{"report_id":"8a2354d4-7930-4d48-8fcd-a4528fc13089","version":0,"status":"done","tags":[],"date":"2026-09-13T18:45:19Z","url":{"schema":"http","addr":"landing.email/","fqdn":"landing.email","domain":"landing.email","tld":"email"},"ip":{"addr":"143.204.238.35","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"landing.email/","fqdn":"landing.email","domain":"landing.email","tld":"email"},"title":"Free Landing Page Solution by DirectIQ Email Marketing","dom":{"size":3497,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2485)","md5":"9d6a06314ed7b71b898f958d55274f77","sha1":"0ef52ba57e57439bb403803cd9eb4178c4e48121","sha256":"905ca0263f0abba3a932e02576f05ab9212fd4876726e09ef8a8eb16a4c1f315","sha512":"a4b629eadee43b85e695bc050cd2c96424fefb9d3ce41dcfd5ff7c621e5522dc04e8b5484b65febd067b7bfc99c710307dcb00389dcdcfe831908d61a67056fe","ssdeep":"","tlshash":"a6718373a3a03418e23389323be6739d36009533d456a55fb445ebb8cbc963b56b2b45","dom_hash":"domhashf761e6b2f6e9f60bb41b559ac11728ec","first_seen":"2026-03-21T05:41:30.384852Z","last_seen":"2026-09-13T18:45:19.515279Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"landing.email/","fqdn":"landing.email","domain":"landing.email","tld":"email"},"ip":{"addr":"143.204.238.35","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-18T18:45:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"landing.email","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"landing.email","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"landing.email","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"landing.email","ip":{"addr":"143.204.238.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-11-01","domain_rank":0,"first_seen":"2015-06-30T10:08:46Z","last_seen":"2026-09-13T18:37:39.580836Z","alert_count":6,"request_count":2,"received_data":47606,"sent_data":994,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"landing.email/","fqdn":"landing.email","domain":"landing.email","tld":"email"},"ip":{"addr":"143.204.238.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-13T18:44:50.256Z","timestamp":1789325090256,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"landing.email","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 19 Jun 2026 00:00:00 GMT","end":"Sat, 02 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4C:C6:05:4E:2A:14:9E:B6:40:49:F5:F7:F8:7A:1A:DA:BB:23:2F:5F","sha256":"28:D3:8C:5D:08:9B:4F:69:67:67:73:4D:40:EE:71:C2:E5:B3:D0:C2:53:47:C6:15:C5:EB:BA:8E:DF:49:3D:64"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: landing.email\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Wed, 09 Mar 2022 13:49:05 GMT\r\nServer: AmazonS3\r\nContent-Encoding: gzip\r\nDate: Sun, 13 Sep 2026 02:00:10 GMT\r\nETag: W/\"01d4ba7a313032914b82322eb6ce716f\"\r\nVary: Accept-Encoding\r\nX-Cache: Error from cloudfront\r\nVia: 1.1 b682a022c770adab7986c6e1902d95ae.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: ARN53-P4\r\nX-Amz-Cf-Id: rsw3hgz3An3R9gIF8J5SuMWd0mopDDZuo1_ZHB_n1QIp2yYO4DPFvg==\r\nAge: 60281\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3518,"size_decoded":2146,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2485)","md5":"01d4ba7a313032914b82322eb6ce716f","sha1":"be2e10c8fe81b5c557565773e22526e9c2935354","sha256":"c0c69e8c4d74d43f398d1b2cda1b3d4959717dd9055e9c5d9ea7e3dbe5a436d8","sha512":"49a80ff0ec89f22540ef5e5483b325a36338122c53b63f164b4467b878d32e41851a420c538cae81d9e65baadd1471fcd19c5b5b2e241b14ca68c874fe7ea1cf","ssdeep":"","tlshash":"48718373a3903818e23289323be2739936009573d456a55fb445eb68cbc563a56f3b45","first_seen":"2025-06-03T08:15:54.665206Z","last_seen":"2026-09-13T18:45:19.516416Z","times_seen":4,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":17,"connect":8,"send":0,"wait":363,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"landing.email","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"landing.email","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"landing.email","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"landing.email/direct-iq/card.svg","fqdn":"landing.email","domain":"landing.email","tld":"email"},"ip":{"addr":"143.204.238.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://landing.email/","date":"2026-09-13T18:44:50.885Z","timestamp":1789325090885,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"landing.email","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 19 Jun 2026 00:00:00 GMT","end":"Sat, 02 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4C:C6:05:4E:2A:14:9E:B6:40:49:F5:F7:F8:7A:1A:DA:BB:23:2F:5F","sha256":"28:D3:8C:5D:08:9B:4F:69:67:67:73:4D:40:EE:71:C2:E5:B3:D0:C2:53:47:C6:15:C5:EB:BA:8E:DF:49:3D:64"}}},"request":{"raw":"GET /direct-iq/card.svg HTTP/1.1\r\nHost: landing.email\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://landing.email/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Wed, 09 Mar 2022 13:28:27 GMT\r\nServer: AmazonS3\r\nContent-Encoding: br\r\nDate: Sun, 13 Sep 2026 04:25:44 GMT\r\nETag: W/\"0012d5db7fc65b6345dd746bc15cbb4e\"\r\nVary: Accept-Encoding\r\nX-Cache: Hit from cloudfront\r\nVia: 1.1 b682a022c770adab7986c6e1902d95ae.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: ARN53-P4\r\nX-Amz-Cf-Id: -LFnyRAOvrDsNq6Z9Bw8oO93CFoKiQEwzB54s6oio-FNFvhVUrjgow==\r\nAge: 51547\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":43092,"size_decoded":14594,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0012d5db7fc65b6345dd746bc15cbb4e","sha1":"797445762c8a94fcb539848e2ddd841060a2a908","sha256":"66f6735d4c7f6654bf17a29f7efdf21398745e71bbb3828a54055977857f8fb9","sha512":"a498d3b8aa19dc0f0518aa0004f2159b0560832a6ad2c30c82762ec8449fb8d919c2a454ae37667a1df44ef9241e985806faf0141f5b4b83ab98b55f64b7ff8f","ssdeep":"768:cQMV1BZYUmeCXiV8Jiz5oOR1TY8tcweIh:Q1BCUmFJI3zcxu","tlshash":"711361bb13184bfea5c19b849bdaa0ad33b4859272f991d8cf539657ac025b7c074c70","first_seen":"2025-06-03T08:15:54.667399Z","last_seen":"2026-09-13T18:45:19.517078Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"landing.email","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"landing.email","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"landing.email","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}