{"report_id":"c339e1c1-16cc-4b08-940d-e0166ae63174","version":6,"status":"done","tags":[],"date":"2026-04-14T15:40:22Z","url":{"schema":"http","addr":"view.campaign.webinarshr.com/?vawpToken=QC3SWCDN4FCEJJXC2EMOFY4N4M.120044","fqdn":"view.campaign.webinarshr.com","domain":"webinarshr.com","tld":"com"},"ip":{"addr":"128.245.160.2","port":0,"asn":14340,"as":"SALESFORCE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"view.campaign.webinarshr.com/?vawpToken=QC3SWCDN4FCEJJXC2EMOFY4N4M.120044","fqdn":"view.campaign.webinarshr.com","domain":"webinarshr.com","tld":"com"},"title":"Claude for Customer Facing Teams","dom":{"size":17785,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (940)","md5":"cc63f4512c3dbf9f926555a763c5fb6c","sha1":"60b0c829119c14786108956e8e31d326904ef9e4","sha256":"7995845a76d0199baf2d30a3c03a71b1c41a7415cf9ce40f95863c9f96560515","sha512":"b6a1470299eda69134e4f11381e9b57a591812ed6bdcb8386f610610faae439ddf055a96faff7503a10b2a4add57bdeaa131aaa8e3c150a207ccedddacd79bd5","ssdeep":"192:2p0/3Ay8JUj2TUzSwA82rky8FyzSwaJYE2zmBdRCfI/ErHHe5ZZrgJ5Gy31MYgOx:P4lLlgyIoUC","tlshash":"25824112fef12249a92650a5e7733fb95fe8400347060cb4b41e763a9f8e99209737ec","dom_hash":"domhash3cf2bbafb414507a413851e8b49c3748","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"view.campaign.webinarshr.com/?vawpToken=QC3SWCDN4FCEJJXC2EMOFY4N4M.120044","fqdn":"view.campaign.webinarshr.com","domain":"webinarshr.com","tld":"com"},"ip":{"addr":"128.245.160.2","port":0,"asn":14340,"as":"SALESFORCE","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-19T15:40:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"view.campaign.webinarshr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"click.campaign.webinarshr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"www.webinarshr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.marketingcloud.com","ip":{"addr":"23.49.17.214","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2007-01-28","domain_rank":446182,"first_seen":"2013-10-29T20:06:05Z","last_seen":"2026-04-09T16:11:45.643984Z","alert_count":0,"request_count":1,"received_data":585,"sent_data":423,"comment":"","tags":null,"fingerprints":null},{"fqdn":"brandcdn.exacttarget.com","ip":{"addr":"23.49.16.151","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2000-02-21","domain_rank":381406,"first_seen":"2014-04-06T10:49:06Z","last_seen":"2026-04-06T13:46:17.566905Z","alert_count":0,"request_count":1,"received_data":704,"sent_data":430,"comment":"","tags":null,"fingerprints":null},{"fqdn":"view.campaign.webinarshr.com","ip":{"addr":"128.245.160.2","port":443,"asn":14340,"as":"SALESFORCE","country":"United States","country_code":"US"},"domain_registered":"2022-09-10","domain_rank":0,"first_seen":"2024-02-09T21:20:20Z","last_seen":"2025-12-23T12:44:47.331713Z","alert_count":2,"request_count":2,"received_data":19468,"sent_data":956,"comment":"","tags":null,"fingerprints":null},{"fqdn":"click.campaign.webinarshr.com","ip":{"addr":"128.245.144.18","port":443,"asn":14340,"as":"SALESFORCE","country":"United States","country_code":"US"},"domain_registered":"2022-09-10","domain_rank":2086266,"first_seen":"2024-02-09T20:38:29Z","last_seen":"2026-02-17T22:52:29.863989Z","alert_count":1,"request_count":1,"received_data":199,"sent_data":476,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.webinarshr.com","ip":{"addr":"199.119.121.24","port":443,"asn":1610,"as":"CONTE-25-ASN","country":"United States","country_code":"US"},"domain_registered":"2022-09-10","domain_rank":4975764,"first_seen":"2022-09-21T14:01:47Z","last_seen":"2025-12-31T08:32:20.628081Z","alert_count":1,"request_count":1,"received_data":38327,"sent_data":411,"comment":"","tags":null,"fingerprints":[{"name":"Red Hat","description":"Red Hat is an open-source Linux operating system.","website":"https://www.redhat.com","common_platform_enumeration":"cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*","icon":"Red Hat.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.37","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.1.1k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"www.exacttarget.com","ip":{"addr":"68.232.203.119","port":443,"asn":14340,"as":"SALESFORCE","country":"United States","country_code":"US"},"domain_registered":"2000-02-21","domain_rank":338449,"first_seen":"2012-05-22T16:49:35Z","last_seen":"2026-04-09T16:11:45.78Z","alert_count":0,"request_count":1,"received_data":541,"sent_data":420,"comment":"","tags":null,"fingerprints":[{"name":"F5 BigIP","description":"F5's BIG-IP is a family of products covering software and hardware designed around application availability, access control, and security solutions.","website":"https://www.f5.com/products/big-ip-services","common_platform_enumeration":"cpe:2.3:a:f5:big-ip:*:*:*:*:*:*:*:*","icon":"F5.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.marketingcloud.com/images/Powered_By_1206.jpg","fqdn":"www.marketingcloud.com","domain":"marketingcloud.com","tld":"com"},"ip":{"addr":"23.49.17.214","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://view.campaign.webinarshr.com/?vawpToken=QC3SWCDN4FCEJJXC2EMOFY4N4M.120044","date":"2026-04-14T15:40:00.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"akamai-san5.exacttarget.com","organization":"Salesforce, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Fri, 12 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EA:DA:1B:D5:3D:9F:08:AE:DB:B0:B8:B1:FA:99:FA:40:EC:8D:4C:C6","sha256":"8A:84:10:4C:96:25:D4:C0:BB:88:FA:53:E4:17:AE:4D:AF:CD:6C:52:4E:4D:E8:CE:6F:23:97:B0:B2:9B:5B:D0"}}},"request":{"raw":"GET /images/Powered_By_1206.jpg HTTP/1.1\r\nHost: www.marketingcloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: AkamaiGHost\r\ncontent-length: 0\r\nlocation: https://brandcdn.exacttarget.com/digital/img/Powered_By_1206.jpg\r\ndate: Tue, 14 Apr 2026 15:40:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":380,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-14T20:55:33.923263Z","times_seen":13756607,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":91,"dns":82,"connect":1,"send":0,"wait":29,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brandcdn.exacttarget.com/digital/img/Powered_By_1206.jpg","fqdn":"brandcdn.exacttarget.com","domain":"exacttarget.com","tld":"com"},"ip":{"addr":"23.49.16.151","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://view.campaign.webinarshr.com/?vawpToken=QC3SWCDN4FCEJJXC2EMOFY4N4M.120044","date":"2026-04-14T15:40:00.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"akamai-san4.exacttarget.com","organization":"Salesforce, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 30 Mar 2026 00:00:00 GMT","end":"Wed, 14 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"39:DD:37:85:96:94:DD:6D:65:8F:84:2D:7E:7B:CC:12:8D:6E:CD:B6","sha256":"37:3D:AE:17:9C:2E:CF:9F:AC:2E:A4:58:61:78:BC:A9:D1:33:D4:86:BE:8A:C8:90:39:8B:A9:92:50:37:A7:04"}}},"request":{"raw":"GET /digital/img/Powered_By_1206.jpg HTTP/1.1\r\nHost: brandcdn.exacttarget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nLast-Modified: Mon, 27 Jan 2020 17:12:03 GMT\r\nServer: AkamaiNetStorage\r\nContent-Length: 380\r\nCache-Control: max-age=266682\r\nExpires: Fri, 17 Apr 2026 17:44:43 GMT\r\nDate: Tue, 14 Apr 2026 15:40:01 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":380,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 124x56, components 3","md5":"fc99482ddbb878e414fd8e46d260984f","sha1":"730f309c5c8ffb37de99be928cfd3d89719953a9","sha256":"46f3a1f59e7b0de99cb89be1214b3e8b3730350ebe6c62307954a965ef13ad34","sha512":"babeefde83494e45ef507b4812e7e9ce6509d9fe7f4bab091609fd7b078be8c11f7a783b00f44ced184e19e7413bb66306f93c768472aa600d756b452aaaabfb","ssdeep":"","tlshash":"27e0a9233282ef17d8e0093021f081280b1bb0b610b30b4f68f0281a3e6a3902d01008","first_seen":"2023-05-09T12:19:07Z","last_seen":"2026-04-14T15:40:23.873706Z","times_seen":108,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":165,"dns":160,"connect":1,"send":0,"wait":8,"receive":1,"ssl":3},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"view.campaign.webinarshr.com/?vawpToken=QC3SWCDN4FCEJJXC2EMOFY4N4M.120044","fqdn":"view.campaign.webinarshr.com","domain":"webinarshr.com","tld":"com"},"ip":{"addr":"128.245.160.2","port":443,"asn":14340,"as":"SALESFORCE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-14T15:39:59.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"view.campaign.webinarshr.com","organization":"Salesforce, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Wed, 14 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"15:A8:BF:AD:37:F3:16:F0:83:D8:58:4C:65:98:26:AB:FE:E5:BD:23","sha256":"8D:79:53:6D:77:C5:34:E3:44:6F:26:62:97:13:24:57:E3:86:F5:5D:42:C9:AA:B5:0A:AE:1B:83:81:FC:35:7E"}}},"request":{"raw":"GET /?vawpToken=QC3SWCDN4FCEJJXC2EMOFY4N4M.120044 HTTP/1.1\r\nHost: view.campaign.webinarshr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private\r\nContent-Type: text/html; charset=utf-8\r\nDate: Tue, 14 Apr 2026 15:39:59 GMT\r\nConnection: close\r\nContent-Length: 17932\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17932,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (918), with CRLF line terminators","md5":"de28c5c911191568d8f1128e492e0868","sha1":"5d2f0d2260c40a32f4d9358933cd913e73615125","sha256":"aa31382b961a2d54d8efbe2b9ac8b473beaaf1a07bd223ac50b63c190d9a1bec","sha512":"bc52f677dfdd4aee0e9468f8d47eec2d4cbcbea7b9baf7f72e324ae638a3b4edeec96d3749f5e2be96599f875a3e536ad6208c443cac6b353766a644e2b0f8b1","ssdeep":"192:7W3t2G3UWhj30kmjGJEfaAe8q8aA1kH5AVw1J9GR6PMZrNy1LxfCRWp6wPe9xSvr:74L0Q3QRnDX4","tlshash":"12823422eed0721a95375065e3636fa8efe9440343420c74745f773b5fbe8924a23aac","first_seen":"2026-04-14T15:40:23.875191Z","last_seen":"2026-04-14T15:40:23.875191Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1373,"timings":{"blocked":563,"dns":84,"connect":102,"send":0,"wait":143,"receive":102,"ssl":376},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"view.campaign.webinarshr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"click.campaign.webinarshr.com/open.aspx?4-274437-128462155-534007685-362-174860065-13018\u0026d=120044\u0026bmt=0","fqdn":"click.campaign.webinarshr.com","domain":"webinarshr.com","tld":"com"},"ip":{"addr":"128.245.144.18","port":443,"asn":14340,"as":"SALESFORCE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://view.campaign.webinarshr.com/?vawpToken=QC3SWCDN4FCEJJXC2EMOFY4N4M.120044","date":"2026-04-14T15:39:59.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click.campaign.webinarshr.com","organization":"Salesforce, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Wed, 14 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"15:4A:B9:3F:A3:23:8D:50:35:AF:E0:A9:D7:BF:00:ED:48:EE:6E:69","sha256":"5E:91:58:A1:FB:C0:50:5B:24:44:DF:0A:D4:0A:EB:72:83:63:DC:26:D1:DB:40:93:5B:45:A7:60:8D:7F:CA:61"}}},"request":{"raw":"GET /open.aspx?4-274437-128462155-534007685-362-174860065-13018\u0026d=120044\u0026bmt=0 HTTP/1.1\r\nHost: click.campaign.webinarshr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: no-cache; max-age=0\r\nContent-Type: image/gif\r\nDate: Tue, 14 Apr 2026 15:40:00 GMT\r\nConnection: close\r\nContent-Length: 43\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-04-14T20:36:59.341587Z","times_seen":77790,"resource_available":true,"data":null}},"time_used":1145,"timings":{"blocked":508,"dns":52,"connect":102,"send":0,"wait":124,"receive":0,"ssl":357},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"click.campaign.webinarshr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.webinarshr.com/images/whr-logo.png","fqdn":"www.webinarshr.com","domain":"webinarshr.com","tld":"com"},"ip":{"addr":"199.119.121.24","port":443,"asn":1610,"as":"CONTE-25-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://view.campaign.webinarshr.com/?vawpToken=QC3SWCDN4FCEJJXC2EMOFY4N4M.120044","date":"2026-04-14T15:39:59.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.webinarshr.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 12 Sep 2025 08:11:07 GMT","end":"Wed, 16 Sep 2026 14:26:09 GMT"},"fingerprint":{"sha1":"10:D0:04:AC:20:FB:70:D5:AA:BF:6D:59:00:21:B8:E9:74:9A:34:0C","sha256":"40:17:9F:95:0F:4A:A5:90:81:ED:7C:BE:74:C4:3F:86:06:32:19:24:0B:AD:1D:C6:83:9D:0C:E9:FF:B8:B7:8B"}}},"request":{"raw":"GET /images/whr-logo.png HTTP/1.1\r\nHost: www.webinarshr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 14 Apr 2026 15:40:00 GMT\r\nServer: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k\r\nSet-Cookie: JSESSIONID=21E3681EF422A416746F96F6D1BAD318.jvm1; Domain=.webinarshr.com; Path=/images; Secure\r\nETag: W/\"37917-1768976486000\"\r\nLast-Modified: Wed, 21 Jan 2026 06:21:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 37917\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Red Hat","description":"Red Hat is an open-source Linux operating system.","website":"https://www.redhat.com","common_platform_enumeration":"cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*","icon":"Red Hat.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.37","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.1.1k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":37917,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 116, 8-bit/color RGBA, non-interlaced","md5":"7205decce356e07e634b2f07ee7a7a80","sha1":"abae8f6e2b6a2cad00b1d0c0286483bf99201c40","sha256":"ae4444a306fa8b22ea19e48a7dde18d3ff09ef16414c1e3b97f4c15989b8f6cc","sha512":"0541ccad0e755b7401b153bbd0da228782e9b763e5d4e0440dd1282b8a27cb2b12370a88c7a400afabb89edaecb583f43f7e9c11bf91cfb92f56a8eee79b3324","ssdeep":"768:i35WJCT7ssmnEoeLt4h/K/7r8SNcTYAPgXaO011N1/1biS2:rY7ssmEonCDr8S5A6ow","tlshash":"8403021c4af0732efd5ca77068860624d66843374f31563455562ecbbecd665b35047f","first_seen":"2026-04-14T15:40:23.880232Z","last_seen":"2026-04-14T15:40:23.880232Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1108,"timings":{"blocked":440,"dns":94,"connect":109,"send":0,"wait":111,"receive":110,"ssl":241},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"www.webinarshr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exacttarget.com/images/Powered_By_1206.jpg","fqdn":"www.exacttarget.com","domain":"exacttarget.com","tld":"com"},"ip":{"addr":"68.232.203.119","port":443,"asn":14340,"as":"SALESFORCE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://view.campaign.webinarshr.com/?vawpToken=QC3SWCDN4FCEJJXC2EMOFY4N4M.120044","date":"2026-04-14T15:39:59.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.exacttarget.com","organization":"Salesforce, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Sep 2025 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"52:16:B1:93:54:19:A5:0F:75:D4:0E:75:17:39:DD:F5:E1:73:DE:9B","sha256":"E6:A8:B6:12:BD:0D:B7:C3:E8:C8:70:34:FF:46:7A:02:4D:46:AA:65:06:16:58:5C:C5:15:69:35:29:06:CD:35"}}},"request":{"raw":"GET /images/Powered_By_1206.jpg HTTP/1.1\r\nHost: www.exacttarget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 301 Moved Permanently\r\nLocation: https://www.marketingcloud.com/images/Powered_By_1206.jpg\r\nServer: BigIP\r\nConnection: Keep-Alive\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"F5 BigIP","description":"F5's BIG-IP is a family of products covering software and hardware designed around application availability, access control, and security solutions.","website":"https://www.f5.com/products/big-ip-services","common_platform_enumeration":"cpe:2.3:a:f5:big-ip:*:*:*:*:*:*:*:*","icon":"F5.png","categories":["Reverse proxies"]}],"data":{"size":380,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-14T20:55:33.923263Z","times_seen":13756607,"resource_available":true,"data":null}},"time_used":1575,"timings":{"blocked":722,"dns":369,"connect":118,"send":0,"wait":124,"receive":1,"ssl":239},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"view.campaign.webinarshr.com/favicon.ico","fqdn":"view.campaign.webinarshr.com","domain":"webinarshr.com","tld":"com"},"ip":{"addr":"128.245.160.2","port":443,"asn":14340,"as":"SALESFORCE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://view.campaign.webinarshr.com/?vawpToken=QC3SWCDN4FCEJJXC2EMOFY4N4M.120044","date":"2026-04-14T15:40:00.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"view.campaign.webinarshr.com","organization":"Salesforce, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Wed, 14 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"15:A8:BF:AD:37:F3:16:F0:83:D8:58:4C:65:98:26:AB:FE:E5:BD:23","sha256":"8D:79:53:6D:77:C5:34:E3:44:6F:26:62:97:13:24:57:E3:86:F5:5D:42:C9:AA:B5:0A:AE:1B:83:81:FC:35:7E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: view.campaign.webinarshr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nContent-Type: text/html\r\nDate: Tue, 14 Apr 2026 15:40:00 GMT\r\nConnection: close\r\nContent-Length: 1245\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":1245,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"5343c1a8b203c162a3bf3870d9f50fd4","sha1":"04b5b886c20d88b57eea6d8ff882624a4ac1e51d","sha256":"dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f","sha512":"e0f50acb6061744e825a4051765cebf23e8c489b55b190739409d8a79bb08dac8f919247a4e5f65a015ea9c57d326bbef7ea045163915129e01f316c4958d949","ssdeep":"","tlshash":"7b21422992983814f69384a061f277c23f078286e66f1b68a023b263e4c26e281d33c4","first_seen":"2023-03-09T23:36:42Z","last_seen":"2026-04-14T20:56:31.538604Z","times_seen":54438,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":0,"dns":1,"connect":102,"send":0,"wait":104,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"view.campaign.webinarshr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}