{"report_id":"af4da169-9fe8-4431-acd6-16a5985cba04","version":6,"status":"done","tags":["microsoft","phishing"],"date":"2026-02-17T00:18:22Z","url":{"schema":"http","addr":"microsoft-login.it","fqdn":"microsoft-login.it","domain":"microsoft-login.it","tld":"it"},"ip":{"addr":"116.202.107.52","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"http","addr":"microsoft-login.it/","fqdn":"microsoft-login.it","domain":"microsoft-login.it","tld":"it"},"title":"Sign in to your Microsoft account","dom":{"size":4193,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"43f31f9fca9e2d7172f852d93e733b4f","sha1":"b025bb3e2f0c03b72e27162583153a499d1c967d","sha256":"6b349159cce5d59808dd6f5aaf29168974c05d1a31b81c898a24c9039b406da4","sha512":"096da7b095132438f6b512dc3e1ec915b79e25cadf34a5c18c48832d2f08342e833554a76e9c98a1943e8a7d6cd8d5e513651f8ca29c8ec5deb3f9114eaba1eb","ssdeep":"24:nJOCR5zJo+6yTHHJ+LpA0FdirzilM/T+Tm6AGw6LdNElbIzcNjmbEzTm6Yw6V4kq:ntZ2+dNeSzizmRWaRAbaFiUQXZbX0","tlshash":"8981eb6150f824730193d0d676a62f5a7ee08a07c61e2808b1fc1fd45fe7d82dc5356d","dom_hash":"domhash93307443c119b5bb8f9590b1a1061bdd","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"microsoft-login.it","fqdn":"microsoft-login.it","domain":"microsoft-login.it","tld":"it"},"ip":{"addr":"116.202.107.52","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-24T00:18:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"microsoft-login.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"microsoft-login.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"summary":[{"fqdn":"microsoft-login.it","ip":{"addr":"116.202.107.52","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-11-05","domain_rank":0,"first_seen":"2026-02-17T00:18:23.164534Z","last_seen":"2026-02-17T00:18:23.164534Z","alert_count":27,"request_count":9,"received_data":37413,"sent_data":3419,"comment":"","tags":null,"fingerprints":[{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"OpenSSL:3.5.5","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"i.imgur.com","ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":3309,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2026-02-11T16:34:40.816145Z","alert_count":0,"request_count":1,"received_data":1580723,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"http","addr":"microsoft-login.it/assets/app.js","fqdn":"microsoft-login.it","domain":"microsoft-login.it","tld":"it"},"ip":{"addr":"116.202.107.52","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e762c7fcd60483f94b8424ff90ed724","sha1":"ab4b8a24e3fec1c4496cae778de485ad0e16f708","sha256":"536dcfef5c4559c167d85bd36a3b58bafc5108725155149da2a5beeffdc9d66d","sha512":"79196beab38d405b9fa48762d9671380c1f200d6991b6041489470e459a63879c0363427ca43006870727cb24b724ee605be006cfba3e98f28cb2fe657aa1ae8","ssdeep":"48:1FTVt2rjWVz+AJVvqFlnvCgdtWVzCAoMG1NI6a/6a9Il/KeAXxAFOASiyzUpitaj:XFZgoZg1va9Ff2FvgCsAGs","tlshash":"15919c5f329915398db73bbf1aab5388f73100a329404905bd6cda442f7ad5192b2fd8","size":4418,"data":"","first_seen":"2026-02-17T00:18:25.811727Z","last_seen":"2026-02-17T03:26:56.327654Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"microsoft-login.it/","fqdn":"microsoft-login.it","domain":"microsoft-login.it","tld":"it"},"ip":{"addr":"116.202.107.52","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-17T00:18:00.525Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: microsoft-login.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 17 Feb 2026 00:18:00 GMT\r\nServer: Apache/2.4.62 (CentOS Stream) OpenSSL/3.5.5\r\nLast-Modified: Wed, 22 Oct 2025 10:40:42 GMT\r\nETag: \"10ac-641bcf2be0f7e\"\r\nAccept-Ranges: bytes\r\nContent-Length: 4268\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"OpenSSL:3.5.5","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4268,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"42135ef2a490cd08204f28d7f682088e","sha1":"8d490e82eac8292617be9b704de6d08613b404ef","sha256":"e2f71c56f83f3236be42fc67d0fa1fd0790d928a1fdca9de264765a79ad52cb7","sha512":"1f0e213cad2855f266c65ebfcee4996bb7b9f7f542c3e4e5e5a75c3e334b963bef1930cfac647a95340482e9468a81cd75a134d1348dd596506233e550580f44","ssdeep":"24:hPGhCCzRSTOm6yTHleJ+LpA0FdirziMM/T+T7i0GGw6LdNElVOezcNjmbEzT7iYg:tORS1d8eSz7zsRWaFba+iUQmZbGkgu","tlshash":"2091ec6110f8647301d3e0d279a62f5abee08a07c61e2408b1fc5ed56fe7e81dc535a9","first_seen":"2026-02-17T00:18:25.804562Z","last_seen":"2026-02-17T03:26:56.334973Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":24,"dns":1,"connect":24,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"microsoft-login.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"microsoft-login.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"microsoft-login.it/assets/app.css","fqdn":"microsoft-login.it","domain":"microsoft-login.it","tld":"it"},"ip":{"addr":"116.202.107.52","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://microsoft-login.it/","date":"2026-02-17T00:18:00.662Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/app.css HTTP/1.1\r\nHost: microsoft-login.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoft-login.it/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 17 Feb 2026 00:18:00 GMT\r\nServer: Apache/2.4.62 (CentOS Stream) OpenSSL/3.5.5\r\nLast-Modified: Wed, 22 Oct 2025 10:39:59 GMT\r\nETag: \"188e-641bcf02b49d7\"\r\nAccept-Ranges: bytes\r\nContent-Length: 6286\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"OpenSSL:3.5.5","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":6286,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (496), with CRLF, LF line terminators","md5":"6b9063d2a66e8b4cab468d30073c0df0","sha1":"1bd3d4e66e7b6f2d79be911b2e05c72557211b48","sha256":"f0d9fab9117dc7bc760d2ba92a1960bc2dffc4d0253f1f524e4071ff905f2f86","sha512":"7c4d23fc0129aba4dd1f18cb4b42053e502240f54406cad1507d74c084dcf8a4953bb8a46956b1c8c0faf5edda6aa27a3452498a766186ddb67186d1120574a6","ssdeep":"96:xFWHThRjenrjHgHSFj6v5WS0biU/b0X3n/lBeBCfFJdVgYFFljwGjI/sGhbbG4Bh:xcoG5IbXYn5f3dVgYNFjMXIiy6TNwA","tlshash":"c6d11154e6020047b133ca2d1bb15b55fba950538b06867e7efc62544ffe2a89a70fcc","first_seen":"2026-02-17T00:18:25.805845Z","last_seen":"2026-02-17T03:26:56.318799Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"microsoft-login.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"microsoft-login.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"microsoft-login.it/assets/key.png","fqdn":"microsoft-login.it","domain":"microsoft-login.it","tld":"it"},"ip":{"addr":"116.202.107.52","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://microsoft-login.it/","date":"2026-02-17T00:18:00.673Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/key.png HTTP/1.1\r\nHost: microsoft-login.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoft-login.it/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 17 Feb 2026 00:18:00 GMT\r\nServer: Apache/2.4.62 (CentOS Stream) OpenSSL/3.5.5\r\nLast-Modified: Wed, 22 Oct 2025 10:19:43 GMT\r\nETag: \"2d7-641bca7b06918\"\r\nAccept-Ranges: bytes\r\nContent-Length: 727\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"OpenSSL:3.5.5","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":727,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"839cb0f55c3d2d5c2f740bda95cb2878","sha1":"93f6fa3a2da8b7184d4b5c5f2065872793370c2e","sha256":"40ecb8832f6a9a8aaa0cc6e1287e867a4fca38433d091d86c6cab1f28fbab652","sha512":"ecbca8ab21bf3302c88f933cfd248cff5553afe152a170f554c27fd67bdc3e7d8ce79e202561fd0658e41820681eb90f74e38fd09390c517afb34d2c1b65a096","ssdeep":"","tlshash":"860115c7471c28edd8791de1d9964a07463df431406923122e26937445375899f756f0","first_seen":"2023-07-01T14:36:17Z","last_seen":"2026-07-28T12:26:12.735235Z","times_seen":19639,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":12,"dns":0,"connect":24,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"microsoft-login.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"microsoft-login.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"microsoft-login.it/assets/back.png","fqdn":"microsoft-login.it","domain":"microsoft-login.it","tld":"it"},"ip":{"addr":"116.202.107.52","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://microsoft-login.it/","date":"2026-02-17T00:18:00.674Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/back.png HTTP/1.1\r\nHost: microsoft-login.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoft-login.it/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 17 Feb 2026 00:18:00 GMT\r\nServer: Apache/2.4.62 (CentOS Stream) OpenSSL/3.5.5\r\nLast-Modified: Wed, 22 Oct 2025 10:19:43 GMT\r\nETag: \"e7-641bca7b03fa1\"\r\nAccept-Ranges: bytes\r\nContent-Length: 231\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenSSL:3.5.5","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]}],"data":{"size":231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"547988bac5584b4608466d761e16f370","sha1":"c11bb71049702528402a31027f200184910a7e23","sha256":"70e32b2db3f079bb0295a85a0db15ed9e5926294dd947938d6cfa595f5ab18b4","sha512":"c4a76f6e94982d1cc02c2b67523a334e76bfde525c1014d32db9e7eca0fa39a06f291ecfa94c8c6a49d488ea3acf9c10ddf3cad9515562010440863d0f08fba3","ssdeep":"","tlshash":"0cd097e26a88297fc39f223b29051a21ec8a7131a020f10c3812c238a501a285082ee2","first_seen":"2023-07-01T14:36:17Z","last_seen":"2026-07-28T12:26:12.725585Z","times_seen":19542,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":11,"dns":1,"connect":24,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"microsoft-login.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"microsoft-login.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"microsoft-login.it/assets/app.js","fqdn":"microsoft-login.it","domain":"microsoft-login.it","tld":"it"},"ip":{"addr":"116.202.107.52","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://microsoft-login.it/","date":"2026-02-17T00:18:00.675Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/app.js HTTP/1.1\r\nHost: microsoft-login.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoft-login.it/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 17 Feb 2026 00:18:00 GMT\r\nServer: Apache/2.4.62 (CentOS Stream) OpenSSL/3.5.5\r\nLast-Modified: Tue, 23 Dec 2025 08:30:13 GMT\r\nETag: \"1142-6469a5a43d5af\"\r\nAccept-Ranges: bytes\r\nContent-Length: 4418\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenSSL:3.5.5","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]}],"data":{"size":4418,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"6e762c7fcd60483f94b8424ff90ed724","sha1":"ab4b8a24e3fec1c4496cae778de485ad0e16f708","sha256":"536dcfef5c4559c167d85bd36a3b58bafc5108725155149da2a5beeffdc9d66d","sha512":"79196beab38d405b9fa48762d9671380c1f200d6991b6041489470e459a63879c0363427ca43006870727cb24b724ee605be006cfba3e98f28cb2fe657aa1ae8","ssdeep":"48:1FTVt2rjWVz+AJVvqFlnvCgdtWVzCAoMG1NI6a/6a9Il/KeAXxAFOASiyzUpitaj:XFZgoZg1va9Ff2FvgCsAGs","tlshash":"15919c5f329915398db73bbf1aab5388f73100a329404905bd6cda442f7ad5192b2fd8","first_seen":"2026-02-17T00:18:25.811727Z","last_seen":"2026-02-17T03:26:56.327654Z","times_seen":2,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":5,"dns":0,"connect":24,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"microsoft-login.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"microsoft-login.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"i.imgur.com/U7mE5r1.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://microsoft-login.it/","date":"2026-02-17T00:18:00.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /U7mE5r1.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoft-login.it/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Oct 2025 10:36:09 GMT\r\netag: \"655b879979a34a1abd90d16126d39bc8\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD12-P2\r\nx-amz-cf-id: Y_rn-KzsN9rYLziubsBdlV70kuZk8v0cbZPiB2hm85zJ_eggcccFdg==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 54094\r\ndate: Tue, 17 Feb 2026 00:18:00 GMT\r\nx-served-by: cache-iad-kcgs7200164-IAD, cache-hel1410025-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 32, 0\r\nx-timer: S1771287481.826321,VS0,VE113\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 1579931\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1579931,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2557 x 1438, 8-bit/color RGB, non-interlaced","md5":"0b929193bd3cae144ae2539ca0bee527","sha1":"277bbef1af072adddfb7cab6b900a2fbf3fa29c6","sha256":"a5d32150f5dc000518067f87ceb1243283bc6a04d6e62ea59da901a9fd427a78","sha512":"162571036acfe38b6f323bea2f03d3826a46ad4b0fa62a1f6a5fc6544c95c1f5f4f4e607341cf54753c466c9e71065b25c6280558d2efd39daf5108d3e37a358","ssdeep":"24576:O6fB/j71OwumDarUDjH+VeiKwKd4m0mKM9ZZl+Jye38m:Nh8wunrUDjHQY0mZPZ4R","tlshash":"f12523781d3e60e6e62fb434674bf0349e6478d2099358931941c587ee386b86df0eb3","first_seen":"2026-02-17T00:18:25.815084Z","last_seen":"2026-02-17T03:26:56.331148Z","times_seen":2,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":112,"dns":27,"connect":26,"send":0,"wait":139,"receive":182,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft-login.it/","fqdn":"microsoft-login.it","domain":"microsoft-login.it","tld":"it"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-17T00:18:00.376Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: microsoft-login.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T14:56:16.902508Z","times_seen":17581573,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":71,"connect":25,"send":0,"wait":0,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"microsoft-login.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"microsoft-login.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"microsoft-login.it/assets/logo.png","fqdn":"microsoft-login.it","domain":"microsoft-login.it","tld":"it"},"ip":{"addr":"116.202.107.52","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://microsoft-login.it/","date":"2026-02-17T00:18:00.664Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/logo.png HTTP/1.1\r\nHost: microsoft-login.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoft-login.it/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 17 Feb 2026 00:18:00 GMT\r\nServer: Apache/2.4.62 (CentOS Stream) OpenSSL/3.5.5\r\nLast-Modified: Wed, 22 Oct 2025 10:19:43 GMT\r\nETag: \"578-641bca7b06918\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1400\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"OpenSSL:3.5.5","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":1400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced","md5":"333ee830e5ab72c41dd9126a27b4d878","sha1":"12d8d66ebb3076f3d6069e133c3212f97c8774e1","sha256":"8702292cbc365e9f0488143e2b309b85efe09c61fd2e0a2e21c53735a309313c","sha512":"3413ed624241877c1d44fee23fd37745cb214c12ae73facfafa07b47fa1cb9e5daa3cb7f542564e04075ffe8ba744c962fbdd78f08a643a90c0ec1118c05bbf8","ssdeep":"","tlshash":"7521e964bab8a520130e30a09d305d1ad47f42ec99189e4e71c4e00a334ca094b5d83b","first_seen":"2023-07-01T14:36:17Z","last_seen":"2026-07-28T12:26:12.71798Z","times_seen":17912,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":17,"dns":1,"connect":25,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"microsoft-login.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"microsoft-login.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"microsoft-login.it/assets/question.png","fqdn":"microsoft-login.it","domain":"microsoft-login.it","tld":"it"},"ip":{"addr":"116.202.107.52","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://microsoft-login.it/","date":"2026-02-17T00:18:00.665Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/question.png HTTP/1.1\r\nHost: microsoft-login.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoft-login.it/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 17 Feb 2026 00:18:00 GMT\r\nServer: Apache/2.4.62 (CentOS Stream) OpenSSL/3.5.5\r\nLast-Modified: Wed, 22 Oct 2025 10:19:43 GMT\r\nETag: \"19c-641bca7b07dfa\"\r\nAccept-Ranges: bytes\r\nContent-Length: 412\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenSSL:3.5.5","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]}],"data":{"size":412,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"50b10112a310a563ddf323ed436de70c","sha1":"fed1aa54cd30335fd2e2596cc8adac11bed0251e","sha256":"e8d06c0a072a671e5843de9a12f4cd826ca5e17bbeb4c57ee9c410ee878998e8","sha512":"7226c99836fa773173c746bb40c856882d913eea229eabced8faf194f913f1f6aaa6f2dfc132c55fa33bdf6125407e1964b8ddf00c7f3539873437570d18ff54","ssdeep":"","tlshash":"c0e08a87130875fb435de5d015517c157c725229335e234b10a5c00c10def8111c975b","first_seen":"2023-07-01T14:36:17Z","last_seen":"2026-07-28T12:26:12.73142Z","times_seen":330,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":19,"dns":1,"connect":24,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"microsoft-login.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"microsoft-login.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"microsoft-login.it/assets/favicon.ico","fqdn":"microsoft-login.it","domain":"microsoft-login.it","tld":"it"},"ip":{"addr":"116.202.107.52","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://microsoft-login.it/","date":"2026-02-17T00:18:00.851Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/favicon.ico HTTP/1.1\r\nHost: microsoft-login.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoft-login.it/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 17 Feb 2026 00:18:00 GMT\r\nServer: Apache/2.4.62 (CentOS Stream) OpenSSL/3.5.5\r\nLast-Modified: Wed, 22 Oct 2025 10:19:43 GMT\r\nETag: \"4316-641bca7b06918\"\r\nAccept-Ranges: bytes\r\nContent-Length: 17174\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/vnd.microsoft.icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"OpenSSL:3.5.5","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":17174,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors","md5":"12e3dac858061d088023b2bd48e2fa96","sha1":"e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5","sha256":"90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21","sha512":"c5030c55a855e7a9e20e22f4c70bf1e0f3c558a9b7d501cfab6992ac2656ae5e41b050ccac541efa55f9603e0d349b247eb4912ee169d44044271789c719cd01","ssdeep":"24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO","tlshash":"b772e35b1f5f4981ec4b0db80b125e80c5e49c973854dffbdb76b62888b0364ab845eb","first_seen":"2023-04-05T03:19:57Z","last_seen":"2026-07-28T14:16:14.374142Z","times_seen":170003,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"microsoft-login.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"microsoft-login.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}}]}