{"report_id":"75123b9c-0fa9-4faa-b67b-d49f19c1a567","version":0,"status":"done","tags":[],"date":"2026-10-07T12:27:49Z","url":{"schema":"http","addr":"xfinity.eventivite.link/","fqdn":"xfinity.eventivite.link","domain":"eventivite.link","tld":"link"},"ip":{"addr":"192.227.154.93","port":0,"asn":36352,"as":"HostPapa","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"xfinity.eventivite.link/","fqdn":"xfinity.eventivite.link","domain":"eventivite.link","tld":"link"},"title":"Sign in | Xfinity","dom":{"size":21005,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"af08400147185b190749845b812fca3f","sha1":"bf9cafdedd414daaeeeda1605330be43a20e7d5a","sha256":"5849ed2a2731390bf8ccd51adaf3bf27f90928f7e6e2fa4dd99a05cdb79c022b","sha512":"005d004e8a26154a2590de873128b5a2c4eb880a25b5ef34f05db7aec48768a1faad10466d7ca1cf6e5afb17dcb1d37b4275524ae2f303a9d548e695b9090263","ssdeep":"192:dn+D8TxcMYUf1q6yfQ9IHeIQzJFG1DFP2XUAZmilazJEXupyJWtOCsUgcszwuCS8:dn+D8TeDOXsOSsz1CFfuFsjV5sLrsP","tlshash":"6b92635a71f710565d53a1b86beb97053e22c003e50ade283e9c6688cf96bc4ec633dd","dom_hash":"domhashc7e852dd31f91b1508daeec34a024d4c","first_seen":"2026-10-07T12:23:06.546009Z","last_seen":"2026-10-07T12:27:53.283317Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xfinity.eventivite.link/","fqdn":"xfinity.eventivite.link","domain":"eventivite.link","tld":"link"},"ip":{"addr":"192.227.154.93","port":0,"asn":36352,"as":"HostPapa","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T12:27:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"xfinity.eventivite.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"xfinity.eventivite.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"xfinity.eventivite.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"xfinity.eventivite.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xfinity.eventivite.link","ip":{"addr":"192.227.154.93","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"domain_registered":"2026-10-05","domain_rank":0,"first_seen":"2026-10-07T12:23:02.132365Z","last_seen":"2026-10-07T12:23:02.132365Z","alert_count":20,"request_count":5,"received_data":29131,"sent_data":2794,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xfinity.eventivite.link/","fqdn":"xfinity.eventivite.link","domain":"eventivite.link","tld":"link"},"ip":{"addr":"192.227.154.93","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5792f2d823d5e061fe8287db3ee89927","sha1":"2ba29d4945a6b578273dc612d43325f532d9c8bf","sha256":"95028e976327dd542443972d0c3f88d1d9af61f0d3a1eea9f6c647b8484500af","sha512":"c3353d56fd262193a57d5fe531898a84c97d04d9a2f7dceaef44a1f534c727677703eaa8835921eb2fd71de220da5fa1e4b7ddd5249e5549d911249e6f00fb2f","ssdeep":"48:jJ74J4OJ1nS1YIXe86f6PBOfsstbnfnobtN25W9vetiJxXwZM+PVNOfsstbIOgut:j6aOZf6PFsxg2PtikPV5sNHi8PrsOiM","tlshash":"a8a1bd66b0eb50604aebb2be938fd7007d231417b806fa453d5d5a944fa0ed1b0b77e1","size":5001,"data":"","first_seen":"2026-10-07T12:23:06.552961Z","last_seen":"2026-10-07T12:27:53.289542Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xfinity.eventivite.link/","fqdn":"xfinity.eventivite.link","domain":"eventivite.link","tld":"link"},"ip":{"addr":"192.227.154.93","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T12:27:20.001Z","timestamp":1791376040001,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xfinity.eventivite.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 13:11:52 GMT","end":"Sun, 03 Jan 2027 13:11:51 GMT"},"fingerprint":{"sha1":"35:70:40:F8:26:5E:1B:BE:FF:E8:E4:ED:DC:94:88:06:E2:9C:E7:87","sha256":"73:0F:4A:BB:09:D0:9D:FD:4A:06:05:2E:2C:F0:7B:67:B3:92:32:83:E7:3D:BD:3A:E9:E4:F4:CC:41:D1:39:A7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xfinity.eventivite.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 12:27:20 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nSet-Cookie: PHPSESSID=e74egh1erkslntj7gj6cq4eeog; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 4219\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"e74egh1erkslntj7gj6cq4eeog","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=e74egh1erkslntj7gj6cq4eeog; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21662,"size_decoded":4640,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"81943baa7709a8e9db8ee1c262a799e8","sha1":"065ee2f3a095ae66353116a52d262ba9fd3d4a26","sha256":"0b7a3d16c52d21de7f8601264eb4ecbc0e15f7801723325afd941a7946fbbe56","sha512":"b7d9e31c9200397858587057878ac8ba0e0ace4ffa5c04ec6ff90f9ac2272356cf8190297cce604b9119e7d79b8755f49146b01e6003d0efc5f826432a4dd9c6","ssdeep":"192:uiQ1pE8EM6uLumi9s6e/yHW5U3iZpZF9NmfohD9Nq2VfvuuAzueGV3POBqCsOVmh:uiQ1YjyFBAzHGoqCsOVmst4so","tlshash":"28a25419b1861056497393b8afa6970dff578023e30242643eec67878fb6a849423fdd","first_seen":"2026-10-07T12:23:06.55004Z","last_seen":"2026-10-07T12:27:53.284284Z","times_seen":2,"resource_available":true,"data":null}},"time_used":565,"timings":{"blocked":0,"dns":261,"connect":96,"send":0,"wait":98,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"xfinity.eventivite.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"xfinity.eventivite.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"xfinity.eventivite.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"xfinity.eventivite.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinity.eventivite.link/Xfinity-logo-grey.png","fqdn":"xfinity.eventivite.link","domain":"eventivite.link","tld":"link"},"ip":{"addr":"192.227.154.93","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinity.eventivite.link/","date":"2026-10-07T12:27:20.803Z","timestamp":1791376040803,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xfinity.eventivite.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 13:11:52 GMT","end":"Sun, 03 Jan 2027 13:11:51 GMT"},"fingerprint":{"sha1":"35:70:40:F8:26:5E:1B:BE:FF:E8:E4:ED:DC:94:88:06:E2:9C:E7:87","sha256":"73:0F:4A:BB:09:D0:9D:FD:4A:06:05:2E:2C:F0:7B:67:B3:92:32:83:E7:3D:BD:3A:E9:E4:F4:CC:41:D1:39:A7"}}},"request":{"raw":"GET /Xfinity-logo-grey.png HTTP/1.1\r\nHost: xfinity.eventivite.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinity.eventivite.link/\r\nCookie: PHPSESSID=e74egh1erkslntj7gj6cq4eeog\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"e74egh1erkslntj7gj6cq4eeog"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 12:27:20 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLast-Modified: Sun, 04 Oct 2026 06:55:21 GMT\r\nETag: \"99c-65cfe3fbc0840\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2460\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2460,"size_decoded":2745,"mime_type":"image/png","magic":"PNG image data, 154 x 48, 8-bit/color RGBA, non-interlaced","md5":"9a804442462ff4f8a11834bcbac72101","sha1":"7c71ef62680f5c6fc4bf8a9dbbbb2b811acccdfa","sha256":"f368126cbdf35171138b1092348de851a11de5b7cc8691f638335fbacbcfa1cf","sha512":"7db6a4dc268813f191e7615c2ec4ce98a74ce0c062386a715484055003188d28829e16370edc5314067a389bc3807c251a2a8daf7e2903c3efed282c60c1ad20","ssdeep":"","tlshash":"81511aa3668469090c747ddd92c76308852f4a8b37084b1ca9849d64bb76aed3ea1465","first_seen":"2026-10-07T12:23:06.551049Z","last_seen":"2026-10-07T12:27:53.285768Z","times_seen":2,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"xfinity.eventivite.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"xfinity.eventivite.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"xfinity.eventivite.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"xfinity.eventivite.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinity.eventivite.link/login-ad.svg","fqdn":"xfinity.eventivite.link","domain":"eventivite.link","tld":"link"},"ip":{"addr":"192.227.154.93","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinity.eventivite.link/","date":"2026-10-07T12:27:20.805Z","timestamp":1791376040805,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xfinity.eventivite.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 13:11:52 GMT","end":"Sun, 03 Jan 2027 13:11:51 GMT"},"fingerprint":{"sha1":"35:70:40:F8:26:5E:1B:BE:FF:E8:E4:ED:DC:94:88:06:E2:9C:E7:87","sha256":"73:0F:4A:BB:09:D0:9D:FD:4A:06:05:2E:2C:F0:7B:67:B3:92:32:83:E7:3D:BD:3A:E9:E4:F4:CC:41:D1:39:A7"}}},"request":{"raw":"GET /login-ad.svg HTTP/1.1\r\nHost: xfinity.eventivite.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinity.eventivite.link/\r\nCookie: PHPSESSID=e74egh1erkslntj7gj6cq4eeog\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"e74egh1erkslntj7gj6cq4eeog"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 12:27:20 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLast-Modified: Sun, 04 Oct 2026 09:46:28 GMT\r\nETag: \"b4f-65d00a3b20500\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2895\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2895,"size_decoded":3184,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4b8ad34284731925e280f8ab5213020c","sha1":"cf60695f24307ad8918ea5eab9bfb018e8dbe237","sha256":"aa31b7475bad50f9d1993725f46dc4122eab4d8d428106a7da5095ba4444bf51","sha512":"76d2dd33dd7fc1e56f64cd0b878b16519ade7abf820c48cc1a416e53adeae6ca7aef8aef8ed58e5e9b6178c46ff50b450988634f0c3acfc0ebf7894b42325aae","ssdeep":"","tlshash":"2751dea2bacd551edb20470da319e9e3b72bf0cb86154210b409b60f6f764c7dcab25d","first_seen":"2026-10-07T12:23:06.552078Z","last_seen":"2026-10-07T12:27:53.286783Z","times_seen":2,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":96,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"xfinity.eventivite.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"xfinity.eventivite.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"xfinity.eventivite.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"xfinity.eventivite.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinity.eventivite.link/Xfinity-logo-grey.svg","fqdn":"xfinity.eventivite.link","domain":"eventivite.link","tld":"link"},"ip":{"addr":"192.227.154.93","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinity.eventivite.link/","date":"2026-10-07T12:27:20.807Z","timestamp":1791376040807,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xfinity.eventivite.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 13:11:52 GMT","end":"Sun, 03 Jan 2027 13:11:51 GMT"},"fingerprint":{"sha1":"35:70:40:F8:26:5E:1B:BE:FF:E8:E4:ED:DC:94:88:06:E2:9C:E7:87","sha256":"73:0F:4A:BB:09:D0:9D:FD:4A:06:05:2E:2C:F0:7B:67:B3:92:32:83:E7:3D:BD:3A:E9:E4:F4:CC:41:D1:39:A7"}}},"request":{"raw":"GET /Xfinity-logo-grey.svg HTTP/1.1\r\nHost: xfinity.eventivite.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinity.eventivite.link/\r\nCookie: PHPSESSID=e74egh1erkslntj7gj6cq4eeog\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"e74egh1erkslntj7gj6cq4eeog"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Oct 2026 12:27:21 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLast-Modified: Sun, 04 Oct 2026 09:46:28 GMT\r\nETag: \"148-65d00a3b20500\"\r\nAccept-Ranges: bytes\r\nContent-Length: 328\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":328,"size_decoded":617,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c580b7f680f87c0e33f325dca1a6f972","sha1":"db18d38f6f585cecf67d598d5fc9c7a63c9062b3","sha256":"99354cd9f0e32ef028bca1977d261bebceb18ab1bb3d90f124048fec0d75272f","sha512":"c130fbf912b6af2aee38e985cc20a4637a7788c5cbd03e48e8bf2eed6b5b39c7ebb372a1cfa04031eed48aeeeea0fdf86b369b2b887f307abb605328de1ead35","ssdeep":"","tlshash":"b6e07d2985cc8b0fc2248d14729635a676cab0c80d054c48fd54754bd4bb8abbdda75c","first_seen":"2026-10-07T12:23:06.547653Z","last_seen":"2026-10-07T12:27:53.287719Z","times_seen":2,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":96,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"xfinity.eventivite.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"xfinity.eventivite.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"xfinity.eventivite.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"xfinity.eventivite.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinity.eventivite.link/favicon.ico","fqdn":"xfinity.eventivite.link","domain":"eventivite.link","tld":"link"},"ip":{"addr":"192.227.154.93","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinity.eventivite.link/","date":"2026-10-07T12:27:21.102Z","timestamp":1791376041102,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xfinity.eventivite.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 13:11:52 GMT","end":"Sun, 03 Jan 2027 13:11:51 GMT"},"fingerprint":{"sha1":"35:70:40:F8:26:5E:1B:BE:FF:E8:E4:ED:DC:94:88:06:E2:9C:E7:87","sha256":"73:0F:4A:BB:09:D0:9D:FD:4A:06:05:2E:2C:F0:7B:67:B3:92:32:83:E7:3D:BD:3A:E9:E4:F4:CC:41:D1:39:A7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xfinity.eventivite.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinity.eventivite.link/\r\nCookie: PHPSESSID=e74egh1erkslntj7gj6cq4eeog\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"e74egh1erkslntj7gj6cq4eeog"}],"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 07 Oct 2026 12:27:21 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Length: 286\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":286,"size_decoded":502,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"708c66b4b4b80bd19b1ea688758368d2","sha1":"0c6a1117220b759c9af7e803fbbde143b42a7f23","sha256":"49d9719108103685d5a69e025cc4d4c70aff31f67e5e92a5f2c350573b5bb9ee","sha512":"af4da998b4e09b936efe375c81e59698ff7286cc88f2e4b2a8dc5c66715ab9f3622eee8f3ad89c35ab4919432dbc29a45688c4695a04b1e05dc05c09153046ee","ssdeep":"","tlshash":"c6d0279f508363474412645079c515c3364d16e6f93a41943d85d447517863dcd955dd","first_seen":"2026-10-07T12:23:06.548706Z","last_seen":"2026-10-07T12:27:53.288657Z","times_seen":2,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"xfinity.eventivite.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"xfinity.eventivite.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"xfinity.eventivite.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"xfinity.eventivite.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}