{"report_id":"9f78da03-2f49-4ad3-8ef8-48a3c923fd84","version":6,"status":"done","tags":["phishing","skyw4lker","aitm"],"date":"2026-05-14T07:42:36Z","url":{"schema":"https","addr":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html","fqdn":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","domain":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html#h?H\u0026o5cwSohQH_3jQwF\u0026KWhY\u0026SAo5Ll4WT3E9ohJc\u00267ezHL\u0026rRJ=0dqNibE67hsvZfWD5=8e9KSfCWPJE=Qf9Nw2luBZ9d=PSl6bDS94i\u00266KDlca51jZEmIXO4Jn=ibvoni-lMjRtqq_5nTk0pQWgTMBPnlpy6u\u0026u-eQbRM-dw-BPx5X_=RzbrVJMIz\u00265hJs_h0084c\u0026locales=en-US","fqdn":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","domain":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","tld":"r2.dev"},"title":"Sign-in to you‭r‌ portal","dom":{"size":240791,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7574)","md5":"f78f8bc46da226964853710805bda311","sha1":"12913c4f39f7c207436f6770f4e2a0566cdedc62","sha256":"4e5adac121967ee72f743feeee2348289fac12e03361c30e8e98eb4ffb84849b","sha512":"bfbe0870ab996977f4c03b9445bbc437062d7d344806bbd4d59e34c56b433ae3e10e1d34fd93834d286faec344caf4d465f843bce157b038fd90b4fe72b6651a","ssdeep":"6144:lcLkMOGPhGh7rXrtshq4trQ4TrTM5uc3khgrj:SLkC5OHbtkxFQ4v+uOMij","tlshash":"7434c57662b760e3047366e783de530a72a48ad7cd0b5bc6f5ac06a48f8fe04365359c","dom_hash":"domhash817c278378160eeb4ffdd42804b28f61","first_seen":"2026-04-09T14:13:03.021336Z","last_seen":"2026-05-14T07:42:42.260965Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html","fqdn":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","domain":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-18T07:42:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":2,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-14T07:42:13Z","timestamp":1778744533,"ip_dst":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":34326,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-05-14T07:42:13.867947+0000\",\"flow_id\":1120481752454113,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":34326,\"dest_ip\":\"104.18.50.34\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.50.34\",\"port\":443},\"target\":{\"ip\":\"172.18.0.21\",\"port\":34326},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":945,\"bytes_toclient\":1622,\"start\":\"2026-05-14T07:42:13.857057+0000\"}}"}],"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Skyw4lker Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","skyw4lker","aitm"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Skyw4lker Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","skyw4lker","aitm"],"meta":null}]},"summary":[{"fqdn":"rowiee.net","ip":{"addr":"161.35.134.12","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"domain_registered":"2026-03-09","domain_rank":0,"first_seen":"2026-04-27T13:43:32.790924Z","last_seen":"2026-05-12T02:05:11.996211Z","alert_count":3,"request_count":3,"received_data":1654512,"sent_data":1485,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-23","domain_rank":0,"first_seen":"2026-04-09T12:23:23.828475Z","last_seen":"2026-05-12T02:05:11.953718Z","alert_count":12,"request_count":3,"received_data":29891,"sent_data":2305,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-05-10T23:24:33.477144Z","alert_count":0,"request_count":1,"received_data":90137,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-05-10T22:35:57.417067Z","alert_count":0,"request_count":2,"received_data":98365,"sent_data":958,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ipapi.co","ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-05-13T19:37:08.710277Z","alert_count":0,"request_count":1,"received_data":2518,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"aadcdn.msauth.net","ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2018-10-25","domain_rank":5248,"first_seen":"2018-11-19T10:50:03Z","last_seen":"2026-05-13T14:06:41.686993Z","alert_count":0,"request_count":1,"received_data":47357,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Skyw4lker Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","skyw4lker","aitm"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html","fqdn":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","domain":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e5955049fa76cf7bbc9707cce0e8b124","sha1":"1bffd73fe87008904c40b48594a01f2b741cd849","sha256":"3bb4b667706eab1cd7ed6b8aebfaeae385a7d09f7ebbdb29cc0abcd5fecf8dce","sha512":"9778bb7a8bc76753ba451f880807d4f4cd0d55d808ee303795158270439d26c171791dc2f1d28c42d644785895b3420deec88c965b13b227bfc19e27c7e11baa","ssdeep":"","tlshash":"884131552ab3720c00b625ae570f844d635ab407624ad98c798cd6111fb3d38d8fbfdd","size":2076,"data":"","first_seen":"2026-04-09T14:13:03.038818Z","last_seen":"2026-05-14T07:42:42.271966Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rowiee.net/koma23alyeusa-dullbofiles/assets/js/url_helper.js","fqdn":"rowiee.net","domain":"rowiee.net","tld":"net"},"ip":{"addr":"161.35.134.12","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de44854deaab5a282e81e5436de6efcc","sha1":"0749d59163fe184a56d2c7b1a77b6793316a477e","sha256":"1471196a7af5801ae4507ce92415d3457f6de8af0d26cdb1399323d88f6ac42f","sha512":"e76401e83a67a53a8eb4449c11e2a0589b10f1bc95a684aed4c76cd32f8e253e54a90a89d82d2447ab3a9e483116d28fe4a1422bcf3f77d5ba5da3843149fab9","ssdeep":"","tlshash":"cd31ae4e3c442be1bb5e0fb6743770f4f226d5497882640d7404b1867da5531daa2ff5","size":1802,"data":"","first_seen":"2026-02-03T17:42:45.655014Z","last_seen":"2026-06-19T13:05:52.570299Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html#h","fqdn":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","domain":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","tld":"r2.dev"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b51495c0d031b6373e96b882a2a2c0b","sha1":"acf2bead36a3ea627c7869a3acb36ba6c6ff2774","sha256":"2b1d5381ac584d4439f5eb246a5cc0310b67d1aece1ec96d6ab7726ebfad285b","sha512":"c6921fe3cc56ee17714ee519fbe331d0f2ea0deead7f2ea9b5ff1b8aa1ddefcc326ffce516e1a4d7970b2e3cff1cb238a6d56110a8fa5730739af31ece48bd4e","ssdeep":"6144:wVNPHhDFldRNDfmm5nrfmLV5FC9x/LPp/L9647kEoA374DdUJINB:8PfRNDfmm5nzyuxj9T7HoU4DddNB","tlshash":"e585b0e0ccbb1492d5234925bd7c79f4a5f23abb8bce4664037eb7a6fd749421e40848","size":1842882,"data":"","first_seen":"2026-04-09T14:13:03.056192Z","last_seen":"2026-05-14T07:42:42.274611Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html#h","fqdn":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","domain":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","tld":"r2.dev"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"436df5779bee892d5710a26728c757ae","sha1":"608cd0f5f9694bd96c4564138104dccebbda19ec","sha256":"5ee128d85314a9af6fdda9732bcc1b703039d8ecfb88aa52f85f2a58e2536e5e","sha512":"903f59136c19ede065ba5e26363c336c262b43780940ce54621f673b0a050fa784c5ec82571d1504ea12de24d24fa17efd55c92595056cef51e7636cc6a82ec6","ssdeep":"6144:ELvzrieAT5+qlNSKaPrBpjGRM5DdNsbM3TQpem1hUZD7HlZ7B5j2iU84qomro+oX:MAV+uS1/rjQ0P/7jib4nJMelky3a","tlshash":"2e15daf06744d8c1d42b5a32b9bd7ba8e2391277dbcd16cc0264fad12ef27116a0dd89","size":921160,"data":"","first_seen":"2026-04-09T14:13:03.054822Z","last_seen":"2026-05-14T07:42:42.275584Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ca03ad87885ab983541092b87adb299","sha1":"1a17f60bf776a8c468a185c1e8e985c41a50dc27","sha256":"8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762","sha512":"13c412bd66747822c6938926de1c52b0d98659b2ed48249471ec0340f416645ea9114f06953f1ae5f177db03a5d62f1fb5d321b2c4eb17f3a1c865b0a274dc5c","ssdeep":"768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS","tlshash":"19231ac5a19c605152a774c40d7f704b7463352a070d8aacf668e9eeecfcaea9039d7c","size":48316,"data":"","first_seen":"2023-03-07T01:31:53Z","last_seen":"2026-08-15T14:25:44.912635Z","times_seen":153728,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-15T22:04:49.868011Z","times_seen":498293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html","fqdn":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","domain":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"af09a09ad18ebcd28e780cc746f70eea","sha1":"f8fab91c9f03e44c3027f95703985155223eb52b","sha256":"fb98a3b3b6a95592977b0f226d5870765a165d5ca31554c8681744ea631e6ea6","sha512":"9c63196a2ef16a9017a6a3685d28126b79e0fadb8f525497da848f9e6567406927ad1ba340809c5f03d87ee28f48663b159e674374850c84dec5f602b65a1358","ssdeep":"","tlshash":"40e07d6b2c4ceb741391acc47832f6ac4038816df491c61d437e0c7b2c81be8180bc60","size":311,"data":"","first_seen":"2026-04-09T14:13:03.047398Z","last_seen":"2026-05-14T07:42:42.27784Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rowiee.net/koma23alyeusa-dullbofiles/assets/php/attach/js/offline_2rxZATbUCesKZqlIkVFCIGb5SnIKvllv5i8PXBDuHr3b3DRoaE.js","fqdn":"rowiee.net","domain":"rowiee.net","tld":"net"},"ip":{"addr":"161.35.134.12","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6808d45663bfe44f0b29fa64033a9d80","sha1":"11fae59f02b57735229a199695a71af2b830bae3","sha256":"98ea16deb6ae01eb9f126749e2333380c8d475cb10d983562b49c41198c46bb8","sha512":"aa397113b3b42c36a39bbd61aa53ddf3a53a740b1a8f9cd81edf5d6fa9db24b6c7fe8e4551ab53b24d40f4fbf984ddd971f272ddb8ea72366bc68e567558a030","ssdeep":"24576:eirUqw5WnAeTU2PeJ2md1pNBBlVu4h1a0t0nwGGPLgM:reEUJNd19BAwGi","tlshash":"777502118ac42fb9df9c5d1c90fe161e63e14a8b502b758eeb337d0bafeb6444207199","size":1647875,"data":"","first_seen":"2026-04-09T14:13:03.045243Z","last_seen":"2026-05-14T07:42:42.278872Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rowiee.net/koma23alyeusa-dullbofiles/assets/js/endpoint.js","fqdn":"rowiee.net","domain":"rowiee.net","tld":"net"},"ip":{"addr":"161.35.134.12","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd4348d1e8e355ac2f7601a8ed99485b","sha1":"c495c9c56ac01233f17330d3ed3b80a663ec46fd","sha256":"6a3d746b16c6ead7965c72d10216a4e6fd48a255484364786fd284d44816df3f","sha512":"1638f8086d9a6ec07f53fa8c3cff6ef3e35a972094f406d3b57e136e2fc0d2d9c21fd68f42f0fb6dc4d69a60fab736a71a1537e2538c5ef29d4dbdb7f3a95cc8","ssdeep":"","tlshash":"5e7151845dd0f39433755fab75324cd6e216dc1c318880aee20c2584f8a85baece6e7e","size":3562,"data":"","first_seen":"2026-02-03T17:42:45.649854Z","last_seen":"2026-06-19T13:05:52.575792Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf3402d7483b127ded4069d651ea4a22","sha1":"bde186152457cacf9c35477b5bdda5bcb56b1f45","sha256":"eab5d90a71736f267af39fdf32caa8c71673fd06703279b01e0f92b0d7be0bfc","sha512":"9ce42ebc3f672a2aefc4376f43d38ca9ed9d81aa5b3c1eef60032bcc98a1c399be68d71fd1d5f9de6e98c4ce0b800f6ef1ef5e83d417fbffa63eef2408da55d8","ssdeep":"768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe","tlshash":"9c231bc1a19c219152a774d0093f7107b463353a460ed5acf668e9eeecbcaea903dd7c","size":47992,"data":"","first_seen":"2023-03-07T12:04:24Z","last_seen":"2026-08-15T13:50:27.569445Z","times_seen":77086,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html","fqdn":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","domain":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e227822ad7a397d78e8a7144cf21572","sha1":"51ced379b84278b32fecad97e0762ca1d5f20cb7","sha256":"7ded106f9bda1e53108a6a050f0a9dad2efd4584932f31549210e5061b91293c","sha512":"23cd7cfa8bc89e628e1f75e36a445e9f8a47b20b7880e86988d935a177ee4da1192e5fc9c9f2fb67933cd95cf7ab09c6c25f52b69c7d7fd62c6b0129d103fb44","ssdeep":"","tlshash":"62d08c0ae112412067f312f04b43b07a1220033bc81cc90dbaccc7092f3292bb0c72d2","size":249,"data":"","first_seen":"2026-04-09T14:13:03.049019Z","last_seen":"2026-05-14T07:42:42.279638Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html","fqdn":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","domain":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76e3b8695d6e4915c93ba7e92aa8dba8","sha1":"953c6caac241428494288e66785c3d3edd00344e","sha256":"9fbde030b9d4f923d47d9188404abb616f33f8b1c09ae14fe21244adc656641a","sha512":"909aa4fba4854c931437dc21188923d49afd2569326565bb5cd50a28bdc6adf5acde05858f997264b16c0c00aa30cd23f8c5e8da626c200af0c730a68375a856","ssdeep":"","tlshash":"a1f0f806dcaa2c685763a5b008ee31e2088e438bf41040ecbd0e228d0f7482299ca0cc","size":591,"data":"","first_seen":"2026-04-09T14:13:03.046338Z","last_seen":"2026-05-14T07:42:42.280355Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html","fqdn":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","domain":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"563f687b4ccefcf2118620ecc95b8790","sha1":"84b801e57906a3bafde6e853a57e11767e559e4b","sha256":"6da2dbe51ce171a9c6cc63b167a83a4fa4e76ba2d978c634a0a0835eda379e41","sha512":"7eb323eb7dae09c6c0eb90c8c088407933f2916a34544e2e4ce7798d7f10ee22b591fc54fae06b98f8c830be39ca9e46531a0c66a2f1bb91965d48e26f9ec584","ssdeep":"","tlshash":"c2e02b4138d12102c6ab20ef64d302174f20427ba39a8849357e92101f9f8345b0674c","size":344,"data":"","first_seen":"2026-04-09T14:13:03.050154Z","last_seen":"2026-05-14T07:42:42.281147Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html#h","fqdn":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","domain":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","tld":"r2.dev"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c05e6bc8cd27aa7bac828e18c320ca3d","sha1":"93e56fd13ef83036abd11777892ed28a5fb7c6c3","sha256":"cbf824cce7fdf7bb3c6bbafe2d3b00e764fa581725af1dcb5530ac023f837b10","sha512":"0238d91abe312886abdf1f5f5b2804db84f9b9c7e331814f7ae528132a4fd28471af078a3a811cf0b51b863e96a2565f7a0d04cb8d0330f251b99541f80c70fb","ssdeep":"6144:qLvzrieAT5+qlNSKaPrBpjGRM5DdNsbM3TQpem1hUZD7HlZ7B5j2iU84qomro+o/:uAV+uS1/rjQ0P/7jib4nJMelky3I","tlshash":"7d15daf06744d8c1d42b5a32b9bd7ba8e2391277dbcd16cc0268fad12ef2711690dd89","size":923619,"data":"","first_seen":"2026-04-09T14:13:03.052816Z","last_seen":"2026-05-14T07:42:42.282628Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html#h","fqdn":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","domain":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","tld":"r2.dev"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7101648abcb54a373c8fe809b2f25a17","sha1":"3df733030e1788b8c749d626ba272515a7d32c9e","sha256":"6786e20a5ce361773abcc03b9653f4d943c5495c803f3f0629ea3369b5cb2bf6","sha512":"82284ebfcc04167e7b355823989d5503c3940d28cfdb400154c69053b58e4e4f5d0b33fdea288ccea0f32f70e04f36e2472850796e3e673d3d357aac4bd638b6","ssdeep":"768:SWLGWpB2XpbF4ux1jDonVtlYpsjgIsZlb1mWIIxuDt0lrpeHh2GHgeQl:5G34uc3E7h8+0Hh2GHRc","tlshash":"f6432271f2aba4e3047761fb878e930521a84fc3cd4a5acbb59c0aa08f8fe54755359c","size":58082,"data":"","first_seen":"2026-04-09T14:13:03.051111Z","last_seen":"2026-05-14T07:42:42.283464Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"b03ec4f66d3bb16cd07336accf812ff4","sha1":"346ba10e081c04b742b6e1afe946b1f0996e45a8","sha256":"a70a9750d5aad585e8de2173f2232c7dcfffccf2dd75a004d08c2e9f0386aa3d","sha512":"3205e46dbf0beaf1da750dbef8ad44f383ea52baa4a55f5d4664ecc04aeec1d2429f5d704addcf860943b936e11da47b94f7b788cdf259ab2135dfd94499a78b","ssdeep":"","tlshash":"e6b012477c2cd6f83380cc4c34f1f3ac8834141910b1c39b4769413b24903d88400200","size":95,"data":"","first_seen":"2023-10-17T04:27:08Z","last_seen":"2026-05-14T17:48:15.820298Z","times_seen":428,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8d3a4ec46ee2c39ee5207acb768066dc","sha1":"58ab7ee3031b66e9f7388be6ee5a15506eb303e6","sha256":"848c5a86d9ffbefdac2ecdc97e3081728fb420ce017d36930622319e2f944f30","sha512":"1f67d8452e3affe27b044f2c30a1191892dcb53252ab5aa12d48d85ea57d44a835438b8c8ba9841f9cca542056c5fd1be723720d2739b36aa2a98d3c0014ef46","ssdeep":"","tlshash":"59c08c6b2888c22592a13cc0591aa4654230838ad009c92ca2a50cb66d03ca9384b0b2","size":151,"data":"","first_seen":"2026-04-09T14:13:03.059833Z","last_seen":"2026-05-14T07:42:42.285205Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"da1962add6f9b361e73bdaf2b5353189","sha1":"d9be8385ed65533c3f888c8f8e7ad6997591732c","sha256":"7b0f26c3743b5d5139ca7719010ea1611faf2e5043896c9aa1a13f13f4658d5d","sha512":"149fe8017f19675ebdb7679bc393a7e671d8a92b9254bb205943c8313081cefbf063bebc5b7b02fe8b1de8ecea0bd86b3ab636bf6045be8271c196dba732f6c5","ssdeep":"6144:2LvzrieAT5+qlNSKaPrBpjGRM5DdNsbM3TQpem1hUZD7HlZ7B5j2iU84qomro+os:iAV+uS1/rjQ0P/7jib4nJMelky3D","tlshash":"8d15daf06604d8c1d42b5a32b9bd7ba8e2391277dbcd16cc1268fad12ff2711690dd89","size":926505,"data":"","first_seen":"2026-04-09T14:13:03.057327Z","last_seen":"2026-05-14T07:42:42.286093Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"07670b0b3cfd1a575ce946695e4f23cd","sha1":"a5fe150768ea4cf7d50a1f35358a9dc851f63516","sha256":"4ae3a4dd00397160f1f6498a9ffd1918e80c56182fd99cbe8dac9b40ae8bfb27","sha512":"cbd7428eb9897f6ba3e062d39c55d4b1e49f54686e91f81b35c070e57f50eed0bb1285ad73fb61162a8461ae1c9cbd7c2c7e654bac91d95d9d07c7a1c7e1f42f","ssdeep":"6144:r4xAHhGh4rdru6hekQrkV2rsliEZ36hkr+:JBOq1uSVSkVsdE9Su+","tlshash":"6d449436726750b3047267eb87ae530af7954ae7c90b13c6b5ac46a48fbfe44320359c","size":258614,"data":"","first_seen":"2026-04-09T14:13:03.058377Z","last_seen":"2026-05-14T07:42:42.286838Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"rowiee.net/koma23alyeusa-dullbofiles/assets/js/endpoint.js","fqdn":"rowiee.net","domain":"rowiee.net","tld":"net"},"ip":{"addr":"161.35.134.12","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html","date":"2026-05-14T07:42:15.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rowiee.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 16:30:32 GMT","end":"Tue, 23 Jun 2026 16:30:31 GMT"},"fingerprint":{"sha1":"12:BE:E0:A3:F0:C6:71:78:39:9B:51:DD:9C:FE:0B:E6:FB:CC:7E:08","sha256":"29:81:8A:F0:D9:B1:61:EE:84:ED:07:64:47:53:60:BB:4F:08:C3:9C:3F:B8:1C:B0:D1:A0:FD:E0:2C:ED:8F:F1"}}},"request":{"raw":"GET /koma23alyeusa-dullbofiles/assets/js/endpoint.js HTTP/1.1\r\nHost: rowiee.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sat, 31 Jan 2026 14:54:26 GMT\r\netag: \"dea-649b0441bac80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-length: 1452\r\ncontent-type: text/javascript\r\ndate: Thu, 14 May 2026 07:42:15 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3562,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3562), with no line terminators","md5":"bd4348d1e8e355ac2f7601a8ed99485b","sha1":"c495c9c56ac01233f17330d3ed3b80a663ec46fd","sha256":"6a3d746b16c6ead7965c72d10216a4e6fd48a255484364786fd284d44816df3f","sha512":"1638f8086d9a6ec07f53fa8c3cff6ef3e35a972094f406d3b57e136e2fc0d2d9c21fd68f42f0fb6dc4d69a60fab736a71a1537e2538c5ef29d4dbdb7f3a95cc8","ssdeep":"","tlshash":"5e7151845dd0f39433755fab75324cd6e216dc1c318880aee20c2584f8a85baece6e7e","first_seen":"2026-02-03T17:42:45.649854Z","last_seen":"2026-06-19T13:05:52.575792Z","times_seen":107,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Skyw4lker Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","skyw4lker","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/favicon.ico","fqdn":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","domain":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html","date":"2026-05-14T07:42:16.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 06:57:47 GMT","end":"Mon, 10 Aug 2026 06:57:46 GMT"},"fingerprint":{"sha1":"24:D7:68:AF:FC:F2:DB:F6:04:47:7E:D0:7B:FF:F9:8E:74:18:97:12","sha256":"A7:D7:3C:F5:72:53:85:7E:A0:36:9A:EF:51:D0:3B:8B:FE:C9:91:D6:6C:42:05:07:D7:6C:7C:2E:4D:21:71:89"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Thu, 14 May 2026 07:42:16 GMT\r\nContent-Type: text/html\r\nContent-Length: 27150\r\nConnection: keep-alive\r\nServer: cloudflare\r\nCF-RAY: 9fb843e6793bb500-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27150,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (611)","md5":"46dd133ee00dc1bae5e4eeba7b88432f","sha1":"8af86a4ac91ce48c062216fb94a6e1d57618a19b","sha256":"9eb52ee46c7ab5ea4ca0982415da99fded1b7d7354f75e50847bdae6cb44eb66","sha512":"cb49f9e3812e2c262af374e79bd8905cb508a45bf2c2d6af62eed85af43770872486a55e9425882feda9fb3a57a317a3c18be1e286adaf0c76be7f1b0dfa8474","ssdeep":"384:6bamwIluB0sJQqCeSQup5szCUXAG0VVi82OgoKACZQQofNJXY3gW3:603Mp5If8WOmgW3","tlshash":"e3c291dc7be968e4e5de43aaef2831a8320ba0fb17425904f51d12142f0655cec6f6ed","first_seen":"2024-07-03T19:18:11Z","last_seen":"2026-08-05T04:28:12.442105Z","times_seen":32697,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Skyw4lker Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","skyw4lker","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html","date":"2026-05-14T07:42:19.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Thu, 14 May 2026 07:42:19 GMT\r\nage: 1973351\r\nx-served-by: cache-lga21931-LGA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 71, 502552\r\nx-timer: S1778744539.210986,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-15T22:04:49.868011Z","times_seen":498293,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":70,"dns":1,"connect":26,"send":0,"wait":26,"receive":8,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html","date":"2026-05-14T07:42:19.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 07:42:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 13972\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"61182885-3694\"\r\nlast-modified: Sat, 14 Aug 2021 20:33:09 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 121544\r\nexpires: Tue, 04 May 2027 07:42:19 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WL%2FHfTfpXCxP7tXndMeL87YZk3918bS6ldzH%2B%2FX58YgcnEQ7wgCUHK3CCJQGsNuwqxJr82vPJSWvGOvjnVGgCm4SsB0XlrVIIaHQ8NH7ptn8BjluODlw374fXYDcNXnQKpwkwtyq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9fb843f99c2a75c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48316,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48316), with no line terminators","md5":"2ca03ad87885ab983541092b87adb299","sha1":"1a17f60bf776a8c468a185c1e8e985c41a50dc27","sha256":"8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762","sha512":"13c412bd66747822c6938926de1c52b0d98659b2ed48249471ec0340f416645ea9114f06953f1ae5f177db03a5d62f1fb5d321b2c4eb17f3a1c865b0a274dc5c","ssdeep":"768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS","tlshash":"19231ac5a19c605152a774c40d7f704b7463352a070d8aacf668e9eeecfcaea9039d7c","first_seen":"2023-03-07T01:31:53Z","last_seen":"2026-08-15T14:25:44.912635Z","times_seen":153728,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html","date":"2026-05-14T07:42:14.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 07:42:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14107\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e2d-bb78\"\r\nlast-modified: Mon, 04 May 2020 16:09:17 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 9153\r\nexpires: Tue, 04 May 2027 07:42:14 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NpqTpg8MeaaYVMNqoFzxAoafgJZcPSmFiw%2BBGFdnT25CqZhk1uYiIPeI7b1NXY08A%2Bl20KpiPvB%2F01UYswcsP6YEXoGAPDcXlp7JVl6iXpZyGK1K8DjOt%2Fw%2B0fj%2BtX1iWd1pkJ%2BJ\"}]}\r\ncf-ray: 9fb843de5b5956c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47992,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (47992), with no line terminators","md5":"cf3402d7483b127ded4069d651ea4a22","sha1":"bde186152457cacf9c35477b5bdda5bcb56b1f45","sha256":"eab5d90a71736f267af39fdf32caa8c71673fd06703279b01e0f92b0d7be0bfc","sha512":"9ce42ebc3f672a2aefc4376f43d38ca9ed9d81aa5b3c1eef60032bcc98a1c399be68d71fd1d5f9de6e98c4ce0b800f6ef1ef5e83d417fbffa63eef2408da55d8","ssdeep":"768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe","tlshash":"9c231bc1a19c219152a774d0093f7107b463353a460ed5acf668e9eeecbcaea903dd7c","first_seen":"2023-03-07T12:04:24Z","last_seen":"2026-08-15T13:50:27.569445Z","times_seen":77086,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":17,"dns":3,"connect":1,"send":0,"wait":13,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html","date":"2026-05-14T07:42:19.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 20:25:59 GMT","end":"Wed, 15 Jul 2026 21:25:52 GMT"},"fingerprint":{"sha1":"76:B2:7F:DD:D1:3A:92:49:08:6F:F6:9D:93:7F:FA:A4:E7:AF:1E:04","sha256":"D3:90:F8:60:D1:C0:1C:19:C5:12:68:B2:54:72:DC:42:A3:9F:4C:D8:10:D6:0D:5B:71:0C:1C:EB:AF:AA:AF:F1"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/\r\nOrigin: https://pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 07:42:19 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: HEAD, GET, OPTIONS, POST, OPTIONS\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zy2EUz0u%2BuU6WxLywwiUmxibW1%2BPmBulYnCUQlNNrbnikcK1rgrX%2F9s0TaHVE7UCspWkcVSGInaL7rMHLpH6KfYsypwOFqjutQMCekzsfo84AdMzmtUvr51U\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9fb843fadf7d958c-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":736,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b2e0d36fbd81e8a9c07fb95d39a92f0e","sha1":"0e5ea1eafd1c798f9d3b1ab4505dfd6b4be511f9","sha256":"1b3bbe6efd264c3e4dd2f9b97fd542f1effd6c5c50af1350a6687c7dff56135a","sha512":"e0d254a299cfe08338f3d04dbcba739d9af7faa9b53458d1b0eeca2b8cf8c181c93a35f1dfc205f118acb197be8a45a31f28df8bcdd5fc6cfef5b7cbd804c78c","ssdeep":"","tlshash":"6601df68e4680f7b9cb81358b4386907122422175f66398e7fd0978d0f8e8bf31b135e","first_seen":"2026-05-11T02:17:46.320605Z","last_seen":"2026-05-27T21:55:05.943927Z","times_seen":4375,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":34,"dns":1,"connect":8,"send":0,"wait":221,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/,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","fqdn":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","domain":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","tld":"r2.dev"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html","date":"2026-05-14T07:42:19.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 06:57:47 GMT","end":"Mon, 10 Aug 2026 06:57:46 GMT"},"fingerprint":{"sha1":"24:D7:68:AF:FC:F2:DB:F6:04:47:7E:D0:7B:FF:F9:8E:74:18:97:12","sha256":"A7:D7:3C:F5:72:53:85:7E:A0:36:9A:EF:51:D0:3B:8B:FE:C9:91:D6:6C:42:05:07:D7:6C:7C:2E:4D:21:71:89"}}},"request":{"raw":"GET /,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 HTTP/1.1\r\nHost: pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Skyw4lker Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","skyw4lker","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/shared/1.0/content/images/backgrounds/4_eae2dd7eb3a55636dc2d74f4fa4c386e.svg","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html","date":"2026-05-14T07:42:19.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aadcdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 06 Mar 2026 19:39:46 GMT","end":"Wed, 02 Sep 2026 19:39:46 GMT"},"fingerprint":{"sha1":"90:D1:7D:09:02:B5:35:F1:FD:F7:6C:6A:EF:1D:B2:99:60:B0:E2:0C","sha256":"9C:1A:83:B2:23:49:7D:D8:8A:D4:AE:F6:D2:F6:A4:AB:35:F3:21:16:30:7F:01:51:68:8C:F6:B3:04:EA:91:B0"}}},"request":{"raw":"GET /shared/1.0/content/images/backgrounds/4_eae2dd7eb3a55636dc2d74f4fa4c386e.svg HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 07:42:19 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 8703\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 16 Jul 2025 19:21:44 GMT\r\netag: 0x8DDC49E00296993\r\nx-ms-request-id: d25f5e20-d01e-0035-4c0f-e0af42000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260514T074219Z-15477df7756qn8sshC1SVGdav80000000p7g000000007828\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache: TCP_HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}],"data":{"size":46579,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"145a07dcb971527a82b8d95ca2a1a3ee","sha1":"8b5baca5e87693484035d4e7bfd5eebbd73ac931","sha256":"b7872b9635702c64d0e30f951372d3d62383f52a0f3f01497d9c429e4c292338","sha512":"cbf9fbafc5f4e69bc348077ce16a6a8266e8b70802954506436a56d4a411c56244fce3bcf492467d31462e6e4d133ce8d9f967708bea50cf46ea9eed88ad1165","ssdeep":"768:stFVOr1cBhgbydHDaQTzHdLqKyIpFIo9JRMkgArZQn:stKpcBhgbydHDaQTzHdLqKyIpFIcJRMP","tlshash":"5823249ce16ca97ed54dc2fcc64b68b8310e41eba550835d906b6f0f29b85cb384dbe1","first_seen":"2025-08-13T09:49:20.296327Z","last_seen":"2026-08-15T20:48:23.563449Z","times_seen":16648,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":177,"dns":152,"connect":8,"send":0,"wait":13,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rowiee.net/koma23alyeusa-dullbofiles/assets/php/attach/js/offline_2rxZATbUCesKZqlIkVFCIGb5SnIKvllv5i8PXBDuHr3b3DRoaE.js","fqdn":"rowiee.net","domain":"rowiee.net","tld":"net"},"ip":{"addr":"161.35.134.12","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html","date":"2026-05-14T07:42:14.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rowiee.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 16:30:32 GMT","end":"Tue, 23 Jun 2026 16:30:31 GMT"},"fingerprint":{"sha1":"12:BE:E0:A3:F0:C6:71:78:39:9B:51:DD:9C:FE:0B:E6:FB:CC:7E:08","sha256":"29:81:8A:F0:D9:B1:61:EE:84:ED:07:64:47:53:60:BB:4F:08:C3:9C:3F:B8:1C:B0:D1:A0:FD:E0:2C:ED:8F:F1"}}},"request":{"raw":"GET /koma23alyeusa-dullbofiles/assets/php/attach/js/offline_2rxZATbUCesKZqlIkVFCIGb5SnIKvllv5i8PXBDuHr3b3DRoaE.js HTTP/1.1\r\nHost: rowiee.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 26 Mar 2026 20:18:42 GMT\r\netag: \"192503-64df31739d54d-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-type: text/javascript\r\ndate: Thu, 14 May 2026 07:42:15 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1647875,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (64923)","md5":"cd2428c43cc06f67bc868f8218141830","sha1":"23e927e07a611d8b0ac466c8e739945514a50af6","sha256":"fbf8affc3ea5c8d6e1aa4c5e5705b938e741482066b41410d260e6b960eff412","sha512":"4335fa3db0fc1236850b7ff4d13fe58d704922bd80a2b61d87118fd4d231b1d819f00f22d720906360981e8aaadbb2f18c70368e333f8f90ff3ea5b1bccb2bea","ssdeep":"12288:ekNZrcwOhcBsfdPo3+ID32fKTjkeTcLqa2weNeLNfSmr2Qbnd1E3aNBBltDY6N6:eirUqw5WnAeTU2PeJ2md1pNBBle","tlshash":"7f2502108ac82fa5df9c5d1c90fe161e63f14a8b502b758eeb637d0bbfeb6444207196","first_seen":"2026-04-09T14:13:03.0312Z","last_seen":"2026-05-14T07:42:42.269449Z","times_seen":4,"resource_available":false,"data":null}},"time_used":713,"timings":{"blocked":258,"dns":58,"connect":98,"send":0,"wait":194,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Skyw4lker Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","skyw4lker","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"rowiee.net/koma23alyeusa-dullbofiles/assets/js/url_helper.js","fqdn":"rowiee.net","domain":"rowiee.net","tld":"net"},"ip":{"addr":"161.35.134.12","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html","date":"2026-05-14T07:42:15.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rowiee.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 16:30:32 GMT","end":"Tue, 23 Jun 2026 16:30:31 GMT"},"fingerprint":{"sha1":"12:BE:E0:A3:F0:C6:71:78:39:9B:51:DD:9C:FE:0B:E6:FB:CC:7E:08","sha256":"29:81:8A:F0:D9:B1:61:EE:84:ED:07:64:47:53:60:BB:4F:08:C3:9C:3F:B8:1C:B0:D1:A0:FD:E0:2C:ED:8F:F1"}}},"request":{"raw":"GET /koma23alyeusa-dullbofiles/assets/js/url_helper.js HTTP/1.1\r\nHost: rowiee.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sat, 31 Jan 2026 14:55:46 GMT\r\netag: \"70a-649b048e06080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-length: 771\r\ncontent-type: text/javascript\r\ndate: Thu, 14 May 2026 07:42:15 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1802,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1802), with no line terminators","md5":"de44854deaab5a282e81e5436de6efcc","sha1":"0749d59163fe184a56d2c7b1a77b6793316a477e","sha256":"1471196a7af5801ae4507ce92415d3457f6de8af0d26cdb1399323d88f6ac42f","sha512":"e76401e83a67a53a8eb4449c11e2a0589b10f1bc95a684aed4c76cd32f8e253e54a90a89d82d2447ab3a9e483116d28fe4a1422bcf3f77d5ba5da3843149fab9","ssdeep":"","tlshash":"cd31ae4e3c442be1bb5e0fb6743770f4f226d5497882640d7404b1867da5531daa2ff5","first_seen":"2026-02-03T17:42:45.655014Z","last_seen":"2026-06-19T13:05:52.570299Z","times_seen":107,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Skyw4lker Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","skyw4lker","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html","fqdn":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","domain":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-14T07:42:13.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 06:57:47 GMT","end":"Mon, 10 Aug 2026 06:57:46 GMT"},"fingerprint":{"sha1":"24:D7:68:AF:FC:F2:DB:F6:04:47:7E:D0:7B:FF:F9:8E:74:18:97:12","sha256":"A7:D7:3C:F5:72:53:85:7E:A0:36:9A:EF:51:D0:3B:8B:FE:C9:91:D6:6C:42:05:07:D7:6C:7C:2E:4D:21:71:89"}}},"request":{"raw":"GET /Client:DogsForOurBraveEventDate%204:07:2026Tue.html HTTP/1.1\r\nHost: pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 14 May 2026 07:42:14 GMT\r\nContent-Type: text/html\r\nContent-Length: 2269\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"1dbe8a1d1bb0db1ba19692ab9a289120\"\r\nLast-Modified: Tue, 07 Apr 2026 14:04:25 GMT\r\nServer: cloudflare\r\nCF-RAY: 9fb843d8b98bb500-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2269,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (645)","md5":"1dbe8a1d1bb0db1ba19692ab9a289120","sha1":"82f30c956ef0722a55a26fb3d22cc4adbd291247","sha256":"3650c9767a33b8434801c64cc1310b7453c281542b021712eb0038af00d5abdc","sha512":"76be7d942a86690b7c7ea311163036fe00274a51594eb99d98accaf7c35c79301ae9d571931320191df789c5b5eded46a2493c611df1087bd187c313f6f580d9","ssdeep":"","tlshash":"444121592ab3720c00b665ae571bc44e635ab803624ad98c79ccd6111fb3938d8fbfdd","first_seen":"2026-04-09T14:13:03.032713Z","last_seen":"2026-05-14T07:42:42.271126Z","times_seen":4,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":34,"dns":22,"connect":1,"send":0,"wait":692,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Skyw4lker Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","skyw4lker","aitm"],"meta":null}]}}]}