{"report_id":"63214d78-1f0f-44e3-a0af-7ac665d84c80","version":6,"status":"done","tags":[],"date":"2026-02-14T06:47:12Z","url":{"schema":"http","addr":"mail.pinkgroup.net","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":0,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"final":{"url":{"schema":"http","addr":"mail.pinkgroup.net/webmail/","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"title":"IceWarp WebClient","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mail.pinkgroup.net","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":0,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T06:47:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mail.pinkgroup.net","ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"domain_registered":"2005-12-15","domain_rank":0,"first_seen":"2026-02-13T03:18:12.752359Z","last_seen":"2026-02-13T03:18:12.752359Z","alert_count":56,"request_count":28,"received_data":692575,"sent_data":13886,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/scripts/jquery.placeholder.min.js","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5df780d4dfc401c884d49f183c52074","sha1":"2d27d04e41d5b5caef16503f39df3bbea9163412","sha256":"1c6e406b4e08539536d0b9cfa2e1144ad9c86f2732be4ec98cf91f913b35cb00","sha512":"23d17f87f4d2a9cc24a440bfe2813de348776a5295d304159c9986b0692c579cd0be520d1be65e2c7b18bb76321da45764673d2ac00135d8dd938abd615e8736","ssdeep":"","tlshash":"7331cf1cf591b3d71aebacd0a72fce05523251a3c6045a90b939c8681f79cc4c3369db","size":1646,"data":"","first_seen":"2023-03-07T12:21:53Z","last_seen":"2026-06-06T17:18:29.387603Z","times_seen":132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/scripts/jquery.js","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"introduction_type":"scriptElement","is_inline":false,"md5":"98118a72352970fadc5b921ba35ceb95","sha1":"daf7f3a8f9452951f9083cd328bbe90caa64fb7a","sha256":"6353974290c4db07d4afa8ce36b1e644bfad9494cdc7dd216ac2661221f39a9a","sha512":"042b6bd4f4927ab9753db6e9835330a907b4e8d85e2580516ea868d072662c84de7d080831847f290f74a737350d5f809c83273739b83c5d130fe3d2325e2c10","ssdeep":"1536:L4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sF5:LGsKXlI2p0WPSbDrstfaK","tlshash":"1593f8ddb2d1b06257bb30bd006f540ff236595a280d8850f129e8eabc74a4d9277f6d","size":94206,"data":"","first_seen":"2024-07-24T22:22:37Z","last_seen":"2026-06-06T17:18:29.37105Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/scripts/modernizr.js","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0afebec764af52a328e5d21ba02c23e","sha1":"fbbc214ca2b3417db44758c18d0d6d745b1a6c58","sha256":"b53ea39ca889610e3fda24eb76300c9e25e2e126407e87c00b0c8159d190edef","sha512":"5775a0ceb1d620210d03458341058c4f6fc95fdba6cda68059283a910ece404abc8a9d4590586a3895aacd2588c567790b86db6e180eae6fde8b631d52e32555","ssdeep":"384:rE+DuHWmbaeOGpZSVGJGdJeKYDRRtQWTGxH3hjzf5:r3DuOGpZS9e9D7tWxH3hjz5","tlshash":"0872e99d725272169397a0b9a1bf020ff13a9855a8084894e04dc9bcbd74dec437ff6e","size":16561,"data":"","first_seen":"2023-03-07T12:21:53Z","last_seen":"2026-06-06T17:18:29.372163Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/webmail/","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b37c52576fc1b8df0ac0ef5875d4a53","sha1":"19ec2f6a7fe03fef63aab61408ed7581f6e99326","sha256":"8d1d556542d92d2805ec27f15bfb8d949b9670651aa404e87497f1202382c786","sha512":"6573d05be9dda31d2fc179c9a1d0609ef1ba1e9900236ce847c3d91b2dc586a2b718415236da6b4bfd1ceb11b6c9573f6fbae82646c378581fcddba9cb26f5d9","ssdeep":"","tlshash":"15017d34e30cde8a30b617242e4e98721abc983111f09ed6ba265e2d3f6e8500349116","size":658,"data":"","first_seen":"2024-07-24T22:22:37Z","last_seen":"2026-06-06T17:18:29.397697Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/webmail/","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5230b597ea743d78597a261af056c288","sha1":"e3368ae4e12b3d936db53453a34b295a1b0e5b9b","sha256":"2c938e35d74db4830f55f70bb050135f22f83f6ddfdf39f15f3e05c587a69312","sha512":"d2899093c6925c96066e0b5ec129416d4a9c27f2d4e515bceff30809b05a7c41057c24823f9240219eec98ea7730f1fb46a2ec817a02c518935705cccf2113c8","ssdeep":"","tlshash":"b9d0ebcb39404a182bda217b25a34e18a47a901c94a02c624caea8a40930ac4463db3c","size":278,"data":"","first_seen":"2023-03-07T01:18:30Z","last_seen":"2026-06-08T12:56:05.226331Z","times_seen":4916,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/scripts/rsa.js","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cd3f5798960bbc1cdc48b748a9c19e5","sha1":"b42023d612b5dcf3f4dc5e1d24c29e2db8b13911","sha256":"514f7c6ebd56ce5b0a7a2b1c764440d497d34028684c824b2cc41c693a388a42","sha512":"c696fe1d221e52a4dc1c2df066efdb5d86f187c0714fa714e3edad23f1af52fbcb78e188f4acd52f9ec3724bdfe25b5079f22b158ea3ae4c48ffd18ba5d21c3a","ssdeep":"384:BrnpTeb7XeZ9rjm1kwVkneLoKXcUOzggeGOck8rfQ89:BLpTUsVjmef6bX2MgKWN9","tlshash":"5e52969d77eb712483ab7bb9cf4f4049dca4c8283b4a902cb47dcae6755042a813ed75","size":13846,"data":"","first_seen":"2023-03-07T12:21:53Z","last_seen":"2026-06-06T17:18:29.390077Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/scripts/login_pc.js","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"introduction_type":"scriptElement","is_inline":false,"md5":"85796976c4534283b8b1c1fca74db095","sha1":"28e95226773eea2bd50cef299115ded89f525078","sha256":"8848eff3ef5c1f5fc832f81971460b01d356272136c7899308e97b97bf207e73","sha512":"33e6232acfdd1f026b74c56890faaffd8460616b1d21557e191a5f05d046e5ab331930c22f2827f7eb5cbcb3e78ae532b55b90af51aa36e316605b1459359044","ssdeep":"768:vihGUkLRpxhUamKSjfuMz4FmDWQE9czd+:vihGxRpxbmnjfuMz4FhQGcp+","tlshash":"2ed27315b61c5b18e1f593b4613b4d7accfcc02288b49aedfcf474298660ac152bbe6d","size":29255,"data":"","first_seen":"2024-07-24T22:22:37Z","last_seen":"2026-06-06T17:18:29.385174Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"mail.pinkgroup.net/webmail/client/skins/default/login/images/new/help/outlook_sync1.jpg","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.952Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /webmail/client/skins/default/login/images/new/help/outlook_sync1.jpg HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/webmail/\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nExpires: Sat, 14 Feb 2036 06:46:50 GMT\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:50 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 56461\r\nLast-Modified: Thu, 24 Oct 2013 17:58:48 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56461,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 601x416, components 3","md5":"a339b915e28715e9e3cc6d5287936ec7","sha1":"16519636f92ad83d3d75eefbffe81d314d120e92","sha256":"15eee450a0c89da8cdb2ec76e778857cd528c32d99708cd7c1fa785967681de7","sha512":"f8b70adc2ffe2cbe5154165ff5308d3887379a86bb2b82625f856978f22b81bbbe287ec6bf63d302e6931faad62b55ee3aeb68e7ff35d3f51a7de95861b3b2ec","ssdeep":"1536:Br4EVxxbWWWWcO+P96rFegBktFJS0y9MtEjFoWS:Hx9WWWWW96xBn0yytJ","tlshash":"2f43d09c83045aede9edc2bcab7584209834ec7c9d4f4d97a3b5e65a38e915740e203f","first_seen":"2024-07-24T22:22:38Z","last_seen":"2026-06-06T17:18:29.393354Z","times_seen":64,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.pinkgroup.net/webmail/","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T06:46:50.476Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /webmail/ HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":194,"dns":0,"connect":62,"send":0,"wait":0,"receive":0,"ssl":135},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/webmail/","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T06:46:50.887Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /webmail/ HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: close\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:49 GMT\r\nX-UA-Compatible: IE=edge\r\nSet-Cookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nContent-type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]}],"data":{"size":76677,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (54648), with CRLF line terminators","md5":"ce89fb18cf126525092b397359d6821c","sha1":"9480db05940b169c68bafd5b2cd68522667fd044","sha256":"858f2a0200eb20580fedc3e902349160f2617dc40cf942cc0ba18f9d0e02cd5a","sha512":"058da2bf17dd9152419bd7331e2ce9aca5efe84524a791e478037acd9c1ff989e339d389ac40012faa4bae237daa39894091df47efc5d77d97b0779d72fb5916","ssdeep":"768:FcsXdccY4Ud/8RlQ062/k0TZAJa0WnAoa6LV7IDA9kE+GlAy5CtT9WtG+B3uOeLq:bdccY4UGrZyupH7","tlshash":"34737630d445286fb05f45a9e079e70e20bb8355ce434f96a7be32b2b7d2ed464b314a","first_seen":"2026-02-14T06:47:13.920465Z","last_seen":"2026-02-14T06:47:13.920465Z","times_seen":1,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":393,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/scripts/jquery.placeholder.min.js","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.175Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /-.._._.--.._1413558656/webmail/client/skins/default/login/scripts/jquery.placeholder.min.js HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/webmail/\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nExpires: Sat, 14 Feb 2036 06:46:49 GMT\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:49 GMT\r\nContent-Type: application/x-javascript\r\nContent-Encoding: gzip\r\nContent-Length: 688\r\nLast-Modified: Fri, 14 Feb 2014 16:09:44 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1646,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1491)","md5":"f5df780d4dfc401c884d49f183c52074","sha1":"2d27d04e41d5b5caef16503f39df3bbea9163412","sha256":"1c6e406b4e08539536d0b9cfa2e1144ad9c86f2732be4ec98cf91f913b35cb00","sha512":"23d17f87f4d2a9cc24a440bfe2813de348776a5295d304159c9986b0692c579cd0be520d1be65e2c7b18bb76321da45764673d2ac00135d8dd938abd615e8736","ssdeep":"","tlshash":"7331cf1cf591b3d71aebacd0a72fce05523251a3c6045a90b939c8681f79cc4c3369db","first_seen":"2023-03-07T12:21:53Z","last_seen":"2026-06-06T17:18:29.387603Z","times_seen":132,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":49,"dns":1,"connect":61,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/webmail/server/help.html?id=help_win_2013\u0026l=en","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.824Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /webmail/server/help.html?id=help_win_2013\u0026l=en HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/webmail/\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: close\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:50 GMT\r\nContent-type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1047,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with CRLF, LF line terminators","md5":"9e8f0cee813ef11a9e1ece2d76691980","sha1":"fa5b3e2c8c2f03e49c06e3b960a88016980f8bf2","sha256":"ca8056e8976585d4d06fb9555dde5dcb4bc56c33e85ee9f5f4316cd5b618d6cf","sha512":"d49277b93465816f35d55ccfa5d861b23ab2ba7ebf0ce49b9b65e3e941d88b663a4616d67db63874351a93f25d8a2da1c486505e9ab1a30802022c08f60bb061","ssdeep":"","tlshash":"361197398188953ba57302d0647b67bea2804651df33e61827f4d35353ced02efa2452","first_seen":"2025-08-17T13:43:41.673786Z","last_seen":"2026-06-06T17:18:29.365647Z","times_seen":56,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/fonts/lucida/lucida-grande-1361501376-webfont.woff","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.466Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /-.._._.--.._1413558656/webmail/client/skins/default/login/fonts/lucida/lucida-grande-1361501376-webfont.woff HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/styles/pc.css\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nExpires: Sat, 14 Feb 2036 06:46:50 GMT\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:50 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 60264\r\nLast-Modified: Tue, 15 Oct 2013 16:07:52 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60264,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format, TrueType, length 60264, version 1.0","md5":"7d4699a8f44a08aefa48ea2c4eaec282","sha1":"efa409bb7b9ef802a41645109bdc352b16a24ad7","sha256":"a4c2baed32294ddd81bcb57b6d9db2f980e680bebcdd136fb58d9891dc49695e","sha512":"319b0be307dc996a2a2302cd16bd39a5253bb6eca93e69111b8a7c0bae604c7575035cca521d41063e22287f4a9de4522e5c3333b72b80146836bb836020f8a0","ssdeep":"1536:6n9vqNb6nT1DFSNqrhd888EQ6k1PwcCo8PG:6n9r9Frrhd83FhwcjT","tlshash":"d04301b6145a10e2e6b36977f0a4f88c5e615105db6f682712b880fbebdd5b7f402c0e","first_seen":"2024-07-24T22:22:37Z","last_seen":"2026-06-06T17:18:29.364685Z","times_seen":126,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/webmail/client/skins/default/images/login_logo.png","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.674Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /webmail/client/skins/default/images/login_logo.png HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/webmail/\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nExpires: Sat, 14 Feb 2036 06:46:50 GMT\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:50 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 3808\r\nLast-Modified: Mon, 21 Oct 2013 12:16:18 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3808,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PNG image data, 160 x 43, 8-bit/color RGB, non-interlaced","md5":"85c081dd9cca2b5e07fe649d54ece140","sha1":"01c293dba992c8b149b51a5c6a7bf7ffbf84f6af","sha256":"981bc5ac1659de41dd9f679b5910b2d59dea44fe3b574beab2d2b42a5b8acc16","sha512":"c33f6a67526771f499085d4bd91eee5e5e0e4bc5d51250d3c643ea9dc7984645baf661c018e80d123eb420e813ccfff8bf357c62e558bdccb0a8eb53125e1c01","ssdeep":"","tlshash":"d8717de6e0d41dcc62a25e5f8f495522eaee03cb8881d67c240c3dc2738178a9c64489","first_seen":"2024-07-24T22:22:38Z","last_seen":"2026-06-06T17:18:29.373425Z","times_seen":116,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/webmail/server/help.html?id=help_win_desktop\u0026l=en","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.815Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /webmail/server/help.html?id=help_win_desktop\u0026l=en HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/webmail/\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: close\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:50 GMT\r\nContent-type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1131,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (307), with CRLF line terminators","md5":"f7eabca87f7009de5387e6208acdfb5a","sha1":"a3ed60d23440f72c323c32a58ce28744813e750d","sha256":"8e8f0182cfea1c722f3c839405c39e3975f5c740737a2b1936d801e3ce737b40","sha512":"727854a5807f1becc804b6889ca977b9383366dcbb5d8f3b0e58042a3fd978f975d8e788086df60db41d38f7042537990b42a59868b016a5876e60078f707f46","ssdeep":"","tlshash":"00218c3e1289d9379d3342d8a57bb77fa1819a16db33d31422f0635753c5c02eea6843","first_seen":"2025-08-17T13:43:41.702136Z","last_seen":"2026-06-06T17:18:29.369425Z","times_seen":35,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/styles/pc.css","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.169Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /-.._._.--.._1413558656/webmail/client/skins/default/login/styles/pc.css HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/webmail/\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nExpires: Sat, 14 Feb 2036 06:46:49 GMT\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:49 GMT\r\nContent-Type: text/css\r\nContent-Length: 30932\r\nLast-Modified: Mon, 24 Feb 2014 15:01:30 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30932,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ff5142ab819c63beffa4040bdfc19ca5","sha1":"8af60e16913be2c4b7fa62363e08f2c7c84a3a14","sha256":"962b386d19d654226667faee1edcc797d3b13889e4b8a0c36bcd065121cc8c96","sha512":"cda4c3c0d78658d593b34f55c533936653b98dd4f6fce94e67c8cfb7d663c53e24342cd0ccee1d5452b79a67dff94e5737881cdd782533d57e24da754f28b07a","ssdeep":"768:fr4Q06TWu0IONNwgYJfHp+j5BXSiFYGel8m8Qm8b8zoaoncZ9gT0oSYGFYcBzjTZ:fkTOQE/gg6YojN","tlshash":"9cd2a639eeaa714ab3275258bb301f210f144843ee475ffdfaf87964c2854a829713d9","first_seen":"2024-07-24T22:22:37Z","last_seen":"2026-06-06T17:18:29.363447Z","times_seen":62,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":37,"dns":1,"connect":47,"send":0,"wait":48,"receive":142,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/images/new/source.png","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.677Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /-.._._.--.._1413558656/webmail/client/skins/default/login/images/new/source.png HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/styles/pc.css\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nExpires: Sat, 14 Feb 2036 06:46:50 GMT\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:50 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 35603\r\nLast-Modified: Mon, 11 Nov 2013 18:00:56 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35603,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PNG image data, 1040 x 834, 8-bit/color RGBA, non-interlaced","md5":"c807d99e6886668aa24ab8f96f0ecc5e","sha1":"203d34a40b53940d70b5696d4b01dd01e3a20465","sha256":"4b00ef3dc1f1314826e0dc42f48d5f204106631d090ee2657ff6f532c9e9eedb","sha512":"52050a545a8fbdf065a4539d827b9d12bf566472eec7455158a17f721ce4a7e88f096d169c743a1b13707718428de8bebffc6de6c63b6b0e0ac051aebe3e2849","ssdeep":"768:RnUdu8TTLWM2guatX0QR3/U3pN9VeD8hlwYM:R47WM2guatXo3p84hlwN","tlshash":"4af2e12a4205d567c628973418d1133eb8f5457bd1a3f0a8bbb85de82f7e0b0a17763b","first_seen":"2024-07-24T22:22:38Z","last_seen":"2026-06-06T17:18:29.381211Z","times_seen":124,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/webmail/client/skins/default/login/images/new/help/outlook_sync2.jpg","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.954Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /webmail/client/skins/default/login/images/new/help/outlook_sync2.jpg HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/webmail/\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nExpires: Sat, 14 Feb 2036 06:46:50 GMT\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:50 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 36061\r\nLast-Modified: Thu, 24 Oct 2013 17:58:48 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36061,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 601x181, components 3","md5":"fcd0ec70f7e793fd3fcd18f387c09aa0","sha1":"2715541f84953145c808b8e9e84d2129b9c95c25","sha256":"fc9b803e6d267e9934956f16109dbf669c9750a1aed47eb6281e5d7cdcf69f01","sha512":"9ef2d66020ffff3d30ea0ad54ad63d95d9dd3d13e2833bbde8dd46abd325103c75d619d6912d1418db61b2a788af24dac3c7273aa3395f11b5a172b61562d58e","ssdeep":"768:B70Tbey8aB2w/mLrMucIS/Qdq6HX1HC+qKNAUrshE6sNoCIUzA9EWbcvjPa+2GFu:B70vey/t/mkuk/8li+jeUrsu7oyWIa8k","tlshash":"70f2cf641d582d25fcd4a570a1e6eb6209c6c8f83efe5d1e086de500b4a8352feec747","first_seen":"2024-07-24T22:22:38Z","last_seen":"2026-06-06T17:18:29.388395Z","times_seen":64,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/images/new/white2.png","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.682Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /-.._._.--.._1413558656/webmail/client/skins/default/login/images/new/white2.png HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/styles/pc.css\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nExpires: Sat, 14 Feb 2036 06:46:50 GMT\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:50 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 181\r\nLast-Modified: Tue, 15 Oct 2013 16:07:52 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":181,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"8445f302d8535cec2f40ddec220a0190","sha1":"24235bfd516dc7b5d8f2802ec0eaa1ca06719a33","sha256":"b5ae05fd107bb952f2ccf4f40f93a9f4e2024482e15f9671a9cd0a7ee3ca3679","sha512":"8e8e846962cdd27b3526b28cf854f266e32caa8b99fea4c4f89dc48daa2f462f9247f90ddb2db3df531e3276ce00f53eed71f4dfa78803d40aaa69f23ed1d751","ssdeep":"","tlshash":"8ac0c0c3f3888c6ccb15982301110a10e076078440120f0c09088045138a8c4402cf77","first_seen":"2024-07-24T22:22:38Z","last_seen":"2026-06-06T17:18:29.382436Z","times_seen":126,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/webmail/client/skins/default/login/images/new/help/desk_setup_account.jpg","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.958Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /webmail/client/skins/default/login/images/new/help/desk_setup_account.jpg HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/webmail/\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nExpires: Sat, 14 Feb 2036 06:46:50 GMT\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:50 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 72313\r\nLast-Modified: Thu, 24 Oct 2013 17:58:48 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72313,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 630x445, components 3","md5":"fd03a6da295682dd4e72c8938eae010e","sha1":"0496130889e40b8cb23c03c6ada610a69cfb6049","sha256":"2258b5e63e6524518acaaf4d84a482cf05cf10392329bb82613b7aaf06bf4bce","sha512":"568164a7929b88a93f944ffcc694a4dbb829b86515c539839f4996adb9132b42a4134697b3d4af6a67e20d9c79e72c73a1e211badd6b7491ad0d68e7c056842b","ssdeep":"1536:fWA7ZXfAlFJGtPyyyyyyyyX2Gojw8qpcdddddddtlitQdL457skcJ:JZXfAt8PyyyyyyyyX8cTPtQr9J","tlshash":"7c63bf39ee424c69ebd856f0979060380458d9fadd6fd9bd0e76ce1f2045c08bab90ed","first_seen":"2024-07-24T22:22:38Z","last_seen":"2026-06-06T17:18:29.384101Z","times_seen":117,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":51,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/scripts/jquery.js","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.172Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /-.._._.--.._1413558656/webmail/client/skins/default/login/scripts/jquery.js HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/webmail/\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nExpires: Sat, 14 Feb 2036 06:46:49 GMT\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:49 GMT\r\nContent-Type: application/x-javascript\r\nContent-Encoding: gzip\r\nContent-Length: 33292\r\nLast-Modified: Wed, 16 Oct 2013 12:38:02 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":94206,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32072)","md5":"98118a72352970fadc5b921ba35ceb95","sha1":"daf7f3a8f9452951f9083cd328bbe90caa64fb7a","sha256":"6353974290c4db07d4afa8ce36b1e644bfad9494cdc7dd216ac2661221f39a9a","sha512":"042b6bd4f4927ab9753db6e9835330a907b4e8d85e2580516ea868d072662c84de7d080831847f290f74a737350d5f809c83273739b83c5d130fe3d2325e2c10","ssdeep":"1536:L4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sF5:LGsKXlI2p0WPSbDrstfaK","tlshash":"1593f8ddb2d1b06257bb30bd006f540ff236595a280d8850f129e8eabc74a4d9277f6d","first_seen":"2024-07-24T22:22:37Z","last_seen":"2026-06-06T17:18:29.37105Z","times_seen":62,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":38,"dns":1,"connect":49,"send":0,"wait":58,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/scripts/rsa.js","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.176Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /-.._._.--.._1413558656/webmail/client/skins/default/login/scripts/rsa.js HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/webmail/\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nExpires: Sat, 14 Feb 2036 06:46:49 GMT\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:49 GMT\r\nContent-Type: application/x-javascript\r\nContent-Encoding: gzip\r\nContent-Length: 4350\r\nLast-Modified: Mon, 05 Mar 2012 19:34:28 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13846,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with CRLF line terminators","md5":"0cd3f5798960bbc1cdc48b748a9c19e5","sha1":"b42023d612b5dcf3f4dc5e1d24c29e2db8b13911","sha256":"514f7c6ebd56ce5b0a7a2b1c764440d497d34028684c824b2cc41c693a388a42","sha512":"c696fe1d221e52a4dc1c2df066efdb5d86f187c0714fa714e3edad23f1af52fbcb78e188f4acd52f9ec3724bdfe25b5079f22b158ea3ae4c48ffd18ba5d21c3a","ssdeep":"384:BrnpTeb7XeZ9rjm1kwVkneLoKXcUOzggeGOck8rfQ89:BLpTUsVjmef6bX2MgKWN9","tlshash":"5e52969d77eb712483ab7bb9cf4f4049dca4c8283b4a902cb47dcae6755042a813ed75","first_seen":"2023-03-07T12:21:53Z","last_seen":"2026-06-06T17:18:29.390077Z","times_seen":143,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":50,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/webmail/client/skins/default/login/images/new/banner/outlook.jpg","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.429Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /webmail/client/skins/default/login/images/new/banner/outlook.jpg HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/webmail/\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nExpires: Sat, 14 Feb 2036 06:46:50 GMT\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:50 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 67461\r\nLast-Modified: Mon, 18 Nov 2013 16:10:30 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":67461,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 558x458, components 3","md5":"e619c305eacb1c296f4910631f1efc71","sha1":"2ed60522d91a6d1a308ccd0fafe7e395db643072","sha256":"01abdb867166ad45acf3aa964a0edaf3c1048d2606f14ebeece6b100f01f056b","sha512":"9d1738817ede40b98d761825445f0702d232ac442a853eb574dd8580e2f668514385b2c2005031dd2c382fc1dc0f0ee397cb58169ba3373b4712466a8f16b3d7","ssdeep":"1536:BBTGy21pvTug3o9dDF4LMhi6EwnAonIETtuC26D90RTUqJ:HTGL1pruX9XLifmFnIWuCDyTl","tlshash":"fd63028953427d45f8f6b3b21ffbe78a105b8d6582af61d2e28fcb3524902691cdcc49","first_seen":"2024-10-12T13:57:36.458377Z","last_seen":"2026-06-06T17:18:29.386085Z","times_seen":19,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/images/new/white.png","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.692Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /-.._._.--.._1413558656/webmail/client/skins/default/login/images/new/white.png HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/styles/pc.css\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nExpires: Sat, 14 Feb 2036 06:46:50 GMT\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:50 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 181\r\nLast-Modified: Tue, 15 Oct 2013 16:07:52 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":181,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"71060d9d2f036d7d8ed7b0d8d190608f","sha1":"8329f66b6a67715140247a049deb534434973cec","sha256":"11c54c55a5a78cad7462eec636d851e19b7e262f9382126c77dbadc42947759b","sha512":"5ebdfa90fa8ca815d9cd4ec7c735700beae6a576f20954253e8bc1bd8ee8053cf38fdb0c9346ad21a04c5224f5c0a33a399eebc7b7b32ee402c1fdb282c361c8","ssdeep":"","tlshash":"90c080c3b3d55c7dc7d59432465e0510d076078582151f1c151991555585dc8416dab7","first_seen":"2024-07-24T22:22:38Z","last_seen":"2026-06-06T17:18:29.386837Z","times_seen":116,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/webmail/client/skins/default/login/images/new/help/outlook_2013_server_settings.jpg","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.956Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /webmail/client/skins/default/login/images/new/help/outlook_2013_server_settings.jpg HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/webmail/\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nExpires: Sat, 14 Feb 2036 06:46:50 GMT\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:50 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 69196\r\nLast-Modified: Thu, 24 Oct 2013 17:58:48 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":69196,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 601x422, components 3","md5":"8964636473cbe1a366e0863f28683ece","sha1":"f79f8372f50de1628a94b229cf38128b729418bb","sha256":"ada9a588a9da36395037812855f82787a039743202ef9523444d82efb3d35f61","sha512":"78a08d5ed8bda203d4a728281495f5c60bc4217e60e514de870c984d55c151d2d65a73bc540344cd6dc1d98731bf9c2c3cf03eb62ad17f0c19616b4c036e106c","ssdeep":"1536:f+jkJZVlb5Z9pigP/+hfL8Occ6lGPnS+ReTXx1JvXFh9Z:3ZVZnP//se2nLIxDn","tlshash":"e863e1252fb2003cc11d4d7306d6b77c360e48eb6adeff36aa886d436c600917a7d986","first_seen":"2024-07-24T22:22:38Z","last_seen":"2026-06-06T17:18:29.394816Z","times_seen":117,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/scripts/login_pc.js","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.178Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /-.._._.--.._1413558656/webmail/client/skins/default/login/scripts/login_pc.js HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/webmail/\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nExpires: Sat, 14 Feb 2036 06:46:49 GMT\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:49 GMT\r\nContent-Type: application/x-javascript\r\nContent-Encoding: gzip\r\nContent-Length: 4820\r\nLast-Modified: Wed, 26 Feb 2014 11:25:50 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29255,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"85796976c4534283b8b1c1fca74db095","sha1":"28e95226773eea2bd50cef299115ded89f525078","sha256":"8848eff3ef5c1f5fc832f81971460b01d356272136c7899308e97b97bf207e73","sha512":"33e6232acfdd1f026b74c56890faaffd8460616b1d21557e191a5f05d046e5ab331930c22f2827f7eb5cbcb3e78ae532b55b90af51aa36e316605b1459359044","ssdeep":"768:vihGUkLRpxhUamKSjfuMz4FmDWQE9czd+:vihGxRpxbmnjfuMz4FhQGcp+","tlshash":"2ed27315b61c5b18e1f593b4613b4d7accfcc02288b49aedfcf474298660ac152bbe6d","first_seen":"2024-07-24T22:22:37Z","last_seen":"2026-06-06T17:18:29.385174Z","times_seen":62,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":108,"dns":0,"connect":0,"send":0,"wait":63,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/images/new/more_sh_bot.png","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.695Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /-.._._.--.._1413558656/webmail/client/skins/default/login/images/new/more_sh_bot.png HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/styles/pc.css\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nExpires: Sat, 14 Feb 2036 06:46:50 GMT\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:50 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 243\r\nLast-Modified: Tue, 15 Oct 2013 16:07:52 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":243,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PNG image data, 25 x 34, 8-bit/color RGBA, non-interlaced","md5":"c2863a3bab04882311b318db53da11c1","sha1":"0c49f5253bc94ec347cd8927e206a6181fdba008","sha256":"bc04ca8225f39db56b5a3cb404837b76a4d2aedb58e8f89a8960066e511b313d","sha512":"98488d72f4861dbf27c3f76fd5e293c4b8d1a308c624566a75a30f8b03da1f252b58da07f28d58fb58cd15b831709c7de2f238a15e15c078a6dff680e23cb7d0","ssdeep":"","tlshash":"e7d023c3b3d48cf6d893f8b3a7a500311a2b0f42f1401a18a244c0c61359ccd006c7af","first_seen":"2024-07-24T22:22:38Z","last_seen":"2026-06-06T17:18:29.366687Z","times_seen":117,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/images/new/more_sh_top.png","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.694Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /-.._._.--.._1413558656/webmail/client/skins/default/login/images/new/more_sh_top.png HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/styles/pc.css\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nExpires: Sat, 14 Feb 2036 06:46:50 GMT\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:50 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 253\r\nLast-Modified: Tue, 15 Oct 2013 16:07:52 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":253,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PNG image data, 25 x 34, 8-bit/color RGBA, non-interlaced","md5":"083f9be8b95a60235bf0b2e677ed1ac5","sha1":"3a3848bd76934b0196f1a8779cb5401a62d33da7","sha256":"9cf8e58fbb0410cff0b600db46bd8951bc80a1de203fd4c1015c3a154123fdaa","sha512":"8b1253a9412ded36447d7784e675a5feec4c065466558e3ed779edf62572d09eb7a1ecbe6032361f6e6e439c44258ce09d54045a720d8bfc3af17d080fb78643","ssdeep":"","tlshash":"39d097c2a3b64d9ce491ae339d2d1061b07f0cc073591618b808818212b4cec0d39769","first_seen":"2024-07-24T22:22:38Z","last_seen":"2026-06-06T17:18:29.374411Z","times_seen":117,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/webmail/favicon.gif","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.806Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /webmail/favicon.gif HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/webmail/\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nExpires: Sat, 14 Feb 2036 06:46:50 GMT\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:50 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1210\r\nLast-Modified: Fri, 17 Oct 2014 10:46:02 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1210,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"b5364b43ca6dcf5c34360b45434a04ac","sha1":"be7aec394d933586a04f8e5ba9eae55ec97269af","sha256":"0873a64ea11a66d984ce6a203b4e0f9692abdf5affec0f3954439e0be5ffb1ed","sha512":"bd1a1ef96697fe974523ba1a62e99858da6c905313fd6f8d98273b855e3d0750e731a3605a7c5433e5cace3a175c79ed43501c51247a96a73a21d280722b9f8d","ssdeep":"","tlshash":"6521770ddbc0fcc0d04c99b958e7742b1553904086d0e6e9ac9de4be1a5e5b201065fb","first_seen":"2024-07-24T22:22:38Z","last_seen":"2026-06-06T17:18:29.389149Z","times_seen":125,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/webmail/server/help.html?id=help_win_osync\u0026l=en","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.819Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /webmail/server/help.html?id=help_win_osync\u0026l=en HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/webmail/\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: close\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:50 GMT\r\nContent-type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1226,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"29eeaee414d9a7020241b636e76b43b4","sha1":"c8053eb0eda723269393c632355ec11f4c0e4887","sha256":"835331b3dfb387b37491c24b5dab3147fb10c2165b73573e3c5c431e0c5ebf1e","sha512":"85008d06f815bceae46b43da6dbe897dec1f4c9a69bd47a9ffd71582d145c5859fce6fda74ee7ffb0e83dc2b4c7ab29ec6b6f4e49b06bffce7a6a468298f4a81","ssdeep":"","tlshash":"4421acbc0145a2371a3343c4513a57baa6c38255cb2bd2153af9631787c6c03dea6083","first_seen":"2025-08-17T13:43:41.694978Z","last_seen":"2026-06-06T17:18:29.375286Z","times_seen":35,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.pinkgroup.net/","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T06:46:50.124Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":0,"dns":52,"connect":49,"send":0,"wait":0,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/styles/jquery.placeholder.min.css","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.171Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /-.._._.--.._1413558656/webmail/client/skins/default/login/styles/jquery.placeholder.min.css HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/webmail/\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nExpires: Sat, 14 Feb 2036 06:46:49 GMT\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:49 GMT\r\nContent-Type: text/css\r\nContent-Length: 208\r\nLast-Modified: Fri, 14 Feb 2014 16:09:44 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":208,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f5a5c34e3a044b3b8cc924e868f94694","sha1":"db2b80a79725140d0a1c56356af372c788d6329e","sha256":"f73b568c9ad0eab24fb6d1153b90df6205b39a1da5c2d5d808974ad9ca92e3a3","sha512":"54bca433576822b74ce2b107c8062f933b540c607d22a1de7c33156f4c437454b7de9c61f27a84552bff03cf12a467a63179e2c461668f802b5b51e99561bb6d","ssdeep":"","tlshash":"82d0220c800c72d685bbc3467081ee01e82822c7ac8a8b72b07460182c41c41b036280","first_seen":"2023-11-05T00:20:19Z","last_seen":"2026-06-06T17:18:29.380119Z","times_seen":127,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":36,"dns":1,"connect":48,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/scripts/modernizr.js","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.173Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /-.._._.--.._1413558656/webmail/client/skins/default/login/scripts/modernizr.js HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/webmail/\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nExpires: Sat, 14 Feb 2036 06:46:49 GMT\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:49 GMT\r\nContent-Type: application/x-javascript\r\nContent-Encoding: gzip\r\nContent-Length: 6559\r\nLast-Modified: Wed, 04 Jul 2012 13:29:18 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16561,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (15898), with CRLF line terminators","md5":"f0afebec764af52a328e5d21ba02c23e","sha1":"fbbc214ca2b3417db44758c18d0d6d745b1a6c58","sha256":"b53ea39ca889610e3fda24eb76300c9e25e2e126407e87c00b0c8159d190edef","sha512":"5775a0ceb1d620210d03458341058c4f6fc95fdba6cda68059283a910ece404abc8a9d4590586a3895aacd2588c567790b86db6e180eae6fde8b631d52e32555","ssdeep":"384:rE+DuHWmbaeOGpZSVGJGdJeKYDRRtQWTGxH3hjzf5:r3DuOGpZS9e9D7tWxH3hjz5","tlshash":"0872e99d725272169397a0b9a1bf020ff13a9855a8084894e04dc9bcbd74dec437ff6e","first_seen":"2023-03-07T12:21:53Z","last_seen":"2026-06-06T17:18:29.372163Z","times_seen":140,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":46,"dns":1,"connect":59,"send":0,"wait":61,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T06:46:50.373Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Document Moved\r\nExpires: Sat, 14 Feb 2036 06:46:49 GMT\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:49 GMT\r\nLocation: /webmail/\r\nContent-Type: text/html\r\nContent-Length: 612\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Document Moved","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":41,"dns":1,"connect":49,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/images/new/source_uni.png","fqdn":"mail.pinkgroup.net","domain":"pinkgroup.net","tld":"net"},"ip":{"addr":"194.106.162.39","port":80,"asn":6700,"as":"BeotelNet-ISP d.o.o","country":"Serbia","country_code":"RS"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.pinkgroup.net/webmail/","date":"2026-02-14T06:46:51.683Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /-.._._.--.._1413558656/webmail/client/skins/default/login/images/new/source_uni.png HTTP/1.1\r\nHost: mail.pinkgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.pinkgroup.net/-.._._.--.._1413558656/webmail/client/skins/default/login/styles/pc.css\r\nCookie: PHPSESSID_BASIC=a8c6737581a7bf5eb8b4240ddfbc69e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nExpires: Sat, 14 Feb 2036 06:46:50 GMT\r\nServer: IceWarp/11.0.1.3\r\nDate: Sat, 14 Feb 2026 06:46:50 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 16830\r\nLast-Modified: Fri, 06 Dec 2013 13:54:46 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16830,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PNG image data, 804 x 496, 8-bit/color RGBA, non-interlaced","md5":"997adbd9638d3452b567009cafcc466e","sha1":"e697def7ebf0f320f258d2ddd428eb951050405a","sha256":"eb37ea38cdd66c50c3ca4a5793351c66ff8a6008cd7e38d2608bfd3ebf1362f8","sha512":"f75b0a08bfa4917353b0abf1d9fa29d7e7170d45529d7f182a7ceb61d2086bc2c860d317d5d8f92478f131cd8cb490602c214bb1d592a33576441cca1e8ef6e9","ssdeep":"384:l3M6I5qrijdwZsfLooByLWxlNYt4DpYZ/5eee+OtIHcfWH:lch5qrijdwZmLIWxlNG4DpYZ/52+qOH","tlshash":"61728eb792814c63e9f77b1badda8b95487e83c0d2e69258fb9c875c43d54099cceb00","first_seen":"2024-07-24T22:22:38Z","last_seen":"2026-06-06T17:18:29.383234Z","times_seen":124,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mail.pinkgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"mail.pinkgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}