{"report_id":"a0cc3070-64d5-4624-bb6f-be056f795f05","version":0,"status":"done","tags":["linkedin","microsoft","phishing"],"date":"2026-07-31T00:16:48Z","url":{"schema":"http","addr":"telos.run/public-HTML/linked/index.html","fqdn":"telos.run","domain":"telos.run","tld":"run"},"ip":{"addr":"177.8.248.45","port":0,"asn":263579,"as":"ISUPER TELECOMUNICACOES INFO LTDA","country":"Brazil","country_code":"BR"},"final":{"url":{"schema":"https","addr":"telos.run/public-HTML/linked/index.html","fqdn":"telos.run","domain":"telos.run","tld":"run"},"title":"LinkedIn Login, Sign in | LinkedIn","dom":{"size":89911,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3005)","md5":"a185d3d49a83fd861718785048591505","sha1":"d98398675b69c1a482f4477f0095f757c59f4034","sha256":"e1348d536607200a3386e18aae43bc538d00aca33cf78b4984eecf191ef8a226","sha512":"f57334b1b448c5e6ed5a162165e26213a34315840554542b5ffd84722c14ea21fe6a13315a64a09d178ddf2cab76f5b08bc2844da1ae72fc521efdd85eaea9b0","ssdeep":"768:GMGWyA0AbjMT8zk2QgRG4YZYAPzMMpUu2BdE78Adj8zv2Q6xzFR4ORP2BdHqdDpm:GHWlM7qTV8Y1UcumtiifClpC","tlshash":"3393ec7410b220360667a1e96bb65f0b37e9d117e50bca04be7c03e81fdaf50de53a99","dom_hash":"domhash48c6b3f8ed07349bc198f459eb93220f","first_seen":"2026-07-31T00:16:57.079924Z","last_seen":"2026-07-31T05:00:52.577448Z","times_seen":5,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"telos.run/public-HTML/linked/index.html","fqdn":"telos.run","domain":"telos.run","tld":"run"},"ip":{"addr":"177.8.248.45","port":0,"asn":263579,"as":"ISUPER TELECOMUNICACOES INFO LTDA","country":"Brazil","country_code":"BR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-04T00:16:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"telos.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - LinkedIn","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with LinkedIn phishing","tags":["linkedin","microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - LinkedIn","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with LinkedIn phishing","tags":["linkedin","microsoft","phishing"],"meta":null}]},"summary":[{"fqdn":"telos.run","ip":{"addr":"177.8.248.45","port":443,"asn":263579,"as":"ISUPER TELECOMUNICACOES INFO LTDA","country":"Brazil","country_code":"BR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-31T00:16:48.782048Z","last_seen":"2026-07-31T00:16:48.782048Z","alert_count":4,"request_count":2,"received_data":1364745,"sent_data":1006,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - LinkedIn","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with LinkedIn phishing","tags":["linkedin","microsoft","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"telos.run/public-HTML/linked/index.html","fqdn":"telos.run","domain":"telos.run","tld":"run"},"ip":{"addr":"177.8.248.45","port":443,"asn":263579,"as":"ISUPER TELECOMUNICACOES INFO LTDA","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"0b8ea6ef2f372c2aa46b9bc4cebcdecc","sha1":"f074a261fc08e8ca73311e7b48b51da6e7d97a8f","sha256":"965e46f16f0e0b6cb3cc4e8475bcb1b7bb7c1faee3d3ccb0e72a447919df5c5b","sha512":"30e1fca3b48c989a6bd16f14b14632c8fce30ed6ac848e9fb492344e2f05ee3ca9ab2b77ca069add37571d0ad9aff6a0273d4b678f6e4f60cb2713ef855d3563","ssdeep":"384:Hq1jsxHmEqEUEeTipuqhoPCLSgZtb+BB/idOZzquwIwCmiuKpThFh5qPo8rs:HqEhPS+umtiifCyKpjqw8rs","tlshash":"4ed2219921f730220663617e67cfa0457225a027280acd487e7c831d7f95f566fb2bee","size":30139,"data":"","first_seen":"2026-07-31T00:16:57.083822Z","last_seen":"2026-07-31T05:00:52.586987Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"telos.run/public-HTML/linked/index.html","fqdn":"telos.run","domain":"telos.run","tld":"run"},"ip":{"addr":"177.8.248.45","port":443,"asn":263579,"as":"ISUPER TELECOMUNICACOES INFO LTDA","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-31T00:16:16.021Z","timestamp":1785456976021,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telos.run","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 06:48:29 GMT","end":"Fri, 02 Oct 2026 06:48:28 GMT"},"fingerprint":{"sha1":"04:99:7A:A1:C5:C0:17:C0:8C:C9:CE:C1:76:4F:6C:36:01:2A:7F:C5","sha256":"53:57:14:EF:73:B6:EA:BC:AD:93:EE:1F:C8:68:FF:D6:1E:75:86:77:D7:F2:5D:20:55:90:04:C2:2B:6E:43:33"}}},"request":{"raw":"GET /public-HTML/linked/index.html HTTP/1.1\r\nHost: telos.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:16:17 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 16 Jul 2026 22:03:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 82626\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":82626,"size_decoded":82870,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3005)","md5":"95c85ae80dac4a6a0c044ac672ea05f9","sha1":"06fea903bd37e17f92674ee91dce07ed909771fc","sha256":"907db23b9c81cf0a87a89e177f709d70be547d880091949bef9bbd27befe5901","sha512":"5545417716498fc7e5a49ae17b9d1f9f508e11cc61ebe66d940361868c490b28a86f346d2bc273a09083dd31560d644d044119720a251624fda52b0d597b8144","ssdeep":"768:usGW3A1jMT8zk2QgRm4Y5YAPzMMpUu2BdE78Adj8zv2Q6xzFR4ORP2BdHqdDp6k+:unWSM7KzV8Y1UDumtiifClpB","tlshash":"2b83fa74106320360727a1bd6baa5f0b33e9d117e50bc904be6c43e85fdaf50de63a99","first_seen":"2026-07-31T00:16:57.081458Z","last_seen":"2026-07-31T05:00:52.582014Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2214,"timings":{"blocked":0,"dns":905,"connect":218,"send":0,"wait":218,"receive":434,"ssl":439},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"telos.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - LinkedIn","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with LinkedIn phishing","tags":["linkedin","microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"telos.run/public-HTML/linked/assets/BYyMh3hK.css","fqdn":"telos.run","domain":"telos.run","tld":"run"},"ip":{"addr":"177.8.248.45","port":443,"asn":263579,"as":"ISUPER TELECOMUNICACOES INFO LTDA","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://telos.run/public-HTML/linked/index.html","date":"2026-07-31T00:16:17.993Z","timestamp":1785456977993,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telos.run","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 06:48:29 GMT","end":"Fri, 02 Oct 2026 06:48:28 GMT"},"fingerprint":{"sha1":"04:99:7A:A1:C5:C0:17:C0:8C:C9:CE:C1:76:4F:6C:36:01:2A:7F:C5","sha256":"53:57:14:EF:73:B6:EA:BC:AD:93:EE:1F:C8:68:FF:D6:1E:75:86:77:D7:F2:5D:20:55:90:04:C2:2B:6E:43:33"}}},"request":{"raw":"GET /public-HTML/linked/assets/BYyMh3hK.css HTTP/1.1\r\nHost: telos.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telos.run/public-HTML/linked/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:16:18 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 06 Jul 2026 16:50:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1281630\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1281630,"size_decoded":1281875,"mime_type":"text/css","magic":"ASCII text","md5":"55018c836ace51c7958e03058df2e232","sha1":"8b12df98e701b550ce37952c475f66a258c86bc5","sha256":"c745f934d1a7893697ca13cc529331923bfba097e247f7292baadabebe7a25f4","sha512":"7d29f0bdae5b4191fd5a010f170628ba09d8e7b27ab3676651754933369e1df95f7620310bd2c85ac0aed7f664bad1741f5121a2fc7c337e0a1dea9760d193e2","ssdeep":"6144:xu9yOyt2cF5sy/F2IUXZAXtCowX9kQKT9wPZGbNMoCRo0L:oU5sy92IYXvKT/23nL","tlshash":"e2258d09b6b2b9f93c377379579e564873a5f053da08ce95ba9ca070cf843bc2da1241","first_seen":"2026-07-31T00:16:57.082473Z","last_seen":"2026-07-31T05:00:52.584727Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1973,"timings":{"blocked":-1,"dns":0,"connect":217,"send":0,"wait":219,"receive":1311,"ssl":225},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"telos.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - LinkedIn","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with LinkedIn phishing","tags":["linkedin","microsoft","phishing"],"meta":null}]}}]}