{"report_id":"a047815d-88c4-4395-a140-4be4ab7eedb1","version":6,"status":"done","tags":["zimbra","phishing"],"date":"2026-06-03T16:09:59Z","url":{"schema":"http","addr":"zimbras.vercel.app/","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"zimbras.vercel.app/","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"title":"Zimbra Web Client Sign In","dom":{"size":9545,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9544), with no line terminators","md5":"7514714a7026842accf5ab5869d76750","sha1":"06d7e1257e0cec09d9059d4cbe125c956a066190","sha256":"c160c4b79c3b5ea3654495f756c0bb2edb716d7a4e4aeda5e2d327f612b9e75b","sha512":"df6f082981f4e17e9a4a9d18510266b1d0dfa6163596089c6d65469b62db7828bdcbf6d36659a868df9f9bd258cf1218d2147ac98b243ee949f1adafb964bd4c","ssdeep":"192:GvfTyZuRaLnv+WqmzUJtQFBiI9/6PgnqzcpmBdgUDx:2fT8uRKv0SUYFBiIh62Bmx","tlshash":"c3129534f805ed5bf95b6d5d203a9e3a50ceda3ec265887ca2dccb880792c7547a5dc0","dom_hash":"domhashdcd49c17b4a3700aa87a8680ffb339aa","first_seen":"2026-05-20T08:09:22.278689Z","last_seen":"2026-06-03T16:10:00.757124Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zimbras.vercel.app/","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-08T16:09:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"zimbras.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Zimbra Web Client","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Zimbra phishing","tags":["zimbra","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Zimbra Web Client","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Zimbra phishing","tags":["zimbra","phishing"],"meta":null}]},"summary":[{"fqdn":"zimbras.vercel.app","ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-20T08:09:18.217705Z","last_seen":"2026-05-20T08:09:18.217705Z","alert_count":52,"request_count":13,"received_data":559588,"sent_data":6078,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Zimbra Web Client","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Zimbra phishing","tags":["zimbra","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"zimbras.vercel.app/","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-12T01:55:48.494635Z","times_seen":221375,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zimbras.vercel.app/","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b949d17033c460f64a52af7bc3d7822","sha1":"9e029efd4e3d5a31d0c3ba9973ae8d06126071b7","sha256":"2335dd66f561b539b2594e062a2bc6320e99d60a456f059200c284f1a304879a","sha512":"3f3c8f2e16e1c50cfd66c3c30e175ef03f4de7bd79ebd93844e22cce1732c9bde17c382f00235ebeecbf9bcd4bf4a98f5814098dac1a13d74295cef3efa09c13","ssdeep":"","tlshash":"9c217759f90bfc527d65dd1f112a0f3b9ceaed3580b025a9f29dcac84235e26438cc92","size":1295,"data":"","first_seen":"2026-05-20T08:09:22.294649Z","last_seen":"2026-06-03T16:10:00.789841Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zimbras.vercel.app/","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"05eca534dc5fa83fd259cb099cd547e4","sha1":"f726b64b8013232ca8bc363d325d3794d1546677","sha256":"734c897832ca7f96499ba88db61cc3f493fe314ddaca01d194bbb39874534b66","sha512":"43cebe7fc1fb6512ebd5d516c7aab02364d5e9afcaa049c168f191d2759c9549cd2b5d0b3e9f89e1fc9fcb1731ce40ef8cee46d8a943600acd901cff0177d47b","ssdeep":"","tlshash":"9551cc3d6404ed4bfcad3d69127ead3a50cd497f4394deb886c8df100a8247a6796dc0","size":3020,"data":"","first_seen":"2026-05-20T08:09:22.295512Z","last_seen":"2026-06-03T16:10:00.790754Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zimbras.vercel.app/_next/static/chunks/turbopack-91cea5cdf3b26efe.js","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6880897f3e8bb92579d9672ae1dc7945","sha1":"ecc0cc09aa809e951f4935721a55d44b26cef1bb","sha256":"ea76d07cc634f332f294dd51b862ce517b019f48ab165942d2f783814b85d18d","sha512":"fa1ca7ab0bd59b0d23273daf1b1c7b36b971a7b49c427a035f658abc7733c685c9ddc6f797f181c3aaf97d936b76cc7275b7b5a65f88916701fc191ec1020d44","ssdeep":"192:9kNeFn8/Esp1U91EG5T1uuC9ledFMhMNUW9PZcxkUc1IsiyLxQ:9kNe2OTC9lenjZZQ7yLxQ","tlshash":"9e22e7da37a6f07743af90e6907f4044f27954a8145d582c936ce8fa38384ae49e3f27","size":10653,"data":"","first_seen":"2026-05-20T08:09:22.285632Z","last_seen":"2026-06-03T16:10:00.768966Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zimbras.vercel.app/_next/static/chunks/7340adf74ff47ec0.js","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"07116caaa974183af6252904a1e19581","sha1":"0a3fadd4f5b44a9c2343ad01a1f7a0a008a08982","sha256":"d8e91f5e0c241a7fc0b00a57fbd5398c27b03931244b685e2a703a1947dda34a","sha512":"58be518c26a497b772d6a91a59f38f8ce81252d54245bfe33c373a921c125f88a60bec66c4d4bd3ab4b2a8c1a6d26dfe3bd791218dde95ceadce8edf0a1bbaf9","ssdeep":"384:735S75Bq9E0m1YmRDQ0cJ3tn79Fg/Ag8qWtOPSNsbU:D5S9BX0ZMOx6bU","tlshash":"fed2e8717395f9a352db85d9d03a0015f2290d3530ae24b0b394dcef368dc89a1fafa5","size":30717,"data":"","first_seen":"2025-12-20T12:16:43.561499Z","last_seen":"2026-08-11T16:25:07.972768Z","times_seen":1676,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zimbras.vercel.app/","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c371a1b23c199d7ac65ccb8390f8ab8","sha1":"44e8ed0f13885c921a759ebd7643ea3a95f96eff","sha256":"c7653a63eeff58621c1f9e0e84f8ba6f6f92efd3ede1b3290167936907d51d49","sha512":"c1fa31579ef3b8f388f72307d96d63ea5aa1d9aaaf60536f7d237cf42f9f2e6514b8dc5d99561f5dc4bf9d04bd6d3e50af20fc7ddb72ebb61c9cb2e83dcce8ec","ssdeep":"","tlshash":"59b09b64e015fda555b545616525e445226f504d29581450111791551609d141717dc0","size":112,"data":"","first_seen":"2025-10-26T14:54:28.298694Z","last_seen":"2026-08-11T23:43:50.517394Z","times_seen":3200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zimbras.vercel.app/","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ead1170c9dfbf7532937baba62fa5960","sha1":"257de8a3449dba9cf75d12f22dd599eb1918daba","sha256":"a02adeac656735dc917fa4ff254de086511dec279a4898e554ef22a308af0ead","sha512":"607a993ca2896b8cfccb41ceb33f318ba2535d8f92b191f7c51b24f2477728654abcd002cd7b2d64c5e41eafca6342802b5342c8d2e0df0550e47d7ebfd765fe","ssdeep":"","tlshash":"8fc08090cc42cc1dc6660f361c3b1c3521ddd9b4074555469dd5d9381985b3105b5d9d","size":177,"data":"","first_seen":"2023-08-13T20:19:29Z","last_seen":"2026-08-11T23:43:50.517862Z","times_seen":5053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zimbras.vercel.app/","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"642349efda6488ef503e60f02f58193e","sha1":"d2596f1f37ad33ed974658076001c799df92adc4","sha256":"3fbbdf2dc0a4b97bbd6f591fbecdcfbaf2fb356268f33f5595bcccf5ae956b7e","sha512":"bdd6729649d690ce939d8481824bc57e0f3163ad66b08358cc9244fd5c5421751417b8684e37f5e1705ea5907e98e0652cc763e3f1490b01820a5d959553eeb9","ssdeep":"","tlshash":"15d09725ee10de26c2860f2128b89ce230ee833c4001968d92d1c9c852538361b7bf40","size":254,"data":"","first_seen":"2026-05-20T08:09:22.307639Z","last_seen":"2026-06-03T16:10:00.799285Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zimbras.vercel.app/_next/static/chunks/908db1ebe1d7e671.js","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb0fac58b08a3e851cdbba5db162fa4e","sha1":"ea1d91ad0ba520e52231a8d728eba4a8e8598999","sha256":"9eaa8f09074da44bb080f08fcc7b031bd07ad84d064b2130bae5903f55f0fd63","sha512":"6dbb3671f3963c68474036d5d69951e48d35630394c23b80548497ce69916e05032b45bd05d31fe00d99a88374cc3bb0b6eb442de559a95b8f4cdf4bdd40affe","ssdeep":"192:rprx6QB9k84OONbihUXjpjEh/WGZyktHAwiKiEXz/CBi5LY1zsp6XQ6id:llo7vBtNsyk8RwTCmY1zspaI","tlshash":"ce82a4ad7195f4811ea364a5803f500bb23929b6286dd0f0e3a2dcf5b8f455ed233f5a","size":18114,"data":"","first_seen":"2026-01-18T16:20:12.67355Z","last_seen":"2026-06-03T16:10:00.781236Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zimbras.vercel.app/_next/static/chunks/3dce25e25784ccfc.js","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb53de59bcccbdaa3b172058666d0c63","sha1":"2ae8f3d88c37ae08cd1a1fe75fa1fcd658eb231d","sha256":"f8937c642f31b4c17a75e9c816639c62e59f41d55f83e1680aaae9308f4ae7ec","sha512":"7fdc42df078c7c04800bfa23f81237bbbc23e053554a253ae7585fc20ac805da87cb2ae9af2be00751020525ec13bf229e1ea34db75e80add8cdc692ac4efacf","ssdeep":"384:tPkTdom15bE2DysC9ABQmOLsA1sat2FG4hTBNyHPOArxUyhT:K11NE4BQ1L8jldBEH1GyhT","tlshash":"38921b603299fcdd225b81c4983f400df27d5e78d62ea064b3fc5ca91990488b1b3fba","size":20911,"data":"","first_seen":"2026-05-20T08:09:22.291304Z","last_seen":"2026-06-03T16:10:00.770498Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zimbras.vercel.app/_next/static/chunks/aa0c7c8fb89a4472.js","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"da3e8f4c586b199151d5f0b5c56d8a55","sha1":"2162315f9ac9fc16b33223e62e290e67196bc682","sha256":"0e5d782f02f2ee9f43a9b09627bd03032a2119beb8cf3bfce091e36c9b4235e2","sha512":"61bde6309f9e419d14442ce9b2187a091afe6ae6cbd6bd27ef7498d40cf11423921a3cca05dc241c96f593c32dd19ee09c63df3430282d2ce212479854052976","ssdeep":"1536:oxuAw5XE+aICD7G005Kb6jWy3i1ON0RSn49KOQJhDLk0:5FC3i5KuR3imnQ7QJu0","tlshash":"47e3f7f532d1f88207a744e5c43f0006f32d4d76149e64a0a3e5dcea796499de2b3faa","size":157228,"data":"","first_seen":"2026-01-16T07:11:21.219004Z","last_seen":"2026-08-08T12:45:11.728284Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zimbras.vercel.app/_next/static/chunks/30ea11065999f7ac.js","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"491fb05b5b653c58448e308e13d8c5c7","sha1":"8aca444876ebfe1b34eb0a729bc41339c82647a3","sha256":"35285a094388e84f0ef4810e455f62c1399971b393846d9f0dc7638ccef3b225","sha512":"96a7c1319f5908c811a3d848e870f05e5aef1de076f496afcc3d06a5ee62501a4971ebb2ca94ebeba5b3ff5ddce3d9c81ef35fab1f27048040e06701d6732e51","ssdeep":"3072:ZeVnSSY2UeRaWcG8TP36kNAHTjWmN6yXtbtY:Ze9SSY2UQrH3FrXtbtY","tlshash":"c5240be83955f6626ab302a710af1803733c292b280d4d60a351fdddb57845eb17bf9e","size":224520,"data":"","first_seen":"2025-12-27T09:10:02.707216Z","last_seen":"2026-08-11T06:56:51.730165Z","times_seen":981,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zimbras.vercel.app/_next/static/chunks/ff1a16fafef87110.js","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5458632ee5cb3da028baebb11d5f70dd","sha1":"57e264834d3635e52fbbd3d93135842c09ce8525","sha256":"e9786b1305894e4119bb9811a816dac9cf576755596dd989ee15b455749fc35e","sha512":"28ae4e3a3828f99d64b7d4bfc7238d56c9ad910ce267dcb6c01e53be00c88f8a7f024640680d2bd66240a9972322744ee9147883a12ff8c92717c27ebb3fef50","ssdeep":"","tlshash":"63d02b702150f8d84086a4cc8836424bf52928b262fe3895d7ae8cb16174f0c51e1e55","size":282,"data":"","first_seen":"2025-08-20T23:30:20.185011Z","last_seen":"2026-08-12T01:23:02.051284Z","times_seen":26693,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zimbras.vercel.app/_next/static/chunks/bd70a444aefcd6e2.css","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zimbras.vercel.app/","date":"2026-06-03T16:09:36.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/bd70a444aefcd6e2.css HTTP/1.1\r\nHost: zimbras.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zimbras.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 318390\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"bd70a444aefcd6e2.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 03 Jun 2026 16:09:36 GMT\r\netag: \"ea14ac810966c8af971dcc68be99caa9\"\r\nlast-modified: Sat, 30 May 2026 23:43:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/bd70a444aefcd6e2.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gfbkq-1780502976871-f3af3b7d4565\r\ncontent-length: 3152\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":9552,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (7167)","md5":"6aa66ba8873d109738e366a3d5f9835b","sha1":"da2a4b2a51d2221668c7d4fdb5169362952e924e","sha256":"0006db3431f45968c041b2724b50b788465b29021908d818b05b569e3e5e17a7","sha512":"9ffb69635b82080a5f3a005ab899a326f7a6b5ed4128bad5923b98b5b6ca7af36292c57c50d8e525a23dce6ada4067b96a861b662e6fcf5644ea2041d90ce65a","ssdeep":"96:zqNO71ZqZfOurYgMxsKxsuNvhYEDG2fOeieuOFR7I4uf04JDcOUJwoJw64s2QJAH:+NO71Y5OuyxhxrzY9rJDEeoetv","tlshash":"b612fc365226e52fdcb38c73329dbc986508a546cbb26bd9f5212e21cec757a13e0319","first_seen":"2026-05-20T08:09:22.284556Z","last_seen":"2026-06-03T16:10:00.761307Z","times_seen":3,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"zimbras.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Zimbra Web Client","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Zimbra phishing","tags":["zimbra","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"zimbras.vercel.app/_next/static/chunks/30ea11065999f7ac.js","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zimbras.vercel.app/","date":"2026-06-03T16:09:36.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/30ea11065999f7ac.js HTTP/1.1\r\nHost: zimbras.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zimbras.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 318390\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"30ea11065999f7ac.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 03 Jun 2026 16:09:36 GMT\r\netag: \"55024f5617524ba03d8c922673880d6c\"\r\nlast-modified: Sat, 30 May 2026 23:43:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/30ea11065999f7ac.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ds6dq-1780502976874-c52b4084c29a\r\ncontent-length: 71500\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":224520,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"491fb05b5b653c58448e308e13d8c5c7","sha1":"8aca444876ebfe1b34eb0a729bc41339c82647a3","sha256":"35285a094388e84f0ef4810e455f62c1399971b393846d9f0dc7638ccef3b225","sha512":"96a7c1319f5908c811a3d848e870f05e5aef1de076f496afcc3d06a5ee62501a4971ebb2ca94ebeba5b3ff5ddce3d9c81ef35fab1f27048040e06701d6732e51","ssdeep":"3072:ZeVnSSY2UeRaWcG8TP36kNAHTjWmN6yXtbtY:Ze9SSY2UQrH3FrXtbtY","tlshash":"c5240be83955f6626ab302a710af1803733c292b280d4d60a351fdddb57845eb17bf9e","first_seen":"2025-12-27T09:10:02.707216Z","last_seen":"2026-08-11T06:56:51.730165Z","times_seen":981,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"zimbras.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Zimbra Web Client","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Zimbra phishing","tags":["zimbra","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"zimbras.vercel.app/_next/static/chunks/turbopack-91cea5cdf3b26efe.js","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zimbras.vercel.app/","date":"2026-06-03T16:09:36.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-91cea5cdf3b26efe.js HTTP/1.1\r\nHost: zimbras.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zimbras.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 925115\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"turbopack-91cea5cdf3b26efe.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 03 Jun 2026 16:09:36 GMT\r\netag: \"7c175389036e62f067299cf395943e43\"\r\nlast-modified: Sat, 23 May 2026 23:11:01 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/turbopack-91cea5cdf3b26efe.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7nk6h-1780502976876-b3f13641ee1d\r\ncontent-length: 4386\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10653,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6375)","md5":"6880897f3e8bb92579d9672ae1dc7945","sha1":"ecc0cc09aa809e951f4935721a55d44b26cef1bb","sha256":"ea76d07cc634f332f294dd51b862ce517b019f48ab165942d2f783814b85d18d","sha512":"fa1ca7ab0bd59b0d23273daf1b1c7b36b971a7b49c427a035f658abc7733c685c9ddc6f797f181c3aaf97d936b76cc7275b7b5a65f88916701fc191ec1020d44","ssdeep":"192:9kNeFn8/Esp1U91EG5T1uuC9ledFMhMNUW9PZcxkUc1IsiyLxQ:9kNe2OTC9lenjZZQ7yLxQ","tlshash":"9e22e7da37a6f07743af90e6907f4044f27954a8145d582c936ce8fa38384ae49e3f27","first_seen":"2026-05-20T08:09:22.285632Z","last_seen":"2026-06-03T16:10:00.768966Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"zimbras.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Zimbra Web Client","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Zimbra phishing","tags":["zimbra","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"zimbras.vercel.app/_next/static/chunks/3dce25e25784ccfc.js","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zimbras.vercel.app/","date":"2026-06-03T16:09:36.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/3dce25e25784ccfc.js HTTP/1.1\r\nHost: zimbras.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zimbras.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 318390\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"3dce25e25784ccfc.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 03 Jun 2026 16:09:36 GMT\r\netag: \"645ab412fb1c1a1d661bad2c486dd0f4\"\r\nlast-modified: Sat, 30 May 2026 23:43:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/3dce25e25784ccfc.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fngv7-1780502976878-f7d0036441d7\r\ncontent-length: 7880\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20911,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10453)","md5":"fb53de59bcccbdaa3b172058666d0c63","sha1":"2ae8f3d88c37ae08cd1a1fe75fa1fcd658eb231d","sha256":"f8937c642f31b4c17a75e9c816639c62e59f41d55f83e1680aaae9308f4ae7ec","sha512":"7fdc42df078c7c04800bfa23f81237bbbc23e053554a253ae7585fc20ac805da87cb2ae9af2be00751020525ec13bf229e1ea34db75e80add8cdc692ac4efacf","ssdeep":"384:tPkTdom15bE2DysC9ABQmOLsA1sat2FG4hTBNyHPOArxUyhT:K11NE4BQ1L8jldBEH1GyhT","tlshash":"38921b603299fcdd225b81c4983f400df27d5e78d62ea064b3fc5ca91990488b1b3fba","first_seen":"2026-05-20T08:09:22.291304Z","last_seen":"2026-06-03T16:10:00.770498Z","times_seen":3,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"zimbras.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Zimbra Web Client","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Zimbra phishing","tags":["zimbra","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"zimbras.vercel.app/favicon.ico","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zimbras.vercel.app/","date":"2026-06-03T16:09:37.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zimbras.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zimbras.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccess-control-allow-origin: *\r\nage: 388150\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"404\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 03 Jun 2026 16:09:37 GMT\r\netag: W/\"2e6b2e3e50a68a606055f406ed57125a\"\r\nlast-modified: Sat, 30 May 2026 04:20:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /404\r\nx-next-error-status: 404\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gmlrw-1780502977012-4abc32e8a79e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8288,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (8288), with no line terminators","md5":"2e6b2e3e50a68a606055f406ed57125a","sha1":"aa154fe6dc6ffe73f0da7e009e49508e73bdba25","sha256":"218b5d5c7baf16d86ff9fd526bb8575abf355670ed3f1a90b3e3acf8f21f8fad","sha512":"a8db2e0a7d9be84d840bd6604b6090961d56beaad364fc0226b7bbe4f16e396dc8d31c363febe4155836a03931dbf881b13538be1f5470aa37880f3b0a08e23e","ssdeep":"96:NmyyMPORCGmnnvpWn4BzHkOI0SxQcbsa7cg1xqzc/xmWD7ZMsSYExqz8SuG6sSuB:dyUORR4nvpWSzHkORgnqzcpmlqzB","tlshash":"52020329f805ee4afc6e6d6d103ede3f20ce893f46b499b8968dce58064147a1796dc0","first_seen":"2026-05-20T08:09:22.293217Z","last_seen":"2026-06-03T16:10:00.774832Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"zimbras.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Zimbra Web Client","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Zimbra phishing","tags":["zimbra","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"zimbras.vercel.app/","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-03T16:09:36.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zimbras.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 2067246\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 03 Jun 2026 16:09:36 GMT\r\netag: W/\"510c76687ab079833b918ab49b4d449c\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gfbkq-1780502976607-117ecf6218c3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":9543,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9542), with no line terminators","md5":"faea1ba05b5a353bd7bba530d9bb29da","sha1":"9a9616c2e5be1a1e8a326644de77b311eab08307","sha256":"7e18d7fa3caba310d4b3d0213d35832d94045343217ca86c2777cdfcba398f03","sha512":"c6895e785deaa36221b4259590163d5ddc258f32fe6f28a577c5a0f15a53e2a51a43e059af0dfaf3982ce351719019cec099109231c8ff8e430f1261a76e8af2","ssdeep":"192:W8EyUORLR9nv9WqmGkUJtcFBoIr/6PgnqzcpmBdgUDL:W8EnORtRvdGUEFBoIb62BmL","tlshash":"7c12a534b809ed5be85b6d6d20399e3b50ceda3ac165887ca2dccb880782d7547a5ec0","first_seen":"2026-05-20T08:09:22.282126Z","last_seen":"2026-06-03T16:10:00.777843Z","times_seen":3,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":61,"dns":19,"connect":13,"send":0,"wait":11,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"zimbras.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Zimbra Web Client","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Zimbra phishing","tags":["zimbra","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"zimbras.vercel.app/_next/static/media/caa3a2e1cccd8315-s.p.853070df.woff2","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zimbras.vercel.app/","date":"2026-06-03T16:09:36.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/media/caa3a2e1cccd8315-s.p.853070df.woff2 HTTP/1.1\r\nHost: zimbras.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zimbras.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 318390\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"caa3a2e1cccd8315-s.p.853070df.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 03 Jun 2026 16:09:36 GMT\r\netag: \"18bae71b1e1b2bb25321090a3b563103\"\r\nlast-modified: Sat, 30 May 2026 23:43:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/media/caa3a2e1cccd8315-s.p.853070df.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fngv7-1780502976871-f8b1acee00a4\r\ncontent-length: 28388\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":28388,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28388, version 1.0","md5":"18bae71b1e1b2bb25321090a3b563103","sha1":"a636827d1fb47f9fddf94d55ed8f25e85155d1ea","sha256":"a29f900a6d603e989449327956e7ac61ea3e6b26ca7426f64e7cccf2cd4aed37","sha512":"e6560e1f68d236883884afa1fa4c2de5ddd6c75e69ddf1057c97f525015aa4306a14fb56c1526141bf2067d24b2ca72ea78e0e518b2bcbaf162056ee4a2b327a","ssdeep":"768:KD+2Y2za0bgeumM+doeWITKGOgUT3CbeZq:KDFzfKJ+SHIGGOh3CbeZq","tlshash":"9dd2e1a0bb98461d35fe1ba096ed42bf4a1d7f4ded7c1a65093b2b80174d4df20d8c68","first_seen":"2025-09-14T11:55:19.751418Z","last_seen":"2026-08-11T08:29:11.205384Z","times_seen":24501,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"zimbras.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Zimbra Web Client","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Zimbra phishing","tags":["zimbra","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"zimbras.vercel.app/_next/static/chunks/908db1ebe1d7e671.js","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zimbras.vercel.app/","date":"2026-06-03T16:09:36.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/908db1ebe1d7e671.js HTTP/1.1\r\nHost: zimbras.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zimbras.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 318390\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"908db1ebe1d7e671.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 03 Jun 2026 16:09:36 GMT\r\netag: \"8354fd9eb7bcae85f5da194638ee55fa\"\r\nlast-modified: Sat, 30 May 2026 23:43:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/908db1ebe1d7e671.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mhxh6-1780502976872-ec9b92d3a994\r\ncontent-length: 6469\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":18114,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18114), with no line terminators","md5":"bb0fac58b08a3e851cdbba5db162fa4e","sha1":"ea1d91ad0ba520e52231a8d728eba4a8e8598999","sha256":"9eaa8f09074da44bb080f08fcc7b031bd07ad84d064b2130bae5903f55f0fd63","sha512":"6dbb3671f3963c68474036d5d69951e48d35630394c23b80548497ce69916e05032b45bd05d31fe00d99a88374cc3bb0b6eb442de559a95b8f4cdf4bdd40affe","ssdeep":"192:rprx6QB9k84OONbihUXjpjEh/WGZyktHAwiKiEXz/CBi5LY1zsp6XQ6id:llo7vBtNsyk8RwTCmY1zspaI","tlshash":"ce82a4ad7195f4811ea364a5803f500bb23929b6286dd0f0e3a2dcf5b8f455ed233f5a","first_seen":"2026-01-18T16:20:12.67355Z","last_seen":"2026-06-03T16:10:00.781236Z","times_seen":9,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"zimbras.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Zimbra Web Client","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Zimbra phishing","tags":["zimbra","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"zimbras.vercel.app/_next/static/chunks/aa0c7c8fb89a4472.js","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zimbras.vercel.app/","date":"2026-06-03T16:09:36.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/aa0c7c8fb89a4472.js HTTP/1.1\r\nHost: zimbras.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zimbras.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 318390\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"aa0c7c8fb89a4472.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 03 Jun 2026 16:09:36 GMT\r\netag: \"e9760acf32c0923d8d00aad915669b5d\"\r\nlast-modified: Sat, 30 May 2026 23:43:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/aa0c7c8fb89a4472.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4csgq-1780502976875-3fa4bb9c6faf\r\ncontent-length: 40642\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":157228,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"da3e8f4c586b199151d5f0b5c56d8a55","sha1":"2162315f9ac9fc16b33223e62e290e67196bc682","sha256":"0e5d782f02f2ee9f43a9b09627bd03032a2119beb8cf3bfce091e36c9b4235e2","sha512":"61bde6309f9e419d14442ce9b2187a091afe6ae6cbd6bd27ef7498d40cf11423921a3cca05dc241c96f593c32dd19ee09c63df3430282d2ce212479854052976","ssdeep":"1536:oxuAw5XE+aICD7G005Kb6jWy3i1ON0RSn49KOQJhDLk0:5FC3i5KuR3imnQ7QJu0","tlshash":"47e3f7f532d1f88207a744e5c43f0006f32d4d76149e64a0a3e5dcea796499de2b3faa","first_seen":"2026-01-16T07:11:21.219004Z","last_seen":"2026-08-08T12:45:11.728284Z","times_seen":26,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"zimbras.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Zimbra Web Client","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Zimbra phishing","tags":["zimbra","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"zimbras.vercel.app/_next/static/chunks/ff1a16fafef87110.js","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zimbras.vercel.app/","date":"2026-06-03T16:09:36.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/ff1a16fafef87110.js HTTP/1.1\r\nHost: zimbras.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zimbras.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 318390\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"ff1a16fafef87110.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 03 Jun 2026 16:09:36 GMT\r\netag: \"5458632ee5cb3da028baebb11d5f70dd\"\r\nlast-modified: Sat, 30 May 2026 23:43:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/ff1a16fafef87110.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qx2hb-1780502976877-50e9d387420c\r\ncontent-length: 282\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":282,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with no line terminators","md5":"5458632ee5cb3da028baebb11d5f70dd","sha1":"57e264834d3635e52fbbd3d93135842c09ce8525","sha256":"e9786b1305894e4119bb9811a816dac9cf576755596dd989ee15b455749fc35e","sha512":"28ae4e3a3828f99d64b7d4bfc7238d56c9ad910ce267dcb6c01e53be00c88f8a7f024640680d2bd66240a9972322744ee9147883a12ff8c92717c27ebb3fef50","ssdeep":"","tlshash":"63d02b702150f8d84086a4cc8836424bf52928b262fe3895d7ae8cb16174f0c51e1e55","first_seen":"2025-08-20T23:30:20.185011Z","last_seen":"2026-08-12T01:23:02.051284Z","times_seen":26693,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"zimbras.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Zimbra Web Client","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Zimbra phishing","tags":["zimbra","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"zimbras.vercel.app/_next/static/chunks/7340adf74ff47ec0.js","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zimbras.vercel.app/","date":"2026-06-03T16:09:36.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/7340adf74ff47ec0.js HTTP/1.1\r\nHost: zimbras.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zimbras.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 318390\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"7340adf74ff47ec0.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 03 Jun 2026 16:09:36 GMT\r\netag: \"8a5bca4ebe8a70f6596cae0e0f7292f5\"\r\nlast-modified: Sat, 30 May 2026 23:43:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/7340adf74ff47ec0.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::m5v2n-1780502976877-3747284766d0\r\ncontent-length: 7771\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":30717,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30715), with no line terminators","md5":"07116caaa974183af6252904a1e19581","sha1":"0a3fadd4f5b44a9c2343ad01a1f7a0a008a08982","sha256":"d8e91f5e0c241a7fc0b00a57fbd5398c27b03931244b685e2a703a1947dda34a","sha512":"58be518c26a497b772d6a91a59f38f8ce81252d54245bfe33c373a921c125f88a60bec66c4d4bd3ab4b2a8c1a6d26dfe3bd791218dde95ceadce8edf0a1bbaf9","ssdeep":"384:735S75Bq9E0m1YmRDQ0cJ3tn79Fg/Ag8qWtOPSNsbU:D5S9BX0ZMOx6bU","tlshash":"fed2e8717395f9a352db85d9d03a0015f2290d3530ae24b0b394dcef368dc89a1fafa5","first_seen":"2025-12-20T12:16:43.561499Z","last_seen":"2026-08-11T16:25:07.972768Z","times_seen":1676,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"zimbras.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Zimbra Web Client","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Zimbra phishing","tags":["zimbra","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"zimbras.vercel.app/_next/image?url=%2Fzimbra-logo.png\u0026w=256\u0026q=75","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://zimbras.vercel.app/","date":"2026-06-03T16:09:36.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/image?url=%2Fzimbra-logo.png\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: zimbras.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zimbras.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 2139561\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: attachment; filename=\"zimbra-logo.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Wed, 03 Jun 2026 16:09:36 GMT\r\nlast-modified: Sat, 09 May 2026 21:50:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept\r\nx-matched-path: /zimbra-logo.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gmlrw-1780502976959-5e74fd8b9438\r\ncontent-length: 1752\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1752,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 187x48, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b202a3b9ca60780f678996101578df56","sha1":"409d31e732eee46b5502dd3f59557ede60a67cbd","sha256":"77bf7d4e09da2188b8b4dd5d75de3f1e9cfb100f902166c131d6e2f24bcb67b3","sha512":"bdbe2c25b3add7cff01943ee4274fb7de74453759f31ca7ebee3faa18904645e89bea725f21e0f0f68eeaca456efcee220925ad316f2508a1ed581dc4491de21","ssdeep":"","tlshash":"07312bcf2d04b6de1c124c773c123222e6ef3e969999484f50e44b3ccbe929a11c78b8","first_seen":"2025-10-01T06:11:27.690245Z","last_seen":"2026-06-03T16:10:00.787033Z","times_seen":18,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"zimbras.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Zimbra Web Client","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Zimbra phishing","tags":["zimbra","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"zimbras.vercel.app/_next/static/media/797e433ab948586e-s.p.dbea232f.woff2","fqdn":"zimbras.vercel.app","domain":"zimbras.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zimbras.vercel.app/","date":"2026-06-03T16:09:36.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/media/797e433ab948586e-s.p.dbea232f.woff2 HTTP/1.1\r\nHost: zimbras.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zimbras.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 318390\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"797e433ab948586e-s.p.dbea232f.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 03 Jun 2026 16:09:36 GMT\r\netag: \"da83d5f06d825c5ae65b7cca706cb312\"\r\nlast-modified: Sat, 30 May 2026 23:43:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/media/797e433ab948586e-s.p.dbea232f.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gmlrw-1780502976870-0085f15b4291\r\ncontent-length: 31288\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":31288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31288, version 1.0","md5":"da83d5f06d825c5ae65b7cca706cb312","sha1":"3820bcdc2e187ff5332ab0d5dc8529f8e10fd574","sha256":"b7ac144b394cbd81052d6397ec0c33397977b1d7e9bc095e744e652a378c6fb3","sha512":"c8b02f1655b30d6fd6e0b3ee92280d175fb0410938a71f625354fe79e009fb2928ed55b45d0000db9e527a388e8f3eb42875c6965c80eb4b03046c50f49ed187","ssdeep":"768:N4C8ya3ZZij3h4s0iIfv/x/tV3167X/27IwwlsUxCkegAeyTrJD7/kX:Z8Pzf3JF67eqlsZXLTrJcX","tlshash":"47e2f1e7f5578489abb26e7102e105d5c5ed4aa105bfd1fb642c70660d3aa0e0fc0b27","first_seen":"2024-12-09T15:40:29.87187Z","last_seen":"2026-08-11T11:00:26.269747Z","times_seen":25886,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"zimbras.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"zimbras.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Zimbra Web Client","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Zimbra phishing","tags":["zimbra","phishing"],"meta":null}]}}]}