{"report_id":"d197d4aa-f32d-44c5-bb73-6308393193e2","version":6,"status":"done","tags":["id.me","phishing","authentication"],"date":"2026-01-27T15:08:01Z","url":{"schema":"http","addr":"accountsreceivable.sbs","fqdn":"accountsreceivable.sbs","domain":"accountsreceivable.sbs","tld":"sbs"},"ip":{"addr":"173.214.163.122","port":0,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"accountsreceivable.sbs/","fqdn":"accountsreceivable.sbs","domain":"accountsreceivable.sbs","tld":"sbs"},"title":"Sign in to ID.me - ID.me","dom":{"size":6482,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c27481bb6fe9948efc94f4e6a7b86783","sha1":"0ed2f306f967c42f70c2f26d95470e2c0d0df246","sha256":"71e42db2f6746a476e2b51421f0553bf5f8d4aac7de00a26f250d5c66d03e3b9","sha512":"0136fd6780775e8edb665a924fbe7f1f5c65df6aa52f687f408171c198af083c561346ac8be803a9745296be84311d43b976c19d60fe668e4cc2a13dc5403c1e","ssdeep":"96:nTetGy6kaALfOEJmmBnIEmkVob1c5PkAz8NF5d:T1LkkQOEpopc0F5d","tlshash":"d4d1332274f0142711c382c97aba6b2a2fd2e617ca4b644472bc87dd5ff7e83895318d","dom_hash":"domhash3c6802a43c8c15c316b67b7911aacb6e","first_seen":"2025-11-06T04:43:58.947446Z","last_seen":"2026-01-28T11:41:11.064646Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"accountsreceivable.sbs","fqdn":"accountsreceivable.sbs","domain":"accountsreceivable.sbs","tld":"sbs"},"ip":{"addr":"173.214.163.122","port":0,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-03T15:08:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"accountsreceivable.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]},"summary":[{"fqdn":"accountsreceivable.sbs","ip":{"addr":"173.214.163.122","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"domain_registered":"2025-12-18","domain_rank":0,"first_seen":"2026-01-27T15:08:02.484673Z","last_seen":"2026-01-27T15:08:04.681039Z","alert_count":102,"request_count":17,"received_data":477441,"sent_data":9711,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Zendesk","description":"Zendesk is a cloud-based help desk management solution offering customizable tools to build customer service portal, knowledge base and online communities.","website":"https://zendesk.com","common_platform_enumeration":"","icon":"Zendesk.svg","categories":["Documentation","Issue trackers","Live chat"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-25T22:20:32.726712Z","alert_count":0,"request_count":2,"received_data":761870,"sent_data":901,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.zdassets.com","ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2013-01-28","domain_rank":16846,"first_seen":"2018-06-23T22:11:55Z","last_seen":"2026-01-26T04:55:14.118646Z","alert_count":0,"request_count":2,"received_data":323202,"sent_data":917,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"accountsreceivable.sbs/","fqdn":"accountsreceivable.sbs","domain":"accountsreceivable.sbs","tld":"sbs"},"ip":{"addr":"173.214.163.122","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"102282d2fdb306683c505ea1addfab8b","sha1":"bfbb5d5e1e944c16ad6acdadd9f0d1b11ec89c4c","sha256":"ba1235ac0667575fae4d84d8e485e8d4a2e23bbb2be390c5f20b0939d580e476","sha512":"ca45fa89d699bf7f87ed3148beba639a478676748454012c3794c5f62fb546d1592909c1c75b8d04f21122ebc298b2e54b9c486f05ca3d8caa650fbd8e961752","ssdeep":"","tlshash":"87e05e0338a5301082b9183a017f01303e912f274a45d441380cf98d7f9183956ff5b8","size":398,"data":"","first_seen":"2025-04-06T10:47:38.160823Z","last_seen":"2026-01-28T11:41:11.084854Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-PL62HD9","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5183c47ded51af9e369b774c78c5a924","sha1":"d28597552aaa77fb6bc57b631d6e3e3b97516979","sha256":"00ad38fc03fe42746cda13357eb570b16b14df85933219ec52058b2d31868bdc","sha512":"cf00477dfef062fac8b2761342351807d4c914c515e6d74759673919133c08ca20980e7dae0355be24b71e9524e01a1648ddb5ec45f1a3b24453762c143d50d9","ssdeep":"6144:CJ3CveHQAxJ50l+YoeCQlFN9bf2RWiot125X:a3C2HQAxJ50l+YmTotOX","tlshash":"816417cdb3d6742683a3a478403f014ba17b69d2f84cd895f186c8d42e70aaa5277f7d","size":326815,"data":"","first_seen":"2026-01-27T15:08:05.669267Z","last_seen":"2026-01-27T15:08:05.669267Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-684ZXW8HVT\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a17fb5108859feedcd4b092d83a46b07","sha1":"bd0b566832e9314be7a16b5a360b5bbeedb39097","sha256":"cc7f1d05a8896edb515ed2841dddd628308555f0b326cfec04549e4136a354ea","sha512":"8b8a742abe00427792fb24eb45f64c61b6f36dfcd5310585d9661f2ff6c4b6f70d1514400285b9c25471f3d306b06a06a92da989935e004e39a70aabcd17c223","ssdeep":"6144:8aJ3CvkKBQAxJ50l8Yoe9nzlFN9bf2RWUotboxvclrf:n3C8KBQAxJ50l8YRnmotjf","tlshash":"289419ce73d674269396f478502f118ba57b29a2b45cc89af1c9cce02e3499a4137f7c","size":433847,"data":"","first_seen":"2026-01-27T15:08:05.677584Z","last_seen":"2026-01-27T15:08:05.677584Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accountsreceivable.sbs/sandbox%20eval%20code","fqdn":"accountsreceivable.sbs","domain":"accountsreceivable.sbs","tld":"sbs"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.896325Z","times_seen":921522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/asset_composer.js?key=22fb9205-0748-40d7-8eb1-c964afe88d06","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d096b5b24105931fc508ee2125de32fb","sha1":"b62784207151c8d09cde540c933b23f84d178880","sha256":"e56446afa17adbd22ed46a81655739f51874733e396ea3942c508d80136f4264","sha512":"21f20c9ca97db17b89fed8d2613ebc39a1af2e3aeaa94b9390c87e9a4cff25e267a4cfa4e7c41544ca75879db5fd9341478145c39a130630181c294f1607ba96","ssdeep":"192:ITFnkRRORrDkD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Ty1hynl8klCtsiVcHC:kFnk/ORHk+u4QSZYkIPnpcC+0nl8kot1","tlshash":"7a220ac6b1b2e47203a600e1603e8690f765191a360dc478f97cecd6fd66dd1863beb8","size":10134,"data":"","first_seen":"2026-01-27T14:28:45.604965Z","last_seen":"2026-03-09T15:17:18.21333Z","times_seen":2384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.899011Z","times_seen":919823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/sentry-browser.min.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"009e2ec783d164b8a7dc355fc5f62931","sha1":"f2dd2ac75d674931e1c633644dcffc346d23ac00","sha256":"9aaa648382c720fad67e129008d4c15a7cba8ee3f2395f7857b575fb9a76dc5b","sha512":"2713776cf25257273fd62dfe59967e4d8928199f777d29e784ec2cee3a55172048db16df28949c112ef94168c0a223f79f0855d96d498d6b5bd5301e64f2b5f2","ssdeep":"3072:g+Z3pp4xfhSZKVuDWrG215rivWPtRwvl6/RO66Ga5y+yPRhQw2praYF+q1rHjr:gid3DWrG21hztim6GaYPRyPpraYF+O","tlshash":"736408d971a2703247d709a550ba0202f7395a50740b81e8f66cddef2db948ab2b7f3d","size":310819,"data":"","first_seen":"2026-01-27T14:56:03.896472Z","last_seen":"2026-03-09T06:22:45.228701Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"accountsreceivable.sbs/","fqdn":"accountsreceivable.sbs","domain":"accountsreceivable.sbs","tld":"sbs"},"ip":{"addr":"173.214.163.122","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T15:06:48.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accountsreceivable.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 14:23:01 GMT","end":"Sun, 26 Apr 2026 14:23:00 GMT"},"fingerprint":{"sha1":"80:32:AE:E1:5B:98:B1:FF:D2:26:54:B1:49:0A:05:9D:3C:49:A5:54","sha256":"DD:FA:DC:76:E7:F3:39:C3:04:9C:77:2B:9D:98:A5:C3:F5:2D:17:04:6B:E1:46:81:C0:55:94:66:F8:72:29:02"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: accountsreceivable.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nlast-modified: Mon, 26 Jan 2026 11:00:14 GMT\r\naccept-ranges: bytes\r\netag: \"0739df2b28edc1:0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ndate: Tue, 27 Jan 2026 15:06:48 GMT\r\ncontent-length: 1690\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Zendesk","description":"Zendesk is a cloud-based help desk management solution offering customizable tools to build customer service portal, knowledge base and online communities.","website":"https://zendesk.com","common_platform_enumeration":"","icon":"Zendesk.svg","categories":["Documentation","Issue trackers","Live chat"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":6597,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"03329e8e5df80176d8bb808d63f98d37","sha1":"61326a5287372706ce20cc6bb695c8d36d1f1472","sha256":"dc5fab4da3f7e2052eafe20fb42785e07bc67b54bb1444ec51947c48ab17a3b5","sha512":"79dfb01df6992c27a26d3ff61aa23874d9cdbff19afbfe596ef7301fc4fe41d34ddb33110527ae0250399b3cafc6785013301dd8134fefd1a83219929311a435","ssdeep":"96:Gdtlrgka0LSfJymBMrEmfhovWj553lFOwN7Q:GNckcz0E2oej5R7Q","tlshash":"58d1322274c0182711f3c2c9aaa5a769fed2d217cb86644072fca7cf5ff7e428853589","first_seen":"2023-07-22T16:33:39Z","last_seen":"2026-01-28T11:41:11.07557Z","times_seen":18,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":183,"dns":0,"connect":86,"send":0,"wait":98,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"accountsreceivable.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"accountsreceivable.sbs/images/idme-logo-1d96899e99d393974ec16fa17a820e78fca132bd8ea53e01f12bdc000baf674f.svg","fqdn":"accountsreceivable.sbs","domain":"accountsreceivable.sbs","tld":"sbs"},"ip":{"addr":"173.214.163.122","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://accountsreceivable.sbs/","date":"2026-01-27T15:06:49.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accountsreceivable.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 14:23:01 GMT","end":"Sun, 26 Apr 2026 14:23:00 GMT"},"fingerprint":{"sha1":"80:32:AE:E1:5B:98:B1:FF:D2:26:54:B1:49:0A:05:9D:3C:49:A5:54","sha256":"DD:FA:DC:76:E7:F3:39:C3:04:9C:77:2B:9D:98:A5:C3:F5:2D:17:04:6B:E1:46:81:C0:55:94:66:F8:72:29:02"}}},"request":{"raw":"GET /images/idme-logo-1d96899e99d393974ec16fa17a820e78fca132bd8ea53e01f12bdc000baf674f.svg HTTP/1.1\r\nHost: accountsreceivable.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accountsreceivable.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\nlast-modified: Mon, 26 Jan 2026 11:00:14 GMT\r\naccept-ranges: bytes\r\netag: \"0739df2b28edc1:0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ndate: Tue, 27 Jan 2026 15:06:48 GMT\r\ncontent-length: 1284\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"504331be39ca25224951e832d86887eb","sha1":"ddec6bb2c796466b5a7bac8e58070fb0f6c8ddcc","sha256":"eb439f785d33858dfe7300098e5f38c7ebb471ccfe409dde80df79c90c11e5e9","sha512":"8a9bb458b6d6d661aa02bc91d1d69ef098c628960955d134ecf2cf48b061fd44abbe6b4900db51bcced5e2b1ab0bcc2570f9f6c31219a1c4ac5bb0e9fe3b3570","ssdeep":"","tlshash":"1c517a2b0306d7eabda9492ca9111499b2d0eccbd4b4f1c0ab5b1816d48c4e57e9c7ec","first_seen":"2023-07-03T20:31:17Z","last_seen":"2026-08-12T06:18:47.209804Z","times_seen":412,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"accountsreceivable.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"accountsreceivable.sbs/images/icon-addition-1c60f492657aa091463f6ac2e15f0f5123425f314e60383dbba0b06b3bbae0ed.svg","fqdn":"accountsreceivable.sbs","domain":"accountsreceivable.sbs","tld":"sbs"},"ip":{"addr":"173.214.163.122","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://accountsreceivable.sbs/","date":"2026-01-27T15:06:49.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accountsreceivable.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 14:23:01 GMT","end":"Sun, 26 Apr 2026 14:23:00 GMT"},"fingerprint":{"sha1":"80:32:AE:E1:5B:98:B1:FF:D2:26:54:B1:49:0A:05:9D:3C:49:A5:54","sha256":"DD:FA:DC:76:E7:F3:39:C3:04:9C:77:2B:9D:98:A5:C3:F5:2D:17:04:6B:E1:46:81:C0:55:94:66:F8:72:29:02"}}},"request":{"raw":"GET /images/icon-addition-1c60f492657aa091463f6ac2e15f0f5123425f314e60383dbba0b06b3bbae0ed.svg HTTP/1.1\r\nHost: accountsreceivable.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accountsreceivable.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 26 Jan 2026 11:00:14 GMT\r\naccept-ranges: bytes\r\netag: \"0739df2b28edc1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ndate: Tue, 27 Jan 2026 15:06:48 GMT\r\ncontent-length: 714\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":714,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ffc060d8da5dcbdfe9847824840e07df","sha1":"9800ebea4ce995ed6eb3d1634460e7ee3975d8b4","sha256":"c47576302ee3e3045e7ab79fc4343b5316cd180d0ef46f1ce3a55d328bd7f5c3","sha512":"f701ace7b47a2b069630beeceff9e3713360810d4621c3ac9b7c9c0c54eddffc105bbd6b926d5755696a1a05b99fc70b48eb73314764db2dc7ad939ce5f3c659","ssdeep":"","tlshash":"e501d3ee12f44424f414c722f7f8b895593970cb82c84494b98d1a756b180e719fb3fd","first_seen":"2023-07-22T16:33:39Z","last_seen":"2026-06-09T17:35:16.242397Z","times_seen":146,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"accountsreceivable.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-PL62HD9","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://accountsreceivable.sbs/","date":"2026-01-27T15:06:49.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtm.js?id=GTM-PL62HD9 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accountsreceivable.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 27 Jan 2026 15:06:49 GMT\r\nexpires: Tue, 27 Jan 2026 15:06:49 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 109883\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":326815,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6753)","md5":"5183c47ded51af9e369b774c78c5a924","sha1":"d28597552aaa77fb6bc57b631d6e3e3b97516979","sha256":"00ad38fc03fe42746cda13357eb570b16b14df85933219ec52058b2d31868bdc","sha512":"cf00477dfef062fac8b2761342351807d4c914c515e6d74759673919133c08ca20980e7dae0355be24b71e9524e01a1648ddb5ec45f1a3b24453762c143d50d9","ssdeep":"6144:CJ3CveHQAxJ50l+YoeCQlFN9bf2RWiot125X:a3C2HQAxJ50l+YmTotOX","tlshash":"816417cdb3d6742683a3a478403f014ba17b69d2f84cd895f186c8d42e70aaa5277f7d","first_seen":"2026-01-27T15:08:05.669267Z","last_seen":"2026-01-27T15:08:05.669267Z","times_seen":1,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":131,"dns":15,"connect":21,"send":0,"wait":33,"receive":16,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accountsreceivable.sbs/images/Poppins-Regular-f7d5d006eb67f9f5b1499b3140f4cedbe8e0d4d500810216a022e3acd64fb989.woff","fqdn":"accountsreceivable.sbs","domain":"accountsreceivable.sbs","tld":"sbs"},"ip":{"addr":"173.214.163.122","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://accountsreceivable.sbs/","date":"2026-01-27T15:06:49.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accountsreceivable.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 14:23:01 GMT","end":"Sun, 26 Apr 2026 14:23:00 GMT"},"fingerprint":{"sha1":"80:32:AE:E1:5B:98:B1:FF:D2:26:54:B1:49:0A:05:9D:3C:49:A5:54","sha256":"DD:FA:DC:76:E7:F3:39:C3:04:9C:77:2B:9D:98:A5:C3:F5:2D:17:04:6B:E1:46:81:C0:55:94:66:F8:72:29:02"}}},"request":{"raw":"GET /images/Poppins-Regular-f7d5d006eb67f9f5b1499b3140f4cedbe8e0d4d500810216a022e3acd64fb989.woff HTTP/1.1\r\nHost: accountsreceivable.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accountsreceivable.sbs/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/x-woff\r\nlast-modified: Mon, 26 Jan 2026 11:00:14 GMT\r\naccept-ranges: bytes\r\netag: \"0739df2b28edc1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ndate: Tue, 27 Jan 2026 15:06:48 GMT\r\ncontent-length: 68484\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":68484,"size_decoded":0,"mime_type":"font/x-woff","magic":"Web Open Font Format, TrueType, length 68484, version 0.0","md5":"1ed9a698de5b1b3328ff71950731a500","sha1":"86790746fdb905eba03f60ee2270610547e0cdcd","sha256":"ad5fb58ad11730ef707d4f28db7a83ec4804bb3e8373dc69bedd94cd7a872efc","sha512":"b5abe41df5fe1362e211dd76cd1ee9a96abca8055df60ca50abae0da6e543caa41c80dd5c014d6629132ba61c0c4ba1cd072099353f319ede73c5def2496d158","ssdeep":"1536:y0/POJweu33S2MWPmZeUp6BAtJI7GWTsjE7L0RVxbqFty4hzrJ+HezZyr:cKeMCUPHBAtJI7NsA7L3KOHE+tyr","tlshash":"046312c0a1fe8d70a471f63565df6b60835e60056dfa09fc86e440709d9cd3be26eba2","first_seen":"2023-05-05T06:10:16Z","last_seen":"2026-08-15T07:16:37.259568Z","times_seen":422,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"accountsreceivable.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"accountsreceivable.sbs/images/OpenSans-f965889da0ef7fe9f91270decb4638eafb62e358ac08b974059512f9b4fa099b.woff","fqdn":"accountsreceivable.sbs","domain":"accountsreceivable.sbs","tld":"sbs"},"ip":{"addr":"173.214.163.122","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://accountsreceivable.sbs/","date":"2026-01-27T15:06:49.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accountsreceivable.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 14:23:01 GMT","end":"Sun, 26 Apr 2026 14:23:00 GMT"},"fingerprint":{"sha1":"80:32:AE:E1:5B:98:B1:FF:D2:26:54:B1:49:0A:05:9D:3C:49:A5:54","sha256":"DD:FA:DC:76:E7:F3:39:C3:04:9C:77:2B:9D:98:A5:C3:F5:2D:17:04:6B:E1:46:81:C0:55:94:66:F8:72:29:02"}}},"request":{"raw":"GET /images/OpenSans-f965889da0ef7fe9f91270decb4638eafb62e358ac08b974059512f9b4fa099b.woff HTTP/1.1\r\nHost: accountsreceivable.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accountsreceivable.sbs/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/x-woff\r\nlast-modified: Mon, 26 Jan 2026 11:00:14 GMT\r\naccept-ranges: bytes\r\netag: \"0739df2b28edc1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ndate: Tue, 27 Jan 2026 15:06:48 GMT\r\ncontent-length: 14260\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":14260,"size_decoded":0,"mime_type":"font/x-woff","magic":"Web Open Font Format, TrueType, length 14260, version 1.1","md5":"c2952e9358a350e58feee37405703b99","sha1":"23ea6dcb3dc74be7d03d1294f5728667860989e8","sha256":"cfda84577729425a91460b1220d5ed31b76bb0f63e1bd55014c35127798eb355","sha512":"161c121064fa5992da4fb839cb19168b8311c1698e1630762b644dd4a8ac4a06b42f967336d4538da2ef8767488805e7873be774c217a7de8a3526a123d45921","ssdeep":"384:1EJJISzK5KQnby0eQa5bdbo8KtX0n/qZOSO7O7RWfk4AJ:1mIj5U9Qa55oDSnSsSSSRWV4","tlshash":"6b52bfc332a0a1e9d10b47f244f151002e4c75cd975f85ff548b8fae41990bb7e9a6ea","first_seen":"2023-07-22T16:33:39Z","last_seen":"2026-08-12T06:18:47.19219Z","times_seen":423,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"accountsreceivable.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/sentry-browser.min.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://accountsreceivable.sbs/","date":"2026-01-27T15:06:49.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /ekr/sentry-browser.min.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accountsreceivable.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 15:06:49 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: p1OWOMQ9GMJcRXkcaISwAPW++sGTC4Z/QQmXSE9ZusfuBhNmec5yPEPp8oxbga/tCzTb39g7bZQ=\r\nx-amz-request-id: JCNVB2XKH0CFQ8NZ\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Tue, 27 Jan 2026 13:59:43 GMT\r\netag: W/\"009e2ec783d164b8a7dc355fc5f62931\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=3600\r\nx-amz-version-id: tj_WWAiqDAgzzjzubd4f97ixfuWz4cn.\r\nage: 2145\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Qm9MeuYpNjkeXnXec1dvwQtZnKCqGuFVp6Qi0yI2UJ2La06wPfYxDKxaA%2Bt1XkPCIOF9X0nWRqjWqp2XCvnPgiB94EpB3kFakgts6mEXzzdwEQSqPRNr%2BFsWQo9yswwBQDKWnz4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9c4927f93a43723c-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":310819,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"009e2ec783d164b8a7dc355fc5f62931","sha1":"f2dd2ac75d674931e1c633644dcffc346d23ac00","sha256":"9aaa648382c720fad67e129008d4c15a7cba8ee3f2395f7857b575fb9a76dc5b","sha512":"2713776cf25257273fd62dfe59967e4d8928199f777d29e784ec2cee3a55172048db16df28949c112ef94168c0a223f79f0855d96d498d6b5bd5301e64f2b5f2","ssdeep":"3072:g+Z3pp4xfhSZKVuDWrG215rivWPtRwvl6/RO66Ga5y+yPRhQw2praYF+q1rHjr:gid3DWrG21hztim6GaYPRyPpraYF+O","tlshash":"736408d971a2703247d709a550ba0202f7395a50740b81e8f66cddef2db948ab2b7f3d","first_seen":"2026-01-27T14:56:03.896472Z","last_seen":"2026-03-09T06:22:45.228701Z","times_seen":27,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accountsreceivable.sbs/images/Poppins-Medium-a5829f09868f62506459177f6872e751d023527e6cfd42525bce8d1c33365003.woff","fqdn":"accountsreceivable.sbs","domain":"accountsreceivable.sbs","tld":"sbs"},"ip":{"addr":"173.214.163.122","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://accountsreceivable.sbs/","date":"2026-01-27T15:06:49.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accountsreceivable.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 14:23:01 GMT","end":"Sun, 26 Apr 2026 14:23:00 GMT"},"fingerprint":{"sha1":"80:32:AE:E1:5B:98:B1:FF:D2:26:54:B1:49:0A:05:9D:3C:49:A5:54","sha256":"DD:FA:DC:76:E7:F3:39:C3:04:9C:77:2B:9D:98:A5:C3:F5:2D:17:04:6B:E1:46:81:C0:55:94:66:F8:72:29:02"}}},"request":{"raw":"GET /images/Poppins-Medium-a5829f09868f62506459177f6872e751d023527e6cfd42525bce8d1c33365003.woff HTTP/1.1\r\nHost: accountsreceivable.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accountsreceivable.sbs/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/x-woff\r\nlast-modified: Mon, 26 Jan 2026 11:00:14 GMT\r\naccept-ranges: bytes\r\netag: \"0739df2b28edc1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ndate: Tue, 27 Jan 2026 15:06:48 GMT\r\ncontent-length: 68356\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":68356,"size_decoded":0,"mime_type":"font/x-woff","magic":"Web Open Font Format, TrueType, length 68356, version 0.0","md5":"896fb06c7b3bead35bb2fbe6be7d8b54","sha1":"5fd34acb5d590d495415c8045f49533d4cfb6798","sha256":"6dfdf411a70ae4d26942efdf1034e66976435758d29f2a7d556d77e08b9e2412","sha512":"a6367dfb471742fdf96a60d4454d7078005d6820841474b365bfdef8f55c48ba546126581eefd5a405f6b99384e5dca8cf2b2a344e98710028b4732f5b84dea7","ssdeep":"1536:RzxyCka0UoOqKixt5EQkxykWrZYOv+rCa2+J:hxua0eRixrJHFfYCF+J","tlshash":"d4631222c0ef459afb442fb9e47e0da64a819fd787dd39b90f1cb432d449168e309359","first_seen":"2023-04-19T13:33:03Z","last_seen":"2026-08-12T06:18:47.210993Z","times_seen":441,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"accountsreceivable.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"accountsreceivable.sbs/images/google-a43b7bcd4be906d16c347ac7c53f07ebae6f75732b8a8038844b95b737b90ffa.svg","fqdn":"accountsreceivable.sbs","domain":"accountsreceivable.sbs","tld":"sbs"},"ip":{"addr":"173.214.163.122","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://accountsreceivable.sbs/","date":"2026-01-27T15:06:49.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accountsreceivable.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 14:23:01 GMT","end":"Sun, 26 Apr 2026 14:23:00 GMT"},"fingerprint":{"sha1":"80:32:AE:E1:5B:98:B1:FF:D2:26:54:B1:49:0A:05:9D:3C:49:A5:54","sha256":"DD:FA:DC:76:E7:F3:39:C3:04:9C:77:2B:9D:98:A5:C3:F5:2D:17:04:6B:E1:46:81:C0:55:94:66:F8:72:29:02"}}},"request":{"raw":"GET /images/google-a43b7bcd4be906d16c347ac7c53f07ebae6f75732b8a8038844b95b737b90ffa.svg HTTP/1.1\r\nHost: accountsreceivable.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accountsreceivable.sbs/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 26 Jan 2026 11:00:14 GMT\r\naccept-ranges: bytes\r\netag: \"0739df2b28edc1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ndate: Tue, 27 Jan 2026 15:06:48 GMT\r\ncontent-length: 2757\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2757,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d7a0189e77b6fb9e953d94e464f8d0d","sha1":"b89b561bf8119433ed5b7bac174bc4bf3388b4db","sha256":"88287bf73c699b030a6dd9a581ca97d4771ef04bb699acec172629d25dc3b457","sha512":"c67251fe10a3a2d1622ed06529dc7426374a98de22e78affec125f46b6dd7b327967c08e994cfc43959b9af1a1301ec14c1deef60653100369d492c426fdfb83","ssdeep":"","tlshash":"6b511fc90ab903f481629398f3f07904a92d34dbb2e9dd68b75c29c52b32cb2148e253","first_seen":"2023-07-22T16:33:39Z","last_seen":"2026-02-06T07:10:02.596839Z","times_seen":276,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"accountsreceivable.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"accountsreceivable.sbs/images/linkedin-da38d5cac6618d9aad720407d94fbe0b1275531502044ed173de95da2ee3ce3c.svg","fqdn":"accountsreceivable.sbs","domain":"accountsreceivable.sbs","tld":"sbs"},"ip":{"addr":"173.214.163.122","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://accountsreceivable.sbs/","date":"2026-01-27T15:06:49.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accountsreceivable.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 14:23:01 GMT","end":"Sun, 26 Apr 2026 14:23:00 GMT"},"fingerprint":{"sha1":"80:32:AE:E1:5B:98:B1:FF:D2:26:54:B1:49:0A:05:9D:3C:49:A5:54","sha256":"DD:FA:DC:76:E7:F3:39:C3:04:9C:77:2B:9D:98:A5:C3:F5:2D:17:04:6B:E1:46:81:C0:55:94:66:F8:72:29:02"}}},"request":{"raw":"GET /images/linkedin-da38d5cac6618d9aad720407d94fbe0b1275531502044ed173de95da2ee3ce3c.svg HTTP/1.1\r\nHost: accountsreceivable.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accountsreceivable.sbs/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 26 Jan 2026 11:00:14 GMT\r\naccept-ranges: bytes\r\netag: \"0739df2b28edc1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ndate: Tue, 27 Jan 2026 15:06:48 GMT\r\ncontent-length: 1839\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":1839,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43893aa6b0522f222e8e5471b5e2b69c","sha1":"0016e1ede45275dea0888b05e79c773f34d3c6b6","sha256":"a229e323ff491babb44e0a4bfde9dded15f70886c84b2e09e606552631cd71fa","sha512":"f92a26189c829d5953cd37c3a46c88f83429c4c12627f3ca29f6e4805d363e14edc6151c4e4844f22967c7b026877d15be08cbbe17bbb8cab22b3ab607b90529","ssdeep":"","tlshash":"5d3133819ae44c789209c651f3f66916792834e731d58e68f8df28452f218de1406397","first_seen":"2023-07-22T16:33:39Z","last_seen":"2026-02-06T07:10:02.590655Z","times_seen":279,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"accountsreceivable.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"accountsreceivable.sbs/images/OpenSans-Bold-13cd71fff17a279d6c6c8fe515396b6a9898a0e46c26bca41a031a7ee652e227.woff","fqdn":"accountsreceivable.sbs","domain":"accountsreceivable.sbs","tld":"sbs"},"ip":{"addr":"173.214.163.122","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://accountsreceivable.sbs/","date":"2026-01-27T15:06:49.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accountsreceivable.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 14:23:01 GMT","end":"Sun, 26 Apr 2026 14:23:00 GMT"},"fingerprint":{"sha1":"80:32:AE:E1:5B:98:B1:FF:D2:26:54:B1:49:0A:05:9D:3C:49:A5:54","sha256":"DD:FA:DC:76:E7:F3:39:C3:04:9C:77:2B:9D:98:A5:C3:F5:2D:17:04:6B:E1:46:81:C0:55:94:66:F8:72:29:02"}}},"request":{"raw":"GET /images/OpenSans-Bold-13cd71fff17a279d6c6c8fe515396b6a9898a0e46c26bca41a031a7ee652e227.woff HTTP/1.1\r\nHost: accountsreceivable.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accountsreceivable.sbs/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/x-woff\r\nlast-modified: Mon, 26 Jan 2026 11:00:14 GMT\r\naccept-ranges: bytes\r\netag: \"0739df2b28edc1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ndate: Tue, 27 Jan 2026 15:06:48 GMT\r\ncontent-length: 14180\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14180,"size_decoded":0,"mime_type":"font/x-woff","magic":"Web Open Font Format, TrueType, length 14180, version 1.1","md5":"6651c9ae3690a2ceb6520fe781ed2917","sha1":"359c9fb4c3283f70a4d78b8c4505fbf993d77ab2","sha256":"9d5575173e17b34916779d395ad1fdbe82e3a463fbad9813bfc83b334bf12265","sha512":"887567d7625526bf42aba6c84e1139aa3e4d4bbd701ee1f0983ceefa687988f49a9223fa28a4b82506bc7b7a86fcf76abb0f9da7a611f587217406a7e0c77d9b","ssdeep":"384:5OE3YJdN4Dpre7REtcx20n/qZOSO7O7RWf2ggwJ:QEgSkOig0nSsSSSRW+LI","tlshash":"5d52afce7a007210d45142b10aa77712fb6c9180055b2a5ea6eb8eff09e26f3fd4e2d5","first_seen":"2023-07-22T16:33:39Z","last_seen":"2026-08-12T06:18:47.213983Z","times_seen":412,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"accountsreceivable.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"accountsreceivable.sbs/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css","fqdn":"accountsreceivable.sbs","domain":"accountsreceivable.sbs","tld":"sbs"},"ip":{"addr":"173.214.163.122","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://accountsreceivable.sbs/","date":"2026-01-27T15:06:49.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accountsreceivable.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 14:23:01 GMT","end":"Sun, 26 Apr 2026 14:23:00 GMT"},"fingerprint":{"sha1":"80:32:AE:E1:5B:98:B1:FF:D2:26:54:B1:49:0A:05:9D:3C:49:A5:54","sha256":"DD:FA:DC:76:E7:F3:39:C3:04:9C:77:2B:9D:98:A5:C3:F5:2D:17:04:6B:E1:46:81:C0:55:94:66:F8:72:29:02"}}},"request":{"raw":"GET /css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css HTTP/1.1\r\nHost: accountsreceivable.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accountsreceivable.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-encoding: br\r\nlast-modified: Mon, 26 Jan 2026 11:00:14 GMT\r\naccept-ranges: bytes\r\netag: \"0739df2b28edc1:0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ndate: Tue, 27 Jan 2026 15:06:48 GMT\r\ncontent-length: 27113\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":184811,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (33862)","md5":"8710953da30d848999a73199df7c2c18","sha1":"3a8e2955888103e9671fd2cd275ff9b9b92bb50f","sha256":"960ae248be6fe22924f77b1e79a2c4b86af22d6fc999d46eab206f6e824e4a64","sha512":"c6792a19dabf97c12ef8697977c7214c7224698dc15ff489a6e77485b9389d0ce24fbf569a770fad18fbb6bf163dd9a414361cfc025d24fae8e661b6456a3bc9","ssdeep":"3072:rNNHjxUQG/tnbPUNxKAU4s1ghAfsbgDsQSPAeSk:ctnbPSxKAU4s1ghAfsbgDsQSPAeSk","tlshash":"f204e7214ea1303cf2bbcda574e1b9c437259013c8272ff9fa56657acac628513a3f59","first_seen":"2024-01-22T02:49:39Z","last_seen":"2026-07-16T16:52:08.893917Z","times_seen":74,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"accountsreceivable.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-684ZXW8HVT\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://accountsreceivable.sbs/","date":"2026-01-27T15:06:49.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/js?id=G-684ZXW8HVT\u0026l=dataLayer\u0026cx=c HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accountsreceivable.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 27 Jan 2026 15:06:49 GMT\r\nexpires: Tue, 27 Jan 2026 15:06:49 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143076\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":433847,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7529)","md5":"a17fb5108859feedcd4b092d83a46b07","sha1":"bd0b566832e9314be7a16b5a360b5bbeedb39097","sha256":"cc7f1d05a8896edb515ed2841dddd628308555f0b326cfec04549e4136a354ea","sha512":"8b8a742abe00427792fb24eb45f64c61b6f36dfcd5310585d9661f2ff6c4b6f70d1514400285b9c25471f3d306b06a06a92da989935e004e39a70aabcd17c223","ssdeep":"6144:8aJ3CvkKBQAxJ50l8Yoe9nzlFN9bf2RWUotboxvclrf:n3C8KBQAxJ50l8YRnmotjf","tlshash":"289419ce73d674269396f478502f118ba57b29a2b45cc89af1c9cce02e3499a4137f7c","first_seen":"2026-01-27T15:08:05.677584Z","last_seen":"2026-01-27T15:08:05.677584Z","times_seen":1,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":168,"dns":1,"connect":10,"send":0,"wait":32,"receive":27,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accountsreceivable.sbs/images/Poppins-SemiBold-15cea7fedab57408d132253bd4663008d2627476be29759d00c67d716ee0570b.woff","fqdn":"accountsreceivable.sbs","domain":"accountsreceivable.sbs","tld":"sbs"},"ip":{"addr":"173.214.163.122","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://accountsreceivable.sbs/","date":"2026-01-27T15:06:49.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accountsreceivable.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 14:23:01 GMT","end":"Sun, 26 Apr 2026 14:23:00 GMT"},"fingerprint":{"sha1":"80:32:AE:E1:5B:98:B1:FF:D2:26:54:B1:49:0A:05:9D:3C:49:A5:54","sha256":"DD:FA:DC:76:E7:F3:39:C3:04:9C:77:2B:9D:98:A5:C3:F5:2D:17:04:6B:E1:46:81:C0:55:94:66:F8:72:29:02"}}},"request":{"raw":"GET /images/Poppins-SemiBold-15cea7fedab57408d132253bd4663008d2627476be29759d00c67d716ee0570b.woff HTTP/1.1\r\nHost: accountsreceivable.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accountsreceivable.sbs/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/x-woff\r\nlast-modified: Mon, 26 Jan 2026 11:00:14 GMT\r\naccept-ranges: bytes\r\netag: \"0739df2b28edc1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ndate: Tue, 27 Jan 2026 15:06:48 GMT\r\ncontent-length: 67932\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67932,"size_decoded":0,"mime_type":"font/x-woff","magic":"Web Open Font Format, TrueType, length 67932, version 3.10","md5":"83d1a3fce7d8008c68d09317c8ef4c16","sha1":"b29b122d8239cdc82ce751aeda028eea7024d844","sha256":"937c7bd392e945cd2e1ee86cf47b357af016af281c2062d3249132c023f65f39","sha512":"b69412ae0b47a16a95f048460968d658552c8859f6ab4f2a7aa75d00f2ad158c1251f44861c8037c236adcd6229fef5c4f14dd6975a4834b2e0ad3c3fc819d54","ssdeep":"1536:Vlcu0weFWAvf92JRdqHSqrBrLqt1JQn86khljP9:Vlj6WEfUJ6HSqrBr41K8tv","tlshash":"496302a7e471a590684bc633c50c9e293cd77c3809e1e0fc087a856a45aa77e41b9fd3","first_seen":"2023-07-22T16:33:39Z","last_seen":"2026-02-06T07:10:02.591766Z","times_seen":363,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"accountsreceivable.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"accountsreceivable.sbs/images/apple-a7464638f21272811259a7dec32cb0ea2a95080256372ea5640b9a78395d9fd4.svg","fqdn":"accountsreceivable.sbs","domain":"accountsreceivable.sbs","tld":"sbs"},"ip":{"addr":"173.214.163.122","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://accountsreceivable.sbs/","date":"2026-01-27T15:06:49.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accountsreceivable.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 14:23:01 GMT","end":"Sun, 26 Apr 2026 14:23:00 GMT"},"fingerprint":{"sha1":"80:32:AE:E1:5B:98:B1:FF:D2:26:54:B1:49:0A:05:9D:3C:49:A5:54","sha256":"DD:FA:DC:76:E7:F3:39:C3:04:9C:77:2B:9D:98:A5:C3:F5:2D:17:04:6B:E1:46:81:C0:55:94:66:F8:72:29:02"}}},"request":{"raw":"GET /images/apple-a7464638f21272811259a7dec32cb0ea2a95080256372ea5640b9a78395d9fd4.svg HTTP/1.1\r\nHost: accountsreceivable.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accountsreceivable.sbs/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 26 Jan 2026 11:00:14 GMT\r\naccept-ranges: bytes\r\netag: \"0739df2b28edc1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ndate: Tue, 27 Jan 2026 15:06:48 GMT\r\ncontent-length: 1731\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1731,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1f15f761498cb91044ed5c551f344ecf","sha1":"d27eb4f8c948e0c1040ff798883a076aed8ac0f3","sha256":"148242d360df5aa8ec82f16d037a6244c815fd56978d7a4f1979b43e285fa39e","sha512":"0d348c897d9341c46d37dd3992898db08ba131b312c608d72b65f24703ea5212c14666dfd80179215366d56e0a4bcc4e8878ba90169c6311142e1ccf3a2eebf1","ssdeep":"","tlshash":"3131820802ffc5f1f210d3b246b9982b69e537ce7d46c418d2ce6d3c9a590ec0aa65cb","first_seen":"2023-07-22T16:33:39Z","last_seen":"2026-02-06T07:10:02.599058Z","times_seen":277,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"accountsreceivable.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/asset_composer.js?key=22fb9205-0748-40d7-8eb1-c964afe88d06","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://accountsreceivable.sbs/","date":"2026-01-27T15:06:49.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /ekr/asset_composer.js?key=22fb9205-0748-40d7-8eb1-c964afe88d06 HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accountsreceivable.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 15:06:49 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: wXWm6vnulUZ9ZFAjjDEyG6xftpCaK0UoqrjRuP4XgOZ6am55wbg8mivwjwZBf62q3VIKMphrHbs=\r\nx-amz-request-id: 6E8A8SXJ9HE9XWN1\r\nx-amz-replication-status: PENDING\r\nlast-modified: Tue, 27 Jan 2026 13:59:42 GMT\r\netag: W/\"d096b5b24105931fc508ee2125de32fb\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=3600, s-maxage=60\r\nx-amz-version-id: .PXjLZ73lJdJcdl_tgok2UMYdNPy3hi9\r\ncf-cache-status: HIT\r\nage: 56\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XOBLxdnfgR%2BwgFRcpvsXGyYATo890lxvXmXnGu1pdFGbgBSLycTXS7f8oBX835W6%2FbD0L2e6Si0MUKGCWFDs3PP6qW8cE8eTuByx9v5MYBiKYNrfWGDJhltqKv9t%2BQK%2FXmuhrYY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9c4927f8c926723c-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10134,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10134), with no line terminators","md5":"d096b5b24105931fc508ee2125de32fb","sha1":"b62784207151c8d09cde540c933b23f84d178880","sha256":"e56446afa17adbd22ed46a81655739f51874733e396ea3942c508d80136f4264","sha512":"21f20c9ca97db17b89fed8d2613ebc39a1af2e3aeaa94b9390c87e9a4cff25e267a4cfa4e7c41544ca75879db5fd9341478145c39a130630181c294f1607ba96","ssdeep":"192:ITFnkRRORrDkD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Ty1hynl8klCtsiVcHC:kFnk/ORHk+u4QSZYkIPnpcC+0nl8kot1","tlshash":"7a220ac6b1b2e47203a600e1603e8690f765191a360dc478f97cecd6fd66dd1863beb8","first_seen":"2026-01-27T14:28:45.604965Z","last_seen":"2026-03-09T15:17:18.21333Z","times_seen":2384,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":13,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accountsreceivable.sbs/images/IRS-Logo.svg","fqdn":"accountsreceivable.sbs","domain":"accountsreceivable.sbs","tld":"sbs"},"ip":{"addr":"173.214.163.122","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://accountsreceivable.sbs/","date":"2026-01-27T15:06:49.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accountsreceivable.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 14:23:01 GMT","end":"Sun, 26 Apr 2026 14:23:00 GMT"},"fingerprint":{"sha1":"80:32:AE:E1:5B:98:B1:FF:D2:26:54:B1:49:0A:05:9D:3C:49:A5:54","sha256":"DD:FA:DC:76:E7:F3:39:C3:04:9C:77:2B:9D:98:A5:C3:F5:2D:17:04:6B:E1:46:81:C0:55:94:66:F8:72:29:02"}}},"request":{"raw":"GET /images/IRS-Logo.svg HTTP/1.1\r\nHost: accountsreceivable.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accountsreceivable.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\nlast-modified: Mon, 26 Jan 2026 11:00:14 GMT\r\naccept-ranges: bytes\r\netag: \"0739df2b28edc1:0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ndate: Tue, 27 Jan 2026 15:06:48 GMT\r\ncontent-length: 3428\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7338,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e397010a7019312bf2fe516cdb9700c","sha1":"58b62087b25f8535c7de9320c39e35d0e91691a1","sha256":"68188a21c8654348677e2bdb6c4a0b6b5c7ebf71cc6b5280ebb5b47eb03a032e","sha512":"a8de573479ec465b641582e35d44455cf39ee7b993818f1de7c358391bf7af8793a1f8afb5415695a5ca41a5b548cf934e0618ae2385751f36ff9f1515fbd8c5","ssdeep":"192:BIqMpcg0QFjchsO8i5HYipWeG/K50CfmHcUkFDz4Yl:JMXjNObYoo/KagMTi4Yl","tlshash":"f2e1c8bb037083fde3d2d7491d905a9a37beb4d9f121929897a7365aad428f3043cc21","first_seen":"2023-07-22T16:33:39Z","last_seen":"2026-02-06T07:10:02.588181Z","times_seen":69,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"accountsreceivable.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"accountsreceivable.sbs/images/OpenSans-Semibold-6c9bf1664cc6e8151624c0c19613cb4183278f26f97011c172542d5d574faab8.woff","fqdn":"accountsreceivable.sbs","domain":"accountsreceivable.sbs","tld":"sbs"},"ip":{"addr":"173.214.163.122","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://accountsreceivable.sbs/","date":"2026-01-27T15:06:49.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accountsreceivable.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 14:23:01 GMT","end":"Sun, 26 Apr 2026 14:23:00 GMT"},"fingerprint":{"sha1":"80:32:AE:E1:5B:98:B1:FF:D2:26:54:B1:49:0A:05:9D:3C:49:A5:54","sha256":"DD:FA:DC:76:E7:F3:39:C3:04:9C:77:2B:9D:98:A5:C3:F5:2D:17:04:6B:E1:46:81:C0:55:94:66:F8:72:29:02"}}},"request":{"raw":"GET /images/OpenSans-Semibold-6c9bf1664cc6e8151624c0c19613cb4183278f26f97011c172542d5d574faab8.woff HTTP/1.1\r\nHost: accountsreceivable.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accountsreceivable.sbs/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/x-woff\r\nlast-modified: Mon, 26 Jan 2026 11:00:14 GMT\r\naccept-ranges: bytes\r\netag: \"0739df2b28edc1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ndate: Tue, 27 Jan 2026 15:06:48 GMT\r\ncontent-length: 14336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":14336,"size_decoded":0,"mime_type":"font/x-woff","magic":"Web Open Font Format, TrueType, length 14336, version 1.1","md5":"c9162005930ee812c739b3157e158250","sha1":"431d6395adf3df707a7ebaa707e1c354f42f8229","sha256":"28e5a7bc5703c00c8bc6fd0cfe45a3088e0a88a7862d206bb93f6cba655157ff","sha512":"0b284990a9c5de3f30eb88a271b6221fea5e1ba131f1cca7bb18a06b96648b15fd175d46f59efaa0d8ee32c9d9f3920461cd7696d76e18e7669804c46cf94fdb","ssdeep":"384:Tu4/7YLQqnjU40SXm1lbn/qZOSO7O7RWfkV5IJ:i48ccm11nSsSSSRW/","tlshash":"1752bf5b36447872fc8e0b781de60940bfedb0e448cb14da27991afe90ec272bd38255","first_seen":"2023-07-22T16:33:39Z","last_seen":"2026-08-12T06:18:47.193589Z","times_seen":418,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"accountsreceivable.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"accountsreceivable.sbs/images/facebook-116f6267ff4d14d3dd98fcf4e3dc9931cf5fba014bf16d44a17fd791d05201fd.svg","fqdn":"accountsreceivable.sbs","domain":"accountsreceivable.sbs","tld":"sbs"},"ip":{"addr":"173.214.163.122","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://accountsreceivable.sbs/","date":"2026-01-27T15:06:49.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accountsreceivable.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 14:23:01 GMT","end":"Sun, 26 Apr 2026 14:23:00 GMT"},"fingerprint":{"sha1":"80:32:AE:E1:5B:98:B1:FF:D2:26:54:B1:49:0A:05:9D:3C:49:A5:54","sha256":"DD:FA:DC:76:E7:F3:39:C3:04:9C:77:2B:9D:98:A5:C3:F5:2D:17:04:6B:E1:46:81:C0:55:94:66:F8:72:29:02"}}},"request":{"raw":"GET /images/facebook-116f6267ff4d14d3dd98fcf4e3dc9931cf5fba014bf16d44a17fd791d05201fd.svg HTTP/1.1\r\nHost: accountsreceivable.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accountsreceivable.sbs/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 26 Jan 2026 11:00:14 GMT\r\naccept-ranges: bytes\r\netag: \"0739df2b28edc1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ndate: Tue, 27 Jan 2026 15:06:48 GMT\r\ncontent-length: 1217\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":1217,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b72581e2d480be799e16718d44632932","sha1":"d83b4b86e0ab8ece563d929a36aeac4862d0b469","sha256":"10737a20653122a358d1eb32dbb940fb9b09e7721a3e669e502851c63cf05910","sha512":"ebc1d7b0ebbb253c0b27495ef64c75d5c50f14d41e16c5156f795ff6cd4d0837bf0606e8598c85d2330460466269fb25d77d429e8b4a095651dd010d00ce24ac","ssdeep":"","tlshash":"ce2123c002fd8059e81ada22f3f47216ba3d30cb51d48941f5ee3d99bb110b7254b356","first_seen":"2023-11-16T20:03:17Z","last_seen":"2026-02-06T07:10:02.598414Z","times_seen":273,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"accountsreceivable.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"accountsreceivable.sbs/images/down-b7ca882674faa748455822f70f3822029d25ca64487139c5f0d8daadc4789b39.svg","fqdn":"accountsreceivable.sbs","domain":"accountsreceivable.sbs","tld":"sbs"},"ip":{"addr":"173.214.163.122","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://accountsreceivable.sbs/","date":"2026-01-27T15:06:49.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accountsreceivable.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 14:23:01 GMT","end":"Sun, 26 Apr 2026 14:23:00 GMT"},"fingerprint":{"sha1":"80:32:AE:E1:5B:98:B1:FF:D2:26:54:B1:49:0A:05:9D:3C:49:A5:54","sha256":"DD:FA:DC:76:E7:F3:39:C3:04:9C:77:2B:9D:98:A5:C3:F5:2D:17:04:6B:E1:46:81:C0:55:94:66:F8:72:29:02"}}},"request":{"raw":"GET /images/down-b7ca882674faa748455822f70f3822029d25ca64487139c5f0d8daadc4789b39.svg HTTP/1.1\r\nHost: accountsreceivable.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accountsreceivable.sbs/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ndate: Tue, 27 Jan 2026 15:06:48 GMT\r\ncontent-length: 12579\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":12579,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (11800), with CRLF line terminators","md5":"65c24930559e15f03415300adbf7285c","sha1":"4829992d93a203c4aa196e98fcb9fb0a7d4f9e83","sha256":"3273fbc5b0b3f10fa0e78ac5de8c397606fae0068583b671c8c695f71f2446e4","sha512":"98e3cf6f75b9a97f319ad15b82064a995c5265fc9ae0faa29af765bf69ca9664c4ed2324fc028f817c3f108b58329677a7ec16312c095824fd10680c53946370","ssdeep":"192:TXEBj0jGzm2TDetnblLR4e4QW1HYnyZy6q5+ArwKM4kuuQo:TUZAGzm2TDetnb3nVW1HYEq5+A6","tlshash":"43424f13084a21527b3e2f7fdb9c214e6158b75294911df8b96b2d8d818eb7b31873bc","first_seen":"2023-03-26T00:26:56Z","last_seen":"2026-08-15T16:17:32.92743Z","times_seen":1226,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"accountsreceivable.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"accountsreceivable.sbs/id.ico","fqdn":"accountsreceivable.sbs","domain":"accountsreceivable.sbs","tld":"sbs"},"ip":{"addr":"173.214.163.122","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://accountsreceivable.sbs/","date":"2026-01-27T15:06:49.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accountsreceivable.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 14:23:01 GMT","end":"Sun, 26 Apr 2026 14:23:00 GMT"},"fingerprint":{"sha1":"80:32:AE:E1:5B:98:B1:FF:D2:26:54:B1:49:0A:05:9D:3C:49:A5:54","sha256":"DD:FA:DC:76:E7:F3:39:C3:04:9C:77:2B:9D:98:A5:C3:F5:2D:17:04:6B:E1:46:81:C0:55:94:66:F8:72:29:02"}}},"request":{"raw":"GET /id.ico HTTP/1.1\r\nHost: accountsreceivable.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accountsreceivable.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 26 Jan 2026 11:00:14 GMT\r\naccept-ranges: bytes\r\netag: \"0739df2b28edc1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ndate: Tue, 27 Jan 2026 15:06:48 GMT\r\ncontent-length: 1150\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"237db6dd11b00c991f7059ae8220f848","sha1":"6e757734103edb536213d80ac4cd26a6945e2dd6","sha256":"09fe42dff8b0fb2b4ea51818ecd86fb540615a1f185bb98b40168638a9d8a563","sha512":"bafb30e19d888a5e2232d72587b01f1491cec023d614fe6c055a6d8e952de4d3c29a07d30b14fc7fec4fef6590966956ec463e8295d236cfd412b58c307fc2d1","ssdeep":"","tlshash":"1521d23f5c37c128da6365767c92112be9a40ad18d3c0432a50bf054f9f6ca44cb4e9f","first_seen":"2023-07-22T16:33:39Z","last_seen":"2026-02-06T07:10:02.593326Z","times_seen":106,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"accountsreceivable.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"accountsreceivable.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}}]}