{"report_id":"9c972767-131f-43cd-bafb-a15449c2940c","version":0,"status":"done","tags":[],"date":"2026-09-26T19:12:39Z","url":{"schema":"http","addr":"rjjohnson.net/","fqdn":"rjjohnson.net","domain":"rjjohnson.net","tld":"net"},"ip":{"addr":"65.254.238.128","port":0,"asn":29873,"as":"Newfold Digital, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"rjjohnson.net/","fqdn":"rjjohnson.net","domain":"rjjohnson.net","tld":"net"},"title":"RJJ Architect, LLC","dom":{"size":10720,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (463)","md5":"615ca049ff58abfae89fb0a06bbd7fae","sha1":"371b3ee00a2cc9b8015b14d955e9620fa2a00104","sha256":"c7fcbe0b6ac495c1034450744fef1cd63681241b5c0cd46ec685ccc883a681a6","sha512":"0c0d3c23c5740dc5311665547b0cfdc110c40f78bc76cf052f6983a00ea9329f2c3fb688dddfd1d067b5f3f15fe6e5dbe718245ee09595f95eeea94599487412","ssdeep":"192:pjlirHyiuIzDTN+wrD9icVHF+VHfVHVu0/GwMH6A7SBNxskVrVB0k/JAbZOHHHWG:firHyiuQDx+K9zlMHd1b/GwMZWBU6B04","tlshash":"8b228433fa012a16c1cf92b1d4300e85b584c651cbb7acd971b2973b6bd69e467c328e","dom_hash":"domhashb392b3a22dfd63f771d1900ec7c25ff3","first_seen":"2026-09-22T10:29:02.833176Z","last_seen":"2026-09-26T19:13:34.234914Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rjjohnson.net/","fqdn":"rjjohnson.net","domain":"rjjohnson.net","tld":"net"},"ip":{"addr":"65.254.238.128","port":0,"asn":29873,"as":"Newfold Digital, Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-31T19:12:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-26","alert":"Phishing Block","trigger":"rjjohnson.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"rjjohnson.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"rjjohnson.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rjjohnson.net","ip":{"addr":"65.254.238.128","port":443,"asn":29873,"as":"BIZLAND-SD","country":"United States","country_code":"US"},"domain_registered":"1999-08-27","domain_rank":0,"first_seen":"2026-09-22T10:28:58.63657Z","last_seen":"2026-09-22T10:28:58.63657Z","alert_count":21,"request_count":7,"received_data":608888,"sent_data":3889,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft Word","description":"MS Word is a word-processing program used primarily for creating documents.","website":"https://office.microsoft.com/word","common_platform_enumeration":"cpe:2.3:a:microsoft:word:*:*:*:*:*:*:*:*","icon":"Microsoft Word.svg","categories":["Editors"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rjjohnson.net/unique1.gif","fqdn":"rjjohnson.net","domain":"rjjohnson.net","tld":"net"},"ip":{"addr":"65.254.238.128","port":443,"asn":29873,"as":"BIZLAND-SD","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rjjohnson.net/","date":"2026-09-26T19:12:10.236Z","timestamp":1790449930236,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rjjohnson.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 23:46:08 GMT","end":"Sun, 01 Nov 2026 23:46:07 GMT"},"fingerprint":{"sha1":"F5:13:97:55:A6:F8:62:00:C4:81:C8:B4:CD:45:71:4D:3A:C8:F8:73","sha256":"83:6E:4D:B8:7A:B9:18:FE:9C:37:6F:F0:5C:01:95:50:97:33:C2:01:F8:6F:5D:C8:9E:70:E2:76:AA:FE:9C:9F"}}},"request":{"raw":"GET /unique1.gif HTTP/1.1\r\nHost: rjjohnson.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rjjohnson.net/\r\nCookie: request_id=c56d3bd6-7a38-488e-8507-e54dd7c1f1e3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 26 Sep 2026 19:12:10 GMT\r\nContent-Type: image/gif\r\nContent-Length: 53498\r\nConnection: keep-alive\r\nLast-Modified: Wed, 30 Aug 2006 12:25:54 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=14400\r\nEtag: \"d0fa-41c3b42ab1880\"\r\nExpires: Sat, 26 Sep 2026 23:12:10 GMT\r\nAge: 0\r\nX-Request-ID: c56d3bd6-7a38-488e-8507-e54dd7c1f1e3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":53498,"size_decoded":53852,"mime_type":"image/gif","magic":"GIF image data, version 87a, 384 x 256","md5":"10d115b955d7fe8b7ae9cc652f69d06e","sha1":"5c14d9972eb541b52dfe271ae2962999b99d585f","sha256":"6f545ae320d454a1c8c8f49f6323c7313b50d174802fc327d1b79af023b87ef4","sha512":"db8b63b2a0854c52381b4bf2491b547b283a96abdff8d65003ec1795ff467596752b3a7db63d20206d23e92d927241a4e8b3be3eb51ba3ca75fec958f0740793","ssdeep":"1536:wP+UoW+c/qM4S81FlI3V92DTgpsMGBt7uRzyK1r:wTGcHM1r3wpsLbK1","tlshash":"483301c0fdb290d0f31d505c366a30a53e6966b973438d6ebe2a0d2c0093421e6ddd6f","first_seen":"2026-09-22T10:29:02.841834Z","last_seen":"2026-09-26T19:13:34.248954Z","times_seen":3,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":-1,"dns":0,"connect":155,"send":0,"wait":290,"receive":159,"ssl":162},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-26","alert":"Phishing Block","trigger":"rjjohnson.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"rjjohnson.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"rjjohnson.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rjjohnson.net/back2.gif","fqdn":"rjjohnson.net","domain":"rjjohnson.net","tld":"net"},"ip":{"addr":"65.254.238.128","port":443,"asn":29873,"as":"BIZLAND-SD","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rjjohnson.net/","date":"2026-09-26T19:12:10.241Z","timestamp":1790449930241,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rjjohnson.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 23:46:08 GMT","end":"Sun, 01 Nov 2026 23:46:07 GMT"},"fingerprint":{"sha1":"F5:13:97:55:A6:F8:62:00:C4:81:C8:B4:CD:45:71:4D:3A:C8:F8:73","sha256":"83:6E:4D:B8:7A:B9:18:FE:9C:37:6F:F0:5C:01:95:50:97:33:C2:01:F8:6F:5D:C8:9E:70:E2:76:AA:FE:9C:9F"}}},"request":{"raw":"GET /back2.gif HTTP/1.1\r\nHost: rjjohnson.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rjjohnson.net/\r\nCookie: request_id=c56d3bd6-7a38-488e-8507-e54dd7c1f1e3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 26 Sep 2026 19:12:10 GMT\r\nContent-Type: image/gif\r\nContent-Length: 3083\r\nConnection: keep-alive\r\nLast-Modified: Wed, 30 Aug 2006 12:24:47 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=14400\r\nEtag: \"c0b-41c3b3eacc1c0\"\r\nExpires: Sat, 26 Sep 2026 23:12:10 GMT\r\nAge: 0\r\nX-Request-ID: c56d3bd6-7a38-488e-8507-e54dd7c1f1e3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3083,"size_decoded":3435,"mime_type":"image/gif","magic":"GIF image data, version 87a, 128 x 64","md5":"d3bc5414e279ad14380532a2796b94df","sha1":"d82734f4a44e2e3d63202dbfa7c0840d530d01a8","sha256":"88e5e81072701d8d69488f81c52fde4e855fb75e879dace826fe81b171ca4f66","sha512":"89a9eb31c6e5d78ffd7a712292933af0e4481f94f939abfe47c1faa963e9f6d2a6d342830c16469066ef0cf094fb365e2bc00abc645d33d54f66fa6a626b1a72","ssdeep":"","tlshash":"18514b12e3e9af50f444c9ba1913b7a8e5a0cef424cc0eb486c45823df6310ac42e672","first_seen":"2026-09-22T10:29:02.84324Z","last_seen":"2026-09-26T19:13:34.251728Z","times_seen":3,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":158,"send":0,"wait":172,"receive":0,"ssl":163},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"rjjohnson.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-26","alert":"Phishing Block","trigger":"rjjohnson.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"rjjohnson.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rjjohnson.net/favicon.ico","fqdn":"rjjohnson.net","domain":"rjjohnson.net","tld":"net"},"ip":{"addr":"65.254.238.128","port":443,"asn":29873,"as":"BIZLAND-SD","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rjjohnson.net/","date":"2026-09-26T19:12:10.734Z","timestamp":1790449930734,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rjjohnson.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 23:46:08 GMT","end":"Sun, 01 Nov 2026 23:46:07 GMT"},"fingerprint":{"sha1":"F5:13:97:55:A6:F8:62:00:C4:81:C8:B4:CD:45:71:4D:3A:C8:F8:73","sha256":"83:6E:4D:B8:7A:B9:18:FE:9C:37:6F:F0:5C:01:95:50:97:33:C2:01:F8:6F:5D:C8:9E:70:E2:76:AA:FE:9C:9F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rjjohnson.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rjjohnson.net/\r\nCookie: request_id=c56d3bd6-7a38-488e-8507-e54dd7c1f1e3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 26 Sep 2026 19:12:10 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: max-age=86400\r\nAge: 0\r\nX-Request-ID: c56d3bd6-7a38-488e-8507-e54dd7c1f1e3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":217,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-26T23:46:44.399685Z","times_seen":18678171,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":146,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"rjjohnson.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"rjjohnson.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-26","alert":"Phishing Block","trigger":"rjjohnson.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rjjohnson.net/","fqdn":"rjjohnson.net","domain":"rjjohnson.net","tld":"net"},"ip":{"addr":"65.254.238.128","port":443,"asn":29873,"as":"BIZLAND-SD","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-26T19:12:08.712Z","timestamp":1790449928712,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rjjohnson.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 23:46:08 GMT","end":"Sun, 01 Nov 2026 23:46:07 GMT"},"fingerprint":{"sha1":"F5:13:97:55:A6:F8:62:00:C4:81:C8:B4:CD:45:71:4D:3A:C8:F8:73","sha256":"83:6E:4D:B8:7A:B9:18:FE:9C:37:6F:F0:5C:01:95:50:97:33:C2:01:F8:6F:5D:C8:9E:70:E2:76:AA:FE:9C:9F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rjjohnson.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 26 Sep 2026 19:12:09 GMT\r\nContent-Type: text/html\r\nContent-Length: 3432\r\nConnection: keep-alive\r\nSet-Cookie: request_id=c56d3bd6-7a38-488e-8507-e54dd7c1f1e3; Max-Age=3600; Path=/; HttpOnly\r\nLast-Modified: Thu, 18 Dec 2025 23:57:17 GMT\r\nETag: \"293a-64642b887fab6-gzip\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=3600\r\nExpires: Sat, 26 Sep 2026 20:12:09 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAge: 0\r\nX-Request-ID: c56d3bd6-7a38-488e-8507-e54dd7c1f1e3\r\n\r\n","headers":null,"cookies":[{"name":"request_id","value":"c56d3bd6-7a38-488e-8507-e54dd7c1f1e3","quoted":false,"path":"/","max_age":3600,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"request_id=c56d3bd6-7a38-488e-8507-e54dd7c1f1e3; Max-Age=3600; Path=/; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft Word","description":"MS Word is a word-processing program used primarily for creating documents.","website":"https://office.microsoft.com/word","common_platform_enumeration":"cpe:2.3:a:microsoft:word:*:*:*:*:*:*:*:*","icon":"Microsoft Word.svg","categories":["Editors"]}],"data":{"size":10554,"size_decoded":3929,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (441)","md5":"08c21f1925cb3b3a37deb6882e1e9237","sha1":"4c0e845228629524030f5f9eac908b74c4e85f36","sha256":"0cf07278e0bf0658a3f1e7f10b153bcb65faccfcce161dda00a033de90fd88f4","sha512":"b819c9090615aa5d47940f5b2a09f88c5c32b755d6f5a5fa16b7d32e7ae40126ac8a792a5cd4f459b803d83fc57995a486f0dba1ca6d61996ae1e3d45d5fe533","ssdeep":"192:jjlirHyiuIhDTN+wr1HRW6ZRpNx2WM70k2bZTHHYCprTM8vg:1irHyiuuDx+CxWsTuB0fHHYw37vg","tlshash":"14227137fb013655c08b9570e8300e9ab590c625ca93ecd930b69b3aabca5d553d329f","first_seen":"2026-09-22T10:29:02.835767Z","last_seen":"2026-09-26T19:13:34.238709Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1366,"timings":{"blocked":-1,"dns":293,"connect":153,"send":0,"wait":755,"receive":0,"ssl":165},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"rjjohnson.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-26","alert":"Phishing Block","trigger":"rjjohnson.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"rjjohnson.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rjjohnson.net/Johnson%20Illustration%20E-mai%20final.jpg","fqdn":"rjjohnson.net","domain":"rjjohnson.net","tld":"net"},"ip":{"addr":"65.254.238.128","port":443,"asn":29873,"as":"BIZLAND-SD","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rjjohnson.net/","date":"2026-09-26T19:12:10.232Z","timestamp":1790449930232,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rjjohnson.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 23:46:08 GMT","end":"Sun, 01 Nov 2026 23:46:07 GMT"},"fingerprint":{"sha1":"F5:13:97:55:A6:F8:62:00:C4:81:C8:B4:CD:45:71:4D:3A:C8:F8:73","sha256":"83:6E:4D:B8:7A:B9:18:FE:9C:37:6F:F0:5C:01:95:50:97:33:C2:01:F8:6F:5D:C8:9E:70:E2:76:AA:FE:9C:9F"}}},"request":{"raw":"GET /Johnson%20Illustration%20E-mai%20final.jpg HTTP/1.1\r\nHost: rjjohnson.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rjjohnson.net/\r\nCookie: request_id=c56d3bd6-7a38-488e-8507-e54dd7c1f1e3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 26 Sep 2026 19:12:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 410640\r\nConnection: keep-alive\r\nLast-Modified: Wed, 30 Aug 2006 12:35:58 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=14400\r\nEtag: \"64410-41c3b66ab6780\"\r\nExpires: Sat, 26 Sep 2026 23:12:10 GMT\r\nAge: 0\r\nX-Request-ID: c56d3bd6-7a38-488e-8507-e54dd7c1f1e3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":410640,"size_decoded":410997,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Adobe Photoshop CS Macintosh, datetime=2005:11:30 09:01:24], baseline, precision 8, 1024x458, components 3","md5":"93dbdac51d3158cb056b46afa3f5f3bf","sha1":"12eee6aab4a3c3e0bdbd354521bbeb7983dc7600","sha256":"994b7ca7c15b2b4b5919602a852d554f45e230ca382ab0194d8286447bcb0d59","sha512":"e4a6c49aa74cc263eef4361ce2943008e408e8bab33141edca0b923b35ade5ba36b375559a71c363f3ad905955c0e8e589b05a9a12b003c3f6c5417ed9e874f4","ssdeep":"12288:oZs9E7AT90Nv3dGH7x6NsKXE/UgeCWxH5KUA:5iTkMyUgsH5KD","tlshash":"4c94233e455ca9bc968d7139b468b0833f462fb11eb3583131252be88acf05de915e9f","first_seen":"2026-09-22T10:29:02.837342Z","last_seen":"2026-09-26T19:13:34.242617Z","times_seen":3,"resource_available":false,"data":null}},"time_used":796,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":475,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-26","alert":"Phishing Block","trigger":"rjjohnson.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"rjjohnson.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"rjjohnson.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rjjohnson.net/Entry%20Door.jpg","fqdn":"rjjohnson.net","domain":"rjjohnson.net","tld":"net"},"ip":{"addr":"65.254.238.128","port":443,"asn":29873,"as":"BIZLAND-SD","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rjjohnson.net/","date":"2026-09-26T19:12:10.234Z","timestamp":1790449930234,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rjjohnson.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 23:46:08 GMT","end":"Sun, 01 Nov 2026 23:46:07 GMT"},"fingerprint":{"sha1":"F5:13:97:55:A6:F8:62:00:C4:81:C8:B4:CD:45:71:4D:3A:C8:F8:73","sha256":"83:6E:4D:B8:7A:B9:18:FE:9C:37:6F:F0:5C:01:95:50:97:33:C2:01:F8:6F:5D:C8:9E:70:E2:76:AA:FE:9C:9F"}}},"request":{"raw":"GET /Entry%20Door.jpg HTTP/1.1\r\nHost: rjjohnson.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rjjohnson.net/\r\nCookie: request_id=c56d3bd6-7a38-488e-8507-e54dd7c1f1e3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 26 Sep 2026 19:12:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 99259\r\nConnection: keep-alive\r\nLast-Modified: Wed, 30 Aug 2006 12:25:27 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=14400\r\nEtag: \"183bb-41c3b410f1bc0\"\r\nExpires: Sat, 26 Sep 2026 23:12:10 GMT\r\nAge: 0\r\nX-Request-ID: c56d3bd6-7a38-488e-8507-e54dd7c1f1e3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":99259,"size_decoded":99615,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, orientation=upper-left, xresolution=122, yresolution=130, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2003:05:09 17:15:16], baseline, precision 8, 600x756, components 3","md5":"9ef01065538b4e03197d8db70c26c795","sha1":"627de6a7893b6bd613c24ff9719c42e5cb781c3e","sha256":"8910e3cb723a2cc1d932a31e8867a17219d392f8fd2c742c6a37f995984a966e","sha512":"a511cddce8ba5fae3c4f65ed8ee3a0af17c64e8ac2574e5ef230023ba95d299c8ee043cf5c21c485a84fdfec4b00594a649a5d8f5dc7f00ef63c8cd4f557a40b","ssdeep":"1536:5A0JQA0JzTw6ITYhL9h5h9zIa8eYkyUWSa+GGY5pWhcesbjC7NpPJ9stp:5xQxBvF93h9b5Y/Upa+GGYCAbiLPCp","tlshash":"dca3f1409b10ed60f6e48b3daaf2d94bab12c75bb593a90e31ac7845bfb43c02d1f511","first_seen":"2026-09-22T10:29:02.838691Z","last_seen":"2026-09-26T19:13:34.246115Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1006,"timings":{"blocked":-1,"dns":0,"connect":156,"send":0,"wait":489,"receive":196,"ssl":165},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-26","alert":"Phishing Block","trigger":"rjjohnson.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"rjjohnson.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"rjjohnson.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rjjohnson.net/SouthExt7cc.jpg","fqdn":"rjjohnson.net","domain":"rjjohnson.net","tld":"net"},"ip":{"addr":"65.254.238.128","port":443,"asn":29873,"as":"BIZLAND-SD","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rjjohnson.net/","date":"2026-09-26T19:12:10.235Z","timestamp":1790449930235,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rjjohnson.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 23:46:08 GMT","end":"Sun, 01 Nov 2026 23:46:07 GMT"},"fingerprint":{"sha1":"F5:13:97:55:A6:F8:62:00:C4:81:C8:B4:CD:45:71:4D:3A:C8:F8:73","sha256":"83:6E:4D:B8:7A:B9:18:FE:9C:37:6F:F0:5C:01:95:50:97:33:C2:01:F8:6F:5D:C8:9E:70:E2:76:AA:FE:9C:9F"}}},"request":{"raw":"GET /SouthExt7cc.jpg HTTP/1.1\r\nHost: rjjohnson.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rjjohnson.net/\r\nCookie: request_id=c56d3bd6-7a38-488e-8507-e54dd7c1f1e3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 26 Sep 2026 19:12:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 29366\r\nConnection: keep-alive\r\nLast-Modified: Wed, 30 Aug 2006 12:31:55 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=14400\r\nEtag: \"72b6-41c3b582f84c0\"\r\nExpires: Sat, 26 Sep 2026 23:12:10 GMT\r\nAge: 0\r\nX-Request-ID: c56d3bd6-7a38-488e-8507-e54dd7c1f1e3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29366,"size_decoded":29721,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, software=Adobe Photoshop 7.0, datetime=2003:05:09 17:15:23], baseline, precision 8, 336x354, components 3","md5":"a61e92413b4b787574d38130c7cb0d19","sha1":"8c93322b1d34bca8ae571902ab65d3f8ae25c9f4","sha256":"790f5bf6ca484bb76f7e0f8bf358d46e754851c8919628833094b4c0f5fcf41e","sha512":"5d47d7802e1d0f1a2b62b5d7eeadd0f185f332fed04a01cefab5d739f93a5c3e7c044bebfa5cdca9ae370e5a0b0e6736a50ba2daa063204e2fba26194eb7eb97","ssdeep":"768:r1vTqyuCoMtnvl5U9dQLLSbnT4xudhKBVn01JF:xvfsInXU9dQSLTXhQNw","tlshash":"78d2e146aed0d501d3216f3a185435fb35930fe369953ebc72dae21c69c9c346b0ce4a","first_seen":"2026-09-22T10:29:02.839973Z","last_seen":"2026-09-26T19:13:34.247603Z","times_seen":3,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":159,"send":0,"wait":304,"receive":23,"ssl":165},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"rjjohnson.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-26","alert":"Phishing Block","trigger":"rjjohnson.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"rjjohnson.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}