{"report_id":"d7ea2597-8917-4748-93ee-5fa306770ce8","version":0,"status":"done","tags":[],"date":"2026-09-17T18:45:56Z","url":{"schema":"http","addr":"tvrepairannarbor.net/","fqdn":"tvrepairannarbor.net","domain":"tvrepairannarbor.net","tld":"net"},"ip":{"addr":"208.113.191.213","port":0,"asn":26347,"as":"New Dream Network, LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"tvrepairannarbor.net/","fqdn":"tvrepairannarbor.net","domain":"tvrepairannarbor.net","tld":"net"},"title":"TV REPAIR ANN ARBOR MI|In home TV repair only.","dom":{"size":9815,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (663)","md5":"06cc54a3990b33f5eb7bffec32077761","sha1":"63e4d9b0c13d86991891f362de1ce97492f150a4","sha256":"5053e2bf5690c29f97fa20051b76883731c02c0ff37dac7cf01eb170cd28bee2","sha512":"a6e05b97f3dd8bdc704520eb167d2af15d5ec4290845cf4c9c18555427d8ce4547d0841b653b114e640e4f8383eb3f1e109d6f59e59de215d0396f5b8ee9b5f6","ssdeep":"192:8X33b6BV6U3iYptMtkJrAV4Vcxc4xfmFRwYnYvCwXsm05l:03r6BVuYwDyh4JmDlYp2D","tlshash":"4d129703d3d1258bd182c2197fd86e9596d4446a43788a0cf84d96bf1f4b5cbf9a374c","dom_hash":"domhashe1fd95e8c705827fadae9b7fd88c0b1c","first_seen":"2026-09-17T18:38:12.213835Z","last_seen":"2026-09-17T19:12:25.666438Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tvrepairannarbor.net/","fqdn":"tvrepairannarbor.net","domain":"tvrepairannarbor.net","tld":"net"},"ip":{"addr":"208.113.191.213","port":0,"asn":26347,"as":"New Dream Network, LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-22T18:45:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"tvrepairannarbor.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"tvrepairannarbor.net","ip":{"addr":"208.113.191.213","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"domain_registered":"2017-04-06","domain_rank":0,"first_seen":"2025-07-03T06:51:20.97657Z","last_seen":"2026-09-17T18:38:12.706322Z","alert_count":36,"request_count":12,"received_data":104111,"sent_data":6217,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tvrepairannarbor.net/","fqdn":"tvrepairannarbor.net","domain":"tvrepairannarbor.net","tld":"net"},"ip":{"addr":"208.113.191.213","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"de0d6d9e5d08fe02747be1cfbbe5a423","sha1":"365128991400eb54e2dff7f8a3b2e711e28a09ee","sha256":"e4064e6de5709481342d3ceefe5b3dab226a3057d8d1bb20bdb8bff646cec0e8","sha512":"fca29928189bb6584bd94e8d2a4dbb096a4c993a92009fa84f4c1336b58da0dcfd8cf536ab3602ccd0fc3d2a4d68a56a222f26a57a5df1ecf28954d96a2fe207","ssdeep":"","tlshash":"89410110815b0c5f6b47e0ad19ddfae975e008333615ea27f40c76663f2ce7462ea684","size":2244,"data":"","first_seen":"2026-06-15T14:56:54.356202Z","last_seen":"2026-09-17T19:12:25.674829Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tvrepairannarbor.net/images/visa.gif","fqdn":"tvrepairannarbor.net","domain":"tvrepairannarbor.net","tld":"net"},"ip":{"addr":"208.113.191.213","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tvrepairannarbor.net/","date":"2026-09-17T18:45:28.019Z","timestamp":1789670728019,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tvrepairannarbor.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 20:15:38 GMT","end":"Wed, 02 Dec 2026 20:15:37 GMT"},"fingerprint":{"sha1":"0C:02:F6:D2:EB:B6:C6:57:18:67:64:16:36:D3:B9:31:61:F2:11:6D","sha256":"B4:03:FF:22:AF:6C:C0:6D:06:3A:AD:2E:3B:D1:73:47:68:AA:C3:06:75:52:78:F0:9A:70:F6:22:E9:CB:A2:B7"}}},"request":{"raw":"GET /images/visa.gif HTTP/1.1\r\nHost: tvrepairannarbor.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tvrepairannarbor.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 15 Jun 2017 20:37:13 GMT\r\netag: \"fd3-55205a239722e\"\r\naccept-ranges: bytes\r\ncontent-length: 4051\r\ncache-control: max-age=2592000\r\nexpires: Sat, 17 Oct 2026 18:45:28 GMT\r\nvary: User-Agent\r\ncontent-type: image/gif\r\ndate: Thu, 17 Sep 2026 18:45:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4051,"size_decoded":4371,"mime_type":"image/gif","magic":"GIF image data, version 89a, 90 x 51","md5":"3a673c6d79e16cf499ad14e36e150955","sha1":"ec9e79a7694c7fb18f5abd2b8830a9af8e479004","sha256":"2430e76c25aef518e25fda9ee5d6d79b807a53b5ca04a1f67a96ae20771e85de","sha512":"13dd8a5332dcec2ca5a5cbaf8cc6e49be5bf8fa4276ca9f1ed77126767844872415f884af5f711e57f8bdff390760e967e38eb17fe5c4b941c88e65bf5f10bfc","ssdeep":"","tlshash":"1d816cd720f848736b966570664c68aab3652bcd30ccacfc30a920d551f99f2c3b4678","first_seen":"2026-09-17T18:38:12.240465Z","last_seen":"2026-09-17T19:12:25.6716Z","times_seen":3,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"tvrepairannarbor.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tvrepairannarbor.net/images/home-up.gif","fqdn":"tvrepairannarbor.net","domain":"tvrepairannarbor.net","tld":"net"},"ip":{"addr":"208.113.191.213","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tvrepairannarbor.net/","date":"2026-09-17T18:45:28.022Z","timestamp":1789670728022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tvrepairannarbor.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 20:15:38 GMT","end":"Wed, 02 Dec 2026 20:15:37 GMT"},"fingerprint":{"sha1":"0C:02:F6:D2:EB:B6:C6:57:18:67:64:16:36:D3:B9:31:61:F2:11:6D","sha256":"B4:03:FF:22:AF:6C:C0:6D:06:3A:AD:2E:3B:D1:73:47:68:AA:C3:06:75:52:78:F0:9A:70:F6:22:E9:CB:A2:B7"}}},"request":{"raw":"GET /images/home-up.gif HTTP/1.1\r\nHost: tvrepairannarbor.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tvrepairannarbor.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 15 Jun 2017 20:37:11 GMT\r\netag: \"1d83-55205a21e492a\"\r\naccept-ranges: bytes\r\ncontent-length: 7555\r\ncache-control: max-age=2592000\r\nexpires: Sat, 17 Oct 2026 18:45:28 GMT\r\nvary: User-Agent\r\ncontent-type: image/gif\r\ndate: Thu, 17 Sep 2026 18:45:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7555,"size_decoded":7876,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 40","md5":"2ea9a23f9b24d182746bfd04c22024b0","sha1":"d771050fe5c17749421f050b5412f72dc4e223f4","sha256":"4db9c3d038aa869a150b622abd0f0a739c58b97ac5063cbe0afe47cec95abe12","sha512":"4eeef102ad86a7aebdd992b9e58de1bc298c227085f13637d60593672b2d7d3d9985f291d5dceca4ea1fefab59a878b7abdc13fbf78573ae6cdeee560e8e5f24","ssdeep":"192:UlkX4LRUrVUSZEFyE7fFrk34mu0AMFylwtVaVCzOsKxzuWxVyNK:UWX4LRvSZEFyE7tw4f0NAYVswxIXVyA","tlshash":"8ff1b01ea8405097bc33dce77fbbc19d583573eb3b2440966a171616554267cf4706d8","first_seen":"2026-09-17T18:38:12.216784Z","last_seen":"2026-09-17T19:12:25.672104Z","times_seen":3,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"tvrepairannarbor.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tvrepairannarbor.net/favicon.ico","fqdn":"tvrepairannarbor.net","domain":"tvrepairannarbor.net","tld":"net"},"ip":{"addr":"208.113.191.213","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tvrepairannarbor.net/","date":"2026-09-17T18:45:28.354Z","timestamp":1789670728354,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tvrepairannarbor.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 20:15:38 GMT","end":"Wed, 02 Dec 2026 20:15:37 GMT"},"fingerprint":{"sha1":"0C:02:F6:D2:EB:B6:C6:57:18:67:64:16:36:D3:B9:31:61:F2:11:6D","sha256":"B4:03:FF:22:AF:6C:C0:6D:06:3A:AD:2E:3B:D1:73:47:68:AA:C3:06:75:52:78:F0:9A:70:F6:22:E9:CB:A2:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tvrepairannarbor.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tvrepairannarbor.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 15 Jun 2017 20:37:07 GMT\r\netag: \"0-55205a1e20b89\"\r\naccept-ranges: bytes\r\ncontent-length: 0\r\ncache-control: max-age=172800\r\nexpires: Sat, 19 Sep 2026 18:45:28 GMT\r\nvary: User-Agent\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Thu, 17 Sep 2026 18:45:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":329,"mime_type":"image/vnd.microsoft.icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T01:48:29.23827Z","times_seen":18609712,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"tvrepairannarbor.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tvrepairannarbor.net/css/style.css","fqdn":"tvrepairannarbor.net","domain":"tvrepairannarbor.net","tld":"net"},"ip":{"addr":"208.113.191.213","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tvrepairannarbor.net/","date":"2026-09-17T18:45:28.000Z","timestamp":1789670728000,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tvrepairannarbor.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 20:15:38 GMT","end":"Wed, 02 Dec 2026 20:15:37 GMT"},"fingerprint":{"sha1":"0C:02:F6:D2:EB:B6:C6:57:18:67:64:16:36:D3:B9:31:61:F2:11:6D","sha256":"B4:03:FF:22:AF:6C:C0:6D:06:3A:AD:2E:3B:D1:73:47:68:AA:C3:06:75:52:78:F0:9A:70:F6:22:E9:CB:A2:B7"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: tvrepairannarbor.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tvrepairannarbor.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 20 Sep 2017 07:09:02 GMT\r\netag: \"b9e-55999a68f92f5-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sat, 17 Oct 2026 18:45:28 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1029\r\ncontent-type: text/css\r\ndate: Thu, 17 Sep 2026 18:45:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2974,"size_decoded":1393,"mime_type":"text/css","magic":"ASCII text","md5":"8a63e59f2daa49b463f6667de4e12fa3","sha1":"3bd3bcccaa80359d3485b5a96ad5b5f066741058","sha256":"58df1f711cd2f3fdcf139b13d4b1083cfbea772a1cd006d63a82f9f57f2618d0","sha512":"b9d009478df59253b9a1ec551dc40b6e94d09a5aa4ef75be19654f9787fbe873a9b6d5e6400627ab3b2fc2edd98b9c45bb6c63317f50f65a3d84d75aed6a1dde","ssdeep":"","tlshash":"665123239b412449f10b60eeff566b39bb0d1ca6a7af9db174a8601cce80c5412737cc","first_seen":"2026-09-17T18:38:12.221716Z","last_seen":"2026-09-17T19:12:25.669956Z","times_seen":3,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"tvrepairannarbor.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tvrepairannarbor.net/images/cash.gif","fqdn":"tvrepairannarbor.net","domain":"tvrepairannarbor.net","tld":"net"},"ip":{"addr":"208.113.191.213","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tvrepairannarbor.net/","date":"2026-09-17T18:45:28.006Z","timestamp":1789670728006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tvrepairannarbor.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 20:15:38 GMT","end":"Wed, 02 Dec 2026 20:15:37 GMT"},"fingerprint":{"sha1":"0C:02:F6:D2:EB:B6:C6:57:18:67:64:16:36:D3:B9:31:61:F2:11:6D","sha256":"B4:03:FF:22:AF:6C:C0:6D:06:3A:AD:2E:3B:D1:73:47:68:AA:C3:06:75:52:78:F0:9A:70:F6:22:E9:CB:A2:B7"}}},"request":{"raw":"GET /images/cash.gif HTTP/1.1\r\nHost: tvrepairannarbor.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tvrepairannarbor.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 15 Jun 2017 20:37:10 GMT\r\netag: \"1319-55205a2046845\"\r\naccept-ranges: bytes\r\ncontent-length: 4889\r\ncache-control: max-age=2592000\r\nexpires: Sat, 17 Oct 2026 18:45:28 GMT\r\nvary: User-Agent\r\ncontent-type: image/gif\r\ndate: Thu, 17 Sep 2026 18:45:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4889,"size_decoded":5210,"mime_type":"image/gif","magic":"GIF image data, version 89a, 90 x 51","md5":"2964cb8b0ba3baf8b87cde51caa1f73c","sha1":"bb5a133abe7e174ba67d266edfc9b74e22f5c15f","sha256":"b36596df9228f9e30237341ce52502c842aec30a48e4ec4b60b6f3ef96c90d3b","sha512":"877d3bf8adda3783b735febe682f8e47c901fcf7a8ba201ba941338db8ac8e23ad49dda2a9f39c8a4afc35e20189523dfae0a6c41b2ea56f740611ed858bb075","ssdeep":"96:3Tefpsjox1jLKug36H2XSdMCy1ltVZTFOY8dv0Qn:D4sAtWXCMCy1zVZBxGsY","tlshash":"7aa17e9c5bd24ecfd943f3d98996c45b62e30444c249cae59e26c358a09b4e2b2b08b8","first_seen":"2026-09-17T18:38:12.238883Z","last_seen":"2026-09-17T19:12:25.670545Z","times_seen":3,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"tvrepairannarbor.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tvrepairannarbor.net/images/mastercard.gif","fqdn":"tvrepairannarbor.net","domain":"tvrepairannarbor.net","tld":"net"},"ip":{"addr":"208.113.191.213","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tvrepairannarbor.net/","date":"2026-09-17T18:45:28.014Z","timestamp":1789670728014,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tvrepairannarbor.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 20:15:38 GMT","end":"Wed, 02 Dec 2026 20:15:37 GMT"},"fingerprint":{"sha1":"0C:02:F6:D2:EB:B6:C6:57:18:67:64:16:36:D3:B9:31:61:F2:11:6D","sha256":"B4:03:FF:22:AF:6C:C0:6D:06:3A:AD:2E:3B:D1:73:47:68:AA:C3:06:75:52:78:F0:9A:70:F6:22:E9:CB:A2:B7"}}},"request":{"raw":"GET /images/mastercard.gif HTTP/1.1\r\nHost: tvrepairannarbor.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tvrepairannarbor.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 15 Jun 2017 20:37:12 GMT\r\netag: \"ce9-55205a22463a4\"\r\naccept-ranges: bytes\r\ncontent-length: 3305\r\ncache-control: max-age=2592000\r\nexpires: Sat, 17 Oct 2026 18:45:28 GMT\r\nvary: User-Agent\r\ncontent-type: image/gif\r\ndate: Thu, 17 Sep 2026 18:45:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3305,"size_decoded":3625,"mime_type":"image/gif","magic":"GIF image data, version 89a, 90 x 51","md5":"d562ef05e57e6c2b1c19b8c450ef5817","sha1":"9c063a8bdbfe43ff8c31082114a0ac2bbf0d46a6","sha256":"7e383666c0eaaff8242b3213bd06164186bcfb825b20379459933aca4485dde8","sha512":"7cb1c4596a1da2499c6cb12da2a1a8445757e7d3d29e564b8b6b3479f553604663f0468979cac145765e67b36e4217829050ea5b9398a9276519f0dc71a0f0b3","ssdeep":"","tlshash":"7c614bf706a80b447056f1a44c0022568d17820ecaceda8f8daa9558b8b6b668d274db","first_seen":"2026-09-17T18:38:12.223259Z","last_seen":"2026-09-17T19:12:25.671092Z","times_seen":3,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"tvrepairannarbor.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tvrepairannarbor.net/images/discover.gif","fqdn":"tvrepairannarbor.net","domain":"tvrepairannarbor.net","tld":"net"},"ip":{"addr":"208.113.191.213","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tvrepairannarbor.net/","date":"2026-09-17T18:45:28.020Z","timestamp":1789670728020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tvrepairannarbor.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 20:15:38 GMT","end":"Wed, 02 Dec 2026 20:15:37 GMT"},"fingerprint":{"sha1":"0C:02:F6:D2:EB:B6:C6:57:18:67:64:16:36:D3:B9:31:61:F2:11:6D","sha256":"B4:03:FF:22:AF:6C:C0:6D:06:3A:AD:2E:3B:D1:73:47:68:AA:C3:06:75:52:78:F0:9A:70:F6:22:E9:CB:A2:B7"}}},"request":{"raw":"GET /images/discover.gif HTTP/1.1\r\nHost: tvrepairannarbor.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tvrepairannarbor.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 15 Jun 2017 20:37:10 GMT\r\netag: \"147f-55205a20bf9bd\"\r\naccept-ranges: bytes\r\ncontent-length: 5247\r\ncache-control: max-age=2592000\r\nexpires: Sat, 17 Oct 2026 18:45:28 GMT\r\nvary: User-Agent\r\ncontent-type: image/gif\r\ndate: Thu, 17 Sep 2026 18:45:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5247,"size_decoded":5568,"mime_type":"image/gif","magic":"GIF image data, version 89a, 90 x 51","md5":"4edd916f2e72b43bc68045ca4652c074","sha1":"dcde5bb821565d2fdfdec8d3d57dfdbfbd88d4b2","sha256":"bbbdadbe1c4530a0e0279305017b7220fd1b468888e91ad967a335da84729222","sha512":"bd1ba407f8a1494705b010ddcf28d8fea6630d9a2e86727a639e241a361ba80338b107cb75ab324fc1b84e11ef6b1638f67d106d1ea9ea6b48fcacd069c5419e","ssdeep":"96:Qe55KcTe1GLYWqEVe7o6paWJkT9cGjDyq8p8t4rRDBjdO7n8mvbPRFsIY:Qe5teu8c1OkJTj+hpV9V48mvbJFsd","tlshash":"2eb12a258c522291c24fafa2dedc5c0ac97647829cc4e542f5d24d735e089b3959f78f","first_seen":"2026-09-17T18:38:12.215524Z","last_seen":"2026-09-17T19:12:25.674098Z","times_seen":3,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"tvrepairannarbor.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tvrepairannarbor.net/images/readreviews-up.gif","fqdn":"tvrepairannarbor.net","domain":"tvrepairannarbor.net","tld":"net"},"ip":{"addr":"208.113.191.213","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tvrepairannarbor.net/","date":"2026-09-17T18:45:28.023Z","timestamp":1789670728023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tvrepairannarbor.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 20:15:38 GMT","end":"Wed, 02 Dec 2026 20:15:37 GMT"},"fingerprint":{"sha1":"0C:02:F6:D2:EB:B6:C6:57:18:67:64:16:36:D3:B9:31:61:F2:11:6D","sha256":"B4:03:FF:22:AF:6C:C0:6D:06:3A:AD:2E:3B:D1:73:47:68:AA:C3:06:75:52:78:F0:9A:70:F6:22:E9:CB:A2:B7"}}},"request":{"raw":"GET /images/readreviews-up.gif HTTP/1.1\r\nHost: tvrepairannarbor.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tvrepairannarbor.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 15 Jun 2017 20:37:13 GMT\r\netag: \"1da9-55205a2377e30\"\r\naccept-ranges: bytes\r\ncontent-length: 7593\r\ncache-control: max-age=2592000\r\nexpires: Sat, 17 Oct 2026 18:45:28 GMT\r\nvary: User-Agent\r\ncontent-type: image/gif\r\ndate: Thu, 17 Sep 2026 18:45:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7593,"size_decoded":7914,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 40","md5":"bbe2e3257a96c3acf320a5e3c47976c8","sha1":"e9813ca212356dd4e67e42c2741a1205fc619b56","sha256":"03046bfa468cd58ff825e7692dbd1a4c8bdbe0135934adecd3e6a55d6af3bfa3","sha512":"fe94d33fee3d5d416eccfb9ffd26873b83ee9a600626683e87b712d78e46e633404629ed79bb0c0f3c66ae3f556b20b04b0c823ea2e73ff9ab059fcd8fd5d39a","ssdeep":"192:W8zetvfC1VvfS7S2ZyeBaO6nv6ErTy4S6RzVeX:W8zeg1Vvqt8vhu4NRzVA","tlshash":"15f19e5dc4708f2be8af7af39c2c0842ea8fe045276511ea9d16950078e2773f4550ba","first_seen":"2026-09-17T18:38:12.224496Z","last_seen":"2026-09-17T19:12:25.667389Z","times_seen":3,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"tvrepairannarbor.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tvrepairannarbor.net/images/writeareview-up.gif","fqdn":"tvrepairannarbor.net","domain":"tvrepairannarbor.net","tld":"net"},"ip":{"addr":"208.113.191.213","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tvrepairannarbor.net/","date":"2026-09-17T18:45:28.024Z","timestamp":1789670728024,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tvrepairannarbor.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 20:15:38 GMT","end":"Wed, 02 Dec 2026 20:15:37 GMT"},"fingerprint":{"sha1":"0C:02:F6:D2:EB:B6:C6:57:18:67:64:16:36:D3:B9:31:61:F2:11:6D","sha256":"B4:03:FF:22:AF:6C:C0:6D:06:3A:AD:2E:3B:D1:73:47:68:AA:C3:06:75:52:78:F0:9A:70:F6:22:E9:CB:A2:B7"}}},"request":{"raw":"GET /images/writeareview-up.gif HTTP/1.1\r\nHost: tvrepairannarbor.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tvrepairannarbor.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 15 Jun 2017 20:37:14 GMT\r\netag: \"1db4-55205a2477bdf\"\r\naccept-ranges: bytes\r\ncontent-length: 7604\r\ncache-control: max-age=2592000\r\nexpires: Sat, 17 Oct 2026 18:45:28 GMT\r\nvary: User-Agent\r\ncontent-type: image/gif\r\ndate: Thu, 17 Sep 2026 18:45:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7604,"size_decoded":7925,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 40","md5":"ee9114e24f25070bbeb73458163115f5","sha1":"1a8108c9c07a0a4e3afce972e40551336574ebda","sha256":"f3bd8013bfe9f5fb78a9d3c1c95f697eb204f6a0424355f34050b61777b5eda4","sha512":"caa5ec340a8c7ae1f372525767c48a91588e5841704fffb8b6aff5e095e4dd5affcab6260d28c38a5bc39168abcfe2779f946e9258218b9d3e675ccbbbfb7f03","ssdeep":"192:tmku4EVVvnf4Cdqfe7haeRCKDH5pGXJHZL5tgbJgdO:tmpff4je4eRhDZpGXJp5PdO","tlshash":"2ef1b00d7da605a9b7a9c3923e5ac4d11fba440d47b1b342d814f72201fb5fd67c29ac","first_seen":"2026-09-17T18:38:12.218564Z","last_seen":"2026-09-17T19:12:25.668144Z","times_seen":3,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"tvrepairannarbor.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tvrepairannarbor.net/images/emailme-up.gif","fqdn":"tvrepairannarbor.net","domain":"tvrepairannarbor.net","tld":"net"},"ip":{"addr":"208.113.191.213","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tvrepairannarbor.net/","date":"2026-09-17T18:45:28.025Z","timestamp":1789670728025,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tvrepairannarbor.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 20:15:38 GMT","end":"Wed, 02 Dec 2026 20:15:37 GMT"},"fingerprint":{"sha1":"0C:02:F6:D2:EB:B6:C6:57:18:67:64:16:36:D3:B9:31:61:F2:11:6D","sha256":"B4:03:FF:22:AF:6C:C0:6D:06:3A:AD:2E:3B:D1:73:47:68:AA:C3:06:75:52:78:F0:9A:70:F6:22:E9:CB:A2:B7"}}},"request":{"raw":"GET /images/emailme-up.gif HTTP/1.1\r\nHost: tvrepairannarbor.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tvrepairannarbor.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 15 Jun 2017 20:37:11 GMT\r\netag: \"1dac-55205a2142775\"\r\naccept-ranges: bytes\r\ncontent-length: 7596\r\ncache-control: max-age=2592000\r\nexpires: Sat, 17 Oct 2026 18:45:28 GMT\r\nvary: User-Agent\r\ncontent-type: image/gif\r\ndate: Thu, 17 Sep 2026 18:45:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7596,"size_decoded":7917,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 40","md5":"6168d3784c7fd52096175c06bf38bbd0","sha1":"2371ca6a4d45564c8e62dd12adec050c0d0f1c20","sha256":"4b13d86b943c9d10e2dece77a6985d0b969438f5dde007961218257748af2938","sha512":"32356c07ef6b36a76e9c01f50ad213958158004e57d79372f310b96f78a45aa2f857f0164f44d2ddf3bcb96a8a157f704dc122db9a34d0494a47ce1cef24b32e","ssdeep":"192:mtoK8blY+dWfmEC7HUn54E4b4zxY5wat8CASnnHE:mtorbldUmDoGtFJnnHE","tlshash":"4ef1afc6b9a6f4fcd29288a544c6d88cea4cd0bc4cdf1672a30bb138a55464db6c2a59","first_seen":"2026-09-17T18:38:12.225749Z","last_seen":"2026-09-17T19:12:25.668764Z","times_seen":3,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"tvrepairannarbor.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tvrepairannarbor.net/images/TV.gif","fqdn":"tvrepairannarbor.net","domain":"tvrepairannarbor.net","tld":"net"},"ip":{"addr":"208.113.191.213","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tvrepairannarbor.net/","date":"2026-09-17T18:45:28.027Z","timestamp":1789670728027,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tvrepairannarbor.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 20:15:38 GMT","end":"Wed, 02 Dec 2026 20:15:37 GMT"},"fingerprint":{"sha1":"0C:02:F6:D2:EB:B6:C6:57:18:67:64:16:36:D3:B9:31:61:F2:11:6D","sha256":"B4:03:FF:22:AF:6C:C0:6D:06:3A:AD:2E:3B:D1:73:47:68:AA:C3:06:75:52:78:F0:9A:70:F6:22:E9:CB:A2:B7"}}},"request":{"raw":"GET /images/TV.gif HTTP/1.1\r\nHost: tvrepairannarbor.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tvrepairannarbor.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 15 Jun 2017 20:37:13 GMT\r\netag: \"9a33-55205a23d0c0a\"\r\naccept-ranges: bytes\r\ncontent-length: 39475\r\ncache-control: max-age=2592000\r\nexpires: Sat, 17 Oct 2026 18:45:28 GMT\r\nvary: User-Agent\r\ncontent-type: image/gif\r\ndate: Thu, 17 Sep 2026 18:45:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":39475,"size_decoded":39797,"mime_type":"image/gif","magic":"GIF image data, version 89a, 450 x 325","md5":"220a786c1d9ca58f5f8cd88500b175dc","sha1":"f677574a8133c400e17a67210d0a818b0398a994","sha256":"a6f5f6a511886067a189e88517f55bcb2e813f914c087288fc86bf8784952b0f","sha512":"243b8d5a1e490ec515ac1320dd4b8c4f086ea02b1b2b43792853c411ab0b35fcb0f7e0f49991de5387046ca0f8e608a90fe37592a80859bd4187bb3070deb3b5","ssdeep":"768:ajcAvn+i6iw2rr8ctrFlp0GUNvNbfAr/2ctAc8xi17LKJ0u:zpniwsrbZjpZ6v2r/2ctAg7LKJd","tlshash":"f703f1bb2d5e8403e5a53dd6b9ab8b51f9ab814151973a3c304fd15f802f8843d87eac","first_seen":"2026-09-17T18:38:12.23739Z","last_seen":"2026-09-17T19:12:25.67263Z","times_seen":3,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"tvrepairannarbor.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tvrepairannarbor.net/","fqdn":"tvrepairannarbor.net","domain":"tvrepairannarbor.net","tld":"net"},"ip":{"addr":"208.113.191.213","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T18:45:27.273Z","timestamp":1789670727273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tvrepairannarbor.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 20:15:38 GMT","end":"Wed, 02 Dec 2026 20:15:37 GMT"},"fingerprint":{"sha1":"0C:02:F6:D2:EB:B6:C6:57:18:67:64:16:36:D3:B9:31:61:F2:11:6D","sha256":"B4:03:FF:22:AF:6C:C0:6D:06:3A:AD:2E:3B:D1:73:47:68:AA:C3:06:75:52:78:F0:9A:70:F6:22:E9:CB:A2:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tvrepairannarbor.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 15 Mar 2026 22:21:29 GMT\r\netag: \"2697-64d17860fe88a-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=600\r\nexpires: Thu, 17 Sep 2026 18:55:27 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 3088\r\ncontent-type: text/html\r\ndate: Thu, 17 Sep 2026 18:45:27 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9879,"size_decoded":3450,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (663)","md5":"dbbe65984abe5b07ca4095a0f88fc821","sha1":"08017470fa4fc2c0a21e5b2f4883651e6ca15c44","sha256":"6e366fbfc16c0079ab1d3d529c555aee75b67cd6a986b09c6cf29aa31f614bf3","sha512":"3e8617e7e792cf71aa4541f91f1a24c06eb7ad6585d338c2c8f9ebe5ec47a786fd18af08e9f0c36315641623d7d2dc1d716465a2e5e05d750e5d1e23b919d6e1","ssdeep":"192:JMw3b6BV6U3iYpxW8WaOAV4Vcxc4/imFcwYnYvJ0Xsm05b:awr6BVuYuiyh4KmalYa2x","tlshash":"6f129603d3d1258bd282c2197fd86e9596d444aa43688a0cf44d96bf1f4b9cff9a374c","first_seen":"2026-09-17T18:38:12.220573Z","last_seen":"2026-09-17T19:12:25.669333Z","times_seen":3,"resource_available":true,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":223,"connect":106,"send":0,"wait":121,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"tvrepairannarbor.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"tvrepairannarbor.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}