{"report_id":"8992d1b2-1842-46e0-8629-05f93f04dce8","version":6,"status":"done","tags":["google"],"date":"2026-06-07T01:03:38Z","url":{"schema":"http","addr":"e-serviceparts.info/landingpage/a92eca60-2cb8-444d-9623-dfa436879834/cygk1vk6hdnc_hdqkp4oz9wy-rwmw2t-8xdcs_5k-m","fqdn":"e-serviceparts.info","domain":"e-serviceparts.info","tld":"info"},"ip":{"addr":"13.249.8.82","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"e-serviceparts.info/landingpage/a92eca60-2cb8-444d-9623-dfa436879834/cygk1vk6hdnc_hdqkp4oz9wy-rwmw2t-8xdcs_5k-m","fqdn":"e-serviceparts.info","domain":"e-serviceparts.info","tld":"info"},"title":"Sign in - Google Accounts","dom":{"size":47765,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (46620)","md5":"0ae601929347d4fe4e20a741214b95e0","sha1":"b164cc9348f598940d4c30ac5c4482fcc0f82107","sha256":"72d0ad7372db299932d19bcf93afe12165af656efbed9ee5f4bef88df933e116","sha512":"63f857b174ec1dfd4a0c91b4aabe4d0acb475e6920180dd40cd824f0bc78d4624ecd3dfa49c58b3a18b4486f1b42329f1ebb4630e95db54040b13640d80806ad","ssdeep":"384:zeosDzPIHXF9/rJ/By1kplbBTI8+TL2cybRL32KNbBrFXAWd:zks3nRBymJd0wVrFXAWd","tlshash":"7923623a59032901ba47989c7fe26a08227a4261d207517e7fdd77f4c38fe6853723a9","dom_hash":"domhashb2ff10fd7380a0dbcfecbd51f2f9f3b5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"e-serviceparts.info/landingpage/a92eca60-2cb8-444d-9623-dfa436879834/cygk1vk6hdnc_hdqkp4oz9wy-rwmw2t-8xdcs_5k-m","fqdn":"e-serviceparts.info","domain":"e-serviceparts.info","tld":"info"},"ip":{"addr":"13.249.8.82","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-12T01:03:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"e-serviceparts.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"e-serviceparts.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"e-serviceparts.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"cloud.phishinsight.trendmicro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]},"summary":[{"fqdn":"e-serviceparts.info","ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2018-08-22","domain_rank":618871,"first_seen":"2021-02-02T13:12:43Z","last_seen":"2026-06-04T05:25:02.92153Z","alert_count":8,"request_count":2,"received_data":49000,"sent_data":1115,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cloud.phishinsight.trendmicro.com","ip":{"addr":"54.240.174.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1995-04-20","domain_rank":0,"first_seen":"2022-05-31T12:32:07Z","last_seen":"2026-06-03T12:11:51.369092Z","alert_count":6,"request_count":6,"received_data":42205,"sent_data":3160,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"e-serviceparts.info/landingpage/a92eca60-2cb8-444d-9623-dfa436879834/cygk1vk6hdnc_hdqkp4oz9wy-rwmw2t-8xdcs_5k-m","fqdn":"e-serviceparts.info","domain":"e-serviceparts.info","tld":"info"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-07T01:03:16.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-serviceparts.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 07 Sep 2025 00:00:00 GMT","end":"Tue, 06 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D2:73:07:6C:A3:01:29:B7:B5:E5:B9:38:7E:A1:73:DA:C2:88:5A:7E","sha256":"46:7F:6A:D2:C1:2D:F3:88:F9:75:DB:39:AE:1D:E2:5D:80:0A:1D:E4:FB:3D:A6:FB:2F:5D:33:A9:F2:16:D5:63"}}},"request":{"raw":"GET /landingpage/a92eca60-2cb8-444d-9623-dfa436879834/cygk1vk6hdnc_hdqkp4oz9wy-rwmw2t-8xdcs_5k-m HTTP/1.1\r\nHost: e-serviceparts.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 8667\r\ndate: Sun, 07 Jun 2026 01:03:17 GMT\r\nx-amzn-trace-id: Root=1-6a24c354-62ef13742f028f7967ce7167\r\nx-amzn-requestid: 7f594b32-b75a-4aff-bcf0-409756a2c022\r\ncontent-encoding: br\r\nx-amzn-remapped-content-length: 8667\r\nx-amz-apigw-id: ekN1VEQzjoEEBxw=\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bb489e045ccdb24c55a720f2ea03e7f0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: bNsjPIqc9JvQhL9y_O7mQEVUdv37qJ1bQxcx3b0mNArsVEPWgupGOg==\r\nx-robots-tag: noindex\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":47812,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (46635)","md5":"b15314a4994e17c2e5822cbd598f20a3","sha1":"8f1bbc248b953d3311d8777350fa02f1cd371c13","sha256":"21675aadd3b0b1235d4e2aa6418e950e2ace6a57ddfd4afdd27327d893780577","sha512":"ae9d57781872d4d23ae1ca9a4a77fc85dc987b8c649c89e44f4e306d44058854d8f7de335a7bc61206efbecb39c31e1cd1e3df55d87b295ba3b1eaf178f21693","ssdeep":"384:UevsDzPIHXF9/rJ/By1kplbBTI8+TL2cybRo3TkjbMrSXAWM:Ubs3nRBymJd0MQrSXAWM","tlshash":"9323623a59032901ba47989c7fe26b08227a42a19107517e7fdd77f4c3cfe6853723a9","first_seen":"2026-06-07T01:03:39.160938Z","last_seen":"2026-06-07T02:44:20.469478Z","times_seen":2,"resource_available":true,"data":null}},"time_used":701,"timings":{"blocked":189,"dns":23,"connect":1,"send":0,"wait":321,"receive":1,"ssl":162},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"e-serviceparts.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"e-serviceparts.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"e-serviceparts.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"cloud.phishinsight.trendmicro.com/content/lps/assets/system/img/universal_language_settings_21.png","fqdn":"cloud.phishinsight.trendmicro.com","domain":"trendmicro.com","tld":"com"},"ip":{"addr":"54.240.174.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://e-serviceparts.info/landingpage/a92eca60-2cb8-444d-9623-dfa436879834/cygk1vk6hdnc_hdqkp4oz9wy-rwmw2t-8xdcs_5k-m","date":"2026-06-07T01:03:17.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phishinsight.trendmicro.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 10 Jul 2025 00:00:00 GMT","end":"Sat, 08 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B8:62:C0:33:FB:2B:88:55:23:51:84:B7:C0:D6:39:EB:36:A9:AD:2F","sha256":"80:6B:35:5A:0F:30:2E:C5:87:AF:85:E1:54:66:36:01:99:AF:6E:C7:3A:36:0C:8C:C9:BA:38:73:8D:37:29:BB"}}},"request":{"raw":"GET /content/lps/assets/system/img/universal_language_settings_21.png HTTP/1.1\r\nHost: cloud.phishinsight.trendmicro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://e-serviceparts.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 199\r\ndate: Sat, 06 Jun 2026 13:07:06 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 Mar 2023 03:33:31 GMT\r\netag: \"4a2d1168a691747daf4d22e0dc483958\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: YdbZbcX2X2xFa2oaIENQ9L73epbllSqC\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: OA9Zt4S4g4op28lX57uWezh_Pfv1iDbIrKxe3cuXDWiqrVIl90Rn_Q==\r\nage: 42972\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":199,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 21 x 21, 8-bit/color RGBA, non-interlaced","md5":"4a2d1168a691747daf4d22e0dc483958","sha1":"e556fed18aff83a117f173960c66d42d57cbc4b4","sha256":"59404af2d92c53ad1ee9e21b252c07c77dcba810b248a79d6ae989b1ff63c7d6","sha512":"b9ae29a74f4711ea3e49d40f823e00487394b288c0a787fed78b6bcfc769db4123e2b3a0c7c7e8ee5bdbf8ba304de666da3be797a2abca1a9e828db6799c4715","ssdeep":"","tlshash":"b2d022c39251ac3caac134b34a2817a29e20068e30a78a0ac411096e8e6645612d8252","first_seen":"2023-05-02T15:31:59Z","last_seen":"2026-06-11T07:40:12.811982Z","times_seen":441,"resource_available":false,"data":null}},"time_used":657,"timings":{"blocked":324,"dns":18,"connect":1,"send":0,"wait":24,"receive":0,"ssl":286},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"cloud.phishinsight.trendmicro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cloud.phishinsight.trendmicro.com/content/lps/assets/system/fonts/mem8YaGs126MiZpBA_UFVZ0b.woff2","fqdn":"cloud.phishinsight.trendmicro.com","domain":"trendmicro.com","tld":"com"},"ip":{"addr":"54.240.174.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://e-serviceparts.info/landingpage/a92eca60-2cb8-444d-9623-dfa436879834/cygk1vk6hdnc_hdqkp4oz9wy-rwmw2t-8xdcs_5k-m","date":"2026-06-07T01:03:17.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phishinsight.trendmicro.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 10 Jul 2025 00:00:00 GMT","end":"Sat, 08 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B8:62:C0:33:FB:2B:88:55:23:51:84:B7:C0:D6:39:EB:36:A9:AD:2F","sha256":"80:6B:35:5A:0F:30:2E:C5:87:AF:85:E1:54:66:36:01:99:AF:6E:C7:3A:36:0C:8C:C9:BA:38:73:8D:37:29:BB"}}},"request":{"raw":"GET /content/lps/assets/system/fonts/mem8YaGs126MiZpBA_UFVZ0b.woff2 HTTP/1.1\r\nHost: cloud.phishinsight.trendmicro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://e-serviceparts.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://e-serviceparts.info/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 14048\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 Mar 2023 03:32:53 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: h3tXPlz1eRKDaLBJ39VqyvSAVtyo9Gyg\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 07 Jun 2026 01:03:18 GMT\r\netag: \"cffb686d7d2f4682df8342bd4d276e09\"\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 6n78LQgxOLDJ_Ik5X54Gy7DWScBupNNvChCL8f0YdG9NDoT1EpGJLg==\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14048,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14048, version 1.0","md5":"cffb686d7d2f4682df8342bd4d276e09","sha1":"2c07a9656f1e38da408f20f1cf11581a15cbd7a2","sha256":"3b98b0dc3bed9d40f43e64adba5de47c76895338a96f0a5a314676cd6287eca9","sha512":"a869b3812e53a644eff8172b2995812ae56e4bf45da21eb6f735ce0d14bbdd215d7ebfce970a21454555fcae28c9dcc41f2b478070ca604a332d5bc081e13bed","ssdeep":"384:rim+UGnrgFdIZGzg6MjaHWWBGE62eLLF/0eked:em+Brg8ZGzgLIWuTed","tlshash":"6e52c03ec18a56e0fa0c837ae452b8f019f33ba977e431b596522bc4275ce1417692b5","first_seen":"2023-04-07T23:35:47Z","last_seen":"2026-06-13T11:14:44.664302Z","times_seen":16693,"resource_available":false,"data":null}},"time_used":752,"timings":{"blocked":305,"dns":13,"connect":13,"send":0,"wait":137,"receive":1,"ssl":274},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"cloud.phishinsight.trendmicro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-serviceparts.info/favicon.ico","fqdn":"e-serviceparts.info","domain":"e-serviceparts.info","tld":"info"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://e-serviceparts.info/landingpage/a92eca60-2cb8-444d-9623-dfa436879834/cygk1vk6hdnc_hdqkp4oz9wy-rwmw2t-8xdcs_5k-m","date":"2026-06-07T01:03:18.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-serviceparts.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 07 Sep 2025 00:00:00 GMT","end":"Tue, 06 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D2:73:07:6C:A3:01:29:B7:B5:E5:B9:38:7E:A1:73:DA:C2:88:5A:7E","sha256":"46:7F:6A:D2:C1:2D:F3:88:F9:75:DB:39:AE:1D:E2:5D:80:0A:1D:E4:FB:3D:A6:FB:2F:5D:33:A9:F2:16:D5:63"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: e-serviceparts.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://e-serviceparts.info/landingpage/a92eca60-2cb8-444d-9623-dfa436879834/cygk1vk6hdnc_hdqkp4oz9wy-rwmw2t-8xdcs_5k-m\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: application/json\r\ncontent-length: 42\r\ndate: Sun, 07 Jun 2026 01:03:18 GMT\r\nx-amzn-trace-id: Root=1-6a24c356-3b3339375e1302f15ace2a70\r\nx-amzn-requestid: 2d8e7ec8-456f-4237-8788-37b57432d401\r\nx-amzn-errortype: MissingAuthenticationTokenException\r\nx-amz-apigw-id: ekN1hGLQjoEEI4w=\r\nx-cache: Error from cloudfront\r\nvia: 1.1 bb489e045ccdb24c55a720f2ea03e7f0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: yThpZMFG-T7WrReGYHoXP-k4v-AiwiPGkMD-zExQmKqmnCC6x7BamA==\r\nx-robots-tag: noindex\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"905b1fbb26e082557ff0b3b3553cda6c","sha1":"8fe0790d6026998bdb2c9ffa3b915952e613e1b4","sha256":"f249b63cb2fcb66b47e86f906c98f8fd912e82dd035b4e53d7e72fc1960cfd16","sha512":"284567e83a5c15761498249b27b4b700aa081a65b858f29458e5d0f3debdea93dd5cfad94eefaeb43837e70cc288b2a34ea168d2771cb57c993e269c287097ce","ssdeep":"","tlshash":"42900455c1401d45cf430313775070c04711015405c434014c14d4dd010541543f3557","first_seen":"2023-04-05T03:12:38Z","last_seen":"2026-06-12T22:05:20.514064Z","times_seen":6515,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"e-serviceparts.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"e-serviceparts.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"e-serviceparts.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"cloud.phishinsight.trendmicro.com/content/lps/assets/system/img/avatar_2x.png","fqdn":"cloud.phishinsight.trendmicro.com","domain":"trendmicro.com","tld":"com"},"ip":{"addr":"54.240.174.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://e-serviceparts.info/landingpage/a92eca60-2cb8-444d-9623-dfa436879834/cygk1vk6hdnc_hdqkp4oz9wy-rwmw2t-8xdcs_5k-m","date":"2026-06-07T01:03:17.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phishinsight.trendmicro.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 10 Jul 2025 00:00:00 GMT","end":"Sat, 08 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B8:62:C0:33:FB:2B:88:55:23:51:84:B7:C0:D6:39:EB:36:A9:AD:2F","sha256":"80:6B:35:5A:0F:30:2E:C5:87:AF:85:E1:54:66:36:01:99:AF:6E:C7:3A:36:0C:8C:C9:BA:38:73:8D:37:29:BB"}}},"request":{"raw":"GET /content/lps/assets/system/img/avatar_2x.png HTTP/1.1\r\nHost: cloud.phishinsight.trendmicro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://e-serviceparts.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 626\r\ndate: Sat, 06 Jun 2026 13:07:06 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 Mar 2023 03:32:57 GMT\r\netag: \"51116d3ed346aa1a00b4a9393dfe117e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: QL5DYXEqcbHcff4oIUOMdO2M8UTuzNvT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Or_pJm4WPZy2HYowsKQOGOqd7gD-1l6waKjlLn-07PvWcpy9x5PvKA==\r\nage: 42972\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":626,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit grayscale, non-interlaced","md5":"51116d3ed346aa1a00b4a9393dfe117e","sha1":"2b2394121d8e3e6526f1b6f686e49d61023a0c3f","sha256":"cdcc6d6dcda827a694dce8bfa9a1ab41113b629ef1cc11f886866af9194c81d0","sha512":"7d3f2c0f499013bb54d239c770f4bdf910f0d0d6aa8d5bf7d3858fe5767ee1004fab44a8644a0ef9e8cd2c6c8eb7079805a0a1d6ae414b2f5e6f6987633c30dc","ssdeep":"","tlshash":"a1f0e1487e378dc6f1d644b38e41d6f9a4eb035d14024ae863964a1f61f196417c32f8","first_seen":"2023-05-02T15:31:59Z","last_seen":"2026-06-11T07:40:12.81106Z","times_seen":582,"resource_available":false,"data":null}},"time_used":701,"timings":{"blocked":334,"dns":50,"connect":1,"send":0,"wait":23,"receive":0,"ssl":281},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"cloud.phishinsight.trendmicro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cloud.phishinsight.trendmicro.com/content/lps/assets/system/img/googlelogo_color_112x36dp.png","fqdn":"cloud.phishinsight.trendmicro.com","domain":"trendmicro.com","tld":"com"},"ip":{"addr":"54.240.174.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://e-serviceparts.info/landingpage/a92eca60-2cb8-444d-9623-dfa436879834/cygk1vk6hdnc_hdqkp4oz9wy-rwmw2t-8xdcs_5k-m","date":"2026-06-07T01:03:17.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phishinsight.trendmicro.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 10 Jul 2025 00:00:00 GMT","end":"Sat, 08 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B8:62:C0:33:FB:2B:88:55:23:51:84:B7:C0:D6:39:EB:36:A9:AD:2F","sha256":"80:6B:35:5A:0F:30:2E:C5:87:AF:85:E1:54:66:36:01:99:AF:6E:C7:3A:36:0C:8C:C9:BA:38:73:8D:37:29:BB"}}},"request":{"raw":"GET /content/lps/assets/system/img/googlelogo_color_112x36dp.png HTTP/1.1\r\nHost: cloud.phishinsight.trendmicro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://e-serviceparts.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 4603\r\ndate: Sat, 06 Jun 2026 13:07:06 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 Mar 2023 03:33:15 GMT\r\netag: \"2b7540f6ff9e9acdf3c1a1b9cf8dc9c2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ghX8c7HCLq60yFbyPoKa2fL2yQoICA6x\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: AaVxfBuRhRIYJRn7louH0leVhax7HrKjzwCqGnzOXzNLDLwzAUKoMQ==\r\nage: 42972\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4603,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 224 x 72, 8-bit/color RGBA, non-interlaced","md5":"2b7540f6ff9e9acdf3c1a1b9cf8dc9c2","sha1":"abfcaddcd7db1bac217ad4a2dd46ad2a99e1a442","sha256":"f3b98eebeeef0cbcac8efcf2bed7df9a5644bfd67126541f0535499200fefe71","sha512":"257fd094a637e55353cfe990cc5877a9c9d2a142d3cfbd34231274cf15d753244a4cdfeb539080845ec0275bab0da42ab96175e9be6996d7d2fc99bb6fdec49b","ssdeep":"96:hJZIWdnMb71LeCfqx4DjLe49P7wXlETkGdYwuVP2mQeAM1n9gJDR4zKgK:hJZIiMHReAqx4DjLe4ZwVYdDE1QHM1na","tlshash":"c2918e205763a121f3e946c838cf5ea5b27dbdb92b34238280792cbfc4b8024742f994","first_seen":"2023-05-07T14:21:30Z","last_seen":"2026-06-11T07:40:12.812851Z","times_seen":169,"resource_available":false,"data":null}},"time_used":659,"timings":{"blocked":316,"dns":21,"connect":1,"send":0,"wait":23,"receive":0,"ssl":291},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"cloud.phishinsight.trendmicro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cloud.phishinsight.trendmicro.com/content/lps/assets/system/img/wlogostrip_230x17_1x.png","fqdn":"cloud.phishinsight.trendmicro.com","domain":"trendmicro.com","tld":"com"},"ip":{"addr":"54.240.174.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://e-serviceparts.info/landingpage/a92eca60-2cb8-444d-9623-dfa436879834/cygk1vk6hdnc_hdqkp4oz9wy-rwmw2t-8xdcs_5k-m","date":"2026-06-07T01:03:17.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phishinsight.trendmicro.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 10 Jul 2025 00:00:00 GMT","end":"Sat, 08 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B8:62:C0:33:FB:2B:88:55:23:51:84:B7:C0:D6:39:EB:36:A9:AD:2F","sha256":"80:6B:35:5A:0F:30:2E:C5:87:AF:85:E1:54:66:36:01:99:AF:6E:C7:3A:36:0C:8C:C9:BA:38:73:8D:37:29:BB"}}},"request":{"raw":"GET /content/lps/assets/system/img/wlogostrip_230x17_1x.png HTTP/1.1\r\nHost: cloud.phishinsight.trendmicro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://e-serviceparts.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 4285\r\ndate: Sat, 06 Jun 2026 13:07:06 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 Mar 2023 03:33:35 GMT\r\netag: \"c8e020fb658fa746845c385029c552f6\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: YqChPkaeURSBL7bgKAaXpebRB8QME3s2\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: YacYGT48oe5sVvROqAtdBqd1ny6JDKZ1vjMWVI87f_4pNxs0dfpIbg==\r\nage: 42972\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4285,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 230 x 17, 8-bit/color RGBA, non-interlaced","md5":"c8e020fb658fa746845c385029c552f6","sha1":"ced6cb8a5647e29c3f9bf66fdac92dcb3c98dc49","sha256":"05cdc120325f04f53e3ec7dbba877500d94db5a47e38fb6a2cc96fa3d1d7664c","sha512":"315bafc5ffa506f5bc743b67f6d412857a0acdb8cd7d20cb12fdb195a4d1b764b146340630ccb5a9e8e3681280bb647d4073bf3088319f2deb9273947c8959fb","ssdeep":"96:FmDQv1lfA8S6Yd94WFpBSVh3F/4CUMV6kr:ZNSIYjNFpGhVV9r","tlshash":"d9916d985ece20650376deba9a535c58b4eade0718f39d1ab962c4be5e072d03ef7004","first_seen":"2023-05-05T02:14:56Z","last_seen":"2026-06-11T07:40:12.804275Z","times_seen":295,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":305,"dns":0,"connect":1,"send":0,"wait":24,"receive":0,"ssl":277},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"cloud.phishinsight.trendmicro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cloud.phishinsight.trendmicro.com/content/lps/assets/system/fonts/mem5YaGs126MiZpBA_UN_r8OUuhp.woff2","fqdn":"cloud.phishinsight.trendmicro.com","domain":"trendmicro.com","tld":"com"},"ip":{"addr":"54.240.174.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://e-serviceparts.info/landingpage/a92eca60-2cb8-444d-9623-dfa436879834/cygk1vk6hdnc_hdqkp4oz9wy-rwmw2t-8xdcs_5k-m","date":"2026-06-07T01:03:17.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phishinsight.trendmicro.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 10 Jul 2025 00:00:00 GMT","end":"Sat, 08 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B8:62:C0:33:FB:2B:88:55:23:51:84:B7:C0:D6:39:EB:36:A9:AD:2F","sha256":"80:6B:35:5A:0F:30:2E:C5:87:AF:85:E1:54:66:36:01:99:AF:6E:C7:3A:36:0C:8C:C9:BA:38:73:8D:37:29:BB"}}},"request":{"raw":"GET /content/lps/assets/system/fonts/mem5YaGs126MiZpBA_UN_r8OUuhp.woff2 HTTP/1.1\r\nHost: cloud.phishinsight.trendmicro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://e-serviceparts.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://e-serviceparts.info/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 14564\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 Mar 2023 03:32:51 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: XyA3BP8ZfXxPX5JOlycPYG5xWn5hYbRq\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 07 Jun 2026 01:03:18 GMT\r\netag: \"60c866748ff15f5b347fdba64596b1b1\"\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: ereETzTW4appu8ONrJqImNnCHySsJBEZ3S-BzvwJPC10QG4ppUUsJA==\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":14564,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14564, version 1.0","md5":"60c866748ff15f5b347fdba64596b1b1","sha1":"34f486906decb7c8cf7a02d4758add9a2408c7a5","sha256":"5278c0f6063ca9ad85653b18a2ddf1aa57e3ab40b7973a69b09acf859db8264d","sha512":"e07fcf65ad1a474388633ccc58a655dd27e3c5ae64ff5cc904b075aa0744cd58fc24304e62b432428801c799f16c2179b59efaa1daaf957c5d5debc25d932a21","ssdeep":"384:B6CerVzEwPCkcl+Oke83sEUQaE0tPhnVz1cVLxXwj+yVOGb:B6CexzTCkhedHEs3Rc7wj+XQ","tlshash":"de62cf6f83b5a41ee98155f9ea99f4da39217cb4d4064f0c4dbf0a3f310429ec5a84ea","first_seen":"2023-04-08T13:26:58Z","last_seen":"2026-06-13T09:04:57.44697Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":310,"dns":17,"connect":14,"send":0,"wait":131,"receive":2,"ssl":274},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"cloud.phishinsight.trendmicro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}