{"report_id":"7a09b50f-a3ab-4cb2-95c9-88084c81b744","version":0,"status":"done","tags":[],"date":"2026-07-13T12:22:12Z","url":{"schema":"http","addr":"ww7-umb.com","fqdn":"ww7-umb.com","domain":"ww7-umb.com","tld":"com"},"ip":{"addr":"87.251.64.218","port":0,"asn":197414,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"ww7-umb.com/","fqdn":"ww7-umb.com","domain":"ww7-umb.com","tld":"com"},"title":"UMB Direct Login","dom":{"size":21051,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"7e3b6780a36b674cc992be8d9b63838d","sha1":"d457991fbff363a145a7a1e512f9b8656bc0043c","sha256":"499a4a40f94ef9a66e6986fe62c03aadb74308a488aa711f35cc4d51bfd78b71","sha512":"e2b66e8b79eb76bf3ffffb131115ddd29b1ed76a3d9cd38442fe70a56b5e034a61ab028a634f935308c966912a391657635db6a0ee72b7cc98604a92c91bb88b","ssdeep":"192:3Ph9QaDirzFp+r3kzFI9w/NNYD4TFy9svPFwIIPIZcoNZ3aubyqfWoDVN9GFEhBS:35FDcFLFRYD+FXFw4DUFCKi6QDTmyYJ3","tlshash":"a592401a6afb01267517a16d7bf7271d2279d003c60ecd283eac2748cfc6bd5896278c","dom_hash":"domhashfdd69c37ddc1312e9d644ac3766046d5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ww7-umb.com","fqdn":"ww7-umb.com","domain":"ww7-umb.com","tld":"com"},"ip":{"addr":"87.251.64.218","port":0,"asn":197414,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-17T12:22:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"ww7-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-13","alert":"Phishing Block","trigger":"ww7-umb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"ww7-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"ww7-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"ww7-umb.com","ip":{"addr":"87.251.64.218","port":443,"asn":197414,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"domain_registered":"2026-07-10","domain_rank":0,"first_seen":"2026-07-13T12:18:02.678704Z","last_seen":"2026-07-13T12:18:02.678704Z","alert_count":16,"request_count":4,"received_data":78497,"sent_data":1988,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ww7-umb.com/","fqdn":"ww7-umb.com","domain":"ww7-umb.com","tld":"com"},"ip":{"addr":"87.251.64.218","port":443,"asn":197414,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"36905c9598be545c7d8af6932d0924e6","sha1":"9cf3f71a582c514fab690c43090a273fd83ce2ea","sha256":"42c61ca081f55ab9398549217348019c2ec1a491701bf832a17fa6d6ed0b680c","sha512":"6105d86f9a6b1f9e1944c50920beed4945001ee0077cc825ce00595538c19753ee2800778a879d34441bbac66e3cee1f3f23c4f16ee42543ebb72f11b7c7bb4b","ssdeep":"","tlshash":"b301261aaabd293805ef6627e7cb6b58392450531449ce127fbd9f821fa0dd084b62c2","size":714,"data":"","first_seen":"2026-07-04T07:02:22.62711Z","last_seen":"2026-07-13T21:02:51.537421Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww7-umb.com/","fqdn":"ww7-umb.com","domain":"ww7-umb.com","tld":"com"},"ip":{"addr":"87.251.64.218","port":443,"asn":197414,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf8b11687a59ef1b13dacc30eb573c53","sha1":"d3960a1a63b870b978e2088fbb2694490ca0e88e","sha256":"66b102323d10f8248bef69bfb932204c1c1054be609d0882694a85b859105a6c","sha512":"c446fb2442273f4f562e534ecf3e412bc83804cd97d636af2cfea891d17c70336ff10f5fb377167cdc26284d057569fc5da131766ee03b2b46e9bb0b5fee744a","ssdeep":"","tlshash":"92c0801992f0457ca1361067c79563f5c4f407c4f6015415905c7c8435c0cf433b1c57","size":172,"data":"","first_seen":"2026-07-04T07:02:22.628642Z","last_seen":"2026-07-13T21:02:51.538281Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww7-umb.com/","fqdn":"ww7-umb.com","domain":"ww7-umb.com","tld":"com"},"ip":{"addr":"87.251.64.218","port":443,"asn":197414,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"af902a39864cc311883f42d0dda28781","sha1":"a3304a004e354e35e1acbb4153fe198f6fa60a54","sha256":"da146aaf3521d6f980509f97b7b0f927ffc99fa67ca08cc7fee46f07e3ec26bc","sha512":"a716e0c0d0b02698bb22fad131ebd95efeb72ceebc25c007f9d239aeb91709488dd3938804293540a710fcea2c2878bcdecebe8feadd0664dc82b537e3d81c15","ssdeep":"","tlshash":"83c08c0654904fb4c23211abc5d142dd8cb41698b102a412207d8d0038c08e803b1cdb","size":157,"data":"","first_seen":"2026-07-04T07:02:22.629865Z","last_seen":"2026-07-13T21:02:51.539091Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww7-umb.com/","fqdn":"ww7-umb.com","domain":"ww7-umb.com","tld":"com"},"ip":{"addr":"87.251.64.218","port":443,"asn":197414,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ff5076bfa7f24cd5746a57302b736e2","sha1":"bc198ce38c5230396816374dcb8935877af469a0","sha256":"e0543bdb436dbf8bef18a3796c3e663bdf336c562b0a9fe56ceca9efdc3dd15b","sha512":"ffbd636005b1b57d106a1587887acfc5924d71b6b96789c0478814eecd3a8ee82f1d8a7b941a18a4e29ddf62d9186fb27e5317698a05751cf0770d8474313ca7","ssdeep":"","tlshash":"27d02b37032582a47127103773e75367c4fb05c5b7036805821e08641bd0450577298e","size":262,"data":"","first_seen":"2026-07-04T07:02:22.631278Z","last_seen":"2026-07-13T21:02:51.540755Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww7-umb.com/","fqdn":"ww7-umb.com","domain":"ww7-umb.com","tld":"com"},"ip":{"addr":"87.251.64.218","port":443,"asn":197414,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f69772d358e2bb574c22955d21db5f7","sha1":"78ec4995eec308442522915875e89a60b0e53805","sha256":"2551548643204d165aafa55a0ddc8deed74ebfc642a98daed300cdf21e1ca9c8","sha512":"886ded55b7ea55c03d6652f218529e98c5943d4e3587d52b43fd69c210d6af7f71c74eb0427241d5b1649161c2b8e914dd874a1f6dbcf2cab96578d6df39e8b3","ssdeep":"","tlshash":"fcd05e270259c3a0b226107bf3e7579bd9fb059a7607b806522b48642be44a54772dcf","size":253,"data":"","first_seen":"2026-07-04T07:02:22.638493Z","last_seen":"2026-07-13T21:02:51.541829Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ww7-umb.com/","fqdn":"ww7-umb.com","domain":"ww7-umb.com","tld":"com"},"ip":{"addr":"87.251.64.218","port":443,"asn":197414,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-13T12:21:45.423Z","timestamp":1783945305423,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww7-umb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 13:12:17 GMT","end":"Thu, 08 Oct 2026 13:12:16 GMT"},"fingerprint":{"sha1":"2E:F4:38:A8:41:90:44:BF:D2:2E:60:E8:3A:09:F4:51:02:A1:13:34","sha256":"0B:43:3A:42:8F:7D:EA:38:2D:23:A2:05:C2:59:37:08:23:96:4E:AF:50:75:B4:41:C3:DC:E6:6D:0E:34:D6:FF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ww7-umb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Mon, 13 Jul 2026 12:21:45 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 4500\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21049,"size_decoded":4711,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"7d637b4abf0eec9ae543d8fec18c3c37","sha1":"d67c3acdf7cff7044e6c7bb9c945c7527e612489","sha256":"509dfaef3e15cb331afe92286170b246468cd331e9e9cd8aabacdf944c2c5fde","sha512":"6e4d3677a262ae689a89c97b2466d40e1710daf03374f9dffcec1cd2a70b4e18be2a6ba6e8ba7b5e551da53f5661b93326137adf97a26e8eeab40f24958f52fa","ssdeep":"192:hPh9QaDirzFp+r3kzFI9w/NNYD4TFy9svPFwIIPIZcoNZ3aubyqfWoDVN9GFEhBo:h5FDcFLFRYD+FXFw4DUFCKic1QwmyYJy","tlshash":"ba92311a6afb01267517616d7bf7271d2279d003d60ece283eac2748cfc6bd5896278c","first_seen":"2026-07-04T07:02:22.625115Z","last_seen":"2026-07-13T21:02:51.536077Z","times_seen":10,"resource_available":true,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":453,"connect":28,"send":0,"wait":52,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"ww7-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-13","alert":"Phishing Block","trigger":"ww7-umb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"ww7-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"ww7-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww7-umb.com/assets/logo.svg","fqdn":"ww7-umb.com","domain":"ww7-umb.com","tld":"com"},"ip":{"addr":"87.251.64.218","port":443,"asn":197414,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww7-umb.com/","date":"2026-07-13T12:21:46.208Z","timestamp":1783945306208,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww7-umb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 13:12:17 GMT","end":"Thu, 08 Oct 2026 13:12:16 GMT"},"fingerprint":{"sha1":"2E:F4:38:A8:41:90:44:BF:D2:2E:60:E8:3A:09:F4:51:02:A1:13:34","sha256":"0B:43:3A:42:8F:7D:EA:38:2D:23:A2:05:C2:59:37:08:23:96:4E:AF:50:75:B4:41:C3:DC:E6:6D:0E:34:D6:FF"}}},"request":{"raw":"GET /assets/logo.svg HTTP/1.1\r\nHost: ww7-umb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww7-umb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Mon, 13 Jul 2026 12:21:46 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 3257\r\nLast-Modified: Fri, 22 May 2026 09:45:04 GMT\r\nConnection: keep-alive\r\nETag: \"6a1025a0-cb9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3257,"size_decoded":3500,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4769a07372f41817a816a40cc2d0b2e7","sha1":"a449cf339a810b495c5a55e08103d55bd9a3223d","sha256":"f86d2bc7308f9b5f8be7899104fea08644520416a38eaa7be9c8702b9fa46ac8","sha512":"64e4e3d98cc2cf3448b1d650712c002a67494457717c3c8fc3b8898fcc05da2dd46ec61bf76bc53b9cd11fac4ff8c9d65e8133ab71f9968503bdce4ba214ba05","ssdeep":"","tlshash":"7161d83a2338dfe8390b064b6c311ca933dbb8febe545280c2d3198366979f4051096c","first_seen":"2025-05-22T12:43:52.240401Z","last_seen":"2026-07-13T21:02:51.526394Z","times_seen":73,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"ww7-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-13","alert":"Phishing Block","trigger":"ww7-umb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"ww7-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"ww7-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww7-umb.com/assets/hero.jpg","fqdn":"ww7-umb.com","domain":"ww7-umb.com","tld":"com"},"ip":{"addr":"87.251.64.218","port":443,"asn":197414,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww7-umb.com/","date":"2026-07-13T12:21:46.210Z","timestamp":1783945306210,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww7-umb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 13:12:17 GMT","end":"Thu, 08 Oct 2026 13:12:16 GMT"},"fingerprint":{"sha1":"2E:F4:38:A8:41:90:44:BF:D2:2E:60:E8:3A:09:F4:51:02:A1:13:34","sha256":"0B:43:3A:42:8F:7D:EA:38:2D:23:A2:05:C2:59:37:08:23:96:4E:AF:50:75:B4:41:C3:DC:E6:6D:0E:34:D6:FF"}}},"request":{"raw":"GET /assets/hero.jpg HTTP/1.1\r\nHost: ww7-umb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww7-umb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Mon, 13 Jul 2026 12:21:46 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Fri, 22 May 2026 09:44:25 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a102579-950c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38156,"size_decoded":38075,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 840x500, components 3","md5":"5b3e18b5620797aa5e0f84c4fb2d2977","sha1":"5a395f1fd0231f2e1bf90d63fd67566dc38ca196","sha256":"1792c9b43c09cf677875a16da25dcc14074093ab48a51f60724ff7c643ac11ef","sha512":"b86b59121efa4ebc7d0045ad786bdc90bf03c5f0a1b5aeaeb04ec717b8cf4f7ba384b25587b90ae15bb57691e7833578cd0591fa7554864817fc6772f70da62d","ssdeep":"768:90fBzmzL2bbC31XsYiO7korOYZElnecr96Z0J7WKzjmD0gGN0TicREiFbNHo9D:94tWabbCqYiUJOouNzajRzxMD","tlshash":"0003f17bb6f155b1db6b99f88e9f09d754d7bca8603850305883b6ab2f31e9d0d1200b","first_seen":"2024-05-13T15:03:38Z","last_seen":"2026-07-13T21:02:51.529296Z","times_seen":58,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"ww7-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-13","alert":"Phishing Block","trigger":"ww7-umb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"ww7-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"ww7-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww7-umb.com/favicon.ico","fqdn":"ww7-umb.com","domain":"ww7-umb.com","tld":"com"},"ip":{"addr":"87.251.64.218","port":443,"asn":197414,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww7-umb.com/","date":"2026-07-13T12:21:46.303Z","timestamp":1783945306303,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww7-umb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 13:12:17 GMT","end":"Thu, 08 Oct 2026 13:12:16 GMT"},"fingerprint":{"sha1":"2E:F4:38:A8:41:90:44:BF:D2:2E:60:E8:3A:09:F4:51:02:A1:13:34","sha256":"0B:43:3A:42:8F:7D:EA:38:2D:23:A2:05:C2:59:37:08:23:96:4E:AF:50:75:B4:41:C3:DC:E6:6D:0E:34:D6:FF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ww7-umb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww7-umb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Mon, 13 Jul 2026 12:21:46 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 15086\r\nLast-Modified: Fri, 22 May 2026 12:21:15 GMT\r\nConnection: keep-alive\r\nETag: \"6a104a3b-3aee\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15086,"size_decoded":15330,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"1601e7312e894289dce28bed649e1903","sha1":"c73d01dab6990185a7d73d4e7265306b4176d4ec","sha256":"60562060153d10d3b70909724b985ed670685e8d6aedb683804809d14ee9d001","sha512":"cd501c4bb8adc9a670c5a21a3a164b60aa187bf423d4426e41f748ff39489dcfd63fa7b1b80b8ca18a06f0b9a568db209f9c2c669bc877ce44a32f01d80e9b76","ssdeep":"96:joCIztwEFwX+CkifbQZWaE+D+CfTHkOsZ/HtIC8B7PG:jotZwE8PQTbDbfb/sXI/7O","tlshash":"9f62ade7a193800ded3809b48f5f9f11d6beedea44dc11225ab6b21a1d39537e43340b","first_seen":"2026-05-30T00:43:50.146315Z","last_seen":"2026-07-13T21:02:51.530626Z","times_seen":14,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"ww7-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-13","alert":"Phishing Block","trigger":"ww7-umb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"ww7-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"ww7-umb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}