{"report_id":"768667e4-5676-49af-8837-3cf5bddd31ed","version":0,"status":"done","tags":[],"date":"2026-07-31T00:12:47Z","url":{"schema":"http","addr":"5ww-umb.com","fqdn":"5ww-umb.com","domain":"5ww-umb.com","tld":"com"},"ip":{"addr":"87.251.64.218","port":0,"asn":197414,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"5ww-umb.com/","fqdn":"5ww-umb.com","domain":"5ww-umb.com","tld":"com"},"title":"UMB Direct Login","dom":{"size":15560,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"dce70eaa2bf1bd647dc5f2ed380a60bb","sha1":"139e8166b50bcc95ef662169b038471015a402e2","sha256":"f53508dda3e277df9b2c7ff9d9c8d3f6979d22cc76e65521a5b266c385c8a1a4","sha512":"ffde965827bd0c610b90aae5a0640256860cbb872bcae862ecfbc9774b569685f6a7dca5ed8d15f63a1922ba6edaf12cf1eff3da3eedbd4c2586c54cebbff8e3","ssdeep":"192:3Ph9QaDirzFp+r3kzFk/NNyD4TFlvPFwIIPIZcoNZgBAuE0xu6PH16yJRnat0i/W:35FDcFLFqyD+F1Fwhe6QZmf","tlshash":"2762311b66b700267953a56c2bbb275d3669d003c20ecd187e9c274ccfcaad68d6378d","dom_hash":"domhashe7e3ffa0da0fb006cbc21e47e2f57edd","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"5ww-umb.com","fqdn":"5ww-umb.com","domain":"5ww-umb.com","tld":"com"},"ip":{"addr":"87.251.64.218","port":0,"asn":197414,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-04T00:12:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"5ww-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"5ww-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"5ww-umb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"5ww-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"5ww-umb.com","ip":{"addr":"87.251.64.218","port":443,"asn":197414,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"domain_registered":"2026-07-30","domain_rank":0,"first_seen":"2026-07-31T00:12:40.001656Z","last_seen":"2026-07-31T00:12:40.001656Z","alert_count":16,"request_count":4,"received_data":73007,"sent_data":1988,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"5ww-umb.com/","fqdn":"5ww-umb.com","domain":"5ww-umb.com","tld":"com"},"ip":{"addr":"87.251.64.218","port":443,"asn":197414,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf8b11687a59ef1b13dacc30eb573c53","sha1":"d3960a1a63b870b978e2088fbb2694490ca0e88e","sha256":"66b102323d10f8248bef69bfb932204c1c1054be609d0882694a85b859105a6c","sha512":"c446fb2442273f4f562e534ecf3e412bc83804cd97d636af2cfea891d17c70336ff10f5fb377167cdc26284d057569fc5da131766ee03b2b46e9bb0b5fee744a","ssdeep":"","tlshash":"92c0801992f0457ca1361067c79563f5c4f407c4f6015415905c7c8435c0cf433b1c57","size":172,"data":"","first_seen":"2026-07-04T07:02:22.628642Z","last_seen":"2026-07-31T00:13:41.05225Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5ww-umb.com/","fqdn":"5ww-umb.com","domain":"5ww-umb.com","tld":"com"},"ip":{"addr":"87.251.64.218","port":443,"asn":197414,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"af902a39864cc311883f42d0dda28781","sha1":"a3304a004e354e35e1acbb4153fe198f6fa60a54","sha256":"da146aaf3521d6f980509f97b7b0f927ffc99fa67ca08cc7fee46f07e3ec26bc","sha512":"a716e0c0d0b02698bb22fad131ebd95efeb72ceebc25c007f9d239aeb91709488dd3938804293540a710fcea2c2878bcdecebe8feadd0664dc82b537e3d81c15","ssdeep":"","tlshash":"83c08c0654904fb4c23211abc5d142dd8cb41698b102a412207d8d0038c08e803b1cdb","size":157,"data":"","first_seen":"2026-07-04T07:02:22.629865Z","last_seen":"2026-07-31T00:13:41.05293Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"5ww-umb.com/","fqdn":"5ww-umb.com","domain":"5ww-umb.com","tld":"com"},"ip":{"addr":"87.251.64.218","port":443,"asn":197414,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-31T00:12:20.128Z","timestamp":1785456740128,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5ww-umb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 08:19:54 GMT","end":"Wed, 28 Oct 2026 08:19:53 GMT"},"fingerprint":{"sha1":"6A:90:32:58:D2:CF:60:3B:9E:C7:64:2D:B5:B5:50:54:B4:60:E8:4A","sha256":"86:74:EA:CB:AD:1A:5A:14:6D:F4:71:6B:7A:D6:B0:AD:9A:E2:C9:DD:76:A7:C9:85:0A:0D:18:1E:85:AE:B6:20"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 5ww-umb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Fri, 31 Jul 2026 00:12:20 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 3338\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15559,"size_decoded":3549,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"b11a0b650f592d3a3b64b45d26b93aa4","sha1":"ba18dc703cf45e6a76fbad525c1444e4cbd594fe","sha256":"9ea022f680ade8eaa0f6927c323c458b839aebfd3dff00b2b73864952ea0f642","sha512":"0a33836c460fae8ff4e9c5ad1b92e7590b554cc4482bc258d19552cd96ce487c486a6cf3f1784a7767c0109f1f10e89f4cc958e834b376d7010b4055848d7acc","ssdeep":"192:hPh9QaDirzFp+r3kzFk/NNyD4TFlvPFwIIPIZcoNZgBAuE0xu6PH16yJRnav0im0:h5FDcFLFqyD+F1Fwhec1Zmt","tlshash":"0e62201b66b700267953a56c2bbb275d3669d003c20edd187e9c274ccfcaad68d6378c","first_seen":"2026-05-30T00:43:50.141247Z","last_seen":"2026-07-31T00:13:41.049599Z","times_seen":7,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":3,"connect":28,"send":0,"wait":51,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"5ww-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"5ww-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"5ww-umb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"5ww-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5ww-umb.com/assets/logo.svg","fqdn":"5ww-umb.com","domain":"5ww-umb.com","tld":"com"},"ip":{"addr":"87.251.64.218","port":443,"asn":197414,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5ww-umb.com/","date":"2026-07-31T00:12:20.461Z","timestamp":1785456740461,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5ww-umb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 08:19:54 GMT","end":"Wed, 28 Oct 2026 08:19:53 GMT"},"fingerprint":{"sha1":"6A:90:32:58:D2:CF:60:3B:9E:C7:64:2D:B5:B5:50:54:B4:60:E8:4A","sha256":"86:74:EA:CB:AD:1A:5A:14:6D:F4:71:6B:7A:D6:B0:AD:9A:E2:C9:DD:76:A7:C9:85:0A:0D:18:1E:85:AE:B6:20"}}},"request":{"raw":"GET /assets/logo.svg HTTP/1.1\r\nHost: 5ww-umb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://5ww-umb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Fri, 31 Jul 2026 00:12:20 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 3257\r\nLast-Modified: Fri, 22 May 2026 09:45:04 GMT\r\nConnection: keep-alive\r\nETag: \"6a1025a0-cb9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3257,"size_decoded":3500,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4769a07372f41817a816a40cc2d0b2e7","sha1":"a449cf339a810b495c5a55e08103d55bd9a3223d","sha256":"f86d2bc7308f9b5f8be7899104fea08644520416a38eaa7be9c8702b9fa46ac8","sha512":"64e4e3d98cc2cf3448b1d650712c002a67494457717c3c8fc3b8898fcc05da2dd46ec61bf76bc53b9cd11fac4ff8c9d65e8133ab71f9968503bdce4ba214ba05","ssdeep":"","tlshash":"7161d83a2338dfe8390b064b6c311ca933dbb8febe545280c2d3198366979f4051096c","first_seen":"2025-05-22T12:43:52.240401Z","last_seen":"2026-07-31T00:13:41.050237Z","times_seen":80,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"5ww-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"5ww-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"5ww-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"5ww-umb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5ww-umb.com/assets/hero.jpg","fqdn":"5ww-umb.com","domain":"5ww-umb.com","tld":"com"},"ip":{"addr":"87.251.64.218","port":443,"asn":197414,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5ww-umb.com/","date":"2026-07-31T00:12:20.462Z","timestamp":1785456740462,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5ww-umb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 08:19:54 GMT","end":"Wed, 28 Oct 2026 08:19:53 GMT"},"fingerprint":{"sha1":"6A:90:32:58:D2:CF:60:3B:9E:C7:64:2D:B5:B5:50:54:B4:60:E8:4A","sha256":"86:74:EA:CB:AD:1A:5A:14:6D:F4:71:6B:7A:D6:B0:AD:9A:E2:C9:DD:76:A7:C9:85:0A:0D:18:1E:85:AE:B6:20"}}},"request":{"raw":"GET /assets/hero.jpg HTTP/1.1\r\nHost: 5ww-umb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://5ww-umb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Fri, 31 Jul 2026 00:12:20 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Fri, 22 May 2026 09:44:25 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a102579-950c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38156,"size_decoded":38075,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 840x500, components 3","md5":"5b3e18b5620797aa5e0f84c4fb2d2977","sha1":"5a395f1fd0231f2e1bf90d63fd67566dc38ca196","sha256":"1792c9b43c09cf677875a16da25dcc14074093ab48a51f60724ff7c643ac11ef","sha512":"b86b59121efa4ebc7d0045ad786bdc90bf03c5f0a1b5aeaeb04ec717b8cf4f7ba384b25587b90ae15bb57691e7833578cd0591fa7554864817fc6772f70da62d","ssdeep":"768:90fBzmzL2bbC31XsYiO7korOYZElnecr96Z0J7WKzjmD0gGN0TicREiFbNHo9D:94tWabbCqYiUJOouNzajRzxMD","tlshash":"0003f17bb6f155b1db6b99f88e9f09d754d7bca8603850305883b6ab2f31e9d0d1200b","first_seen":"2024-05-13T15:03:38Z","last_seen":"2026-07-31T00:13:41.050759Z","times_seen":65,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"5ww-umb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"5ww-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"5ww-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"5ww-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5ww-umb.com/favicon.ico","fqdn":"5ww-umb.com","domain":"5ww-umb.com","tld":"com"},"ip":{"addr":"87.251.64.218","port":443,"asn":197414,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5ww-umb.com/","date":"2026-07-31T00:12:20.555Z","timestamp":1785456740555,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5ww-umb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 08:19:54 GMT","end":"Wed, 28 Oct 2026 08:19:53 GMT"},"fingerprint":{"sha1":"6A:90:32:58:D2:CF:60:3B:9E:C7:64:2D:B5:B5:50:54:B4:60:E8:4A","sha256":"86:74:EA:CB:AD:1A:5A:14:6D:F4:71:6B:7A:D6:B0:AD:9A:E2:C9:DD:76:A7:C9:85:0A:0D:18:1E:85:AE:B6:20"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 5ww-umb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://5ww-umb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Fri, 31 Jul 2026 00:12:20 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 15086\r\nLast-Modified: Fri, 22 May 2026 12:21:15 GMT\r\nConnection: keep-alive\r\nETag: \"6a104a3b-3aee\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15086,"size_decoded":15330,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"1601e7312e894289dce28bed649e1903","sha1":"c73d01dab6990185a7d73d4e7265306b4176d4ec","sha256":"60562060153d10d3b70909724b985ed670685e8d6aedb683804809d14ee9d001","sha512":"cd501c4bb8adc9a670c5a21a3a164b60aa187bf423d4426e41f748ff39489dcfd63fa7b1b80b8ca18a06f0b9a568db209f9c2c669bc877ce44a32f01d80e9b76","ssdeep":"96:joCIztwEFwX+CkifbQZWaE+D+CfTHkOsZ/HtIC8B7PG:jotZwE8PQTbDbfb/sXI/7O","tlshash":"9f62ade7a193800ded3809b48f5f9f11d6beedea44dc11225ab6b21a1d39537e43340b","first_seen":"2026-05-30T00:43:50.146315Z","last_seen":"2026-07-31T00:13:41.051314Z","times_seen":21,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"5ww-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"5ww-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"5ww-umb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"5ww-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}