{"report_id":"d71bfa81-6517-49d0-9132-6530f73e848f","version":0,"status":"done","tags":["netflix","phishing"],"date":"2026-08-04T01:13:07Z","url":{"schema":"http","addr":"carib-airsol.com/","fqdn":"carib-airsol.com","domain":"carib-airsol.com","tld":"com"},"ip":{"addr":"162.241.203.120","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"carib-airsol.com/pas1.php","fqdn":"carib-airsol.com","domain":"carib-airsol.com","tld":"com"},"title":"Netflix","dom":{"size":2263,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1cd4ed02cbfe231b58a627c2a7bd6e0f","sha1":"c67865cd9e2d7875a4baf189ad3c428610e9a2da","sha256":"ca8b4ca741cb2c3f724a387a7987099ef51585a6de5fda982ced3bb163f5a074","sha512":"3b2362b1491231af6b5104b7f93eb0108a812065cbba51ff518aa48eb0f7b6ff1114d225a3bd80e855f08aa9ba8ad6601bfe74ecc5aae11262ae091cc3855ce1","ssdeep":"","tlshash":"4941ee2020f4042b53a2d28d7fd27b2a6ed39543ca4b9c54719c0bde5fd2e47ca4319d","dom_hash":"domhash4463b7ffa0047a8cdecb881197f360fb","first_seen":"2026-08-04T01:04:59.061958Z","last_seen":"2026-08-04T03:56:44.133627Z","times_seen":5,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"carib-airsol.com/","fqdn":"carib-airsol.com","domain":"carib-airsol.com","tld":"com"},"ip":{"addr":"162.241.203.120","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-08T01:13:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"carib-airsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"carib-airsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"carib-airsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"carib-airsol.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"carib-airsol.com","ip":{"addr":"162.241.203.120","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"domain_registered":"2026-07-25","domain_rank":0,"first_seen":"2026-08-04T01:04:55.526553Z","last_seen":"2026-08-04T01:04:55.526553Z","alert_count":25,"request_count":5,"received_data":21678,"sent_data":2517,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"assets.nflxext.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2011-02-11","domain_rank":22756,"first_seen":"2015-07-22T04:02:07Z","last_seen":"2026-07-29T15:15:11.226968Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":571,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"carib-airsol.com/","fqdn":"carib-airsol.com","domain":"carib-airsol.com","tld":"com"},"ip":{"addr":"162.241.203.120","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb973e9fc54d2d90f0efed55f9f37ee8","sha1":"496ddaef6584c2692cf4c6cb881b7394b15b429b","sha256":"87a2f1332350e3ff61e54d40bd9d84e8545fd3148adebbdf3159d2a665b53a54","sha512":"ddecca3504b3b9a5614bc169e6452894edb70efe42c850234c963f839dcdca81516859303b1d0d86aa7ba82b9ed2903dbfc838fd59d8cf7b5e022e0c213ffe44","ssdeep":"","tlshash":"52a012490d730001219ab021467f3900303e20ba404c99403c0cd1001f1421f12166c9","size":86,"data":"","first_seen":"2026-08-04T01:04:59.077702Z","last_seen":"2026-08-04T03:36:38.568418Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"carib-airsol.com/","fqdn":"carib-airsol.com","domain":"carib-airsol.com","tld":"com"},"ip":{"addr":"162.241.203.120","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-04T01:12:40.265Z","timestamp":1785805960265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.carib-airsol.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 16:41:45 GMT","end":"Fri, 23 Oct 2026 16:41:44 GMT"},"fingerprint":{"sha1":"46:BA:BA:4A:CD:E2:8C:2B:34:6F:5B:67:BC:BB:64:92:53:22:22:3F","sha256":"51:F6:E1:01:B8:AF:F5:58:B3:29:AF:74:9B:D9:2A:DC:1F:C9:F1:18:F9:26:CA:BB:3E:BE:90:95:75:74:EB:57"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: carib-airsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 30 Jul 2026 04:31:48 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 727\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 01:12:41 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1410,"size_decoded":976,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"607ef42ec44e67c6f81d1571610067ad","sha1":"05f15f8f31fb0d505cf0ba6387975ce4030e304c","sha256":"4a25aa6edfe2cf6827e9844c13a25c1afdd2ac6f519b0dadcbc9061b58c8f1f5","sha512":"17de6fdd3fc6a7700a79269e5e2fbd294a62a27d0cfcedb97207d77cbec291c11d6d3070b2ce8308779c9aaf7f963b334ff499d863033b8c7947f0f743407365","ssdeep":"","tlshash":"e121e146a5534102a023d1201fdfae4e32a8e507814bce153f8d934ccf8529ed9d3388","first_seen":"2026-08-04T01:04:59.074339Z","last_seen":"2026-08-04T03:36:38.566045Z","times_seen":4,"resource_available":false,"data":null}},"time_used":984,"timings":{"blocked":0,"dns":381,"connect":196,"send":0,"wait":204,"receive":0,"ssl":202},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"carib-airsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"carib-airsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"carib-airsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"carib-airsol.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"carib-airsol.com/favicon.ico","fqdn":"carib-airsol.com","domain":"carib-airsol.com","tld":"com"},"ip":{"addr":"162.241.203.120","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carib-airsol.com/","date":"2026-08-04T01:12:41.486Z","timestamp":1785805961486,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.carib-airsol.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 16:41:45 GMT","end":"Fri, 23 Oct 2026 16:41:44 GMT"},"fingerprint":{"sha1":"46:BA:BA:4A:CD:E2:8C:2B:34:6F:5B:67:BC:BB:64:92:53:22:22:3F","sha256":"51:F6:E1:01:B8:AF:F5:58:B3:29:AF:74:9B:D9:2A:DC:1F:C9:F1:18:F9:26:CA:BB:3E:BE:90:95:75:74:EB:57"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: carib-airsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://carib-airsol.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nlast-modified: Sun, 08 Mar 2026 18:02:20 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4677\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 01:12:41 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":11816,"size_decoded":4927,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (358)","md5":"a8063bd37d3c8fb3176a6bf140558a4d","sha1":"e32cf4b407db3d3773ded13ff64b70fdbad7735f","sha256":"bccb23d41c2cc69cf0c7d22c4314ca8181a513c6999b73e45307792830f4e482","sha512":"82d749f6b17b21587fb345ca196a2aa83eca80ad66ed9c1ab88b36709bed14175d53afefe9acc0dafc4fad78ffb8df155193a6829bc857ad6d68b1c84af7b854","ssdeep":"192:bpvXn2H25Zx48DNYGu6C9tdDOxktft1zQOPtaUrzvHlPuPQXGuV27BHplXtAUU/s:FvX2H25v4CYn6etFTBvhtv4IcpRtlU/s","tlshash":"bd32940bab4c063b1312459a7458639a370fc87fe2661bb474bfc06867d16a649f23dc","first_seen":"2023-04-05T03:58:47Z","last_seen":"2026-08-12T14:43:49.844719Z","times_seen":16247,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"carib-airsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"carib-airsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"carib-airsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"carib-airsol.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"carib-airsol.com/pas1.php","fqdn":"carib-airsol.com","domain":"carib-airsol.com","tld":"com"},"ip":{"addr":"162.241.203.120","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-04T01:12:43.264Z","timestamp":1785805963264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.carib-airsol.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 16:41:45 GMT","end":"Fri, 23 Oct 2026 16:41:44 GMT"},"fingerprint":{"sha1":"46:BA:BA:4A:CD:E2:8C:2B:34:6F:5B:67:BC:BB:64:92:53:22:22:3F","sha256":"51:F6:E1:01:B8:AF:F5:58:B3:29:AF:74:9B:D9:2A:DC:1F:C9:F1:18:F9:26:CA:BB:3E:BE:90:95:75:74:EB:57"}}},"request":{"raw":"GET /pas1.php HTTP/1.1\r\nHost: carib-airsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://carib-airsol.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 958\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 04 Aug 2026 01:12:43 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2277,"size_decoded":1154,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"275a71ddd998b75b2a77746a5b7f7736","sha1":"946aa323b1b5ef64a7967ace5aee30f88264f20c","sha256":"7d74fead949fcbc2e531542d2b7db0e99648ea57a773384444179be888cc4df2","sha512":"648329c44348d3c8acda7f6907ec1cc62ad5c6d94dfdcb325cd9a7bdaf156523c764cb05a531d9dcd661da97e5b2196d329d00f412ae35b813d9a0c1ee03620d","ssdeep":"","tlshash":"7d41ea2020f4042703a2d28d7fd27b2a6ed39643da4b9d54719c0bde5fd2e47ca4319e","first_seen":"2026-08-04T01:04:59.065215Z","last_seen":"2026-08-04T03:56:44.134475Z","times_seen":5,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"carib-airsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"carib-airsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"carib-airsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"carib-airsol.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"carib-airsol.com/css/signup.css","fqdn":"carib-airsol.com","domain":"carib-airsol.com","tld":"com"},"ip":{"addr":"162.241.203.120","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://carib-airsol.com/pas1.php","date":"2026-08-04T01:12:43.660Z","timestamp":1785805963660,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.carib-airsol.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 16:41:45 GMT","end":"Fri, 23 Oct 2026 16:41:44 GMT"},"fingerprint":{"sha1":"46:BA:BA:4A:CD:E2:8C:2B:34:6F:5B:67:BC:BB:64:92:53:22:22:3F","sha256":"51:F6:E1:01:B8:AF:F5:58:B3:29:AF:74:9B:D9:2A:DC:1F:C9:F1:18:F9:26:CA:BB:3E:BE:90:95:75:74:EB:57"}}},"request":{"raw":"GET /css/signup.css HTTP/1.1\r\nHost: carib-airsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://carib-airsol.com/pas1.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 29 Jul 2026 22:36:11 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1277\r\ncontent-type: text/css\r\ndate: Tue, 04 Aug 2026 01:12:43 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4201,"size_decoded":1526,"mime_type":"text/css","magic":"ASCII text","md5":"a599ced6832d416fca697066583810a7","sha1":"43ccc4ba379bd4110657ec78ff1bc88d3fe75caf","sha256":"1681e392e5acdf394ea3d05a0ecfb58f812ade29d9278cc2dd3a719ff5b67571","sha512":"21fff27078bc5083c9be551f25af380cb8ffa3f1a2cd3545a82de2a11da912162ae35145ca7ce8489ba2a08bbb527de09c357fa8af6fef27b4a14b87f88666d8","ssdeep":"96:8HueRGB9CZJuN+l1wm9TkY3zNySl7LevftVW15/jRlVoGMjAB34uTI+2q:8HvGLC3uN+l1wm9TkozLeb85/jF28t4U","tlshash":"a581cf9b67632501751ba46c7faa8745733ca493804acdbc7b8c6248cf851e49aa2fcc","first_seen":"2026-08-04T01:04:59.068823Z","last_seen":"2026-08-04T03:56:44.135082Z","times_seen":5,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"carib-airsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"carib-airsol.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"carib-airsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"carib-airsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"carib-airsol.com/img/logo.svg","fqdn":"carib-airsol.com","domain":"carib-airsol.com","tld":"com"},"ip":{"addr":"162.241.203.120","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carib-airsol.com/pas1.php","date":"2026-08-04T01:12:43.663Z","timestamp":1785805963663,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.carib-airsol.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 16:41:45 GMT","end":"Fri, 23 Oct 2026 16:41:44 GMT"},"fingerprint":{"sha1":"46:BA:BA:4A:CD:E2:8C:2B:34:6F:5B:67:BC:BB:64:92:53:22:22:3F","sha256":"51:F6:E1:01:B8:AF:F5:58:B3:29:AF:74:9B:D9:2A:DC:1F:C9:F1:18:F9:26:CA:BB:3E:BE:90:95:75:74:EB:57"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: carib-airsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://carib-airsol.com/pas1.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 28 Jul 2026 19:08:31 GMT\r\naccept-ranges: bytes\r\ncontent-length: 824\r\ncontent-type: image/svg+xml\r\ndate: Tue, 04 Aug 2026 01:12:43 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":824,"size_decoded":1030,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"51fc5e68fd4a83c860582c5fc86881c6","sha1":"ca36669d6ef067068c50013c5c97d8cd84788125","sha256":"0e841a5119aa45c3749829a86fd7755cffb61c4dbbe0e1cb24e543d09cdd2ada","sha512":"9d4c431f1d70c039d5c327b0670d583324618f0b50e61b5928ad22c37a15d088f41cea4f4c1de452f97eb0621c6e93e91a8a27da4fbdf5f178e0b22c1fb63602","ssdeep":"","tlshash":"f601b646c78a1a789549c768d9e0f5f0311fd4f8a7bdc5afcaeaca3134076cd9540404","first_seen":"2026-07-03T22:17:31.820366Z","last_seen":"2026-08-06T15:26:03.528669Z","times_seen":40,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"carib-airsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"carib-airsol.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"carib-airsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"carib-airsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"assets.nflxext.com/us/ffe/siteui/common/icons/nficon2016.ico","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carib-airsol.com/pas1.php","date":"2026-08-04T01:12:44.031Z","timestamp":1785805964031,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /us/ffe/siteui/common/icons/nficon2016.ico HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://carib-airsol.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T15:40:42.100018Z","times_seen":17857324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}