{"report_id":"d98fdb26-bebd-47fe-9c4c-d0c918a12779","version":6,"status":"done","tags":[],"date":"2026-04-21T09:31:16Z","url":{"schema":"https","addr":"s3.hmstorage.net/de5545b8-401f-486c-a1d2-36f48c369785/session/ecount/updateddddddd_ecount.html","fqdn":"s3.hmstorage.net","domain":"hmstorage.net","tld":"net"},"ip":{"addr":"166.1.227.81","port":0,"asn":55286,"as":"SERVER-MANIA","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"s3.hmstorage.net/de5545b8-401f-486c-a1d2-36f48c369785/session/ecount/updateddddddd_ecount.html","fqdn":"s3.hmstorage.net","domain":"hmstorage.net","tld":"net"},"title":"Ecount WebMail - Login","dom":{"size":21527,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1014)","md5":"7aabb6f990e995b80b7e88ce93dbd042","sha1":"1c238d3f1d31e48f58f63326fcb675bf6873759b","sha256":"bec0555c6fdc4a746cb354cf8b4a7d186da501b384aebf40d2ea71eb46fae234","sha512":"9be299091fbff874f4f75640faf64feeb3ce1fe1a1c23f0424f980dbc020354a2d8547370776f800357e39143508556c44f0b2e1a9809cf39d53e9b586a8a0f6","ssdeep":"192:NYD+7Nca26dSpzZIg5eZ9BV9Qq3y3bS3gOv+8qr1hW6mcIZ/9q:NI1a26dS5ZIg52VR3Hyr9f","tlshash":"12a2b650a4f91573055381e939a2f6193da2d117cb0ade04baec4bea6fc3f828d0779d","dom_hash":"domhashd91c8d5b13a7fa32efa0619e5f40e989","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"s3.hmstorage.net/de5545b8-401f-486c-a1d2-36f48c369785/session/ecount/updateddddddd_ecount.html","fqdn":"s3.hmstorage.net","domain":"hmstorage.net","tld":"net"},"ip":{"addr":"166.1.227.81","port":0,"asn":55286,"as":"SERVER-MANIA","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T09:31:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"s3.hmstorage.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"s3.hmstorage.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"s3.hmstorage.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"resourcev3.ecount.com","ip":{"addr":"52.84.50.52","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1998-04-29","domain_rank":0,"first_seen":"2025-05-15T06:50:42.72999Z","last_seen":"2026-04-21T09:16:08.201048Z","alert_count":0,"request_count":6,"received_data":1235309,"sent_data":3131,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"wmail.ecount.com","ip":{"addr":"43.200.46.3","port":443,"asn":16509,"as":"AMAZON-02","country":"South Korea","country_code":"KR"},"domain_registered":"1998-04-29","domain_rank":946475,"first_seen":"2021-07-24T22:10:18Z","last_seen":"2026-04-16T06:01:59.036872Z","alert_count":0,"request_count":1,"received_data":5959,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"s3.hmstorage.net","ip":{"addr":"166.1.227.81","port":443,"asn":55286,"as":"SERVER-MANIA","country":"United States","country_code":"US"},"domain_registered":"2025-11-11","domain_rank":0,"first_seen":"2025-12-11T17:25:43.031286Z","last_seen":"2026-04-04T13:39:18.397281Z","alert_count":3,"request_count":1,"received_data":21865,"sent_data":562,"comment":"","tags":null,"fingerprints":[{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-04-19T23:11:39.14593Z","alert_count":0,"request_count":1,"received_data":268970,"sent_data":420,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"s3.hmstorage.net/de5545b8-401f-486c-a1d2-36f48c369785/session/ecount/updateddddddd_ecount.html","fqdn":"s3.hmstorage.net","domain":"hmstorage.net","tld":"net"},"ip":{"addr":"166.1.227.81","port":443,"asn":55286,"as":"SERVER-MANIA","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"71531f010a975231d230a15cbb05f382","sha1":"d78d2b5f3b558526307e406dcbf069fcbbdeca1d","sha256":"691e01def0b3409a294c83e9843f9dbadfe5eb6e51992fd80a2d3d5dc4851046","sha512":"60e456a6e9e4c6fa2781772810bdcec6aae5cf8729831ce683cdafe1d1f945d0b40f6c6a442869948fb27ac607666724abd6ad19237c105badd557284df6392a","ssdeep":"","tlshash":"95a011032080a0020ab820802b8ea08aa202020ece20a280ba838b0a2b00883282228b","size":76,"data":"","first_seen":"2025-10-16T06:30:22.836863Z","last_seen":"2026-04-21T09:31:18.556651Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.hmstorage.net/de5545b8-401f-486c-a1d2-36f48c369785/session/ecount/updateddddddd_ecount.html","fqdn":"s3.hmstorage.net","domain":"hmstorage.net","tld":"net"},"ip":{"addr":"166.1.227.81","port":443,"asn":55286,"as":"SERVER-MANIA","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d441961ec310e48d630256819244a758","sha1":"0d02cde2e2e6b2ed5bf02654dfa2c8fc631651ad","sha256":"3f4c06d2bb5deb3c1800b6e51371727ed383d6384b18547460466cab78fa11db","sha512":"885ebc41f0698745dbfd523715245a6fd63c2e211be0107608e31cdb89f806f90b82aa5695d8f75a1d36d92e1a0b78b2281eabaaacfdaef77b6c23eb64f427bc","ssdeep":"","tlshash":"97f0a0ca3949a1b84b5725ba716b42c9282892430c05ec74be1c39a41f20f82c9ae6f2","size":476,"data":"","first_seen":"2026-03-10T22:59:16.061135Z","last_seen":"2026-04-21T09:31:18.557678Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.9.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"08c235d357750c657ac1db7d1cf656a9","sha1":"9257afd2d46c3a189ec0d40a45722701d47e9ca5","sha256":"7bd80d06c01c0340c1b9159b9b4a197db882ca18cbac8e9b9aa025e68f998d40","sha512":"d62700e7a1ff41f9d6326ca024ba2be1d391bc8fbb2aeae0f427d74837899b230940bf7c2df3d193f5300a68bb3686706d4c31328234b5cda026a1bf52ef9e70","ssdeep":"6144:UvD8eq9mPKl4OfKcknEHZciGhjZPdDwjdwTJFPk78vmAnhZSxwI14i:UE4OfcaZhfOeATG14i","tlshash":"fa44b6d8f78c112e8232316aad2f51cdb67cd172561058afbd8d597c24a083d42faf7a","size":268381,"data":"","first_seen":"2023-03-07T01:03:57Z","last_seen":"2026-04-21T09:31:18.555719Z","times_seen":38604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.hmstorage.net/de5545b8-401f-486c-a1d2-36f48c369785/session/ecount/updateddddddd_ecount.html","fqdn":"s3.hmstorage.net","domain":"hmstorage.net","tld":"net"},"ip":{"addr":"166.1.227.81","port":443,"asn":55286,"as":"SERVER-MANIA","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8cc9db30d2c55e0bc4cbabcb792f36f9","sha1":"3e90f803f61dfd40a6b894a2235adef887713309","sha256":"b0751552918380a3495b80c13ed5429362fff45acb0725bc801e4d79dc8e1f60","sha512":"66d58132f98b4229311df29b7a6b371de086cac5b84fb747d171b7bb7a5493cf5d15e88fdc0b22907d63a0647d046ea3986473bf14b36a20fa8349d98aba7ab9","ssdeep":"","tlshash":"e441ac0a747b35801eb3b13a37bb61097e51a14b1c01ee05b65d6a904f14f1aad777ca","size":2000,"data":"","first_seen":"2026-03-10T22:59:16.062083Z","last_seen":"2026-04-21T09:31:18.56031Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"resourcev3.ecount.com/ec3/freq/wmail/contents/css/common-responsive.-727052913155639716.19.css","fqdn":"resourcev3.ecount.com","domain":"ecount.com","tld":"com"},"ip":{"addr":"52.84.50.52","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s3.hmstorage.net/de5545b8-401f-486c-a1d2-36f48c369785/session/ecount/updateddddddd_ecount.html","date":"2026-04-21T09:30:54.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ecount.com","organization":"ECOUNT INC."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 18 Jul 2025 00:56:16 GMT","end":"Wed, 19 Aug 2026 00:56:15 GMT"},"fingerprint":{"sha1":"9E:A7:2A:AA:DF:3B:10:8C:D7:E0:87:A3:6D:71:DD:A6:43:45:2A:FD","sha256":"65:88:81:47:0F:31:03:8A:AF:EE:C4:62:BA:D5:22:DD:38:DA:D7:17:CA:E1:1F:59:C1:A5:DB:A7:6F:A0:EC:C2"}}},"request":{"raw":"GET /ec3/freq/wmail/contents/css/common-responsive.-727052913155639716.19.css HTTP/1.1\r\nHost: resourcev3.ecount.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s3.hmstorage.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 3872\r\ndate: Tue, 13 Jan 2026 00:37:46 GMT\r\nlast-modified: Thu, 18 Jul 2024 02:22:46 GMT\r\netag: \"d21ccc5b4fc0ed15383bde0ff4a8229c\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nx-amz-version-id: qabjbdD6hE3tHrAnugQysKOOah3Ilzir\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 38bf1dd1623b4168f1f298799f6898c4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: XJo_9zIJw9svqm-VpKaiJEsgBYm1VG9vu67sf076wEZKxNjgmkmj8A==\r\nage: 8499190\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":17202,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (17196), with no line terminators","md5":"b02341b2cd78e3ab9ba018c6ef83e298","sha1":"e8ec29f53db88db6d040432f5cb9afc51b518f3b","sha256":"9e13130b4fab94c28436659e1bf47d44a850776832cfc1e9c23232b0fdf2ef34","sha512":"e63c581e631ad9f111167e3c60184231595448b831acad049a0100f90c46f6ff5b90ebd2995feb712f7bfce9c68025fea99f1e3ec420bfd1ed93b129c020045d","ssdeep":"192:64LyoL4ACVPiBNAJRnZ32BNAJRn1btLjAEzbG8ZHFsVfeT1vtOdfh:6Hm4AC1ZJRZNJRx1fv5Z1vtOdfh","tlshash":"d2721052aff0317f6d35907edf5a37681738113aea5205aef0c5b71e53852aa1342e38","first_seen":"2025-10-16T06:30:22.82173Z","last_seen":"2026-04-21T09:31:18.543554Z","times_seen":76,"resource_available":false,"data":null}},"time_used":1446,"timings":{"blocked":719,"dns":695,"connect":1,"send":0,"wait":3,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resourcev3.ecount.com/static/contents/images/login/logo.png?2","fqdn":"resourcev3.ecount.com","domain":"ecount.com","tld":"com"},"ip":{"addr":"52.84.50.52","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s3.hmstorage.net/de5545b8-401f-486c-a1d2-36f48c369785/session/ecount/updateddddddd_ecount.html","date":"2026-04-21T09:30:55.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ecount.com","organization":"ECOUNT INC."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 18 Jul 2025 00:56:16 GMT","end":"Wed, 19 Aug 2026 00:56:15 GMT"},"fingerprint":{"sha1":"9E:A7:2A:AA:DF:3B:10:8C:D7:E0:87:A3:6D:71:DD:A6:43:45:2A:FD","sha256":"65:88:81:47:0F:31:03:8A:AF:EE:C4:62:BA:D5:22:DD:38:DA:D7:17:CA:E1:1F:59:C1:A5:DB:A7:6F:A0:EC:C2"}}},"request":{"raw":"GET /static/contents/images/login/logo.png?2 HTTP/1.1\r\nHost: resourcev3.ecount.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://resourcev3.ecount.com/ec3/freq/wmail/contents/css/login.-3673191320641001309.19.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 78902\r\ndate: Thu, 22 Jan 2026 10:17:42 GMT\r\nlast-modified: Thu, 25 Sep 2025 21:14:33 GMT\r\netag: \"9f037b958ab4f936c18774ecb1234ff9\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\nx-amz-version-id: oMUc23_HnxV6jdrhVtgBV8Ug0R.Sg_xE\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 38bf1dd1623b4168f1f298799f6898c4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 6c_SSLksFvtoKJD1HIibgO4mvIGXK5fxfMQBaia7ooHWYtMrhAZApw==\r\nage: 7686794\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":78902,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 720 x 600, 8-bit/color RGBA, non-interlaced","md5":"9f037b958ab4f936c18774ecb1234ff9","sha1":"98ce7726f8b26ebe73fc69bf2270b9738d51c6b3","sha256":"c97687d6551f4bf74f75a9002c8beed13fc7d09eded0b46a3f3f712191ca9454","sha512":"8c51de86cb2c5811d694b0c733641e123202acf4edb4b57a30ba5663d6e1b394beab245f2defe6d2ec374fb784099d8a4931b5249fae7dbfd80286dc8c8b4378","ssdeep":"1536:s4ENE/M2+v8kxuZPTw/bHYP9qTaANlcuxy7sLkEPnPsMT:8NE/M2+vHxutlqTHhMcnkMT","tlshash":"2373020200764875ea4a10b60f7512433f761543a400fb332e6d79d696e8a7def9eb5f","first_seen":"2025-03-15T02:23:45.467202Z","last_seen":"2026-04-21T09:31:18.545191Z","times_seen":87,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wmail.ecount.com/static/contents/images/ci/favicon.ico","fqdn":"wmail.ecount.com","domain":"ecount.com","tld":"com"},"ip":{"addr":"43.200.46.3","port":443,"asn":16509,"as":"AMAZON-02","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s3.hmstorage.net/de5545b8-401f-486c-a1d2-36f48c369785/session/ecount/updateddddddd_ecount.html","date":"2026-04-21T09:30:55.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ecount.com","organization":"ECOUNT INC."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 18 Jul 2025 00:56:16 GMT","end":"Wed, 19 Aug 2026 00:56:15 GMT"},"fingerprint":{"sha1":"9E:A7:2A:AA:DF:3B:10:8C:D7:E0:87:A3:6D:71:DD:A6:43:45:2A:FD","sha256":"65:88:81:47:0F:31:03:8A:AF:EE:C4:62:BA:D5:22:DD:38:DA:D7:17:CA:E1:1F:59:C1:A5:DB:A7:6F:A0:EC:C2"}}},"request":{"raw":"GET /static/contents/images/ci/favicon.ico HTTP/1.1\r\nHost: wmail.ecount.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s3.hmstorage.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: inBjjKuzKBHiCHqTb7YJknuvXXsQEWQg1NiuRVhnoajOC/3jT86pzk5RylBWV8B45CpGnQR4b4tP/o9vgowm7umHiz290o8T\r\nx-amz-request-id: NVP3C82JC8Y5R1RR\r\ndate: Tue, 21 Apr 2026 09:30:57 GMT\r\nlast-modified: Thu, 20 Nov 2025 06:37:30 GMT\r\netag: \"e3279a746dee822d494b1f832ac5e698\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: K0_GZxnJU1h5tvno9b8YIL7mqwZIUCRU\r\naccept-ranges: bytes\r\ncontent-type: image/x-icon\r\ncontent-length: 5430\r\nserver: AmazonS3\r\nset-cookie: SVID=S3|aedD0; path=/\r\ncache-control: private\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"e3279a746dee822d494b1f832ac5e698","sha1":"7710bce7942674a0de4c9922cb10b1418a79f31b","sha256":"6ef6670479aa92a09a256f3459bbf504f26b851e22ff16258dab7a1d650d4f16","sha512":"af8714710cd53a41985d17ea6a010a76089fe839d0dd425075a2a7df676c3e0c3b470ad218b635312ade55289bd9e7eb751db2a234f767ecadfc3352c458095d","ssdeep":"12:E2AKKKKKKKKKKvvmKKKKKKKSmHmKKKKKKKL2KKKKKKKKGKKKKKKKKHHmKKKKKKKe:E2OP4nQq","tlshash":"bfb102bb63c2c6998854c22cc913afe9c9de5c87f71d381fb95d7e4ab53300004ab562","first_seen":"2024-12-23T09:49:29.524593Z","last_seen":"2026-04-21T09:31:18.54696Z","times_seen":81,"resource_available":false,"data":null}},"time_used":1575,"timings":{"blocked":-1,"dns":633,"connect":300,"send":0,"wait":336,"receive":0,"ssl":306},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resourcev3.ecount.com/static/contents/fonts/fonticon-webfont.woff?v=4.0.1","fqdn":"resourcev3.ecount.com","domain":"ecount.com","tld":"com"},"ip":{"addr":"52.84.50.52","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://s3.hmstorage.net/de5545b8-401f-486c-a1d2-36f48c369785/session/ecount/updateddddddd_ecount.html","date":"2026-04-21T09:30:55.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ecount.com","organization":"ECOUNT INC."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 18 Jul 2025 00:56:16 GMT","end":"Wed, 19 Aug 2026 00:56:15 GMT"},"fingerprint":{"sha1":"9E:A7:2A:AA:DF:3B:10:8C:D7:E0:87:A3:6D:71:DD:A6:43:45:2A:FD","sha256":"65:88:81:47:0F:31:03:8A:AF:EE:C4:62:BA:D5:22:DD:38:DA:D7:17:CA:E1:1F:59:C1:A5:DB:A7:6F:A0:EC:C2"}}},"request":{"raw":"GET /static/contents/fonts/fonticon-webfont.woff?v=4.0.1 HTTP/1.1\r\nHost: resourcev3.ecount.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://s3.hmstorage.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://resourcev3.ecount.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff\r\ncontent-length: 43116\r\ndate: Tue, 21 Apr 2026 00:29:41 GMT\r\nlast-modified: Thu, 25 Sep 2025 21:14:29 GMT\r\netag: \"a8070e70e8878a68824374bcbf0984d9\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\nx-amz-version-id: NPuSIg.ADoi9E3sh9R6EUFUWFSsRJdTS\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 38bf1dd1623b4168f1f298799f6898c4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: -hhH8Z7ubVhdl0D17uzqK-fZ13emCaz8WHKywFmNCYetJr6hnrmCVQ==\r\nage: 32475\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":43116,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 43116, version 0.0","md5":"a8070e70e8878a68824374bcbf0984d9","sha1":"94b733730e329dee065be81ffd6145568f2450bf","sha256":"d18fd88a38fae9f725dde5a7ddd8ad6fc458e211ab494c8a4f299775ead10918","sha512":"d02dab8e27f4a3a4d9dac4eefda275b4c10a89f709e74f2ec69c4efeaf83620de13c1b6f8dc9a34deef6240695f53a108bf61ec1f558c2111f53a7aa844e0321","ssdeep":"768:onj/m9eZPdgipv/Yq6A8v7lIC7UBkxN5t6rY6qzW3vWWy9IAoXnNPHxs4szAEhhr:ona9eyipvr6A8vh97UBkxTt6rjqzW3v2","tlshash":"6a131a23db83fbcedc2aa278494781505dd98e22d23ee3869e452d45a414cfc4d39e9e","first_seen":"2025-11-25T22:00:54.769661Z","last_seen":"2026-04-21T09:31:18.548396Z","times_seen":57,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resourcev3.ecount.com/static/contents/fonts/fonticon-webfont.ttf?v=4.0.1","fqdn":"resourcev3.ecount.com","domain":"ecount.com","tld":"com"},"ip":{"addr":"52.84.50.52","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://s3.hmstorage.net/de5545b8-401f-486c-a1d2-36f48c369785/session/ecount/updateddddddd_ecount.html","date":"2026-04-21T09:30:55.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ecount.com","organization":"ECOUNT INC."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 18 Jul 2025 00:56:16 GMT","end":"Wed, 19 Aug 2026 00:56:15 GMT"},"fingerprint":{"sha1":"9E:A7:2A:AA:DF:3B:10:8C:D7:E0:87:A3:6D:71:DD:A6:43:45:2A:FD","sha256":"65:88:81:47:0F:31:03:8A:AF:EE:C4:62:BA:D5:22:DD:38:DA:D7:17:CA:E1:1F:59:C1:A5:DB:A7:6F:A0:EC:C2"}}},"request":{"raw":"GET /static/contents/fonts/fonticon-webfont.ttf?v=4.0.1 HTTP/1.1\r\nHost: resourcev3.ecount.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://s3.hmstorage.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://resourcev3.ecount.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/x-font-ttf\r\ndate: Mon, 20 Apr 2026 19:14:28 GMT\r\nlast-modified: Thu, 25 Sep 2025 21:14:29 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\nx-amz-version-id: yvO8PlHg9LcuNoqe2HP81anl2fMe9JZw\r\ncontent-encoding: gzip\r\netag: W/\"1f55e9592f3c0ccf5cc289db5af2ccf0\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 38bf1dd1623b4168f1f298799f6898c4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: KazVYwOgyZ1vwonpO7s6QHcM27zBkQrwWDDiJMAgMxeN_Oyn43bpUQ==\r\nage: 51388\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":43040,"size_decoded":0,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"1f55e9592f3c0ccf5cc289db5af2ccf0","sha1":"fe1b60f4c2bac4ec97189b1906bf50dc8833a44c","sha256":"38666d6f9bf147bf533e751902e310963e157035da71271f7efe83bea584b9a8","sha512":"06bbeca3a812b3f251000fad36948102c7cc2e0ed18f532f0ce4dddf823f3acce46656620689c3f2fc4e87d73acc6b6627d9ffff3ddf62f0163a65d77c721f11","ssdeep":"768:Vnj/m9eZPdgipv/Yq6A8v7lIC7UBkxN5t6rY6qzW3vWWy9IAoXnNPHxs4szAEhhr:Vna9eyipvr6A8vh97UBkxTt6rjqzW3v2","tlshash":"b7131b23db83fbcedc2aa278494781505de98e22d23ed3c69e452d45a414cfc4d39e9e","first_seen":"2025-03-15T02:23:45.466128Z","last_seen":"2026-04-21T09:31:18.549689Z","times_seen":77,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.hmstorage.net/de5545b8-401f-486c-a1d2-36f48c369785/session/ecount/updateddddddd_ecount.html","fqdn":"s3.hmstorage.net","domain":"hmstorage.net","tld":"net"},"ip":{"addr":"166.1.227.81","port":443,"asn":55286,"as":"SERVER-MANIA","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T09:30:53.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.hmstorage.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 20:25:31 GMT","end":"Fri, 12 Jun 2026 20:25:30 GMT"},"fingerprint":{"sha1":"B5:E9:A7:6E:00:63:EF:FC:7F:5E:19:F5:93:47:81:95:58:0C:F3:51","sha256":"5C:FF:2D:0A:F5:6B:B3:B1:AE:A1:50:17:05:7A:A4:7A:2C:23:62:93:2A:27:56:79:98:39:1A:E7:85:8E:AF:1C"}}},"request":{"raw":"GET /de5545b8-401f-486c-a1d2-36f48c369785/session/ecount/updateddddddd_ecount.html HTTP/1.1\r\nHost: s3.hmstorage.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 09:30:54 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 08 Mar 2026 14:36:25 GMT\r\nx-rgw-object-type: Normal\r\netag: W/\"60449a1520f6e24213c69824762b8179\"\r\nx-amz-request-id: tx000007c5d40372ad2be5a-0069e743ce-2d295-us-1\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":21522,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1014)","md5":"60449a1520f6e24213c69824762b8179","sha1":"7ea1849dfccaac8326ad84ed06b31ccec0610c00","sha256":"ef15e3d6eed75fb04b7db87f99630090155d65ef0ece1d95405872400a2af404","sha512":"a7791cef573577871e7b971cbad7c1158a900c796c0b9c4f7fe206d45f61291b41fc236427266acf3abaf1d160d1d91e6c39ce2052b7e3d16161a165ad52646b","ssdeep":"192:NYD+7Nca06dSpzZIg5eZ9BV9Qq3y3bS3gOv+8qr1hW6mcIZ/9q:NI1a06dS5ZIg52VR3Hyr9f","tlshash":"e4a2b550a4f91573055381e939a2f6193da2d117cb0ade04baec4bea6fc3f82890779d","first_seen":"2026-03-10T22:59:16.054441Z","last_seen":"2026-04-21T09:31:18.550944Z","times_seen":2,"resource_available":true,"data":null}},"time_used":571,"timings":{"blocked":235,"dns":40,"connect":94,"send":0,"wait":99,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"s3.hmstorage.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"s3.hmstorage.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"s3.hmstorage.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"resourcev3.ecount.com/ec3/freq/wmail/contents/bundle/bundle.style.noauth.6706716913516587922.19.css","fqdn":"resourcev3.ecount.com","domain":"ecount.com","tld":"com"},"ip":{"addr":"52.84.50.52","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s3.hmstorage.net/de5545b8-401f-486c-a1d2-36f48c369785/session/ecount/updateddddddd_ecount.html","date":"2026-04-21T09:30:54.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ecount.com","organization":"ECOUNT INC."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 18 Jul 2025 00:56:16 GMT","end":"Wed, 19 Aug 2026 00:56:15 GMT"},"fingerprint":{"sha1":"9E:A7:2A:AA:DF:3B:10:8C:D7:E0:87:A3:6D:71:DD:A6:43:45:2A:FD","sha256":"65:88:81:47:0F:31:03:8A:AF:EE:C4:62:BA:D5:22:DD:38:DA:D7:17:CA:E1:1F:59:C1:A5:DB:A7:6F:A0:EC:C2"}}},"request":{"raw":"GET /ec3/freq/wmail/contents/bundle/bundle.style.noauth.6706716913516587922.19.css HTTP/1.1\r\nHost: resourcev3.ecount.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s3.hmstorage.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 161636\r\ndate: Wed, 21 Jan 2026 01:45:01 GMT\r\nlast-modified: Thu, 18 Jul 2024 02:22:45 GMT\r\netag: \"25dcf74fba6b5259998326ffca635df3\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nx-amz-version-id: dtwb3xUF56UPrIGLERc14m5NgGpU7gT5\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 38bf1dd1623b4168f1f298799f6898c4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: XphtVQoyGslzVfJ3NITHbMIEVftkmQ0k23sOGAgyoSL4ez90FNY8cA==\r\nage: 7803955\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1004283,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"7c3451a6ff4eedf5490a7ce19609a9f0","sha1":"7341516335c917d6a3279949a3260172afc6f052","sha256":"f48423f63fdfba45215eb500fc40a76e8832c6b1a9719b775cbc59e5a0508af3","sha512":"c648c1e2c8d570ac2e97447b562588b20685dd397d9ef3bd69235b37ad75f25ac11d2ca0d1a5cf60749943b60e4b0621022644155729b5a9e99dba5834d57c62","ssdeep":"6144:FqB+n8nNj1//+9hlU/PngVE4N2UI9d3k5clr4L5yAgjvsyWGpZ2Xshay:F98nNj1//53k5OHbsyxpZ2Xhy","tlshash":"2a2519a6e351373e9e23d667d77d74a82425f10a9d13a6ebb01c2b45428cbe7218733c","first_seen":"2025-10-16T06:30:22.809306Z","last_seen":"2026-04-21T09:31:18.553539Z","times_seen":76,"resource_available":false,"data":null}},"time_used":1457,"timings":{"blocked":723,"dns":696,"connect":3,"send":0,"wait":3,"receive":5,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resourcev3.ecount.com/ec3/freq/wmail/contents/css/login.-3673191320641001309.19.css","fqdn":"resourcev3.ecount.com","domain":"ecount.com","tld":"com"},"ip":{"addr":"52.84.50.52","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s3.hmstorage.net/de5545b8-401f-486c-a1d2-36f48c369785/session/ecount/updateddddddd_ecount.html","date":"2026-04-21T09:30:54.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ecount.com","organization":"ECOUNT INC."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 18 Jul 2025 00:56:16 GMT","end":"Wed, 19 Aug 2026 00:56:15 GMT"},"fingerprint":{"sha1":"9E:A7:2A:AA:DF:3B:10:8C:D7:E0:87:A3:6D:71:DD:A6:43:45:2A:FD","sha256":"65:88:81:47:0F:31:03:8A:AF:EE:C4:62:BA:D5:22:DD:38:DA:D7:17:CA:E1:1F:59:C1:A5:DB:A7:6F:A0:EC:C2"}}},"request":{"raw":"GET /ec3/freq/wmail/contents/css/login.-3673191320641001309.19.css HTTP/1.1\r\nHost: resourcev3.ecount.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s3.hmstorage.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 11285\r\ndate: Thu, 16 Apr 2026 02:12:55 GMT\r\nlast-modified: Thu, 18 Jul 2024 02:22:47 GMT\r\netag: \"872b93aa740f7a9faface0efaa8bf6a0\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nx-amz-version-id: sXbC1V5n4jYNPKB1cOwWEndR1n8wHMYf\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 38bf1dd1623b4168f1f298799f6898c4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: RXyX5yItWIxyAlPCBfbJ1OQkLrlS9wX56QhayA3smiPwxkAQ6w0EOg==\r\nage: 458281\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":45187,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (45185), with no line terminators","md5":"ae4eec031a7176844c743bc2e701d5d9","sha1":"3c12c3adb0846cd88f8083787afea40c670a6a9a","sha256":"692c3846ef59bc6ebb3b45046e73c8dc0549be801addad84997b7d322af7b137","sha512":"45b5a862e699a560e7e06f4c4ffc8bb4c9be12c01f06bf6712d41b8616e29d295fbc21542b7ea1f59462d0f519dc027c49ab76349cf8e2f5a0cd712626da195f","ssdeep":"384:S5JR02JR2kakhNvO9JRT1ZwwJRzMEPHdjx0xBR6JRySfJR2IJR2upx/JRR3ZJRYQ:SuHEqwcLPHtmhSJ13j8U","tlshash":"8413ea3a424c397a6d162a26a6ef758d207de0b16942cfbe6c381d40cd9e33c355b76c","first_seen":"2025-10-16T06:30:22.796726Z","last_seen":"2026-04-21T09:31:18.554683Z","times_seen":76,"resource_available":false,"data":null}},"time_used":1449,"timings":{"blocked":722,"dns":695,"connect":3,"send":0,"wait":2,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.9.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://s3.hmstorage.net/de5545b8-401f-486c-a1d2-36f48c369785/session/ecount/updateddddddd_ecount.html","date":"2026-04-21T09:30:54.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-1.9.1.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s3.hmstorage.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-4185d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 21 Apr 2026 09:30:54 GMT\r\nage: 3354824\r\nx-served-by: cache-lga21952-LGA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 31, 922\r\nx-timer: S1776763855.538637,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 79506\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":268381,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"08c235d357750c657ac1db7d1cf656a9","sha1":"9257afd2d46c3a189ec0d40a45722701d47e9ca5","sha256":"7bd80d06c01c0340c1b9159b9b4a197db882ca18cbac8e9b9aa025e68f998d40","sha512":"d62700e7a1ff41f9d6326ca024ba2be1d391bc8fbb2aeae0f427d74837899b230940bf7c2df3d193f5300a68bb3686706d4c31328234b5cda026a1bf52ef9e70","ssdeep":"6144:UvD8eq9mPKl4OfKcknEHZciGhjZPdDwjdwTJFPk78vmAnhZSxwI14i:UE4OfcaZhfOeATG14i","tlshash":"fa44b6d8f78c112e8232316aad2f51cdb67cd172561058afbd8d597c24a083d42faf7a","first_seen":"2023-03-07T01:03:57Z","last_seen":"2026-04-21T09:31:18.555719Z","times_seen":38604,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":65,"dns":1,"connect":26,"send":0,"wait":26,"receive":36,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}