{"report_id":"7ebee9be-bff7-4981-964e-744205432673","version":0,"status":"done","tags":[],"date":"2026-09-19T08:40:14Z","url":{"schema":"http","addr":"8675-truist-acceweb-auth.live/","fqdn":"8675-truist-acceweb-auth.live","domain":"8675-truist-acceweb-auth.live","tld":"live"},"ip":{"addr":"147.45.61.83","port":0,"asn":209207,"as":"Digital Hosting Provider LLC","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6","fqdn":"8675-truist-acceweb-auth.live","domain":"8675-truist-acceweb-auth.live","tld":"live"},"title":"Security Verification","dom":{"size":12751,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3783)","md5":"91c7204a4451f300ea97fd4438f95148","sha1":"3db1a3a2325c6a046456ebdf473ac42d8058e3e4","sha256":"472e58d52413e48cf2498b71dc38b6fa670938c04cac3511e4da4813881e9e24","sha512":"c7f06e758ef44909b026bbda7113450fe27607f040cc58a3a672b3d1488695cb08bea436cfd0a032dafae98383d939e4cc6ed5a3e73d355377a28912d892c802","ssdeep":"384:Bxjk8bPsG3ocMes4sy73HFIAGBgxS2A8M2Qa:ZbPsG3cCGAGBgxS2A8M2Qa","tlshash":"a142823670b568f70c0f36cb265a53c85b538612fa96e3d0746ec2a85fa7cb029239d5","dom_hash":"domhashd01116c337bf17d17175eb0620d02eb6","first_seen":"2026-09-19T08:40:20.599136Z","last_seen":"2026-09-19T08:40:20.599136Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"8675-truist-acceweb-auth.live/","fqdn":"8675-truist-acceweb-auth.live","domain":"8675-truist-acceweb-auth.live","tld":"live"},"ip":{"addr":"147.45.61.83","port":0,"asn":209207,"as":"Digital Hosting Provider LLC","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T08:40:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"8675-truist-acceweb-auth.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"8675-truist-acceweb-auth.live","ip":{"addr":"147.45.61.83","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-19T08:20:55.143358Z","last_seen":"2026-09-19T08:20:55.143358Z","alert_count":15,"request_count":15,"received_data":34596,"sent_data":12594,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6","fqdn":"8675-truist-acceweb-auth.live","domain":"8675-truist-acceweb-auth.live","tld":"live"},"ip":{"addr":"147.45.61.83","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"df5f434cf86cdea919074b0c678c6b31","sha1":"7f2a83c0eb2bc4d31a4d53e9e98eafef0b596159","sha256":"764dc9b40b4cd88737d6cc0a5de12f53324e62f2bb248fb04e098914f576e86a","sha512":"5dfcd5f2cee273b450f671bcb2e95208a30c199fc33c10c34dc4c639dde1ac79eb6a2bc88a26e1966c7234818bb8b356eb31e475d9cb3953f624aef3b68daf5c","ssdeep":"","tlshash":"bb61cbaabca324b01caf35ab17af82c4b56480176446fa423c5cd4559fb0da0617bbd5","size":3261,"data":"","first_seen":"2026-09-19T08:20:21.724202Z","last_seen":"2026-09-19T08:40:20.616055Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6","fqdn":"8675-truist-acceweb-auth.live","domain":"8675-truist-acceweb-auth.live","tld":"live"},"ip":{"addr":"147.45.61.83","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T08:39:45.752Z","timestamp":1789807185752,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8675-truist-acceweb-auth.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 19:22:51 GMT","end":"Wed, 16 Dec 2026 19:22:50 GMT"},"fingerprint":{"sha1":"D5:F6:E0:A4:3B:AD:0E:B4:A6:AF:99:BB:FE:42:55:EE:34:31:59:D8","sha256":"D0:5E:67:A8:99:32:5C:C3:A5:BA:CD:6B:25:B9:49:75:A4:7D:22:D8:5A:6E:C3:62:CB:1A:91:49:7F:FF:EE:F2"}}},"request":{"raw":"GET /email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6 HTTP/1.1\r\nHost: 8675-truist-acceweb-auth.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=b0hq7lsifanalil765q8njf5fd\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 19 Sep 2026 08:39:45 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9131,"size_decoded":3764,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3154)","md5":"55c71462eea05a9ecca4ae81974d3cb5","sha1":"aad5cd7dfe20addd320082666b534c1f369ee991","sha256":"5dc2f95660b293998316cea53a9c51b3aa55f21a0ef496a492331b3de9ddf685","sha512":"2cb4fdf23d0320e87ba8559af05f2109078fb408655dbf0908c4ed61864bf1a81a922a39aaee54de066db5b2be68ea2550ebf426c724a37d238428a7330b0c27","ssdeep":"192:Xaia3V8bHvsGGXxGkz2B/gx7y9szJAFzmMqRQi:Xax8bPsGGhGBgxS2A8M2Qi","tlshash":"1912953774b228b20c5f369b275e83c85e638313f646e3e0785dc1585f66da02a63ed5","first_seen":"2026-09-19T08:40:20.601032Z","last_seen":"2026-09-19T08:40:20.601032Z","times_seen":1,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"8675-truist-acceweb-auth.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8675-truist-acceweb-auth.live/email-secure-captcha-image.php?t=MjIxNzM2OGRiMWI1ZmUxMDQzNTM5N2UwN2JlNmMwZWIuNmJjNmRjNTkwZGM4M2FhNDM4NGEzZWY1YWFiZTM1ZGIuMTc4OTgwNzMwNXxmOGVjOGQ0Zjg1YTc3NzdkZWQ1YzFjZmI0YWRlZWI1YmUzNDc0ZmUzMGJjZjliOWQ0M2E2M2VjMDNlN2ZhNGUy","fqdn":"8675-truist-acceweb-auth.live","domain":"8675-truist-acceweb-auth.live","tld":"live"},"ip":{"addr":"147.45.61.83","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6","date":"2026-09-19T08:39:46.134Z","timestamp":1789807186134,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8675-truist-acceweb-auth.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 19:22:51 GMT","end":"Wed, 16 Dec 2026 19:22:50 GMT"},"fingerprint":{"sha1":"D5:F6:E0:A4:3B:AD:0E:B4:A6:AF:99:BB:FE:42:55:EE:34:31:59:D8","sha256":"D0:5E:67:A8:99:32:5C:C3:A5:BA:CD:6B:25:B9:49:75:A4:7D:22:D8:5A:6E:C3:62:CB:1A:91:49:7F:FF:EE:F2"}}},"request":{"raw":"GET /email-secure-captcha-image.php?t=MjIxNzM2OGRiMWI1ZmUxMDQzNTM5N2UwN2JlNmMwZWIuNmJjNmRjNTkwZGM4M2FhNDM4NGEzZWY1YWFiZTM1ZGIuMTc4OTgwNzMwNXxmOGVjOGQ0Zjg1YTc3NzdkZWQ1YzFjZmI0YWRlZWI1YmUzNDc0ZmUzMGJjZjliOWQ0M2E2M2VjMDNlN2ZhNGUy HTTP/1.1\r\nHost: 8675-truist-acceweb-auth.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6\r\nCookie: PHPSESSID=b0hq7lsifanalil765q8njf5fd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 19 Sep 2026 08:39:46 GMT\r\nContent-Type: image/svg+xml; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":754,"size_decoded":1047,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"2e842de9508aadfd75305543cbe49c79","sha1":"3d8dc9bd7fba1ab3aa4754dd3b5420ee74162e49","sha256":"204864533138d30bfdbc4eceaa487fefe619a0043eb69ff107451096ad14178b","sha512":"754c1e7eff8f2945b4fc1f42656af4b48d54d12c36e93333ed4f91d37dbcde932bda7996d5ad61d7b3131cd331791f14a6bbc50bcf92caec519bda82e3bd0879","ssdeep":"","tlshash":"cd016d15e754a01ed560d33997e5d8ba531f609292ad4334edc12a1e5a204c75d1d36c","first_seen":"2026-09-19T08:40:20.602229Z","last_seen":"2026-09-19T08:40:20.602229Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":26,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"8675-truist-acceweb-auth.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8675-truist-acceweb-auth.live/email-secure-captcha-image.php?t=MjIxNzM2OGRiMWI1ZmUxMDQzNTM5N2UwN2JlNmMwZWIuYjdiMGVmOGExM2IzNzkyZjcwY2Q3MjIxNjIxNTBjNjYuMTc4OTgwNzMwNXw2MGY1NjFmOTRjMTJiOWRkNzJlNWRmMDUzMmVhYmVlNDExOTI0NGVjYjgyZTUzNjFmZGU1ZjNjNmIyMGNjZjk3","fqdn":"8675-truist-acceweb-auth.live","domain":"8675-truist-acceweb-auth.live","tld":"live"},"ip":{"addr":"147.45.61.83","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6","date":"2026-09-19T08:39:46.146Z","timestamp":1789807186146,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8675-truist-acceweb-auth.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 19:22:51 GMT","end":"Wed, 16 Dec 2026 19:22:50 GMT"},"fingerprint":{"sha1":"D5:F6:E0:A4:3B:AD:0E:B4:A6:AF:99:BB:FE:42:55:EE:34:31:59:D8","sha256":"D0:5E:67:A8:99:32:5C:C3:A5:BA:CD:6B:25:B9:49:75:A4:7D:22:D8:5A:6E:C3:62:CB:1A:91:49:7F:FF:EE:F2"}}},"request":{"raw":"GET /email-secure-captcha-image.php?t=MjIxNzM2OGRiMWI1ZmUxMDQzNTM5N2UwN2JlNmMwZWIuYjdiMGVmOGExM2IzNzkyZjcwY2Q3MjIxNjIxNTBjNjYuMTc4OTgwNzMwNXw2MGY1NjFmOTRjMTJiOWRkNzJlNWRmMDUzMmVhYmVlNDExOTI0NGVjYjgyZTUzNjFmZGU1ZjNjNmIyMGNjZjk3 HTTP/1.1\r\nHost: 8675-truist-acceweb-auth.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6\r\nCookie: PHPSESSID=b0hq7lsifanalil765q8njf5fd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 19 Sep 2026 08:39:46 GMT\r\nContent-Type: image/svg+xml; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1064,"size_decoded":1357,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"5968677c170584f2104e65ddab561383","sha1":"a27be58cf0c2d182077aa999f430bf77fc4ff3df","sha256":"6d86905a94f7ea1466b66b10fa20bee692d14c190521c6e0aaa2e577ca669d9d","sha512":"7b5e5e02510f90544c81408bf6256eeb53842046b630f2c1dfcd69ec79a4dd2f2aa03db981594547d0f21e562d5f9663ce14544e7e5473bb34e5b71f3db3809e","ssdeep":"","tlshash":"90115b1297b8f00ea550d33843eadcb7525ba193a75d4368bd81391fa9104c75d5c22e","first_seen":"2026-09-19T08:40:20.603313Z","last_seen":"2026-09-19T08:40:20.603313Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"8675-truist-acceweb-auth.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8675-truist-acceweb-auth.live/","fqdn":"8675-truist-acceweb-auth.live","domain":"8675-truist-acceweb-auth.live","tld":"live"},"ip":{"addr":"147.45.61.83","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T08:39:45.422Z","timestamp":1789807185422,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8675-truist-acceweb-auth.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 19:22:51 GMT","end":"Wed, 16 Dec 2026 19:22:50 GMT"},"fingerprint":{"sha1":"D5:F6:E0:A4:3B:AD:0E:B4:A6:AF:99:BB:FE:42:55:EE:34:31:59:D8","sha256":"D0:5E:67:A8:99:32:5C:C3:A5:BA:CD:6B:25:B9:49:75:A4:7D:22:D8:5A:6E:C3:62:CB:1A:91:49:7F:FF:EE:F2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 8675-truist-acceweb-auth.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 19 Sep 2026 08:39:45 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: PHPSESSID=b0hq7lsifanalil765q8njf5fd; path=/; secure; HttpOnly; SameSite=Lax\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nLocation: email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"b0hq7lsifanalil765q8njf5fd","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"PHPSESSID=b0hq7lsifanalil765q8njf5fd; path=/; secure; HttpOnly; SameSite=Lax"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T12:41:55.112535Z","times_seen":18548581,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":4,"connect":25,"send":0,"wait":238,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"8675-truist-acceweb-auth.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8675-truist-acceweb-auth.live/email-secure-captcha-image.php?t=MjIxNzM2OGRiMWI1ZmUxMDQzNTM5N2UwN2JlNmMwZWIuMWQyYjU5ZGJkY2M4NjdmYjMzOTIxM2IxYTRkNzU4OGEuMTc4OTgwNzMwNXw5ZThiOWY5ZDhiZjg1MjQ2NWFhNmE4ODg4YzVmZGQzNmVmNzI2YzJlNTE3ODczYTkwMDM2NjEyYzkwNGRkMDZj","fqdn":"8675-truist-acceweb-auth.live","domain":"8675-truist-acceweb-auth.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6","date":"2026-09-19T08:39:46.088Z","timestamp":1789807186088,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8675-truist-acceweb-auth.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 19:22:51 GMT","end":"Wed, 16 Dec 2026 19:22:50 GMT"},"fingerprint":{"sha1":"D5:F6:E0:A4:3B:AD:0E:B4:A6:AF:99:BB:FE:42:55:EE:34:31:59:D8","sha256":"D0:5E:67:A8:99:32:5C:C3:A5:BA:CD:6B:25:B9:49:75:A4:7D:22:D8:5A:6E:C3:62:CB:1A:91:49:7F:FF:EE:F2"}}},"request":{"raw":"GET /email-secure-captcha-image.php?t=MjIxNzM2OGRiMWI1ZmUxMDQzNTM5N2UwN2JlNmMwZWIuMWQyYjU5ZGJkY2M4NjdmYjMzOTIxM2IxYTRkNzU4OGEuMTc4OTgwNzMwNXw5ZThiOWY5ZDhiZjg1MjQ2NWFhNmE4ODg4YzVmZGQzNmVmNzI2YzJlNTE3ODczYTkwMDM2NjEyYzkwNGRkMDZj HTTP/1.1\r\nHost: 8675-truist-acceweb-auth.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6\r\nCookie: PHPSESSID=b0hq7lsifanalil765q8njf5fd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T12:41:55.112535Z","times_seen":18548581,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"8675-truist-acceweb-auth.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8675-truist-acceweb-auth.live/email-secure-captcha-image.php?t=MjIxNzM2OGRiMWI1ZmUxMDQzNTM5N2UwN2JlNmMwZWIuMGE2Yjg0YTA4Y2JjNTYwZTIwZmMxYmZmNTQyMWEyMTUuMTc4OTgwNzMwNXxkYjdkZGY2NjRmMjVhYzNkMDdlOWFjOTY3N2E0YmVmOTJiNmI3ZDI4ZjMzZGZiNzYwNGY2ODM1ZDcxYjkwNWE2","fqdn":"8675-truist-acceweb-auth.live","domain":"8675-truist-acceweb-auth.live","tld":"live"},"ip":{"addr":"147.45.61.83","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6","date":"2026-09-19T08:39:46.136Z","timestamp":1789807186136,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8675-truist-acceweb-auth.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 19:22:51 GMT","end":"Wed, 16 Dec 2026 19:22:50 GMT"},"fingerprint":{"sha1":"D5:F6:E0:A4:3B:AD:0E:B4:A6:AF:99:BB:FE:42:55:EE:34:31:59:D8","sha256":"D0:5E:67:A8:99:32:5C:C3:A5:BA:CD:6B:25:B9:49:75:A4:7D:22:D8:5A:6E:C3:62:CB:1A:91:49:7F:FF:EE:F2"}}},"request":{"raw":"GET /email-secure-captcha-image.php?t=MjIxNzM2OGRiMWI1ZmUxMDQzNTM5N2UwN2JlNmMwZWIuMGE2Yjg0YTA4Y2JjNTYwZTIwZmMxYmZmNTQyMWEyMTUuMTc4OTgwNzMwNXxkYjdkZGY2NjRmMjVhYzNkMDdlOWFjOTY3N2E0YmVmOTJiNmI3ZDI4ZjMzZGZiNzYwNGY2ODM1ZDcxYjkwNWE2 HTTP/1.1\r\nHost: 8675-truist-acceweb-auth.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6\r\nCookie: PHPSESSID=b0hq7lsifanalil765q8njf5fd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 19 Sep 2026 08:39:46 GMT\r\nContent-Type: image/svg+xml; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1070,"size_decoded":1363,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"ea948436f3454d0543d12d68c8cc9a7e","sha1":"67edd0ec5c75550bcc983fd5ff2bcc923347cd05","sha256":"e21f51814e37545fa52868366aa2ed0786d83e689d342076aff540721ae6e4cd","sha512":"20d5e1d0d06db3449cce736bdd5381ac3a6609713378147eee6b9aa5cc5bf6b9f21a99f05af875bc0b7e622b9602a0ee0aec595e4180924e0df9c10b6520c270","ssdeep":"","tlshash":"0a11871597acb01ee164e33817e5d8b7534bb0c3a7690338e9803a2e6c248c78d6c37e","first_seen":"2026-09-19T08:40:20.605135Z","last_seen":"2026-09-19T08:40:20.605135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":31,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"8675-truist-acceweb-auth.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8675-truist-acceweb-auth.live/email-secure-captcha-image.php?t=MjIxNzM2OGRiMWI1ZmUxMDQzNTM5N2UwN2JlNmMwZWIuYmExNTM4ZWExOGFjMDdiNjczZjEzZjA4NWQzOWE0ODMuMTc4OTgwNzMwNXxjYzg4ZDJiNGU3ZjNhMmI3ZGM4OWU4NzZmZDYwNGU5MWQ1YmE3ODgxNjBlNzdlZjIzZTA4M2ZhYzRhNDZkMDEy","fqdn":"8675-truist-acceweb-auth.live","domain":"8675-truist-acceweb-auth.live","tld":"live"},"ip":{"addr":"147.45.61.83","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6","date":"2026-09-19T08:39:46.138Z","timestamp":1789807186138,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8675-truist-acceweb-auth.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 19:22:51 GMT","end":"Wed, 16 Dec 2026 19:22:50 GMT"},"fingerprint":{"sha1":"D5:F6:E0:A4:3B:AD:0E:B4:A6:AF:99:BB:FE:42:55:EE:34:31:59:D8","sha256":"D0:5E:67:A8:99:32:5C:C3:A5:BA:CD:6B:25:B9:49:75:A4:7D:22:D8:5A:6E:C3:62:CB:1A:91:49:7F:FF:EE:F2"}}},"request":{"raw":"GET /email-secure-captcha-image.php?t=MjIxNzM2OGRiMWI1ZmUxMDQzNTM5N2UwN2JlNmMwZWIuYmExNTM4ZWExOGFjMDdiNjczZjEzZjA4NWQzOWE0ODMuMTc4OTgwNzMwNXxjYzg4ZDJiNGU3ZjNhMmI3ZGM4OWU4NzZmZDYwNGU5MWQ1YmE3ODgxNjBlNzdlZjIzZTA4M2ZhYzRhNDZkMDEy HTTP/1.1\r\nHost: 8675-truist-acceweb-auth.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6\r\nCookie: PHPSESSID=b0hq7lsifanalil765q8njf5fd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 19 Sep 2026 08:39:46 GMT\r\nContent-Type: image/svg+xml; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":983,"size_decoded":1276,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"ad0d045ca82323243e9f22e51168689a","sha1":"cd236e82ed0d2cd3f01289c6dd0a0e1743d923a6","sha256":"999d19fe6368f8264766541da2e02a8d906f5a24208659c6bc377f4b735cceab","sha512":"3d48e804a4e4a5de966c1a93393981efae4838d47e022c82cb5cd99327800021798412c91b23dc891af87a4dfc92791d5defca2774e1a3f5aa1e82199425a106","ssdeep":"","tlshash":"f21129158368a01ed960d33a47e6dcb7539b6083ab2d4328e981392e9a600cb9d6c27d","first_seen":"2026-09-19T08:40:20.606651Z","last_seen":"2026-09-19T08:40:20.606651Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":32,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"8675-truist-acceweb-auth.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8675-truist-acceweb-auth.live/email-secure-captcha-image.php?t=MjIxNzM2OGRiMWI1ZmUxMDQzNTM5N2UwN2JlNmMwZWIuOTg1Njc3ZGUzZjQyZTAzZjcxODZkOGE3OWIzYWUwYzIuMTc4OTgwNzMwNXw2ZTJlYzQ3ZmM0N2I3NGMxMzdjZTNkY2FhOTU5YzU3NTE3YmQ5YThmNTQ5ZDVjODNhNGFkNTg0YmZlMjUxNmUx","fqdn":"8675-truist-acceweb-auth.live","domain":"8675-truist-acceweb-auth.live","tld":"live"},"ip":{"addr":"147.45.61.83","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6","date":"2026-09-19T08:39:46.147Z","timestamp":1789807186147,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8675-truist-acceweb-auth.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 19:22:51 GMT","end":"Wed, 16 Dec 2026 19:22:50 GMT"},"fingerprint":{"sha1":"D5:F6:E0:A4:3B:AD:0E:B4:A6:AF:99:BB:FE:42:55:EE:34:31:59:D8","sha256":"D0:5E:67:A8:99:32:5C:C3:A5:BA:CD:6B:25:B9:49:75:A4:7D:22:D8:5A:6E:C3:62:CB:1A:91:49:7F:FF:EE:F2"}}},"request":{"raw":"GET /email-secure-captcha-image.php?t=MjIxNzM2OGRiMWI1ZmUxMDQzNTM5N2UwN2JlNmMwZWIuOTg1Njc3ZGUzZjQyZTAzZjcxODZkOGE3OWIzYWUwYzIuMTc4OTgwNzMwNXw2ZTJlYzQ3ZmM0N2I3NGMxMzdjZTNkY2FhOTU5YzU3NTE3YmQ5YThmNTQ5ZDVjODNhNGFkNTg0YmZlMjUxNmUx HTTP/1.1\r\nHost: 8675-truist-acceweb-auth.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6\r\nCookie: PHPSESSID=b0hq7lsifanalil765q8njf5fd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 19 Sep 2026 08:39:46 GMT\r\nContent-Type: image/svg+xml; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1212,"size_decoded":1505,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"a3a1e0e41190d981d4cde8a764b25809","sha1":"e309aa5b3d48d57a5c1372dfa4c3d2699967c0f6","sha256":"ff6298ff8d8dde7295e1b37f09415d7a2078c5b409f4629c4fe1508508272478","sha512":"19af7157f4edca532a245f33fc57144262d0456de90a702ff652690db9a0f7b929e9d5a84b1721cf30a812b5e94bfec0d734adea22b6d0ef8b1824f3030f4f72","ssdeep":"","tlshash":"6821c41092e8781ee960e73907e9d8b7629b60c3b7294368ed90363d5c244db5cac27d","first_seen":"2026-09-19T08:40:20.607887Z","last_seen":"2026-09-19T08:40:20.607887Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"8675-truist-acceweb-auth.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6","fqdn":"8675-truist-acceweb-auth.live","domain":"8675-truist-acceweb-auth.live","tld":"live"},"ip":{"addr":"147.45.61.83","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6","date":"2026-09-19T08:39:46.468Z","timestamp":1789807186468,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8675-truist-acceweb-auth.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 19:22:51 GMT","end":"Wed, 16 Dec 2026 19:22:50 GMT"},"fingerprint":{"sha1":"D5:F6:E0:A4:3B:AD:0E:B4:A6:AF:99:BB:FE:42:55:EE:34:31:59:D8","sha256":"D0:5E:67:A8:99:32:5C:C3:A5:BA:CD:6B:25:B9:49:75:A4:7D:22:D8:5A:6E:C3:62:CB:1A:91:49:7F:FF:EE:F2"}}},"request":{"raw":"GET /email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6 HTTP/1.1\r\nHost: 8675-truist-acceweb-auth.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=b0hq7lsifanalil765q8njf5fd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 19 Sep 2026 08:39:46 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":9113,"size_decoded":3736,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3145)","md5":"574a78f964e5e519864d4152e1d5986d","sha1":"4731f70ca20b27029bb0e9f8e03e393dee93c724","sha256":"4d299b8193a6dba8966f0c729821d15cb4edfef9a4400e29ff8585bc1704f374","sha512":"db7ee0359b8ba52b8a1443eb8ab9dfb924730d52015b8dfb333411f63b49bf0423f512fc1f002759fefc010406772da17765acd01c489e65ff84e6f64f171dee","ssdeep":"192:XaidwNocp5bVuaW6JGz2B/gx7y9szJAFzmMqRQi:XaAwN7pz3WOgxS2A8M2Qi","tlshash":"29129476b4f228f1085f359e666e93c45f17c353b642e3e0384cc1984f6bca05aa3ad9","first_seen":"2026-09-19T08:40:20.609021Z","last_seen":"2026-09-19T08:40:20.609021Z","times_seen":1,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"8675-truist-acceweb-auth.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8675-truist-acceweb-auth.live/css/email-secure.css","fqdn":"8675-truist-acceweb-auth.live","domain":"8675-truist-acceweb-auth.live","tld":"live"},"ip":{"addr":"147.45.61.83","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6","date":"2026-09-19T08:39:46.081Z","timestamp":1789807186081,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8675-truist-acceweb-auth.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 19:22:51 GMT","end":"Wed, 16 Dec 2026 19:22:50 GMT"},"fingerprint":{"sha1":"D5:F6:E0:A4:3B:AD:0E:B4:A6:AF:99:BB:FE:42:55:EE:34:31:59:D8","sha256":"D0:5E:67:A8:99:32:5C:C3:A5:BA:CD:6B:25:B9:49:75:A4:7D:22:D8:5A:6E:C3:62:CB:1A:91:49:7F:FF:EE:F2"}}},"request":{"raw":"GET /css/email-secure.css HTTP/1.1\r\nHost: 8675-truist-acceweb-auth.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6\r\nCookie: PHPSESSID=b0hq7lsifanalil765q8njf5fd\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 19 Sep 2026 08:39:46 GMT\r\nContent-Type: text/css\r\nContent-Length: 3012\r\nLast-Modified: Tue, 25 Aug 2026 21:07:38 GMT\r\nConnection: keep-alive\r\nETag: \"6a8e041a-bc4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3012,"size_decoded":3259,"mime_type":"text/css","magic":"Palm OS operating system patch data \"/* Email Secure — wait + shape captcha */\"","md5":"2eca1804a20459f8583e63c3b8942364","sha1":"798e6a8f4523360bbb3067b772ec5fc6df7e019d","sha256":"c8e957c197f82858b2b64f8bb314db3086f1e668eb24d56e00e07abc8112a7ed","sha512":"4a591d386eec307174d9ee9770f31faa10c063d1cb96554a702f7fe58beb62e67def356fbeb5374af252408b514b3dacb1355460f5ec8ced5514e648d76d76cf","ssdeep":"","tlshash":"2551006767a502d0281ec8e2741267daf32981a2e106cb3c5af1600ceedd4e76473fc8","first_seen":"2026-09-19T08:20:21.707602Z","last_seen":"2026-09-19T08:40:20.610142Z","times_seen":4,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"8675-truist-acceweb-auth.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8675-truist-acceweb-auth.live/email-secure-captcha-image.php?t=MjIxNzM2OGRiMWI1ZmUxMDQzNTM5N2UwN2JlNmMwZWIuODI2ZGQzYzlkMGY0YzA5ZjllMGRiMmYyNjVhYTVmZDkuMTc4OTgwNzMwNXxkYWJmNjk1ZDU0MjFmODJhYmRmMTZmM2ZkNDA4OWQyMThmZTQwMmE5MmM0YzAyZTU1ZjJiNTEzZTkxMjQyMGNm","fqdn":"8675-truist-acceweb-auth.live","domain":"8675-truist-acceweb-auth.live","tld":"live"},"ip":{"addr":"147.45.61.83","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6","date":"2026-09-19T08:39:46.141Z","timestamp":1789807186141,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8675-truist-acceweb-auth.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 19:22:51 GMT","end":"Wed, 16 Dec 2026 19:22:50 GMT"},"fingerprint":{"sha1":"D5:F6:E0:A4:3B:AD:0E:B4:A6:AF:99:BB:FE:42:55:EE:34:31:59:D8","sha256":"D0:5E:67:A8:99:32:5C:C3:A5:BA:CD:6B:25:B9:49:75:A4:7D:22:D8:5A:6E:C3:62:CB:1A:91:49:7F:FF:EE:F2"}}},"request":{"raw":"GET /email-secure-captcha-image.php?t=MjIxNzM2OGRiMWI1ZmUxMDQzNTM5N2UwN2JlNmMwZWIuODI2ZGQzYzlkMGY0YzA5ZjllMGRiMmYyNjVhYTVmZDkuMTc4OTgwNzMwNXxkYWJmNjk1ZDU0MjFmODJhYmRmMTZmM2ZkNDA4OWQyMThmZTQwMmE5MmM0YzAyZTU1ZjJiNTEzZTkxMjQyMGNm HTTP/1.1\r\nHost: 8675-truist-acceweb-auth.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6\r\nCookie: PHPSESSID=b0hq7lsifanalil765q8njf5fd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 19 Sep 2026 08:39:46 GMT\r\nContent-Type: image/svg+xml; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":761,"size_decoded":1054,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"200e081b41f9a085d42368382655853b","sha1":"7af09019256da576bd1a0e40d68482d52aa083cb","sha256":"67d970c9c89997652d869090e1af71d4b59a1374d94051b7a8938c6f3e7ab1c5","sha512":"93232484f22f6411f5ab836642b6dd0f701697731cdc292b464443406bd0947d16aeb2879ceb7bcf2479cc2ffd1a910225e3cdb2c790f8271c0b041e9a112587","ssdeep":"","tlshash":"b6018915d398e41ed5a0d33943a2d8f7521bb18be75e0328ed803a2e12284c79c2d36c","first_seen":"2026-09-19T08:40:20.610805Z","last_seen":"2026-09-19T08:40:20.610805Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":31,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"8675-truist-acceweb-auth.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8675-truist-acceweb-auth.live/favicon.ico","fqdn":"8675-truist-acceweb-auth.live","domain":"8675-truist-acceweb-auth.live","tld":"live"},"ip":{"addr":"147.45.61.83","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6","date":"2026-09-19T08:39:46.256Z","timestamp":1789807186256,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8675-truist-acceweb-auth.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 19:22:51 GMT","end":"Wed, 16 Dec 2026 19:22:50 GMT"},"fingerprint":{"sha1":"D5:F6:E0:A4:3B:AD:0E:B4:A6:AF:99:BB:FE:42:55:EE:34:31:59:D8","sha256":"D0:5E:67:A8:99:32:5C:C3:A5:BA:CD:6B:25:B9:49:75:A4:7D:22:D8:5A:6E:C3:62:CB:1A:91:49:7F:FF:EE:F2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 8675-truist-acceweb-auth.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6\r\nCookie: PHPSESSID=b0hq7lsifanalil765q8njf5fd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 19 Sep 2026 08:39:46 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nLocation: email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T12:41:55.112535Z","times_seen":18548581,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"8675-truist-acceweb-auth.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8675-truist-acceweb-auth.live/email-secure-captcha-image.php?t=MjIxNzM2OGRiMWI1ZmUxMDQzNTM5N2UwN2JlNmMwZWIuMWQyYjU5ZGJkY2M4NjdmYjMzOTIxM2IxYTRkNzU4OGEuMTc4OTgwNzMwNXw5ZThiOWY5ZDhiZjg1MjQ2NWFhNmE4ODg4YzVmZGQzNmVmNzI2YzJlNTE3ODczYTkwMDM2NjEyYzkwNGRkMDZj","fqdn":"8675-truist-acceweb-auth.live","domain":"8675-truist-acceweb-auth.live","tld":"live"},"ip":{"addr":"147.45.61.83","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6","date":"2026-09-19T08:39:46.124Z","timestamp":1789807186124,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8675-truist-acceweb-auth.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 19:22:51 GMT","end":"Wed, 16 Dec 2026 19:22:50 GMT"},"fingerprint":{"sha1":"D5:F6:E0:A4:3B:AD:0E:B4:A6:AF:99:BB:FE:42:55:EE:34:31:59:D8","sha256":"D0:5E:67:A8:99:32:5C:C3:A5:BA:CD:6B:25:B9:49:75:A4:7D:22:D8:5A:6E:C3:62:CB:1A:91:49:7F:FF:EE:F2"}}},"request":{"raw":"GET /email-secure-captcha-image.php?t=MjIxNzM2OGRiMWI1ZmUxMDQzNTM5N2UwN2JlNmMwZWIuMWQyYjU5ZGJkY2M4NjdmYjMzOTIxM2IxYTRkNzU4OGEuMTc4OTgwNzMwNXw5ZThiOWY5ZDhiZjg1MjQ2NWFhNmE4ODg4YzVmZGQzNmVmNzI2YzJlNTE3ODczYTkwMDM2NjEyYzkwNGRkMDZj HTTP/1.1\r\nHost: 8675-truist-acceweb-auth.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6\r\nCookie: PHPSESSID=b0hq7lsifanalil765q8njf5fd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 19 Sep 2026 08:39:46 GMT\r\nContent-Type: image/svg+xml; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":813,"size_decoded":1106,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"97795702a4d37bc1e65d7a9333711731","sha1":"bafdc95c3466bd53b908a62f49d90c4f9a896cb7","sha256":"d02e20bf3a0ff17f9a3cbe10e732f4799aed4547fa77117ce391947bd90e7bc8","sha512":"00e15fa37b3063b22ca8c829a8008c8cc7624eea0a8a76f730900844443385c52f3ec2dd1709110a7c2a0e6338a8207dbf7349c0dc7d9603a70cc5aca842c3fe","ssdeep":"","tlshash":"ba018815e3a8b40fe560e33953eac8b7531fa092a35e0328e9803a2f54240c75d5d22c","first_seen":"2026-09-19T08:40:20.61195Z","last_seen":"2026-09-19T08:40:20.61195Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"8675-truist-acceweb-auth.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8675-truist-acceweb-auth.live/email-secure-captcha-image.php?t=MjIxNzM2OGRiMWI1ZmUxMDQzNTM5N2UwN2JlNmMwZWIuNDlkMDI4MzE5MWFjY2U4MGI1ZjI1OTYzZTRhZGZlM2YuMTc4OTgwNzMwNXw0ZDViZGNjOGRmOGNlNmIwMmY2YTM5M2NlMDJlMGI5OTg1ZmY4N2MzM2I2MzVkNDZkZWNmOTI2NTI2Zjc3ODAx","fqdn":"8675-truist-acceweb-auth.live","domain":"8675-truist-acceweb-auth.live","tld":"live"},"ip":{"addr":"147.45.61.83","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6","date":"2026-09-19T08:39:46.140Z","timestamp":1789807186140,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8675-truist-acceweb-auth.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 19:22:51 GMT","end":"Wed, 16 Dec 2026 19:22:50 GMT"},"fingerprint":{"sha1":"D5:F6:E0:A4:3B:AD:0E:B4:A6:AF:99:BB:FE:42:55:EE:34:31:59:D8","sha256":"D0:5E:67:A8:99:32:5C:C3:A5:BA:CD:6B:25:B9:49:75:A4:7D:22:D8:5A:6E:C3:62:CB:1A:91:49:7F:FF:EE:F2"}}},"request":{"raw":"GET /email-secure-captcha-image.php?t=MjIxNzM2OGRiMWI1ZmUxMDQzNTM5N2UwN2JlNmMwZWIuNDlkMDI4MzE5MWFjY2U4MGI1ZjI1OTYzZTRhZGZlM2YuMTc4OTgwNzMwNXw0ZDViZGNjOGRmOGNlNmIwMmY2YTM5M2NlMDJlMGI5OTg1ZmY4N2MzM2I2MzVkNDZkZWNmOTI2NTI2Zjc3ODAx HTTP/1.1\r\nHost: 8675-truist-acceweb-auth.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6\r\nCookie: PHPSESSID=b0hq7lsifanalil765q8njf5fd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 19 Sep 2026 08:39:46 GMT\r\nContent-Type: image/svg+xml; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1261,"size_decoded":1554,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"c6da4527dfa13e62c48c586fd01755d6","sha1":"920168363e165b1017c1135e69460cd841f2d446","sha256":"716292d65363857cf36d9609c0a62d7050bea7c07618b816df43bc3a69b6f257","sha512":"14354469ef88fed3b711534a0eb05fdd6429d9a5755678aeb4d9661d01b4da1f0b148dcfea5b975b9d43308f7b7d26f475309e9aa9cb72f9ba8541072f6ba085","ssdeep":"","tlshash":"f621f61192acb41ee454e73907d9dcb7628770d3ab5d0368fd80352eaa254c7dc6c22e","first_seen":"2026-09-19T08:40:20.613108Z","last_seen":"2026-09-19T08:40:20.613108Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":26,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"8675-truist-acceweb-auth.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8675-truist-acceweb-auth.live/email-secure-captcha-image.php?t=MjIxNzM2OGRiMWI1ZmUxMDQzNTM5N2UwN2JlNmMwZWIuZmJmYzhjYTBjMTA1NzE5ODg2MjhiN2JlZjgzZjNhOTEuMTc4OTgwNzMwNXw2NjU5MTg5ZmEzY2VkMWZjMjM3MzRjYzlhOTIwMjhlYjQ2OWM1YTJkOTMzMGRjMjZiM2ZiNWQ0ZDQzYWZjNGYy","fqdn":"8675-truist-acceweb-auth.live","domain":"8675-truist-acceweb-auth.live","tld":"live"},"ip":{"addr":"147.45.61.83","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6","date":"2026-09-19T08:39:46.143Z","timestamp":1789807186143,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8675-truist-acceweb-auth.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 19:22:51 GMT","end":"Wed, 16 Dec 2026 19:22:50 GMT"},"fingerprint":{"sha1":"D5:F6:E0:A4:3B:AD:0E:B4:A6:AF:99:BB:FE:42:55:EE:34:31:59:D8","sha256":"D0:5E:67:A8:99:32:5C:C3:A5:BA:CD:6B:25:B9:49:75:A4:7D:22:D8:5A:6E:C3:62:CB:1A:91:49:7F:FF:EE:F2"}}},"request":{"raw":"GET /email-secure-captcha-image.php?t=MjIxNzM2OGRiMWI1ZmUxMDQzNTM5N2UwN2JlNmMwZWIuZmJmYzhjYTBjMTA1NzE5ODg2MjhiN2JlZjgzZjNhOTEuMTc4OTgwNzMwNXw2NjU5MTg5ZmEzY2VkMWZjMjM3MzRjYzlhOTIwMjhlYjQ2OWM1YTJkOTMzMGRjMjZiM2ZiNWQ0ZDQzYWZjNGYy HTTP/1.1\r\nHost: 8675-truist-acceweb-auth.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8675-truist-acceweb-auth.live/email-secure-captcha.php?to=email-secure-wait.php%3Fto%3D.%252Femail%252Femail__gmail%252Findex.php%253Fid%253DEGF8EFCF672FBB2CD6\r\nCookie: PHPSESSID=b0hq7lsifanalil765q8njf5fd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 19 Sep 2026 08:39:46 GMT\r\nContent-Type: image/svg+xml; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":956,"size_decoded":1249,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"2a00eeb2a9f6957148b1037e6493f758","sha1":"fda8a109b1a118083d03fe05803781a15a9b845a","sha256":"416950e5a975573eebba458d6ec9ac8e862a22c1da7051f21ed68e7619d65a39","sha512":"cb1a29b186ec8b272ffa9ba7634e510526fe58e96d47f40a22c2d08077eff64739f29037807c36e63cc1aec607922f65e5fcbec3a46369b652ad2504fd4b2d15","ssdeep":"","tlshash":"e311061597a8b42ee854d7390799c8b76346b0c3ab194368ed81392e5b240c79d6c33d","first_seen":"2026-09-19T08:40:20.614792Z","last_seen":"2026-09-19T08:40:20.614792Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"8675-truist-acceweb-auth.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}