{"report_id":"b43f835f-c94e-4154-961a-05961795812c","version":0,"status":"done","tags":[],"date":"2026-06-11T12:34:05Z","url":{"schema":"http","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":0,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"title":"ABN AMRO – e.dentifier","dom":{"size":22046,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2492)","md5":"1c159e95955c1b08ec764ced540199bb","sha1":"e38fd6a34f534061d600bfe0710f72654fb80a39","sha256":"6dd0c3e641ea23db682770b987f8eec0c958c59005ea2b0c0678e791de5910b8","sha512":"f7ba0b8ac20cb5dc8c185ce83f4d5763498d4bb36f4f7c589c1853b88d4e2743743d7e544ce54e6ea4b485b35be3ff98a2d3015e9d7fb2c949124dbfbcb5b3e0","ssdeep":"384:+rkpRz9FbFuHVcqPWO3bY8IIDSyFuu35lBG9jX:73z9FbFu1c6YYQJjX","tlshash":"07a2d763a9d624276a038da5b7f35f4a7265d443c005c9687ffc56a4cf8aac09da33cc","dom_hash":"domhash4c49829832a6885e2b777e927db2fdea","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":0,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-16T12:34:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-11","alert":"Phishing Block","trigger":"4jw.d29.mytemp.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"img1.wsimg.com","ip":{"addr":"2.22.225.66","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2008-03-17","domain_rank":58983,"first_seen":"2012-06-20T14:42:31Z","last_seen":"2026-06-08T08:06:31.945737Z","alert_count":0,"request_count":2,"received_data":107447,"sent_data":972,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"4jw.d29.mytemp.website","ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-01-05","domain_rank":0,"first_seen":"2026-05-06T12:56:20.35083Z","last_seen":"2026-06-11T02:01:13.955602Z","alert_count":95,"request_count":19,"received_data":32029,"sent_data":12593,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"csp.secureserver.net","ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1998-03-30","domain_rank":62352,"first_seen":"2022-12-18T21:17:09Z","last_seen":"2026-06-08T08:36:33.633768Z","alert_count":0,"request_count":2,"received_data":1016,"sent_data":1102,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"13f47de56baf12e599466bfc1e49d50f","sha1":"ab57d84ee2abb188e34825fdf48e862d162fded8","sha256":"4109c3055334ee19a774dc71434c355f2be0ab5a23fbb17d79b2fe1393e83aff","sha512":"cf417535cbef6e1f19670327352df5163ae5af33d17317d4d61db858846d56a27acd4afcc4a2999a158781ccc6704d19dd24eadac5c9c76e766a38cdc94e53c7","ssdeep":"","tlshash":"8941ed723d7514770bf354bbb3c765e2b72800521484e490bfbf85122f90ea15ab2be6","size":1901,"data":"","first_seen":"2026-06-11T12:34:07.003687Z","last_seen":"2026-06-16T02:21:22.119874Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e5c55b9cac028fcbbe2e4c3a68bcf1b","sha1":"3b9bfa826d4abc0731703abed9811cdbc4de30ee","sha256":"4bef316cebacb75e8bddb71962657934b49380826710742f49c0cbb71af103ac","sha512":"ac5597d041bca98becb5fb949e4fe8432425df3adf84f43e368187e87fac1f537578dfc7b4c1ecc51ed4a355376b3bff2b6a485e9c7520f75fb287f24561cb18","ssdeep":"","tlshash":"84118bafbea01e3b4cf3657b556fb758392b14871c01c5009bfacca00e34a865836ad5","size":1102,"data":"","first_seen":"2026-06-11T12:34:07.00607Z","last_seen":"2026-06-19T01:29:03.330742Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb8a159169a4d5e9131d3c140f6aa964","sha1":"30f834c484d17ef6cab09f5ff0c104abd298a79b","sha256":"c8115f6a2ef85146324a54e001f5321a49e3f3d180f3f2d4655bb407a1dc3e86","sha512":"b331899c5db51ab9ab9f5397dcf0bd11e652b28f6d1d26e3ae737f20d44b18a0e10e40a14271f0bcc2ae44425db3c528d811f312355f407c917cfb0afe3dc297","ssdeep":"","tlshash":"e5e07d77fc93107107ff10ea565a5646363180056514d142380966b44eb0f2e1d6b5d0","size":315,"data":"","first_seen":"2026-06-11T12:34:07.008499Z","last_seen":"2026-06-16T02:21:22.12186Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3451606d66f17cbd839ddb00ef520d98","sha1":"525bf3e3da8bfa8e5c4588ac1e429cb6c5ee52c2","sha256":"330890782a3e35d4c863205fba13ea8f3d2d438c88f42b222c5b1986676e9797","sha512":"b109c787de9d3c7317d48a4acdec415fb9c048c583f50db049b90e103b0a22b5c26b42299e6b4590d5cbb88ae666723b311b71a1631adbc6d49cb6258399d58e","ssdeep":"","tlshash":"80e0c00dc02b4082122698443212595ff72ad6f2c7483cadc708883656cf08bfb9d644","size":365,"data":"","first_seen":"2026-06-08T15:12:24.832706Z","last_seen":"2026-06-21T00:45:42.52026Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"13f47de56baf12e599466bfc1e49d50f","sha1":"ab57d84ee2abb188e34825fdf48e862d162fded8","sha256":"4109c3055334ee19a774dc71434c355f2be0ab5a23fbb17d79b2fe1393e83aff","sha512":"cf417535cbef6e1f19670327352df5163ae5af33d17317d4d61db858846d56a27acd4afcc4a2999a158781ccc6704d19dd24eadac5c9c76e766a38cdc94e53c7","ssdeep":"","tlshash":"8941ed723d7514770bf354bbb3c765e2b72800521484e490bfbf85122f90ea15ab2be6","size":1901,"data":"","first_seen":"2026-06-11T12:34:07.003687Z","last_seen":"2026-06-16T02:21:22.119874Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e5c55b9cac028fcbbe2e4c3a68bcf1b","sha1":"3b9bfa826d4abc0731703abed9811cdbc4de30ee","sha256":"4bef316cebacb75e8bddb71962657934b49380826710742f49c0cbb71af103ac","sha512":"ac5597d041bca98becb5fb949e4fe8432425df3adf84f43e368187e87fac1f537578dfc7b4c1ecc51ed4a355376b3bff2b6a485e9c7520f75fb287f24561cb18","ssdeep":"","tlshash":"84118bafbea01e3b4cf3657b556fb758392b14871c01c5009bfacca00e34a865836ad5","size":1102,"data":"","first_seen":"2026-06-11T12:34:07.00607Z","last_seen":"2026-06-19T01:29:03.330742Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb8a159169a4d5e9131d3c140f6aa964","sha1":"30f834c484d17ef6cab09f5ff0c104abd298a79b","sha256":"c8115f6a2ef85146324a54e001f5321a49e3f3d180f3f2d4655bb407a1dc3e86","sha512":"b331899c5db51ab9ab9f5397dcf0bd11e652b28f6d1d26e3ae737f20d44b18a0e10e40a14271f0bcc2ae44425db3c528d811f312355f407c917cfb0afe3dc297","ssdeep":"","tlshash":"e5e07d77fc93107107ff10ea565a5646363180056514d142380966b44eb0f2e1d6b5d0","size":315,"data":"","first_seen":"2026-06-11T12:34:07.008499Z","last_seen":"2026-06-16T02:21:22.12186Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3451606d66f17cbd839ddb00ef520d98","sha1":"525bf3e3da8bfa8e5c4588ac1e429cb6c5ee52c2","sha256":"330890782a3e35d4c863205fba13ea8f3d2d438c88f42b222c5b1986676e9797","sha512":"b109c787de9d3c7317d48a4acdec415fb9c048c583f50db049b90e103b0a22b5c26b42299e6b4590d5cbb88ae666723b311b71a1631adbc6d49cb6258399d58e","ssdeep":"","tlshash":"80e0c00dc02b4082122698443212595ff72ad6f2c7483cadc708883656cf08bfb9d644","size":365,"data":"","first_seen":"2026-06-08T15:12:24.832706Z","last_seen":"2026-06-21T00:45:42.52026Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"13f47de56baf12e599466bfc1e49d50f","sha1":"ab57d84ee2abb188e34825fdf48e862d162fded8","sha256":"4109c3055334ee19a774dc71434c355f2be0ab5a23fbb17d79b2fe1393e83aff","sha512":"cf417535cbef6e1f19670327352df5163ae5af33d17317d4d61db858846d56a27acd4afcc4a2999a158781ccc6704d19dd24eadac5c9c76e766a38cdc94e53c7","ssdeep":"","tlshash":"8941ed723d7514770bf354bbb3c765e2b72800521484e490bfbf85122f90ea15ab2be6","size":1901,"data":"","first_seen":"2026-06-11T12:34:07.003687Z","last_seen":"2026-06-16T02:21:22.119874Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e5c55b9cac028fcbbe2e4c3a68bcf1b","sha1":"3b9bfa826d4abc0731703abed9811cdbc4de30ee","sha256":"4bef316cebacb75e8bddb71962657934b49380826710742f49c0cbb71af103ac","sha512":"ac5597d041bca98becb5fb949e4fe8432425df3adf84f43e368187e87fac1f537578dfc7b4c1ecc51ed4a355376b3bff2b6a485e9c7520f75fb287f24561cb18","ssdeep":"","tlshash":"84118bafbea01e3b4cf3657b556fb758392b14871c01c5009bfacca00e34a865836ad5","size":1102,"data":"","first_seen":"2026-06-11T12:34:07.00607Z","last_seen":"2026-06-19T01:29:03.330742Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb8a159169a4d5e9131d3c140f6aa964","sha1":"30f834c484d17ef6cab09f5ff0c104abd298a79b","sha256":"c8115f6a2ef85146324a54e001f5321a49e3f3d180f3f2d4655bb407a1dc3e86","sha512":"b331899c5db51ab9ab9f5397dcf0bd11e652b28f6d1d26e3ae737f20d44b18a0e10e40a14271f0bcc2ae44425db3c528d811f312355f407c917cfb0afe3dc297","ssdeep":"","tlshash":"e5e07d77fc93107107ff10ea565a5646363180056514d142380966b44eb0f2e1d6b5d0","size":315,"data":"","first_seen":"2026-06-11T12:34:07.008499Z","last_seen":"2026-06-16T02:21:22.12186Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3451606d66f17cbd839ddb00ef520d98","sha1":"525bf3e3da8bfa8e5c4588ac1e429cb6c5ee52c2","sha256":"330890782a3e35d4c863205fba13ea8f3d2d438c88f42b222c5b1986676e9797","sha512":"b109c787de9d3c7317d48a4acdec415fb9c048c583f50db049b90e103b0a22b5c26b42299e6b4590d5cbb88ae666723b311b71a1631adbc6d49cb6258399d58e","ssdeep":"","tlshash":"80e0c00dc02b4082122698443212595ff72ad6f2c7483cadc708883656cf08bfb9d644","size":365,"data":"","first_seen":"2026-06-08T15:12:24.832706Z","last_seen":"2026-06-21T00:45:42.52026Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/tracker.js","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f09396505b9330dfe9da559f19968c40","sha1":"cd6791eb641c24cdf20ef884e7625b15900459b1","sha256":"17b7ef31e411e091f6a4a15327cd1c05dea65a0d77104b46c8b13de01580f79c","sha512":"647921853c220f4a0339164f6db1f91359125e800fe2256dff156af24b05d92debc5430f7f670075f845b4088728392011f608912569d4a56cb8615791a2b1ef","ssdeep":"","tlshash":"b551611f61f51a266573a178a2aff006373712036dc7d8017a5c69403fe476e63b29dd","size":2673,"data":"","first_seen":"2026-06-08T15:12:24.82706Z","last_seen":"2026-06-21T00:45:42.510434Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"13f47de56baf12e599466bfc1e49d50f","sha1":"ab57d84ee2abb188e34825fdf48e862d162fded8","sha256":"4109c3055334ee19a774dc71434c355f2be0ab5a23fbb17d79b2fe1393e83aff","sha512":"cf417535cbef6e1f19670327352df5163ae5af33d17317d4d61db858846d56a27acd4afcc4a2999a158781ccc6704d19dd24eadac5c9c76e766a38cdc94e53c7","ssdeep":"","tlshash":"8941ed723d7514770bf354bbb3c765e2b72800521484e490bfbf85122f90ea15ab2be6","size":1901,"data":"","first_seen":"2026-06-11T12:34:07.003687Z","last_seen":"2026-06-16T02:21:22.119874Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e5c55b9cac028fcbbe2e4c3a68bcf1b","sha1":"3b9bfa826d4abc0731703abed9811cdbc4de30ee","sha256":"4bef316cebacb75e8bddb71962657934b49380826710742f49c0cbb71af103ac","sha512":"ac5597d041bca98becb5fb949e4fe8432425df3adf84f43e368187e87fac1f537578dfc7b4c1ecc51ed4a355376b3bff2b6a485e9c7520f75fb287f24561cb18","ssdeep":"","tlshash":"84118bafbea01e3b4cf3657b556fb758392b14871c01c5009bfacca00e34a865836ad5","size":1102,"data":"","first_seen":"2026-06-11T12:34:07.00607Z","last_seen":"2026-06-19T01:29:03.330742Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb8a159169a4d5e9131d3c140f6aa964","sha1":"30f834c484d17ef6cab09f5ff0c104abd298a79b","sha256":"c8115f6a2ef85146324a54e001f5321a49e3f3d180f3f2d4655bb407a1dc3e86","sha512":"b331899c5db51ab9ab9f5397dcf0bd11e652b28f6d1d26e3ae737f20d44b18a0e10e40a14271f0bcc2ae44425db3c528d811f312355f407c917cfb0afe3dc297","ssdeep":"","tlshash":"e5e07d77fc93107107ff10ea565a5646363180056514d142380966b44eb0f2e1d6b5d0","size":315,"data":"","first_seen":"2026-06-11T12:34:07.008499Z","last_seen":"2026-06-16T02:21:22.12186Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3451606d66f17cbd839ddb00ef520d98","sha1":"525bf3e3da8bfa8e5c4588ac1e429cb6c5ee52c2","sha256":"330890782a3e35d4c863205fba13ea8f3d2d438c88f42b222c5b1986676e9797","sha512":"b109c787de9d3c7317d48a4acdec415fb9c048c583f50db049b90e103b0a22b5c26b42299e6b4590d5cbb88ae666723b311b71a1631adbc6d49cb6258399d58e","ssdeep":"","tlshash":"80e0c00dc02b4082122698443212595ff72ad6f2c7483cadc708883656cf08bfb9d644","size":365,"data":"","first_seen":"2026-06-08T15:12:24.832706Z","last_seen":"2026-06-21T00:45:42.52026Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/traffic-assets/js/tccl.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.66","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a37dab530d4cba8ef9134c279c20612","sha1":"ef687d672e515d41f8b9c6b23e8c66b117a609c3","sha256":"5c16c1b3a290dd98b67c97387769f0ba4ce1a68fc5a584f603d85eec8ecfa499","sha512":"f08cbc1d2bea4b6bef0f153e83a74edfe4abf9c6f39aaadb35a6c167efd6f667b151b7154ab6e444b75420335488d27d3a33ec6e6e2c3d953a41d0a03ce563f9","ssdeep":"1536:uzSGNmZEfRDJYW/3TV4vlJHjaBaR02YX25x6JR:kD6W/WFu","tlshash":"67a3a688f6a1f07142e76165412f010bf379a965b0aed0d4e725e8f8adf85ce8173f29","size":106502,"data":"","first_seen":"2026-05-27T17:58:47.761284Z","last_seen":"2026-06-21T07:45:55.400854Z","times_seen":6786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-11T12:33:42.194Z","timestamp":1781181222194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"4jw.d29.mytemp.website","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 19:22:48 GMT","end":"Fri, 28 Aug 2026 19:22:47 GMT"},"fingerprint":{"sha1":"79:60:F7:6C:27:46:6E:8C:6C:DF:BF:B8:75:FC:77:DA:2C:E2:19:FB","sha256":"8D:63:75:74:11:79:76:F8:C6:C2:1E:22:DB:3A:CC:E4:F1:8A:78:33:15:21:4D:93:63:4E:15:94:D5:E6:BD:BC"}}},"request":{"raw":"GET /m-nl/app-vernieuwen/reader.html HTTP/1.1\r\nHost: 4jw.d29.mytemp.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.3.31\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 7085\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 11 Jun 2026 12:33:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":22168,"size_decoded":7378,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2441)","md5":"ed284e74cfe618cccfdab62c85c0f8b2","sha1":"a5a0fbe8526305df0647af8ce69ef015a9cdd222","sha256":"8e338bd80870a32f4ad4ac58d98f27361b319dee2a73f3d3e6a0b3e32e185e09","sha512":"7ba3d05c126dabdbd28d4c4a15b833227e40ad0390929961a36160165608ecfccf8a3f9e4a7553c5eb54100b828bc252605476512ea1f3baf8d2c126d6a49312","ssdeep":"384:48pRz9FbFuHVcqPWO3dE8Ie9DyFuu35lCG9Y0:B3z9FbFu1ccEu34Y0","tlshash":"72a2e76369d624236a038da5b7f35f4a7265d443c105c9687ffc5a64cf8aac09da33cc","first_seen":"2026-06-11T12:34:06.98665Z","last_seen":"2026-06-16T02:21:22.118524Z","times_seen":4,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":91,"connect":23,"send":0,"wait":47,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-11","alert":"Phishing Block","trigger":"4jw.d29.mytemp.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csp.secureserver.net/eventbus/web?clientid=8da2217409854bee82e12dc4ca0b39fb","fqdn":"csp.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","date":"2026-06-11T12:33:43.195Z","timestamp":1781181223195,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.secureserver.net","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 23 Oct 2025 00:07:48 GMT","end":"Tue, 24 Nov 2026 00:07:48 GMT"},"fingerprint":{"sha1":"0C:85:75:97:2A:6F:2B:92:48:28:1A:FB:30:8A:C4:98:A7:9E:26:CE","sha256":"2F:4B:65:33:11:10:9D:A1:94:4B:5A:5D:40:E6:63:70:B6:7E:1A:7F:E7:90:E4:E8:F4:4A:37:2E:94:17:64:AB"}}},"request":{"raw":"POST /eventbus/web?clientid=8da2217409854bee82e12dc4ca0b39fb HTTP/1.1\r\nHost: csp.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: https://4jw.d29.mytemp.website/\r\nContent-Length: 1931\r\nOrigin: https://4jw.d29.mytemp.website\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 202 Accepted\r\nContent-Type: application/json\r\nContent-Length: 2\r\nAccess-Control-Allow-Origin: *\r\nx-bus-trace-id: 286424477936410424113161318395014275112\r\nx-envoy-upstream-service-time: 85\r\nx-error-info: 0\r\nx-request-id: 85940484-b650-495e-9981-e7d75d133bfb\r\nExpires: Thu, 11 Jun 2026 12:33:43 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Thu, 11 Jun 2026 12:33:43 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=86400 ; includeSubDomains ; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":508,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-06-21T08:31:47.266787Z","times_seen":716308,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":0,"dns":2,"connect":2,"send":0,"wait":177,"receive":0,"ssl":214},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/command.php?clientId=t_wcp8g34rmq9hb7j0","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","date":"2026-06-11T12:33:46.879Z","timestamp":1781181226879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"4jw.d29.mytemp.website","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 19:22:48 GMT","end":"Fri, 28 Aug 2026 19:22:47 GMT"},"fingerprint":{"sha1":"79:60:F7:6C:27:46:6E:8C:6C:DF:BF:B8:75:FC:77:DA:2C:E2:19:FB","sha256":"8D:63:75:74:11:79:76:F8:C6:C2:1E:22:DB:3A:CC:E4:F1:8A:78:33:15:21:4D:93:63:4E:15:94:D5:E6:BD:BC"}}},"request":{"raw":"GET /m-nl/app-vernieuwen/command.php?clientId=t_wcp8g34rmq9hb7j0 HTTP/1.1\r\nHost: 4jw.d29.mytemp.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _tccl_visitor=b097f5aa-51ca-4efb-9566-ba3867afc935; _tccl_visit=b097f5aa-51ca-4efb-9566-ba3867afc935; _scc_session=pc=1\u0026C_TOUCH=2026-06-11T12:33:42.932Z\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.3.31\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncontent-type: application/json\r\ndate: Thu, 11 Jun 2026 12:33:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":16,"size_decoded":483,"mime_type":"application/json","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-06-21T00:45:42.508315Z","times_seen":68,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-11","alert":"Phishing Block","trigger":"4jw.d29.mytemp.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/command.php?clientId=t_wcp8g34rmq9hb7j0","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","date":"2026-06-11T12:33:50.882Z","timestamp":1781181230882,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"4jw.d29.mytemp.website","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 19:22:48 GMT","end":"Fri, 28 Aug 2026 19:22:47 GMT"},"fingerprint":{"sha1":"79:60:F7:6C:27:46:6E:8C:6C:DF:BF:B8:75:FC:77:DA:2C:E2:19:FB","sha256":"8D:63:75:74:11:79:76:F8:C6:C2:1E:22:DB:3A:CC:E4:F1:8A:78:33:15:21:4D:93:63:4E:15:94:D5:E6:BD:BC"}}},"request":{"raw":"GET /m-nl/app-vernieuwen/command.php?clientId=t_wcp8g34rmq9hb7j0 HTTP/1.1\r\nHost: 4jw.d29.mytemp.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _tccl_visitor=b097f5aa-51ca-4efb-9566-ba3867afc935; _tccl_visit=b097f5aa-51ca-4efb-9566-ba3867afc935; _scc_session=pc=1\u0026C_TOUCH=2026-06-11T12:33:42.932Z\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.3.31\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncontent-type: application/json\r\ndate: Thu, 11 Jun 2026 12:33:50 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":16,"size_decoded":483,"mime_type":"application/json","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-06-21T00:45:42.508315Z","times_seen":68,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-11","alert":"Phishing Block","trigger":"4jw.d29.mytemp.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/heartbeat.php","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","date":"2026-06-11T12:33:52.880Z","timestamp":1781181232880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"4jw.d29.mytemp.website","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 19:22:48 GMT","end":"Fri, 28 Aug 2026 19:22:47 GMT"},"fingerprint":{"sha1":"79:60:F7:6C:27:46:6E:8C:6C:DF:BF:B8:75:FC:77:DA:2C:E2:19:FB","sha256":"8D:63:75:74:11:79:76:F8:C6:C2:1E:22:DB:3A:CC:E4:F1:8A:78:33:15:21:4D:93:63:4E:15:94:D5:E6:BD:BC"}}},"request":{"raw":"POST /m-nl/app-vernieuwen/heartbeat.php HTTP/1.1\r\nHost: 4jw.d29.mytemp.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html\r\nContent-Length: 88\r\nOrigin: https://4jw.d29.mytemp.website\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _tccl_visitor=b097f5aa-51ca-4efb-9566-ba3867afc935; _tccl_visit=b097f5aa-51ca-4efb-9566-ba3867afc935; _scc_session=pc=1\u0026C_TOUCH=2026-06-11T12:33:42.932Z\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.3.31\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncontent-type: application/json\r\ndate: Thu, 11 Jun 2026 12:33:52 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11,"size_decoded":479,"mime_type":"application/json","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-06-21T08:07:11.887283Z","times_seen":11122,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-11","alert":"Phishing Block","trigger":"4jw.d29.mytemp.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/command.php?clientId=t_wcp8g34rmq9hb7j0","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","date":"2026-06-11T12:33:52.886Z","timestamp":1781181232886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"4jw.d29.mytemp.website","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 19:22:48 GMT","end":"Fri, 28 Aug 2026 19:22:47 GMT"},"fingerprint":{"sha1":"79:60:F7:6C:27:46:6E:8C:6C:DF:BF:B8:75:FC:77:DA:2C:E2:19:FB","sha256":"8D:63:75:74:11:79:76:F8:C6:C2:1E:22:DB:3A:CC:E4:F1:8A:78:33:15:21:4D:93:63:4E:15:94:D5:E6:BD:BC"}}},"request":{"raw":"GET /m-nl/app-vernieuwen/command.php?clientId=t_wcp8g34rmq9hb7j0 HTTP/1.1\r\nHost: 4jw.d29.mytemp.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _tccl_visitor=b097f5aa-51ca-4efb-9566-ba3867afc935; _tccl_visit=b097f5aa-51ca-4efb-9566-ba3867afc935; _scc_session=pc=1\u0026C_TOUCH=2026-06-11T12:33:42.932Z\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.3.31\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncontent-type: application/json\r\ndate: Thu, 11 Jun 2026 12:33:52 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16,"size_decoded":483,"mime_type":"application/json","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-06-21T00:45:42.508315Z","times_seen":68,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-11","alert":"Phishing Block","trigger":"4jw.d29.mytemp.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/command.php?clientId=t_wcp8g34rmq9hb7j0","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","date":"2026-06-11T12:33:56.882Z","timestamp":1781181236882,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"4jw.d29.mytemp.website","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 19:22:48 GMT","end":"Fri, 28 Aug 2026 19:22:47 GMT"},"fingerprint":{"sha1":"79:60:F7:6C:27:46:6E:8C:6C:DF:BF:B8:75:FC:77:DA:2C:E2:19:FB","sha256":"8D:63:75:74:11:79:76:F8:C6:C2:1E:22:DB:3A:CC:E4:F1:8A:78:33:15:21:4D:93:63:4E:15:94:D5:E6:BD:BC"}}},"request":{"raw":"GET /m-nl/app-vernieuwen/command.php?clientId=t_wcp8g34rmq9hb7j0 HTTP/1.1\r\nHost: 4jw.d29.mytemp.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _tccl_visitor=b097f5aa-51ca-4efb-9566-ba3867afc935; _tccl_visit=b097f5aa-51ca-4efb-9566-ba3867afc935; _scc_session=pc=1\u0026C_TOUCH=2026-06-11T12:33:42.932Z\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.3.31\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncontent-type: application/json\r\ndate: Thu, 11 Jun 2026 12:33:56 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":16,"size_decoded":483,"mime_type":"application/json","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-06-21T00:45:42.508315Z","times_seen":68,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-11","alert":"Phishing Block","trigger":"4jw.d29.mytemp.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/command.php?clientId=t_wcp8g34rmq9hb7j0","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","date":"2026-06-11T12:33:58.880Z","timestamp":1781181238880,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /m-nl/app-vernieuwen/command.php?clientId=t_wcp8g34rmq9hb7j0 HTTP/1.1\r\nHost: 4jw.d29.mytemp.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _tccl_visitor=b097f5aa-51ca-4efb-9566-ba3867afc935; _tccl_visit=b097f5aa-51ca-4efb-9566-ba3867afc935; _scc_session=pc=1\u0026C_TOUCH=2026-06-11T12:33:42.932Z\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-11","alert":"Phishing Block","trigger":"4jw.d29.mytemp.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/tracker.js","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","date":"2026-06-11T12:33:42.840Z","timestamp":1781181222840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"4jw.d29.mytemp.website","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 19:22:48 GMT","end":"Fri, 28 Aug 2026 19:22:47 GMT"},"fingerprint":{"sha1":"79:60:F7:6C:27:46:6E:8C:6C:DF:BF:B8:75:FC:77:DA:2C:E2:19:FB","sha256":"8D:63:75:74:11:79:76:F8:C6:C2:1E:22:DB:3A:CC:E4:F1:8A:78:33:15:21:4D:93:63:4E:15:94:D5:E6:BD:BC"}}},"request":{"raw":"GET /m-nl/app-vernieuwen/tracker.js HTTP/1.1\r\nHost: 4jw.d29.mytemp.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sat, 16 May 2026 18:38:50 GMT\r\netag: \"74c27e9-a71-651f3a3f66280-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1192\r\ncontent-type: text/javascript\r\ndate: Thu, 11 Jun 2026 12:33:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2673,"size_decoded":1488,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"f09396505b9330dfe9da559f19968c40","sha1":"cd6791eb641c24cdf20ef884e7625b15900459b1","sha256":"17b7ef31e411e091f6a4a15327cd1c05dea65a0d77104b46c8b13de01580f79c","sha512":"647921853c220f4a0339164f6db1f91359125e800fe2256dff156af24b05d92debc5430f7f670075f845b4088728392011f608912569d4a56cb8615791a2b1ef","ssdeep":"","tlshash":"b551611f61f51a266573a178a2aff006373712036dc7d8017a5c69403fe476e63b29dd","first_seen":"2026-06-08T15:12:24.82706Z","last_seen":"2026-06-21T00:45:42.510434Z","times_seen":66,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-11","alert":"Phishing Block","trigger":"4jw.d29.mytemp.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/heartbeat.php","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","date":"2026-06-11T12:33:47.878Z","timestamp":1781181227878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"4jw.d29.mytemp.website","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 19:22:48 GMT","end":"Fri, 28 Aug 2026 19:22:47 GMT"},"fingerprint":{"sha1":"79:60:F7:6C:27:46:6E:8C:6C:DF:BF:B8:75:FC:77:DA:2C:E2:19:FB","sha256":"8D:63:75:74:11:79:76:F8:C6:C2:1E:22:DB:3A:CC:E4:F1:8A:78:33:15:21:4D:93:63:4E:15:94:D5:E6:BD:BC"}}},"request":{"raw":"POST /m-nl/app-vernieuwen/heartbeat.php HTTP/1.1\r\nHost: 4jw.d29.mytemp.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html\r\nContent-Length: 88\r\nOrigin: https://4jw.d29.mytemp.website\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _tccl_visitor=b097f5aa-51ca-4efb-9566-ba3867afc935; _tccl_visit=b097f5aa-51ca-4efb-9566-ba3867afc935; _scc_session=pc=1\u0026C_TOUCH=2026-06-11T12:33:42.932Z\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.3.31\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncontent-type: application/json\r\ndate: Thu, 11 Jun 2026 12:33:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11,"size_decoded":479,"mime_type":"application/json","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-06-21T08:07:11.887283Z","times_seen":11122,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-11","alert":"Phishing Block","trigger":"4jw.d29.mytemp.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/command.php?clientId=t_wcp8g34rmq9hb7j0","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","date":"2026-06-11T12:33:48.881Z","timestamp":1781181228881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"4jw.d29.mytemp.website","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 19:22:48 GMT","end":"Fri, 28 Aug 2026 19:22:47 GMT"},"fingerprint":{"sha1":"79:60:F7:6C:27:46:6E:8C:6C:DF:BF:B8:75:FC:77:DA:2C:E2:19:FB","sha256":"8D:63:75:74:11:79:76:F8:C6:C2:1E:22:DB:3A:CC:E4:F1:8A:78:33:15:21:4D:93:63:4E:15:94:D5:E6:BD:BC"}}},"request":{"raw":"GET /m-nl/app-vernieuwen/command.php?clientId=t_wcp8g34rmq9hb7j0 HTTP/1.1\r\nHost: 4jw.d29.mytemp.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _tccl_visitor=b097f5aa-51ca-4efb-9566-ba3867afc935; _tccl_visit=b097f5aa-51ca-4efb-9566-ba3867afc935; _scc_session=pc=1\u0026C_TOUCH=2026-06-11T12:33:42.932Z\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.3.31\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncontent-type: application/json\r\ndate: Thu, 11 Jun 2026 12:33:48 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16,"size_decoded":483,"mime_type":"application/json","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-06-21T00:45:42.508315Z","times_seen":68,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-11","alert":"Phishing Block","trigger":"4jw.d29.mytemp.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/command.php?clientId=t_wcp8g34rmq9hb7j0","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","date":"2026-06-11T12:34:00.880Z","timestamp":1781181240880,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /m-nl/app-vernieuwen/command.php?clientId=t_wcp8g34rmq9hb7j0 HTTP/1.1\r\nHost: 4jw.d29.mytemp.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _tccl_visitor=b097f5aa-51ca-4efb-9566-ba3867afc935; _tccl_visit=b097f5aa-51ca-4efb-9566-ba3867afc935; _scc_session=pc=1\u0026C_TOUCH=2026-06-11T12:33:42.932Z\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-11","alert":"Phishing Block","trigger":"4jw.d29.mytemp.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/traffic-assets/js/tccl.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.66","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","date":"2026-06-11T12:33:42.842Z","timestamp":1781181222842,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /traffic-assets/js/tccl.min.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://4jw.d29.mytemp.website/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ncontent-length: 0\r\nlocation: https://img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js\r\ncache-control: max-age=31536000\r\nexpires: Fri, 11 Jun 2027 12:33:42 GMT\r\ndate: Thu, 11 Jun 2026 12:33:42 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":6,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/command.php?clientId=t_wcp8g34rmq9hb7j0","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","date":"2026-06-11T12:33:42.879Z","timestamp":1781181222879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"4jw.d29.mytemp.website","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 19:22:48 GMT","end":"Fri, 28 Aug 2026 19:22:47 GMT"},"fingerprint":{"sha1":"79:60:F7:6C:27:46:6E:8C:6C:DF:BF:B8:75:FC:77:DA:2C:E2:19:FB","sha256":"8D:63:75:74:11:79:76:F8:C6:C2:1E:22:DB:3A:CC:E4:F1:8A:78:33:15:21:4D:93:63:4E:15:94:D5:E6:BD:BC"}}},"request":{"raw":"GET /m-nl/app-vernieuwen/command.php?clientId=t_wcp8g34rmq9hb7j0 HTTP/1.1\r\nHost: 4jw.d29.mytemp.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.3.31\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncontent-type: application/json\r\ndate: Thu, 11 Jun 2026 12:33:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16,"size_decoded":483,"mime_type":"application/json","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-06-21T00:45:42.508315Z","times_seen":68,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-11","alert":"Phishing Block","trigger":"4jw.d29.mytemp.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csp.secureserver.net/eventbus/web?clientid=b18ef4f046435b64a469b32c3c1c20a3","fqdn":"csp.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","date":"2026-06-11T12:33:43.194Z","timestamp":1781181223194,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.secureserver.net","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 23 Oct 2025 00:07:48 GMT","end":"Tue, 24 Nov 2026 00:07:48 GMT"},"fingerprint":{"sha1":"0C:85:75:97:2A:6F:2B:92:48:28:1A:FB:30:8A:C4:98:A7:9E:26:CE","sha256":"2F:4B:65:33:11:10:9D:A1:94:4B:5A:5D:40:E6:63:70:B6:7E:1A:7F:E7:90:E4:E8:F4:4A:37:2E:94:17:64:AB"}}},"request":{"raw":"POST /eventbus/web?clientid=b18ef4f046435b64a469b32c3c1c20a3 HTTP/1.1\r\nHost: csp.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: https://4jw.d29.mytemp.website/\r\nContent-Length: 1131\r\nOrigin: https://4jw.d29.mytemp.website\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 202 Accepted\r\nContent-Type: application/json\r\nContent-Length: 2\r\nAccess-Control-Allow-Origin: *\r\nx-bus-trace-id: 122719418879836547277956604238612187868\r\nx-envoy-upstream-service-time: 88\r\nx-error-info: 0\r\nx-request-id: 6563e8a4-d3b1-4615-b41d-bc94ce900dd6\r\nExpires: Thu, 11 Jun 2026 12:33:43 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Thu, 11 Jun 2026 12:33:43 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=86400 ; includeSubDomains ; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":508,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-06-21T08:31:47.266787Z","times_seen":716308,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":281,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/command.php?clientId=t_wcp8g34rmq9hb7j0","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","date":"2026-06-11T12:33:44.878Z","timestamp":1781181224878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"4jw.d29.mytemp.website","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 19:22:48 GMT","end":"Fri, 28 Aug 2026 19:22:47 GMT"},"fingerprint":{"sha1":"79:60:F7:6C:27:46:6E:8C:6C:DF:BF:B8:75:FC:77:DA:2C:E2:19:FB","sha256":"8D:63:75:74:11:79:76:F8:C6:C2:1E:22:DB:3A:CC:E4:F1:8A:78:33:15:21:4D:93:63:4E:15:94:D5:E6:BD:BC"}}},"request":{"raw":"GET /m-nl/app-vernieuwen/command.php?clientId=t_wcp8g34rmq9hb7j0 HTTP/1.1\r\nHost: 4jw.d29.mytemp.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _tccl_visitor=b097f5aa-51ca-4efb-9566-ba3867afc935; _tccl_visit=b097f5aa-51ca-4efb-9566-ba3867afc935; _scc_session=pc=1\u0026C_TOUCH=2026-06-11T12:33:42.932Z\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.3.31\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncontent-type: application/json\r\ndate: Thu, 11 Jun 2026 12:33:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16,"size_decoded":483,"mime_type":"application/json","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-06-21T00:45:42.508315Z","times_seen":68,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-11","alert":"Phishing Block","trigger":"4jw.d29.mytemp.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.66","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","date":"2026-06-11T12:33:42.870Z","timestamp":1781181222870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /signals/js/clients/scc-c2/scc-c2.min.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4jw.d29.mytemp.website/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-amz-id-2: KnUNpoAqcpzwhgxgWNKMvcKTEOYN1GRAEBYLL1bbC7MJhVd8JDjLYaWZQc5sDvGxd62Z2lV8Hhs=\r\nx-amz-request-id: 2FQ2XJSGKJ8RSWKZ\r\nlast-modified: Wed, 27 May 2026 17:27:10 GMT\r\netag: \"8a37dab530d4cba8ef9134c279c20612\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-version: 1.3.2\r\nx-amz-version-id: V1QpCm1bxgHgw4G1nDhX4YJuFGsOtoK3\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=1800\r\nexpires: Thu, 11 Jun 2026 13:03:42 GMT\r\ndate: Thu, 11 Jun 2026 12:33:42 GMT\r\ncontent-length: 21664\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":106502,"size_decoded":22315,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8a37dab530d4cba8ef9134c279c20612","sha1":"ef687d672e515d41f8b9c6b23e8c66b117a609c3","sha256":"5c16c1b3a290dd98b67c97387769f0ba4ce1a68fc5a584f603d85eec8ecfa499","sha512":"f08cbc1d2bea4b6bef0f153e83a74edfe4abf9c6f39aaadb35a6c167efd6f667b151b7154ab6e444b75420335488d27d3a33ec6e6e2c3d953a41d0a03ce563f9","ssdeep":"1536:uzSGNmZEfRDJYW/3TV4vlJHjaBaR02YX25x6JR:kD6W/WFu","tlshash":"67a3a688f6a1f07142e76165412f010bf379a965b0aed0d4e725e8f8adf85ce8173f29","first_seen":"2026-05-27T17:58:47.761284Z","last_seen":"2026-06-21T07:45:55.400854Z","times_seen":6786,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/heartbeat.php","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","date":"2026-06-11T12:33:42.877Z","timestamp":1781181222877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"4jw.d29.mytemp.website","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 19:22:48 GMT","end":"Fri, 28 Aug 2026 19:22:47 GMT"},"fingerprint":{"sha1":"79:60:F7:6C:27:46:6E:8C:6C:DF:BF:B8:75:FC:77:DA:2C:E2:19:FB","sha256":"8D:63:75:74:11:79:76:F8:C6:C2:1E:22:DB:3A:CC:E4:F1:8A:78:33:15:21:4D:93:63:4E:15:94:D5:E6:BD:BC"}}},"request":{"raw":"POST /m-nl/app-vernieuwen/heartbeat.php HTTP/1.1\r\nHost: 4jw.d29.mytemp.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html\r\nContent-Length: 88\r\nOrigin: https://4jw.d29.mytemp.website\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 500 \r\nx-powered-by: PHP/8.3.31\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncontent-length: 0\r\ncontent-type: application/json\r\ndate: Thu, 11 Jun 2026 12:33:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":1129,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-11","alert":"Phishing Block","trigger":"4jw.d29.mytemp.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/favicon.ico","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","date":"2026-06-11T12:33:42.936Z","timestamp":1781181222936,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"4jw.d29.mytemp.website","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 19:22:48 GMT","end":"Fri, 28 Aug 2026 19:22:47 GMT"},"fingerprint":{"sha1":"79:60:F7:6C:27:46:6E:8C:6C:DF:BF:B8:75:FC:77:DA:2C:E2:19:FB","sha256":"8D:63:75:74:11:79:76:F8:C6:C2:1E:22:DB:3A:CC:E4:F1:8A:78:33:15:21:4D:93:63:4E:15:94:D5:E6:BD:BC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 4jw.d29.mytemp.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html\r\nCookie: _tccl_visitor=b097f5aa-51ca-4efb-9566-ba3867afc935; _tccl_visit=b097f5aa-51ca-4efb-9566-ba3867afc935; _scc_session=pc=1\u0026C_TOUCH=2026-06-11T12:33:42.932Z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nlast-modified: Tue, 05 May 2026 20:42:50 GMT\r\netag: \"74c3d7c-41c-65118172aa680\"\r\naccept-ranges: bytes\r\ncontent-length: 1052\r\ncontent-type: text/html\r\ndate: Thu, 11 Jun 2026 12:33:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1052,"size_decoded":1290,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"15eaaad79b32d16c5480cc1dc56370bc","sha1":"c2646d9e563f18d48f1e442805aacff733b2f435","sha256":"830789f00590242c205f65b51bcce894713cc7517192fa308d3a147d5758cc56","sha512":"e3874acccb3d8ef31dbfb66e3a31dfead30dd5c3cd2412815ec3b1db0194fe730bcd7dc583b6fa6af83fd0bbc1fe7a045bbb86ad65c1b5c3011349d878177c63","ssdeep":"","tlshash":"0511ed7654c5641b5871c6c1ac00b279edc24127969c6841bcec21ef6f38e97c55b500","first_seen":"2026-06-08T15:12:24.829464Z","last_seen":"2026-06-21T00:45:42.513612Z","times_seen":68,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-11","alert":"Phishing Block","trigger":"4jw.d29.mytemp.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/command.php?clientId=t_wcp8g34rmq9hb7j0","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"92.205.249.181","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","date":"2026-06-11T12:33:54.881Z","timestamp":1781181234881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"4jw.d29.mytemp.website","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 19:22:48 GMT","end":"Fri, 28 Aug 2026 19:22:47 GMT"},"fingerprint":{"sha1":"79:60:F7:6C:27:46:6E:8C:6C:DF:BF:B8:75:FC:77:DA:2C:E2:19:FB","sha256":"8D:63:75:74:11:79:76:F8:C6:C2:1E:22:DB:3A:CC:E4:F1:8A:78:33:15:21:4D:93:63:4E:15:94:D5:E6:BD:BC"}}},"request":{"raw":"GET /m-nl/app-vernieuwen/command.php?clientId=t_wcp8g34rmq9hb7j0 HTTP/1.1\r\nHost: 4jw.d29.mytemp.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _tccl_visitor=b097f5aa-51ca-4efb-9566-ba3867afc935; _tccl_visit=b097f5aa-51ca-4efb-9566-ba3867afc935; _scc_session=pc=1\u0026C_TOUCH=2026-06-11T12:33:42.932Z\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.3.31\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncontent-type: application/json\r\ndate: Thu, 11 Jun 2026 12:33:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16,"size_decoded":483,"mime_type":"application/json","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-06-21T00:45:42.508315Z","times_seen":68,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-11","alert":"Phishing Block","trigger":"4jw.d29.mytemp.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/heartbeat.php","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","date":"2026-06-11T12:33:57.879Z","timestamp":1781181237879,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /m-nl/app-vernieuwen/heartbeat.php HTTP/1.1\r\nHost: 4jw.d29.mytemp.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html\r\nContent-Length: 88\r\nOrigin: https://4jw.d29.mytemp.website\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _tccl_visitor=b097f5aa-51ca-4efb-9566-ba3867afc935; _tccl_visit=b097f5aa-51ca-4efb-9566-ba3867afc935; _scc_session=pc=1\u0026C_TOUCH=2026-06-11T12:33:42.932Z\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-11","alert":"Phishing Block","trigger":"4jw.d29.mytemp.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/heartbeat.php","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","date":"2026-06-11T12:34:02.879Z","timestamp":1781181242879,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /m-nl/app-vernieuwen/heartbeat.php HTTP/1.1\r\nHost: 4jw.d29.mytemp.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html\r\nContent-Length: 88\r\nOrigin: https://4jw.d29.mytemp.website\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _tccl_visitor=b097f5aa-51ca-4efb-9566-ba3867afc935; _tccl_visit=b097f5aa-51ca-4efb-9566-ba3867afc935; _scc_session=pc=1\u0026C_TOUCH=2026-06-11T12:33:42.932Z\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-11","alert":"Phishing Block","trigger":"4jw.d29.mytemp.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4jw.d29.mytemp.website/m-nl/app-vernieuwen/command.php?clientId=t_wcp8g34rmq9hb7j0","fqdn":"4jw.d29.mytemp.website","domain":"mytemp.website","tld":"website"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html","date":"2026-06-11T12:34:02.884Z","timestamp":1781181242884,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /m-nl/app-vernieuwen/command.php?clientId=t_wcp8g34rmq9hb7j0 HTTP/1.1\r\nHost: 4jw.d29.mytemp.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4jw.d29.mytemp.website/m-nl/app-vernieuwen/reader.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _tccl_visitor=b097f5aa-51ca-4efb-9566-ba3867afc935; _tccl_visit=b097f5aa-51ca-4efb-9566-ba3867afc935; _scc_session=pc=1\u0026C_TOUCH=2026-06-11T12:33:42.932Z\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"4jw.d29.mytemp.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-11","alert":"Phishing Block","trigger":"4jw.d29.mytemp.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}