{"report_id":"756ad2a3-975b-4db4-a83e-0e321e2e4be3","version":0,"status":"done","tags":["fedex","logistics","phishing"],"date":"2026-06-17T15:09:07Z","url":{"schema":"http","addr":"dev3.ictusinitiative.net/app","fqdn":"dev3.ictusinitiative.net","domain":"ictusinitiative.net","tld":"net"},"ip":{"addr":"192.249.122.143","port":0,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"dev3.ictusinitiative.net/app/","fqdn":"dev3.ictusinitiative.net","domain":"ictusinitiative.net","tld":"net"},"title":"FedEx Info | FedEx","dom":{"size":32323,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"14cf28a8a7910459c9b0001784b586b0","sha1":"3b9000ce4b1cf05ef24ba7c1a8f455058846b269","sha256":"1c8d7acb58b6fb1bf6c24cfe0603276398c8bfa0f846001d2073627d1b4bffd6","sha512":"a2a0a547f913716edf1b70c50e5fe52019a1bebbb64983a7454479ff81d0b76bc660022a47d1fdf9c5883d9229da6f61218defb0538a84aead19e663243b49df","ssdeep":"192:79rjC9n4kcyvidcybN7VupIu81L3mcSr+8KurLj:79rjC9iN7VJu81L3J0+8Kurn","tlshash":"b6e2dc10a8f4dcb240fb58da55629e2a9cf98703e1550289fa5d8bf60fb3d6ecb33514","dom_hash":"domhashfb9a4b4b808a4b7fa55345cb6aeaa798","first_seen":"2026-06-17T13:19:55.293543Z","last_seen":"2026-07-29T07:28:45.094572Z","times_seen":9,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dev3.ictusinitiative.net/app","fqdn":"dev3.ictusinitiative.net","domain":"ictusinitiative.net","tld":"net"},"ip":{"addr":"192.249.122.143","port":0,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-22T15:09:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"dev3.ictusinitiative.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]},"summary":[{"fqdn":"www.fedex.com","ip":{"addr":"95.101.10.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1991-02-26","domain_rank":8945,"first_seen":"2012-05-22T08:55:43Z","last_seen":"2026-06-12T11:00:39.918824Z","alert_count":0,"request_count":1,"received_data":5989,"sent_data":559,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"dev3.ictusinitiative.net","ip":{"addr":"192.249.122.143","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"domain_registered":"2002-05-08","domain_rank":0,"first_seen":"2026-06-17T12:23:27.348855Z","last_seen":"2026-06-17T12:23:27.348855Z","alert_count":26,"request_count":13,"received_data":399879,"sent_data":7041,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"pro.fontawesome.com","ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":56192,"first_seen":"2018-03-17T18:03:41Z","last_seen":"2026-06-12T02:51:48.723026Z","alert_count":0,"request_count":1,"received_data":156876,"sent_data":523,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"dev3.ictusinitiative.net/app/js/respond.min.js","fqdn":"dev3.ictusinitiative.net","domain":"ictusinitiative.net","tld":"net"},"ip":{"addr":"192.249.122.143","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"78915bb8b3dd6696d3842d82ed48b104","sha1":"504cce482567765d63843d7b9d00c4195109c449","sha256":"1944a255577a8ed66ae984c6f6356281ff6f29dc84a2af6f1facf258c7dab62e","sha512":"fae71ebe045ce6a2c190b47bda2a0dd9f042c659c8225f566a31ddf1872de61048b99efcb9d9dfb02860e5304940b30c1dfcfdc00c96424f6e97374738139fcf","ssdeep":"96:fmeKAql8GALKZ2sdX0MVrpezoG3+gTYkhs7/tQMBze2EOgSUHB75h0:fnqSGTZbvVrpezoVgdSjtQMle2EOgSIc","tlshash":"a891c8a422203548e2ea3825967f4226f8739cb575584890d515e8b83da8fed10f7ff7","size":4593,"data":"","first_seen":"2023-03-07T12:03:04Z","last_seen":"2026-08-08T11:25:50.09182Z","times_seen":466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dev3.ictusinitiative.net/app/js/jquery-3.5.1.min.js","fqdn":"dev3.ictusinitiative.net","domain":"ictusinitiative.net","tld":"net"},"ip":{"addr":"192.249.122.143","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-09T09:30:04.421067Z","times_seen":265999,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dev3.ictusinitiative.net/app/js/bootstrap.min.js","fqdn":"dev3.ictusinitiative.net","domain":"ictusinitiative.net","tld":"net"},"ip":{"addr":"192.249.122.143","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cabc5d07dec4c381f521bbcd41c009db","sha1":"ca329d086682a4d75b5528d326a66a6d3fffab13","sha256":"2909d4fa86cf09191e768576e1a6eab7f2635a2627549c45d29595ffac9c0da9","sha512":"66f6e36c99f2b57f526b4dff01c6cffe787d2bde6d6abe11d080314d2da08760a18889de7ebd6bec4a675429694d650437b55aaef12c1f7aaebe463587474016","ssdeep":"768:+hkw5E0MWirtTVU4t8GMqm7MT8VbdPyqzgqqqLWpeki3iMFpnkIID0Jhp6zvsv1z:+Z2TTktMqTiaDkIxIzcn","tlshash":"ef538249b254787206df747a817b460bb73a2899a046813cb97ad8dd1f7cc893173fb8","size":62411,"data":"","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-08-07T04:10:48.000141Z","times_seen":2534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dev3.ictusinitiative.net/app/js/html5shiv.min.js","fqdn":"dev3.ictusinitiative.net","domain":"ictusinitiative.net","tld":"net"},"ip":{"addr":"192.249.122.143","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40bd440d29b3a9371b0c63fec41ee64f","sha1":"e790c26449c57de298923c686cb3434d1d461a1d","sha256":"dc9cbf19b48bae0d28f72e59e67d6ec34ab1644087ec2e8e42954180d1586b48","sha512":"50326d2577f37ec88f3e09c8e52d74d3414f2c11cc86fcc0317d7923ea86d84d8e0330bd3f527353024e7e7ca95e2387ecc44f6aace13db0460cd363ef305fa0","ssdeep":"","tlshash":"4751a8857062714a8b2f11ab917f970ff5e452a6d8580060d0e9c87cf930df8c2bbf65","size":2730,"data":"","first_seen":"2023-03-07T12:03:04Z","last_seen":"2026-08-08T11:25:50.111433Z","times_seen":1827,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dev3.ictusinitiative.net/app/js/html5shiv.min.js","fqdn":"dev3.ictusinitiative.net","domain":"ictusinitiative.net","tld":"net"},"ip":{"addr":"192.249.122.143","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dev3.ictusinitiative.net/app/","date":"2026-06-17T15:08:41.748Z","timestamp":1781708921748,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dev3.ictusinitiative.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 05:39:09 GMT","end":"Fri, 24 Jul 2026 05:39:08 GMT"},"fingerprint":{"sha1":"BB:A3:FC:32:D5:52:5B:D2:B5:BA:02:11:B6:94:2F:AC:09:7B:83:29","sha256":"F6:1D:5E:8F:4C:8F:27:09:0A:B5:8F:11:4D:35:62:C5:2B:27:7D:A1:F9:D1:A3:AB:D8:27:08:6B:86:46:14:7E"}}},"request":{"raw":"GET /app/js/html5shiv.min.js HTTP/1.1\r\nHost: dev3.ictusinitiative.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dev3.ictusinitiative.net/app/\r\nCookie: PHPSESSID=41qe2p8p9rbpa72u2ifq94lb76\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Jun 2026 15:08:42 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Jun 2026 01:17:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2730\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2730,"size_decoded":2986,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2639)","md5":"40bd440d29b3a9371b0c63fec41ee64f","sha1":"e790c26449c57de298923c686cb3434d1d461a1d","sha256":"dc9cbf19b48bae0d28f72e59e67d6ec34ab1644087ec2e8e42954180d1586b48","sha512":"50326d2577f37ec88f3e09c8e52d74d3414f2c11cc86fcc0317d7923ea86d84d8e0330bd3f527353024e7e7ca95e2387ecc44f6aace13db0460cd363ef305fa0","ssdeep":"","tlshash":"4751a8857062714a8b2f11ab917f970ff5e452a6d8580060d0e9c87cf930df8c2bbf65","first_seen":"2023-03-07T12:03:04Z","last_seen":"2026-08-08T11:25:50.111433Z","times_seen":1827,"resource_available":true,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":163,"send":0,"wait":162,"receive":0,"ssl":167},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"dev3.ictusinitiative.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dev3.ictusinitiative.net/app/js/bootstrap.min.js","fqdn":"dev3.ictusinitiative.net","domain":"ictusinitiative.net","tld":"net"},"ip":{"addr":"192.249.122.143","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dev3.ictusinitiative.net/app/","date":"2026-06-17T15:08:41.978Z","timestamp":1781708921978,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dev3.ictusinitiative.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 05:39:09 GMT","end":"Fri, 24 Jul 2026 05:39:08 GMT"},"fingerprint":{"sha1":"BB:A3:FC:32:D5:52:5B:D2:B5:BA:02:11:B6:94:2F:AC:09:7B:83:29","sha256":"F6:1D:5E:8F:4C:8F:27:09:0A:B5:8F:11:4D:35:62:C5:2B:27:7D:A1:F9:D1:A3:AB:D8:27:08:6B:86:46:14:7E"}}},"request":{"raw":"GET /app/js/bootstrap.min.js HTTP/1.1\r\nHost: dev3.ictusinitiative.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dev3.ictusinitiative.net/app/\r\nCookie: PHPSESSID=41qe2p8p9rbpa72u2ifq94lb76\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Jun 2026 15:08:42 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Jun 2026 01:17:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 62411\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":62411,"size_decoded":62668,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (62126)","md5":"cabc5d07dec4c381f521bbcd41c009db","sha1":"ca329d086682a4d75b5528d326a66a6d3fffab13","sha256":"2909d4fa86cf09191e768576e1a6eab7f2635a2627549c45d29595ffac9c0da9","sha512":"66f6e36c99f2b57f526b4dff01c6cffe787d2bde6d6abe11d080314d2da08760a18889de7ebd6bec4a675429694d650437b55aaef12c1f7aaebe463587474016","ssdeep":"768:+hkw5E0MWirtTVU4t8GMqm7MT8VbdPyqzgqqqLWpeki3iMFpnkIID0Jhp6zvsv1z:+Z2TTktMqTiaDkIxIzcn","tlshash":"ef538249b254787206df747a817b460bb73a2899a046813cb97ad8dd1f7cc893173fb8","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-08-07T04:10:48.000141Z","times_seen":2534,"resource_available":true,"data":null}},"time_used":792,"timings":{"blocked":-1,"dns":0,"connect":158,"send":0,"wait":159,"receive":314,"ssl":161},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"dev3.ictusinitiative.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dev3.ictusinitiative.net/app/image/canada.png","fqdn":"dev3.ictusinitiative.net","domain":"ictusinitiative.net","tld":"net"},"ip":{"addr":"192.249.122.143","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dev3.ictusinitiative.net/app/","date":"2026-06-17T15:08:42.001Z","timestamp":1781708922001,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dev3.ictusinitiative.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 05:39:09 GMT","end":"Fri, 24 Jul 2026 05:39:08 GMT"},"fingerprint":{"sha1":"BB:A3:FC:32:D5:52:5B:D2:B5:BA:02:11:B6:94:2F:AC:09:7B:83:29","sha256":"F6:1D:5E:8F:4C:8F:27:09:0A:B5:8F:11:4D:35:62:C5:2B:27:7D:A1:F9:D1:A3:AB:D8:27:08:6B:86:46:14:7E"}}},"request":{"raw":"GET /app/image/canada.png HTTP/1.1\r\nHost: dev3.ictusinitiative.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dev3.ictusinitiative.net/app/\r\nCookie: PHPSESSID=41qe2p8p9rbpa72u2ifq94lb76\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Jun 2026 15:08:45 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Jun 2026 01:17:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 964\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":964,"size_decoded":1205,"mime_type":"image/png","magic":"PNG image data, 113 x 22, 8-bit/color RGBA, non-interlaced","md5":"bc6fcddd08d68beb2a6d438c8c625cdd","sha1":"6f6582383f450453985044e760d918e4e052118d","sha256":"a1c42b7d341f59fdffdb0615859ecefc71c18b1d40830a60c562b43fe683f0a8","sha512":"06bf82b16823978b8b948a05da5446e1a5829074227c2b764124b459989d31616a914dfee6154c7af16d6402d75eeeca2484a5e83e8976d295000d53c3bceddb","ssdeep":"","tlshash":"c61194d02445fd9a96f0dae28bb4473af12f8e143a21a725210dca984d70f548428201","first_seen":"2023-04-30T20:19:19Z","last_seen":"2026-07-29T07:28:45.105454Z","times_seen":148,"resource_available":false,"data":null}},"time_used":3280,"timings":{"blocked":3122,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"dev3.ictusinitiative.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dev3.ictusinitiative.net/app/","fqdn":"dev3.ictusinitiative.net","domain":"ictusinitiative.net","tld":"net"},"ip":{"addr":"192.249.122.143","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-17T15:08:41.233Z","timestamp":1781708921233,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dev3.ictusinitiative.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 05:39:09 GMT","end":"Fri, 24 Jul 2026 05:39:08 GMT"},"fingerprint":{"sha1":"BB:A3:FC:32:D5:52:5B:D2:B5:BA:02:11:B6:94:2F:AC:09:7B:83:29","sha256":"F6:1D:5E:8F:4C:8F:27:09:0A:B5:8F:11:4D:35:62:C5:2B:27:7D:A1:F9:D1:A3:AB:D8:27:08:6B:86:46:14:7E"}}},"request":{"raw":"GET /app/ HTTP/1.1\r\nHost: dev3.ictusinitiative.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Jun 2026 15:08:41 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nSet-Cookie: PHPSESSID=41qe2p8p9rbpa72u2ifq94lb76; path=/\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":32888,"size_decoded":5057,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"92bfc0a7befde04eba00934dfa36ffa9","sha1":"e640206dd150832c2ca8e8765818cd7c82f10de7","sha256":"fc7d26aa38541247da9f3c62c3741bca07c52bb063e275483be31816464e29cb","sha512":"e5e13a3bf4ec7c747e68beb82c1e5aad8e51079cb1648288c9bdba36cb2ffb5624d28e6ac0172e34ac7752bb17e56dc073c629859a68ae5189b994479d3f6dd2","ssdeep":"192:ckZ1Zlc/3pLhl1uj1EVzkLG8xHSNntdo4Itgb:c81ZH1EVcG8xHSpro4Itgb","tlshash":"24e2ca1068d4d812a0fb99d949629e2afdb98303c2554689fa9e93f70fb3d3dcb33514","first_seen":"2023-04-12T08:51:14Z","last_seen":"2026-07-29T07:28:45.099949Z","times_seen":97,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"dev3.ictusinitiative.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dev3.ictusinitiative.net/app/css/bootstrap.css","fqdn":"dev3.ictusinitiative.net","domain":"ictusinitiative.net","tld":"net"},"ip":{"addr":"192.249.122.143","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dev3.ictusinitiative.net/app/","date":"2026-06-17T15:08:41.740Z","timestamp":1781708921740,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dev3.ictusinitiative.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 05:39:09 GMT","end":"Fri, 24 Jul 2026 05:39:08 GMT"},"fingerprint":{"sha1":"BB:A3:FC:32:D5:52:5B:D2:B5:BA:02:11:B6:94:2F:AC:09:7B:83:29","sha256":"F6:1D:5E:8F:4C:8F:27:09:0A:B5:8F:11:4D:35:62:C5:2B:27:7D:A1:F9:D1:A3:AB:D8:27:08:6B:86:46:14:7E"}}},"request":{"raw":"GET /app/css/bootstrap.css HTTP/1.1\r\nHost: dev3.ictusinitiative.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dev3.ictusinitiative.net/app/\r\nCookie: PHPSESSID=41qe2p8p9rbpa72u2ifq94lb76\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Jun 2026 15:08:41 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Jun 2026 01:17:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 193015\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":193015,"size_decoded":193258,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (560)","md5":"052dfc723bbdf659b1528e37b1472301","sha1":"a06f1b5340a4dceaa9a8e044d0248ab48fcb7e17","sha256":"0c159070e198b7ed2a9162d6c9751f5914ff62803914d8512d60b1f5ffde4334","sha512":"99a22fd4a93d74eca1883c15ee63799eee662428db0371a26003d14988c9bf8300597835b38637aa2c5961e9dde3b8e67eb371609e2e68e62ddaa62bdd792a97","ssdeep":"1536:Hgwcfq/zc1+QI/Rhi4De5j9p7AC2LdQVUaryWrSPUKO5kIl8d/ALfLNLy:Hpc178d/ALfLNLy","tlshash":"10140f9dfdf118087057956864dbbbf57b7e4086d20ece7a76e23264cf493c18c62a88","first_seen":"2023-04-05T04:36:20Z","last_seen":"2026-08-05T18:23:08.344774Z","times_seen":1246,"resource_available":false,"data":null}},"time_used":628,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":467,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"dev3.ictusinitiative.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dev3.ictusinitiative.net/app/js/jquery-3.5.1.min.js","fqdn":"dev3.ictusinitiative.net","domain":"ictusinitiative.net","tld":"net"},"ip":{"addr":"192.249.122.143","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dev3.ictusinitiative.net/app/","date":"2026-06-17T15:08:41.976Z","timestamp":1781708921976,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dev3.ictusinitiative.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 05:39:09 GMT","end":"Fri, 24 Jul 2026 05:39:08 GMT"},"fingerprint":{"sha1":"BB:A3:FC:32:D5:52:5B:D2:B5:BA:02:11:B6:94:2F:AC:09:7B:83:29","sha256":"F6:1D:5E:8F:4C:8F:27:09:0A:B5:8F:11:4D:35:62:C5:2B:27:7D:A1:F9:D1:A3:AB:D8:27:08:6B:86:46:14:7E"}}},"request":{"raw":"GET /app/js/jquery-3.5.1.min.js HTTP/1.1\r\nHost: dev3.ictusinitiative.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dev3.ictusinitiative.net/app/\r\nCookie: PHPSESSID=41qe2p8p9rbpa72u2ifq94lb76\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Jun 2026 15:08:42 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Jun 2026 01:17:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 89476\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":89476,"size_decoded":89733,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-09T09:30:04.421067Z","times_seen":265999,"resource_available":true,"data":null}},"time_used":899,"timings":{"blocked":-1,"dns":0,"connect":146,"send":0,"wait":148,"receive":438,"ssl":167},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"dev3.ictusinitiative.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dev3.ictusinitiative.net/app/image/logo.png","fqdn":"dev3.ictusinitiative.net","domain":"ictusinitiative.net","tld":"net"},"ip":{"addr":"192.249.122.143","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dev3.ictusinitiative.net/app/","date":"2026-06-17T15:08:41.994Z","timestamp":1781708921994,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dev3.ictusinitiative.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 05:39:09 GMT","end":"Fri, 24 Jul 2026 05:39:08 GMT"},"fingerprint":{"sha1":"BB:A3:FC:32:D5:52:5B:D2:B5:BA:02:11:B6:94:2F:AC:09:7B:83:29","sha256":"F6:1D:5E:8F:4C:8F:27:09:0A:B5:8F:11:4D:35:62:C5:2B:27:7D:A1:F9:D1:A3:AB:D8:27:08:6B:86:46:14:7E"}}},"request":{"raw":"GET /app/image/logo.png HTTP/1.1\r\nHost: dev3.ictusinitiative.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dev3.ictusinitiative.net/app/\r\nCookie: PHPSESSID=41qe2p8p9rbpa72u2ifq94lb76\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Jun 2026 15:08:45 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Jun 2026 01:17:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3833\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3833,"size_decoded":4075,"mime_type":"image/png","magic":"PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced","md5":"1db90a4ce474d6d90842744e5003bcc5","sha1":"c2dcc1c0fce9080f1540f94bb2a0014f2cc44889","sha256":"9f8ae5767c7da740d0e60bf68fc6c1a53bccb8802abe086d46c919b3617d7d47","sha512":"a0d808ef9cf189997ae61636638f8e01247e67a9e7b4e13e3a701eda62195ffdaf69d1203bce761666e13bb5e89f83eb72ce987ea47e1e1918b1ed7b70846643","ssdeep":"","tlshash":"99814a85faa02d9ba7f9f41328d7a303ff1fd80044e5a2b25cd7e4650818af4e6588dd","first_seen":"2023-04-30T20:19:19Z","last_seen":"2026-07-29T07:28:45.10402Z","times_seen":151,"resource_available":false,"data":null}},"time_used":3278,"timings":{"blocked":3122,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"dev3.ictusinitiative.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dev3.ictusinitiative.net/app/image/logo-footer.gif","fqdn":"dev3.ictusinitiative.net","domain":"ictusinitiative.net","tld":"net"},"ip":{"addr":"192.249.122.143","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dev3.ictusinitiative.net/app/","date":"2026-06-17T15:08:41.996Z","timestamp":1781708921996,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dev3.ictusinitiative.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 05:39:09 GMT","end":"Fri, 24 Jul 2026 05:39:08 GMT"},"fingerprint":{"sha1":"BB:A3:FC:32:D5:52:5B:D2:B5:BA:02:11:B6:94:2F:AC:09:7B:83:29","sha256":"F6:1D:5E:8F:4C:8F:27:09:0A:B5:8F:11:4D:35:62:C5:2B:27:7D:A1:F9:D1:A3:AB:D8:27:08:6B:86:46:14:7E"}}},"request":{"raw":"GET /app/image/logo-footer.gif HTTP/1.1\r\nHost: dev3.ictusinitiative.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dev3.ictusinitiative.net/app/\r\nCookie: PHPSESSID=41qe2p8p9rbpa72u2ifq94lb76\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Jun 2026 15:08:45 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Jun 2026 01:17:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1120\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1120,"size_decoded":1362,"mime_type":"image/gif","magic":"GIF image data, version 89a, 74 x 20","md5":"c511f7109470ffe886d41bb3fc1e2e63","sha1":"3340c29fb154c48f8cd1505a104db3fbae8571d5","sha256":"1c192944e83b1e02fe33b614ba139866c0f81f6f37cfe00add496440b037dc3b","sha512":"94f577ff8f6d33d65fd57fab2e390c4d5982e4e1daeba2dc1f9e69d723d85a518ab209e7a586f75baabbee4771f099342cf90086f19bd6ec68d415098c0e59b0","ssdeep":"","tlshash":"7a2194fc2b31ad84efa90c32adb297e7634a307296d21947de5b42806469267003c482","first_seen":"2023-04-30T20:19:19Z","last_seen":"2026-08-06T15:17:37.799586Z","times_seen":356,"resource_available":false,"data":null}},"time_used":3283,"timings":{"blocked":3122,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"dev3.ictusinitiative.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dev3.ictusinitiative.net/app/image/search.png","fqdn":"dev3.ictusinitiative.net","domain":"ictusinitiative.net","tld":"net"},"ip":{"addr":"192.249.122.143","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dev3.ictusinitiative.net/app/","date":"2026-06-17T15:08:41.998Z","timestamp":1781708921998,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dev3.ictusinitiative.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 05:39:09 GMT","end":"Fri, 24 Jul 2026 05:39:08 GMT"},"fingerprint":{"sha1":"BB:A3:FC:32:D5:52:5B:D2:B5:BA:02:11:B6:94:2F:AC:09:7B:83:29","sha256":"F6:1D:5E:8F:4C:8F:27:09:0A:B5:8F:11:4D:35:62:C5:2B:27:7D:A1:F9:D1:A3:AB:D8:27:08:6B:86:46:14:7E"}}},"request":{"raw":"GET /app/image/search.png HTTP/1.1\r\nHost: dev3.ictusinitiative.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dev3.ictusinitiative.net/app/\r\nCookie: PHPSESSID=41qe2p8p9rbpa72u2ifq94lb76\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Jun 2026 15:08:45 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Jun 2026 01:17:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2138\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2138,"size_decoded":2380,"mime_type":"image/png","magic":"PNG image data, 211 x 28, 8-bit/color RGBA, non-interlaced","md5":"ca6c158ea3aa13f92b975c48936b8916","sha1":"c05c8bbdc03ad576e2432d0459e66bd61b60b9b5","sha256":"c071ec308404a22b060a1266d3d836c545c88a3a8afd8e29db699acd15f1cabc","sha512":"c1ffaedea511181ff824e472615271da8050ce09a8afed7d443ae4c60f44472d3f1d83413c6fc1a1f4f3cd3f17c27e1bbd7ede22f3582ea2bcd93ca7916c007e","ssdeep":"","tlshash":"a8411ae31a0a69d47f3114260b0695f0e5f959da708d9031edfa289f67fece3180fa16","first_seen":"2023-04-30T20:19:19Z","last_seen":"2026-07-29T07:28:45.099075Z","times_seen":168,"resource_available":false,"data":null}},"time_used":3283,"timings":{"blocked":3122,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"dev3.ictusinitiative.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dev3.ictusinitiative.net/app","fqdn":"dev3.ictusinitiative.net","domain":"ictusinitiative.net","tld":"net"},"ip":{"addr":"192.249.122.143","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-17T15:08:40.368Z","timestamp":1781708920368,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dev3.ictusinitiative.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 05:39:09 GMT","end":"Fri, 24 Jul 2026 05:39:08 GMT"},"fingerprint":{"sha1":"BB:A3:FC:32:D5:52:5B:D2:B5:BA:02:11:B6:94:2F:AC:09:7B:83:29","sha256":"F6:1D:5E:8F:4C:8F:27:09:0A:B5:8F:11:4D:35:62:C5:2B:27:7D:A1:F9:D1:A3:AB:D8:27:08:6B:86:46:14:7E"}}},"request":{"raw":"GET /app HTTP/1.1\r\nHost: dev3.ictusinitiative.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 17 Jun 2026 15:08:41 GMT\r\nServer: Apache\r\nLocation: https://dev3.ictusinitiative.net/app/\r\nContent-Length: 285\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T09:49:07.809217Z","times_seen":17797099,"resource_available":true,"data":null}},"time_used":849,"timings":{"blocked":-1,"dns":212,"connect":154,"send":0,"wait":158,"receive":0,"ssl":325},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"dev3.ictusinitiative.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"pro.fontawesome.com/releases/v5.10.0/css/all.css","fqdn":"pro.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dev3.ictusinitiative.net/app/","date":"2026-06-17T15:08:41.971Z","timestamp":1781708921971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 22:11:17 GMT","end":"Sat, 12 Sep 2026 23:11:14 GMT"},"fingerprint":{"sha1":"5F:59:20:85:C5:A0:F2:76:30:C4:8D:DA:FB:31:7C:05:93:3C:16:93","sha256":"C0:AB:A6:29:FC:00:73:C0:2F:17:52:AA:D7:E8:27:80:98:13:B4:AB:F6:09:35:46:3E:53:8E:61:E3:6F:47:67"}}},"request":{"raw":"GET /releases/v5.10.0/css/all.css HTTP/1.1\r\nHost: pro.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://dev3.ictusinitiative.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dev3.ictusinitiative.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 15:08:45 GMT\r\ncontent-type: text/css\r\nx-amz-id-2: aE4nok71EDv+Az/qKO4Ni++BGD7nMsTqiwVFlkH/bS+uPcVgMHZuGYLLXs3y/vq8iuuhg42JSWHbtFnLDX131U3S2i+uI55v\r\nx-amz-request-id: 8T4001W1Z929TQ8N\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nlast-modified: Mon, 28 Jun 2021 16:54:32 GMT\r\ncf-cache-status: HIT\r\ncache-control: max-age=31556926\r\nserver: cloudflare\r\nage: 156832\r\netag: W/\"aa1272633e7e552395d147a499bad186\"\r\ncontent-encoding: gzip\r\ncf-ray: a0d2f8adebee32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":156228,"size_decoded":30307,"mime_type":"text/css","magic":"ASCII text, with very long lines (65393)","md5":"aa1272633e7e552395d147a499bad186","sha1":"ddbccb0011dd4868a013b1dcbdb836b7213eb41d","sha256":"2af905d92cfd34b5413126a54f639da408166cbbcb54318e413ad5e10b5bf6ec","sha512":"886ddfc7252269b42b0adfd5f4e47da0cd6ccb9b0b3ea18c015b1e4edb1eb1f55cf49728fdcdd151949256851c72cc555cd7f6408a5638595f26d0caf86ffbdc","ssdeep":"1536:KgvcfQ4aNi7HHQZD0bMSPCDTdV3dWGFIiboA+8Ieiy6BauXZG817fgFSkAmYdAT/:DcI4aY7QN0bjPerGuHuXkz","tlshash":"bae371b5d41d01da7726c60fab01b27a98f6f738d5810e4ae0cb4c5e1de2b9811c9bed","first_seen":"2023-04-05T22:29:58Z","last_seen":"2026-08-08T12:48:06.990761Z","times_seen":5404,"resource_available":false,"data":null}},"time_used":3141,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":11,"receive":0,"ssl":3124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dev3.ictusinitiative.net/app/image/media.png","fqdn":"dev3.ictusinitiative.net","domain":"ictusinitiative.net","tld":"net"},"ip":{"addr":"192.249.122.143","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dev3.ictusinitiative.net/app/","date":"2026-06-17T15:08:42.000Z","timestamp":1781708922000,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dev3.ictusinitiative.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 05:39:09 GMT","end":"Fri, 24 Jul 2026 05:39:08 GMT"},"fingerprint":{"sha1":"BB:A3:FC:32:D5:52:5B:D2:B5:BA:02:11:B6:94:2F:AC:09:7B:83:29","sha256":"F6:1D:5E:8F:4C:8F:27:09:0A:B5:8F:11:4D:35:62:C5:2B:27:7D:A1:F9:D1:A3:AB:D8:27:08:6B:86:46:14:7E"}}},"request":{"raw":"GET /app/image/media.png HTTP/1.1\r\nHost: dev3.ictusinitiative.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dev3.ictusinitiative.net/app/\r\nCookie: PHPSESSID=41qe2p8p9rbpa72u2ifq94lb76\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Jun 2026 15:08:45 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Jun 2026 01:17:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1566\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1566,"size_decoded":1808,"mime_type":"image/png","magic":"PNG image data, 68 x 19, 8-bit/color RGBA, non-interlaced","md5":"a41afa7db420a45ee73680b53e34d0c6","sha1":"74790de0d9a731dcabdcf95856a82e7ae7853759","sha256":"2a032fa265ae439e56a80e3d76f47ac554380de3bfc817a857924d7ea48e1626","sha512":"b6e2045d02c55cf579a92bb7a56bae12a55659f8983867fb23e32c0881bd80d2a8b2db764d2efbc224b5172337bdc826d29159ba5ea90d05763da9ea22ed0ccc","ssdeep":"","tlshash":"77310a385231a95083204ac706de3937c89bd35067dc837c7960c8945adc6928b7ce94","first_seen":"2023-04-30T20:19:19Z","last_seen":"2026-07-29T07:28:45.104975Z","times_seen":191,"resource_available":false,"data":null}},"time_used":3270,"timings":{"blocked":3122,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"dev3.ictusinitiative.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dev3.ictusinitiative.net/app/css/test.css","fqdn":"dev3.ictusinitiative.net","domain":"ictusinitiative.net","tld":"net"},"ip":{"addr":"192.249.122.143","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dev3.ictusinitiative.net/app/","date":"2026-06-17T15:08:41.746Z","timestamp":1781708921746,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dev3.ictusinitiative.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 05:39:09 GMT","end":"Fri, 24 Jul 2026 05:39:08 GMT"},"fingerprint":{"sha1":"BB:A3:FC:32:D5:52:5B:D2:B5:BA:02:11:B6:94:2F:AC:09:7B:83:29","sha256":"F6:1D:5E:8F:4C:8F:27:09:0A:B5:8F:11:4D:35:62:C5:2B:27:7D:A1:F9:D1:A3:AB:D8:27:08:6B:86:46:14:7E"}}},"request":{"raw":"GET /app/css/test.css HTTP/1.1\r\nHost: dev3.ictusinitiative.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dev3.ictusinitiative.net/app/\r\nCookie: PHPSESSID=41qe2p8p9rbpa72u2ifq94lb76\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Jun 2026 15:08:42 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Jun 2026 01:17:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1730\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1730,"size_decoded":1972,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c47244d004471b285abbe628d2d16af7","sha1":"d24cbb6caa90b9a7fac4afe4d77c8078f4f502a4","sha256":"8e63d5a105a1e787341fb90033b94d3e6da431e5b16ee42bbca450d0be6f8fea","sha512":"1562740dbfd5a322a478471a516e56e96f267df60cfb61fb8f47c127129d05c0bae71cd03432b8f3cb23f21dd00048c82506891cb7d3853a36dc0ca7e23d870b","ssdeep":"","tlshash":"1131c0befa4851097236dcb8f7237e936eac84858b0203797fbd615931c6674a511f8c","first_seen":"2023-04-07T07:52:01Z","last_seen":"2026-07-29T07:28:45.096518Z","times_seen":133,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":154,"send":0,"wait":155,"receive":0,"ssl":158},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"dev3.ictusinitiative.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dev3.ictusinitiative.net/app/js/respond.min.js","fqdn":"dev3.ictusinitiative.net","domain":"ictusinitiative.net","tld":"net"},"ip":{"addr":"192.249.122.143","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dev3.ictusinitiative.net/app/","date":"2026-06-17T15:08:41.749Z","timestamp":1781708921749,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dev3.ictusinitiative.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 05:39:09 GMT","end":"Fri, 24 Jul 2026 05:39:08 GMT"},"fingerprint":{"sha1":"BB:A3:FC:32:D5:52:5B:D2:B5:BA:02:11:B6:94:2F:AC:09:7B:83:29","sha256":"F6:1D:5E:8F:4C:8F:27:09:0A:B5:8F:11:4D:35:62:C5:2B:27:7D:A1:F9:D1:A3:AB:D8:27:08:6B:86:46:14:7E"}}},"request":{"raw":"GET /app/js/respond.min.js HTTP/1.1\r\nHost: dev3.ictusinitiative.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dev3.ictusinitiative.net/app/\r\nCookie: PHPSESSID=41qe2p8p9rbpa72u2ifq94lb76\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Jun 2026 15:08:42 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Jun 2026 01:17:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 4593\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4593,"size_decoded":4849,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4453)","md5":"78915bb8b3dd6696d3842d82ed48b104","sha1":"504cce482567765d63843d7b9d00c4195109c449","sha256":"1944a255577a8ed66ae984c6f6356281ff6f29dc84a2af6f1facf258c7dab62e","sha512":"fae71ebe045ce6a2c190b47bda2a0dd9f042c659c8225f566a31ddf1872de61048b99efcb9d9dfb02860e5304940b30c1dfcfdc00c96424f6e97374738139fcf","ssdeep":"96:fmeKAql8GALKZ2sdX0MVrpezoG3+gTYkhs7/tQMBze2EOgSUHB75h0:fnqSGTZbvVrpezoVgdSjtQMle2EOgSIc","tlshash":"a891c8a422203548e2ea3825967f4226f8739cb575584890d515e8b83da8fed10f7ff7","first_seen":"2023-03-07T12:03:04Z","last_seen":"2026-08-08T11:25:50.09182Z","times_seen":466,"resource_available":true,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":163,"send":0,"wait":161,"receive":0,"ssl":166},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"dev3.ictusinitiative.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.fedex.com/images/c/s1/fx-favicon.ico","fqdn":"www.fedex.com","domain":"fedex.com","tld":"com"},"ip":{"addr":"95.101.10.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dev3.ictusinitiative.net/app/","date":"2026-06-17T15:08:45.310Z","timestamp":1781708925310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.fedex.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA EV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 18 Feb 2026 00:00:00 GMT","end":"Sat, 05 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:F2:68:29:DD:9D:98:5B:6D:1F:6A:00:91:0D:6B:9E:97:35:E9:6D","sha256":"47:F1:C2:2F:92:71:BD:D5:06:E0:A4:E2:B6:67:10:29:2F:74:A1:54:DE:4A:E5:9E:71:F6:CD:8F:24:90:14:DB"}}},"request":{"raw":"GET /images/c/s1/fx-favicon.ico HTTP/1.1\r\nHost: www.fedex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dev3.ictusinitiative.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: Apache\r\nlast-modified: Fri, 16 Sep 2016 14:47:16 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-type: image/x-icon\r\ncontent-encoding: gzip\r\ncontent-length: 818\r\ncache-control: max-age=69204\r\nexpires: Thu, 18 Jun 2026 10:22:09 GMT\r\ndate: Wed, 17 Jun 2026 15:08:45 GMT\r\nvary: Accept-Encoding\r\nakamai-grn: 0.a70a655f.1781708925.1dc1eb1\r\nset-cookie: Rbt=f0; path=/\nfdx_bman=9ffb3f772f9abf52c05bd7bf782bed70; path=/; domain=.www.fedex.com; Secure\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5430,"size_decoded":1377,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"a53129769d15f251d4e5c5cb966765b4","sha1":"043d6a7b9cca5d05aba04fc0a3f4527e3ad075e0","sha256":"eab1b9a0ef942d84e3a8ed8c3e3996acb7a46af9a0b9f914ced662bcbe0e54be","sha512":"149e9ecc344fc864c4f772acdbb6e00bdfc5399301922b58f137c14ac042f1c57775213dc6335c8d9cd39b7e9ef7982acfda29f2be794a8c0923ab4e6735792c","ssdeep":"24:EDfxncjMt+eDLLA0y3AoqJkYr2NjPx+nQjBpTTOBjEV1tdSnhajWljDXjX0XXjXL:cVDD4CExYjQEag07023H","tlshash":"06b1a709a638edd0d0a12a31c842d9fe0b25ed07e87c483b5a90ff8a777311c0e2568f","first_seen":"2023-04-30T20:19:19Z","last_seen":"2026-08-09T01:33:33.452355Z","times_seen":956,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":11,"connect":1,"send":0,"wait":54,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}