-842\"\r\nExpires: Wed, 31 Mar 2027 00:49:39 GMT\r\nCache-Control: max-age=31536000\r\nX-Robots-Tag: noindex, nofollow, nosnippet, noarchive\r\nAccess-Control-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nStrict-Transport-Security: max-age=64072000; includeSubDomains; preload\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2114,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced","md5":"d4a645e276f0878fa82d0fc685454d9e","sha1":"79c415b09c3a0758781325a6a92887f06f0d6a30","sha256":"d475ab65d83fc3de50af2026abff8d73cde3cd2d5a4e2a37831148e13b30fee2","sha512":"f0f1db2c9ee25890ac93236f1e2f7ce001456f1ff20f8f2e33bcbc9b9cf102014e8421bf7c52f55847e7dc0b74de66d52636cf2864a2efcd4bb29baf21d9a333","ssdeep":"","tlshash":"094109c1f9407941eb9ae9a3287b482fed550d40d5d0f75019cfec4b0526a77543a8c7","first_seen":"2026-03-31T00:50:03.588889Z","last_seen":"2026-03-31T00:50:03.588889Z","times_seen":1,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":12,"connect":147,"send":0,"wait":148,"receive":0,"ssl":249},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asig-zgafp.campaign-view.com/js/jquery-migrate-1.2.1.min.js","fqdn":"asig-zgafp.campaign-view.com","domain":"campaign-view.com","tld":"com"},"ip":{"addr":"204.141.42.68","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","date":"2026-03-31T00:49:39.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zctracker.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:56:14 GMT","end":"Thu, 04 Jun 2026 03:56:13 GMT"},"fingerprint":{"sha1":"5B:D4:75:AF:06:45:FA:81:DA:15:3D:86:A8:D7:7F:01:7A:D3:CF:7A","sha256":"2C:1C:79:CB:92:56:F1:98:A2:CF:CB:49:1B:63:6F:6A:E4:AA:48:F1:EC:8D:E6:03:43:E5:BA:A1:D4:AA:B7:99"}}},"request":{"raw":"GET /js/jquery-migrate-1.2.1.min.js HTTP/1.1\r\nHost: asig-zgafp.campaign-view.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1\r\nCookie: zalb_c72887300d=798e3fc06859342be72d127ee7dcfad0; ZCAMPAIGN_CSRF_TOKEN=9e93ab27-2ea6-482b-ac11-ae14ce599841\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: ZGS\r\nDate: Tue, 31 Mar 2026 00:49:39 GMT\r\nContent-Type: application/javascript;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nAccept-Ranges: bytes\r\nETag: W/\"7199-1774425586000\"\r\nLast-Modified: Wed, 25 Mar 2026 07:59:46 GMT\r\nvary: accept-encoding\r\nContent-Encoding: gzip\r\nContent-Language: en-US\r\nStrict-Transport-Security: max-age=64072000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7199,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7085)","md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-04-05T14:16:42.365035Z","times_seen":19841,"resource_available":true,"data":null}},"time_used":814,"timings":{"blocked":322,"dns":1,"connect":160,"send":0,"wait":163,"receive":0,"ssl":165},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"asig-zgafp.campaign-view.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asig-zgafp.campaign-view.com/images/viewinbrowserarw.png","fqdn":"asig-zgafp.campaign-view.com","domain":"campaign-view.com","tld":"com"},"ip":{"addr":"204.141.42.68","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","date":"2026-03-31T00:49:39.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zctracker.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:56:14 GMT","end":"Thu, 04 Jun 2026 03:56:13 GMT"},"fingerprint":{"sha1":"5B:D4:75:AF:06:45:FA:81:DA:15:3D:86:A8:D7:7F:01:7A:D3:CF:7A","sha256":"2C:1C:79:CB:92:56:F1:98:A2:CF:CB:49:1B:63:6F:6A:E4:AA:48:F1:EC:8D:E6:03:43:E5:BA:A1:D4:AA:B7:99"}}},"request":{"raw":"GET /images/viewinbrowserarw.png HTTP/1.1\r\nHost: asig-zgafp.campaign-view.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1\r\nCookie: zalb_c72887300d=798e3fc06859342be72d127ee7dcfad0; ZCAMPAIGN_CSRF_TOKEN=9e93ab27-2ea6-482b-ac11-ae14ce599841\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: ZGS\r\nDate: Tue, 31 Mar 2026 00:49:39 GMT\r\nContent-Type: image/png;charset=UTF-8\r\nContent-Length: 1610\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nAccept-Ranges: bytes\r\nETag: W/\"1610-1774425600000\"\r\nLast-Modified: Wed, 25 Mar 2026 08:00:00 GMT\r\nContent-Language: en-US\r\nStrict-Transport-Security: max-age=64072000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1610,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 71 x 23, 8-bit/color RGBA, non-interlaced","md5":"0b811a3726a6c0676cba01d9fbc7090c","sha1":"f46cdd6980cf271bba138347b6bfd23785db6d6e","sha256":"489840a9accc2183e19556b65f433790fc5fe9fe8a15e56092967a848db28b94","sha512":"ad91cc271d01a04019b4610c0ebdd825fa4c901e1031953c8e09d7277e60608c2088dd68772859e94bb1fbf345f90d31c8a4431a9dc2b1c4b6cea927a4ae6cb4","ssdeep":"","tlshash":"2231b76bead22c438049a1c569f2e037c5560c817db0b83db58dc17f4a701e69d5e6d7","first_seen":"2023-06-10T01:18:34Z","last_seen":"2026-04-03T06:58:59.032837Z","times_seen":67,"resource_available":false,"data":null}},"time_used":821,"timings":{"blocked":324,"dns":1,"connect":163,"send":0,"wait":163,"receive":0,"ssl":168},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"asig-zgafp.campaign-view.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.zohostatic.com/campaigns/static8/images/viewinbrowserarw.png","fqdn":"img.zohostatic.com","domain":"zohostatic.com","tld":"com"},"ip":{"addr":"204.141.42.123","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asig-zgafp.campaign-view.com/ua/viewinbrowser?od=3z97b278a559f3a70dee03c6e1363809c78d11b91e5fc9937bfcf8fa02cc318bd3\u0026rd=1445b6ac28bb3e18\u0026sd=1445b6ac28bab746\u0026n=11699e4be8bf52c\u0026mrd=1445b6ac28bab734\u0026m=1","date":"2026-03-31T00:49:39.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohostatic.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 08 Apr 2025 00:00:00 GMT","end":"Fri, 08 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7E:09:D8:0C:89:4D:AB:D1:05:DE:41:AA:B3:D8:A5:A1:3D:41:D1:91","sha256":"F9:62:81:50:38:63:BE:0A:56:74:BD:4B:69:7C:94:FC:DB:09:6C:CE:26:61:25:EF:81:3B:D8:00:55:C9:C0:93"}}},"request":{"raw":"GET /campaigns/static8/images/viewinbrowserarw.png HTTP/1.1\r\nHost: img.zohostatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asig-zgafp.campaign-view.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: ZGS\r\nDate: Tue, 31 Mar 2026 00:49:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 1610\r\nLast-Modified: Mon, 30 Mar 2026 09:57:49 GMT\r\nConnection: keep-alive\r\nETag: \"69ca491d-64a\"\r\nExpires: Wed, 31 Mar 2027 00:49:39 GMT\r\nCache-Control: max-age=31536000\r\nX-Robots-Tag: noindex, nofollow, nosnippet, noarchive\r\nAccess-Control-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nStrict-Transport-Security: max-age=64072000; includeSubDomains; preload\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1610,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 71 x 23, 8-bit/color RGBA, non-interlaced","md5":"0b811a3726a6c0676cba01d9fbc7090c","sha1":"f46cdd6980cf271bba138347b6bfd23785db6d6e","sha256":"489840a9accc2183e19556b65f433790fc5fe9fe8a15e56092967a848db28b94","sha512":"ad91cc271d01a04019b4610c0ebdd825fa4c901e1031953c8e09d7277e60608c2088dd68772859e94bb1fbf345f90d31c8a4431a9dc2b1c4b6cea927a4ae6cb4","ssdeep":"","tlshash":"2231b76bead22c438049a1c569f2e037c5560c817db0b83db58dc17f4a701e69d5e6d7","first_seen":"2023-06-10T01:18:34Z","last_seen":"2026-04-03T06:58:59.032837Z","times_seen":67,"resource_available":false,"data":null}},"time_used":1006,"timings":{"blocked":425,"dns":34,"connect":151,"send":0,"wait":149,"receive":0,"ssl":243},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}