{"report_id":"e1781029-e71b-4a6c-a45a-2a86f06320d8","version":6,"status":"done","tags":[],"date":"2026-01-10T17:36:28Z","url":{"schema":"http","addr":"attack.humanfactor.ai/","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"172.67.75.107","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"attack.humanfactor.ai/login","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"title":"LYR8 | Security awareness and employee behavior management platform","dom":{"size":8277,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5305)","md5":"32b175f956a0b06f6a18cdb22ed2e081","sha1":"0f64fd8a2cdee903243f2268ff08b7dad226c2bf","sha256":"c062f0238062d0a284211443884049a11855ec99065bb7181f5027049763ecc2","sha512":"1eddec3a1dc7a01dc27660f746353668e157dbe5e2b8083554371d52d0f85a65e9df8b7584e55493ef5b86ff5542d60b9757d6efcfc58a33f7a6cfdd4c453278","ssdeep":"96:hr0dmuhngpnJHcJdTHTo+t1wCZlWmeUoSAM7oMoOgB8P6X5twnLL+Qk2rEQw71xo:hodmsgpmt1wCWmP7joMjgKScM2rENZQZ","tlshash":"a502d7a092286836210785eab1b27a05709fd1fee943a8087ffc57cc1fd7e9be512146","dom_hash":"domhashd3f8ad0e01830052500f8592ec9636cc","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"attack.humanfactor.ai/","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"172.67.75.107","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-14T17:36:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"attack.humanfactor.ai","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"attack.humanfactor.ai","ip":{"addr":"104.26.0.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-10T17:36:32.870788Z","last_seen":"2026-01-10T17:36:32.870788Z","alert_count":14,"request_count":14,"received_data":14156440,"sent_data":6669,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"AngularJS","description":"AngularJS is a JavaScript-based open-source web application framework led by the Angular Team at Google.","website":"https://angularjs.org","common_platform_enumeration":"cpe:2.3:a:angularjs:angular.js:*:*:*:*:*:*:*:*","icon":"AngularJS.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"attack.humanfactor.ai/login","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bfde575bf9c513d40452e448eaf840d1","sha1":"5638225215fac228793ca85e8665b82773dc8cfd","sha256":"a6de8182cc19b2d6b9dc7da61e364afb52b43051482b36ae2242285d79b66ee0","sha512":"38152520f8a57c2be83c29e817a94ac216f0f3f569410c363de1730f4d136fa050779df1bd5fff462dedc31f445c95d29c2318bc385bcabc7a5437d3676cb4e9","ssdeep":"","tlshash":"23f081813aa86111257460a8a8cff0c29c78deb7671447f4a1a0cddc0931009e13ff9d","size":538,"data":"","first_seen":"2026-01-10T17:36:39.241568Z","last_seen":"2026-01-10T17:36:39.241568Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/login","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a2c8a7ee37829bb3864b32f85cdd6c1f","sha1":"9b3f243bdf2f7d8097431f8b5a77bde0e2db9425","sha256":"ecfc3c713d1e2334edc23a7d6e98104be700d6444cea65a6d409f273fc5fae9d","sha512":"fa8fc7cb224590706d2f106b1065ceaef07e12524ec186a45dcfa8b720865059ffaba99a53c5e66a1703fe6d0a30ce67df4507f4d7be042bdadf45eed3f43e1a","ssdeep":"","tlshash":"64f081c1355e8731367820c170cbfd92905cdd361384ef69cdb9eead1831006922a6ae","size":535,"data":"","first_seen":"2026-01-10T17:36:39.242405Z","last_seen":"2026-01-10T17:36:39.242405Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"104.26.0.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc34b3ae085e3ed577c5fd5ced68ba77","sha1":"fab9e169032b405ad5f4ae4cd3be73d3eeeaa9ae","sha256":"451bb22e075d8a9329ee17ea591bd4c5181ded7ff8314e84f6a78a0f25a15261","sha512":"f033bd3bfed3fd823e4cd5b3084c1dec43b7ee6306515f21ce13d6576aa39fb17aa62aa5e708df3e7cfb92aa2500b05af40e421270d2f443deeea781a233a836","ssdeep":"","tlshash":"abb001249c2fd51a5064118b6b4b325024620036c3a0d821ba0d9351efe1c4388422db","size":111,"data":"","first_seen":"2026-01-10T17:36:39.243152Z","last_seen":"2026-01-10T17:36:39.243152Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"104.26.0.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-04-04T23:46:24.344108Z","times_seen":265457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"104.26.0.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5748743e73efbc96cb05ec0081750dfc","sha1":"e2c79a39e28ad69e14d8193e70b5a860ad668116","sha256":"9a6d11e90a9f5a6099aed3a96b2531c360a2cae80a66aeaa6ae2c509bb0d525e","sha512":"f8c38116022a0297911eddb6f8f896b040767c8c0bc6c106bc55b40dffc6176fb58eb5f4461489e6fbdbfe7be7134dd32e9d47c1328b0bf337c428c84ff2cc45","ssdeep":"","tlshash":"9ae061823547e01727e100d09ccfa653a4aae63091cd7d04cdc3c61e14b211d90f7e1f","size":370,"data":"","first_seen":"2023-04-15T22:20:45Z","last_seen":"2026-04-04T21:06:03.683103Z","times_seen":2019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/login","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2a1387639e8ecd8792f76b179b67f8b6","sha1":"3beb09bec7c20e9563b06b59a2e98cf6a513c142","sha256":"8b141f256742ede07a40a62b387d11eaab57672a4ca8f2d714c57d15e4afc7df","sha512":"1530e15225d80f690d625af615db933b463e44d6f93b9c8ed4e3fe882615ab1cf7796c667793bec29e2c3b7536d51092315ce3b1c8bce097d817abfd125db36a","ssdeep":"","tlshash":"3af046c1361dcb3237b82091b0cbea92a05ddd720384ef688971ed6e0c31105522a66f","size":520,"data":"","first_seen":"2026-01-10T17:36:39.245023Z","last_seen":"2026-01-10T17:36:39.245023Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/l10n/angular_en.js","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"104.26.0.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76a97cc18c753f0a706a9750b8fe8682","sha1":"21519f54d1ce089c0401075869796385d9e2688d","sha256":"ac19d5c8f3c53b47663351b6eeb0c87a2237a16d6b97c64face2deef9fcad9ba","sha512":"d2b3ff2e46eae7ade4c14671835a3f111c59c676ea57e567c7b834cbee14dc27fe5d2e14e693096f21db9f026b3453e37aedf67c17777fe29def4bebcdca0ff2","ssdeep":"","tlshash":"3721966c71f3a32e9695814cd8ae4c4efd5c911512c04994d4e4568a8baace4b1ae824","size":1402,"data":"","first_seen":"2026-01-10T17:36:39.23563Z","last_seen":"2026-01-10T17:36:39.23563Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"104.26.0.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8ec6fd39187a6aea9c23d95a89494113","sha1":"fa75b0d5d9073a883cf629e70243eac3df76b196","sha256":"57dfef0f44c3c8059c0734329caca94be46be92fe2b29675b58583731b84dc34","sha512":"6163b0855c1ffabf63e98082d8b2650aad279c4241cc56557477f8fa624d26a89da7fce2cc47d39c17e223ef3af4a1c19e74489598f122ddea4b8cb6675a03bf","ssdeep":"","tlshash":"78b0928a3889a05c231a22d5a02f2c854cea7870a998dd6aadd8c5a51db2028556ef5c","size":114,"data":"","first_seen":"2023-04-11T22:12:58Z","last_seen":"2026-04-04T23:28:17.618041Z","times_seen":15213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/login","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b99cca890ca779f08cbbe2b6b8825ceb","sha1":"21b3872eb0c9dcae73e344b82357ade838b294c8","sha256":"f00c7a6f3107083a34a43cacb94d7c8eb7d77454533ad92b54c391cded15e58b","sha512":"fc4789e234bbd8ecc95cdfa2dc7f126c907f745906db66eff6d6c679e4795f74806fd2ad599cbc5351ae0535f6310747950d44ea2d58e7a8dfd1db8ee90986a5","ssdeep":"","tlshash":"bcf02bd5261d9731367c3091b4cbed92a4acda325384ef58ca71ed6e0872025926a62e","size":514,"data":"","first_seen":"2026-01-10T17:36:39.246263Z","last_seen":"2026-01-10T17:36:39.246263Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/login","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"711e6bd0a75b4188153a2dff666fad31","sha1":"9131940cc23daa7d24b0f707d3cf862699a65da3","sha256":"14059e458b4f8216c03ed120d608b9ef8295357664c2526160c608fcb05ed479","sha512":"786399903f53b40b666011efb8ab097f9041cdaa0ff627aa6d6d8476205b75c782e0756e5c994d7e427d9ab074be8dcec6975324c21a3628d5bc3d8c3625c6c7","ssdeep":"96:WkHzCRW46DyGYIX6MwBlbnFfN1+rlVmmv+z/6CcnYcaMslPU4IdCNnCCsZ2bOvlR:WQzCRkFwBlbnFfN1+rlpV6MMBuHXcy","tlshash":"4ed1eec2ab991e1121bea47475cbb4e65c2edc336749a2f58771de9e0c31140f217b35","size":6749,"data":"","first_seen":"2026-01-10T17:36:39.247057Z","last_seen":"2026-01-10T17:36:39.247057Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"104.26.0.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0392020f80fe02d9bb96d3f6c11956a6","sha1":"8064dd9f53166be8cdc6e6d97d05a3e26a8a87bf","sha256":"60e58429f83600d415df11629f74f6618c6012c604027ed42ca663d1eb1cf7ca","sha512":"898bf3687af20d1acedca42426796c51282790c431cb30f3cfdca75c3c3052fb087fa56af7c8d8590ccb764293ccf44dc8e468afcb490c77648bfa8be11bb977","ssdeep":"","tlshash":"78f0e56e26c139602237702a578fb78039720167324b8e113fbc8bd1bf31a674216acd","size":602,"data":"","first_seen":"2026-01-10T17:36:39.24783Z","last_seen":"2026-01-10T17:36:39.24783Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/main.1762846511235.js","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"104.26.0.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"558ce9053d0076403fb601963e70ea59","sha1":"bc1944a9b11754ca05720cb210ee72958194043f","sha256":"1fc4ed0336809d93b795efcdda8f855805832cf903c62adb729aa612001e573b","sha512":"29272aea1fcaf2fd64aa5d565c8490c528f7edaf69cb9086a4adf3ab35af8fbef044d3556500c27a01a68b9f81778bb50bdf4d85172900cfc248a9ff0b2295bb","ssdeep":"196608:V+6pye1PS/+dJ39Vvl5lAInews2jM1rWHLA7x+u+itqQu61TCmK8vygorUgRZ24z:V+6pye1PS/ivews2jM1rWHLA7x+u+itW","tlshash":"7ca609983186f164425790e7d03f2809f23a9959a40e44d0bf7cd6f32fb574ae62bf1a","size":9727872,"data":"","first_seen":"2026-01-10T17:36:39.249414Z","last_seen":"2026-01-10T17:36:39.249414Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/login","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5d227bf58ea2664bd529496ceb2eac37","sha1":"e911cb8fef35cf4232dbf9fd7caf2dd09e2b6813","sha256":"536e814235365b89a9c9d27d0481f6680045365ce3534e8a7bda48d1fe88e2e2","sha512":"c3fb5f6f2d9130b8b5153e17c0ebe96881aea07060a1312ba099ff65071b3cfc62d6c5894dae5adda762b9e020654a6f54ef89408994c113af886d753c2ed5bf","ssdeep":"","tlshash":"1cf081813aa86111257460a8a8cff0c29c78deb6671447f0a1a0cddc0931009e13ff9d","size":538,"data":"","first_seen":"2026-01-10T17:36:39.250668Z","last_seen":"2026-01-10T17:36:39.250668Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/login","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"757623282f93906f269c34d4cd646a0d","sha1":"f5d7edeb15058d6fca8d8919cea9c07af07021ee","sha256":"372cf88a1ada33d0e023cc924f489ae91caf89d3b2f8df5b38e2cbf96639eab0","sha512":"cad5bfaac8dca51adda42ce757c8b14046e698b2bb10e3d884ec8d1bd611af59eef302a871fa5a1ddd12fd7825f413f3b563e43376100c188f720e3cb96f2e78","ssdeep":"","tlshash":"4cf0f6c2262d97313678208174cfe992545cd9b25754ef5cc9b2ed6e0c7110a522663e","size":520,"data":"","first_seen":"2026-01-10T17:36:39.251525Z","last_seen":"2026-01-10T17:36:39.251525Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/login","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2e98c27dc11b972b8e55ee4de04d5ef8","sha1":"c02a9917031946ea92c92da04164184735ad2447","sha256":"656645a3ff3cde7b9646eb3ac17f40e1dc505213919fe4298edacc4af540629a","sha512":"c314451593c2504544c2c7a61501a02ced3672463fd6c17df6acd423df8f3ea3afee75c5035bc779382586e2bd82aafdc52250e571f4119d48032db99f703f11","ssdeep":"","tlshash":"f2f084c63aae81111bbc24cc68cff192a4799a73b354479682b0cded003110aa02be6e","size":504,"data":"","first_seen":"2026-01-10T17:36:39.252452Z","last_seen":"2026-01-10T17:36:39.252452Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"attack.humanfactor.ai/main.1762846511235.js","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"104.26.0.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attack.humanfactor.ai/","date":"2026-01-10T17:36:04.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"humanfactor.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Nov 2025 20:29:46 GMT","end":"Wed, 25 Feb 2026 21:29:38 GMT"},"fingerprint":{"sha1":"9D:4D:8C:47:C9:A0:21:2F:7D:35:F1:21:9E:D4:3E:B1:49:2C:CB:8C","sha256":"50:99:18:07:CC:A6:A1:CB:DD:E1:84:7B:D2:8E:D7:51:8B:1D:00:D6:E5:7D:A1:E0:7D:D7:97:08:02:34:8D:39"}}},"request":{"raw":"GET /main.1762846511235.js HTTP/1.1\r\nHost: attack.humanfactor.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attack.humanfactor.ai/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 17:36:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Nov 2025 07:38:42 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ryMCShCntOqrXrr89bgdkdWuG9WzYHcVQQdbPIdjeSlCL04LcaFYoq2G6pIDnm5PqCdvfWhLjLvRAbv02lCK%2BF4Bu4vMUxRBxfh%2FqPh%2BWgK3vg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6912e802-946f80\"\r\ncontent-encoding: br\r\ncf-ray: 9bbdef3b6af85693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9727872,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64680)","md5":"e474cec7b930fef6d2884d5ac3692d96","sha1":"d25f9ed11fd58bd0d1083a2341c1e31d49644d09","sha256":"0ed83496be5ffc5cfcce215cea5a0e981380a1b59fbabd550a34a5f92ae55d69","sha512":"06a35772c6b17994c4fe2c536f45a63c2a00d4432ca1c85e987d0c16e633d323602d689618a7e4f26597e08ab00839f10176cde39ef28edaeeaf7dde206cb375","ssdeep":"6144:q6fHvaVdjoZVdTVx+VdyVnxVdKVdNVn0B+VdAVx9Vd1d0VdEVd7VdvVnBVxbjaNZ:DvrB1dO0MUm1MKRuYnwY2Vl/X1E0kmm","tlshash":"7735d9cd71c6f4a892a365b1802f500ef23e5d5d981d9460f768ece17cb448ea327f6a","first_seen":"2026-01-10T17:36:39.228618Z","last_seen":"2026-01-10T17:36:39.228618Z","times_seen":1,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"attack.humanfactor.ai","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/config.json","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"104.26.0.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://attack.humanfactor.ai/","date":"2026-01-10T17:36:07.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"humanfactor.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Nov 2025 20:29:46 GMT","end":"Wed, 25 Feb 2026 21:29:38 GMT"},"fingerprint":{"sha1":"9D:4D:8C:47:C9:A0:21:2F:7D:35:F1:21:9E:D4:3E:B1:49:2C:CB:8C","sha256":"50:99:18:07:CC:A6:A1:CB:DD:E1:84:7B:D2:8E:D7:51:8B:1D:00:D6:E5:7D:A1:E0:7D:D7:97:08:02:34:8D:39"}}},"request":{"raw":"GET /config.json HTTP/1.1\r\nHost: attack.humanfactor.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attack.humanfactor.ai/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 17:36:07 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:17:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cRqzugyPYmmpsHei3ZuMGY%2B7Wfog6uZTWecIUxp1F84WiSr5eWwGf%2FxDh8mKN3l3lQ3EKLFx40tiaAh1e%2B9EdXBT6tKBQbcG6koP8IDqUHhv2Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"691f14fc-1d5d\"\r\ncontent-encoding: br\r\ncf-ray: 9bbdef511f695693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7517,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5cac9aadfef7dcf6f6f31872a2891bd1","sha1":"fbf579d4d9b22126db71fbe4b7062a86cc43c89b","sha256":"dd5d27725ab91c234a7e70b8ce7c959d708d3f76cd5cb38959199cdfe4d76e29","sha512":"f22148b099e5ab5d67ed214f1dd99dc2855f356ca61ed52b50b7063b1a1d86ac27c654d85def6f1505df800fa0093c3230f738fdf7e45d7edd859c49dea042a6","ssdeep":"96:y3econxhEkMWI1/8LBKPbkivfpe+VQ1GGQ5IqXv+EOPQ7q6t5YiKX9K4IRgk:yOnTMu0bdvfY1jY/tNKX9KLRgk","tlshash":"86f1945b731bb5876c5c2ef795ca7ccc1008d1e38e86bbace09a58b8c49e28b1d7450c","first_seen":"2026-01-10T17:36:39.229643Z","last_seen":"2026-01-10T17:36:39.229643Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"attack.humanfactor.ai","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/logo.svg","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"104.26.0.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attack.humanfactor.ai/","date":"2026-01-10T17:36:08.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"humanfactor.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Nov 2025 20:29:46 GMT","end":"Wed, 25 Feb 2026 21:29:38 GMT"},"fingerprint":{"sha1":"9D:4D:8C:47:C9:A0:21:2F:7D:35:F1:21:9E:D4:3E:B1:49:2C:CB:8C","sha256":"50:99:18:07:CC:A6:A1:CB:DD:E1:84:7B:D2:8E:D7:51:8B:1D:00:D6:E5:7D:A1:E0:7D:D7:97:08:02:34:8D:39"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: attack.humanfactor.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attack.humanfactor.ai/login\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 17:36:08 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Nov 2025 10:39:12 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CGrGqymQl2jVYQ1er5Xd3Bc%2F%2BGcrmYEop5mAHKQ0W7d%2Bi8VMK5NSlRl8keTJFyaJCYCqrqfY40VZJHiOG7YjnfRYQkgipH6DP1iLVb8LlJauXg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"691c4cd0-1350\"\r\ncontent-encoding: br\r\ncf-ray: 9bbdef54fb4c5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4944,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"937288400353f66f832175ce1d246d19","sha1":"9c49da5128c50a522782a8c58d0661f76907962b","sha256":"5982ea49b60260e97fccae9c2382d18c2d5a56f01d33c017413c92f86a303fff","sha512":"977266dcdc11cc2230e128d4ba3fca9e0765ca10eabdfeaa24abd149599911326366f10fceaa8317d3a954a238d6fd222d9df50763856516f62a1bfa631c8b0b","ssdeep":"96:7F5L8xkqOlX4mtL5HtB+xGFpUr2k3aefCQTi90Hc5ejQ9LG+kp5:zLSA/HiU42kKe3G0ML8P","tlshash":"29a1ec8db30d0e94f705e3fae2d6a416b82725d73a4291afdb5b1c62900310989ee8c3","first_seen":"2026-01-10T17:36:39.230938Z","last_seen":"2026-01-10T17:36:39.230938Z","times_seen":1,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"attack.humanfactor.ai","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/static/095578d64a792e38db36.woff2","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"104.26.0.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://attack.humanfactor.ai/","date":"2026-01-10T17:36:08.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"humanfactor.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Nov 2025 20:29:46 GMT","end":"Wed, 25 Feb 2026 21:29:38 GMT"},"fingerprint":{"sha1":"9D:4D:8C:47:C9:A0:21:2F:7D:35:F1:21:9E:D4:3E:B1:49:2C:CB:8C","sha256":"50:99:18:07:CC:A6:A1:CB:DD:E1:84:7B:D2:8E:D7:51:8B:1D:00:D6:E5:7D:A1:E0:7D:D7:97:08:02:34:8D:39"}}},"request":{"raw":"GET /static/095578d64a792e38db36.woff2 HTTP/1.1\r\nHost: attack.humanfactor.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attack.humanfactor.ai/main.bundle.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 17:36:08 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 728544\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Nov 2025 07:38:42 GMT\r\netag: \"6912e802-b1de0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ij4MEO3Wq%2B17T33W222g6JtjbCXfCb%2B7wKsM5JYP82qzXOPjQz9i%2BqRiVfHypUp0rQ%2BcrEn4m1CLufgXaFetMqRgs6Ibr%2BQvOr3uAoJnC0XXJw%3D%3D\"}]}\r\ncf-ray: 9bbdef54fb525693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":728544,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 728544, version 1.0","md5":"23669d4afe23ced1efaad5c9c244172e","sha1":"02216da9f96f42b479cfe139ca452ee228a94950","sha256":"c1edcdb49ee668f7b6cc18db4a5ee03d6da75ec7973217129d3f0693ff416e21","sha512":"abfb1e5dd8fd9587cfeea222df706dad943536f3023e8ab9f7ad8c0d869f9299b7d4d47b60bdba4e3c4be6232e80f61e8fdd17b60be3f1e949871062f3cd640c","ssdeep":"12288:DHWTOB8BnAMCNvkF7qmkxvD5vufDarUNie/frS/O+lROPhD/cbMvQPRujZLgZ:D1GAxvkZqtxL5vQDarU4ebND0PIO","tlshash":"b8f4233229e3354b0631a86c6009cd7debba2e1f727c869913a5bd7d03194225ded1fd","first_seen":"2024-06-14T15:40:49Z","last_seen":"2026-03-31T09:03:38.145849Z","times_seen":165,"resource_available":false,"data":null}},"time_used":1110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":609,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"attack.humanfactor.ai","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/v2/csrf","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"104.26.0.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://attack.humanfactor.ai/","date":"2026-01-10T17:36:09.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"humanfactor.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Nov 2025 20:29:46 GMT","end":"Wed, 25 Feb 2026 21:29:38 GMT"},"fingerprint":{"sha1":"9D:4D:8C:47:C9:A0:21:2F:7D:35:F1:21:9E:D4:3E:B1:49:2C:CB:8C","sha256":"50:99:18:07:CC:A6:A1:CB:DD:E1:84:7B:D2:8E:D7:51:8B:1D:00:D6:E5:7D:A1:E0:7D:D7:97:08:02:34:8D:39"}}},"request":{"raw":"GET /v2/csrf HTTP/1.1\r\nHost: attack.humanfactor.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attack.humanfactor.ai/login\r\nX-Csrf-Token: undefined\r\nEnable-Session: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: langCode=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 17:36:09 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nserver: cloudflare\r\nset-cookie: ANTPHSESSID=la6nmhaabuqsv4s0sk20socr29; expires=Tue, 05 Jan 2027 17:36:09 GMT; Max-Age=31104000; path=/; secure; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-powered-by: Antiphishing\r\nx-frame-options: DENY\r\ncontent-security-policy-report-only: default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://cdnjs.cloudflare.com https://code.jquery.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://cdnjs.cloudflare.com http://fonts.googleapis.com; img-src 'self' data:; connect-src 'self'; font-src 'self' data: http://fonts.gstatic.com https://cdnjs.cloudflare.com; object-src 'self'; media-src 'self'; form-action 'self'; frame-src 'self'; child-src 'self'; worker-src 'self'; report-uri https://attack.humanfactor.ai/csp-report; report-to https://attack.humanfactor.ai/csp-report; block-all-mixed-content\r\nstrict-transport-security: max-age=10;\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\nvary: Accept\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PBXu0OrWV90VELVXV0dCCH1Ajj%2FQPN1r%2F5kgL9Dks4RP1WldQX5TmMvyHYs25GAnIuAJI8NX%2BP%2FDLwFOqeglHHSPX30quM09h2AVcwfQzXdMNA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9bbdef5a98ee5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"94a8fe6c7b50b73736ec715309b9eee0","sha1":"149a53601975d32b4c80c0268c3f5519fa3bb2be","sha256":"95fecf1e28a09d7ed636321081aa2db1711f23aa368d5a57c6c5cc520cbbbafb","sha512":"54dc1fced4703d0e9f9a44ba97621cf5a7f372368ae1f0858c684b6ac85efc069c7d5c8a395e0ed003aa25197c46d87c4f5d37e1df850ed0067a7373cdd4edcc","ssdeep":"","tlshash":"52b0124d35447af16604ac4429109d060874efe6d0130314703a5315c7dc1cdd3d1670","first_seen":"2026-01-10T17:36:39.232757Z","last_seen":"2026-01-10T17:36:39.232757Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"attack.humanfactor.ai","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/v2/auth","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"104.26.0.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://attack.humanfactor.ai/","date":"2026-01-10T17:36:09.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"humanfactor.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Nov 2025 20:29:46 GMT","end":"Wed, 25 Feb 2026 21:29:38 GMT"},"fingerprint":{"sha1":"9D:4D:8C:47:C9:A0:21:2F:7D:35:F1:21:9E:D4:3E:B1:49:2C:CB:8C","sha256":"50:99:18:07:CC:A6:A1:CB:DD:E1:84:7B:D2:8E:D7:51:8B:1D:00:D6:E5:7D:A1:E0:7D:D7:97:08:02:34:8D:39"}}},"request":{"raw":"GET /v2/auth HTTP/1.1\r\nHost: attack.humanfactor.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attack.humanfactor.ai/login\r\nX-Csrf-Token: 9UCrCLtoSl8CP13z6nP_bVr5-YK8-TFiP7TP2VwtXCCNLOR63Dk5EFFgDt6yPchUDp7M5YSTfzJuwPqdDGZvWg==\r\nEnable-Session: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: langCode=en; ANTPHSESSID=la6nmhaabuqsv4s0sk20socr29\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 422 Unprocessable Entity\r\ndate: Sat, 10 Jan 2026 17:36:09 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-powered-by: Antiphishing\r\nx-frame-options: DENY\r\ncontent-security-policy-report-only: default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://cdnjs.cloudflare.com https://code.jquery.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://cdnjs.cloudflare.com http://fonts.googleapis.com; img-src 'self' data:; connect-src 'self'; font-src 'self' data: http://fonts.gstatic.com https://cdnjs.cloudflare.com; object-src 'self'; media-src 'self'; form-action 'self'; frame-src 'self'; child-src 'self'; worker-src 'self'; report-uri https://attack.humanfactor.ai/csp-report; report-to https://attack.humanfactor.ai/csp-report; block-all-mixed-content\r\nstrict-transport-security: max-age=10;\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\nvary: Accept\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GE4cwtgipbuVwtie7E8OCD2luNJHAONpkj7CpVHPvfDd6AF3D9MG3EkdDdfw1MbUBK78vTgC%2F3JQ%2FWl13NI9Hqr%2F5M%2BpePNrN5CjHVn7RRxm2Q%3D%3D\"}]}\r\ncf-ray: 9bbdef5baa085693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"422","status_text":"Unprocessable Entity","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d6229bd996ec7ab69044d34cf00f31aa","sha1":"4da6776216493c02049fd82e4a4b9391f9c781b0","sha256":"d21a23ea3229d6d5ef4a8b39d201901b249c6da0ea0753bc3886bd7c1a5a3cad","sha512":"1316a1c3142174245f76279a13e85e02d3900e29de7e6c30bbe8e17f87c7747386c1355999482da631568c4c3c0682a2a7cf236bcc048495c34b6aae38e63679","ssdeep":"","tlshash":"f980000c828b023bb023020a2b00ac2a8ac280fc02208f208830880308830ca8820ca0","first_seen":"2026-01-10T17:36:39.233684Z","last_seen":"2026-01-10T17:36:39.233684Z","times_seen":1,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"attack.humanfactor.ai","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"104.26.0.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-10T17:36:03.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"humanfactor.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Nov 2025 20:29:46 GMT","end":"Wed, 25 Feb 2026 21:29:38 GMT"},"fingerprint":{"sha1":"9D:4D:8C:47:C9:A0:21:2F:7D:35:F1:21:9E:D4:3E:B1:49:2C:CB:8C","sha256":"50:99:18:07:CC:A6:A1:CB:DD:E1:84:7B:D2:8E:D7:51:8B:1D:00:D6:E5:7D:A1:E0:7D:D7:97:08:02:34:8D:39"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: attack.humanfactor.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 17:36:04 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Nov 2025 07:38:43 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bhs9B7QRXXwkqWEd1F%2BBIFx%2FLYNKJpPiEsJFnHEnyTiaYg1NLSQ8PMqjlPljztpwMj%2F2L0aoG9INmBGyFO%2F7pxuEhPh8ncMVkfMweA5p8Liwzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9bbdef371e3e5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AngularJS","description":"AngularJS is a JavaScript-based open-source web application framework led by the Angular Team at Google.","website":"https://angularjs.org","common_platform_enumeration":"cpe:2.3:a:angularjs:angular.js:*:*:*:*:*:*:*:*","icon":"AngularJS.svg","categories":["JavaScript frameworks"]}],"data":{"size":1165,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (387)","md5":"3f766ef631c1bf99bcb8f911f0d68c9a","sha1":"053c118486a697ec242888147c123b71b11cc7e3","sha256":"3941bd49aed35c9595f7f288cd7fcc479d547063126cc63530feebd8b7527649","sha512":"8ec4df497f8b49cda8edd5b5d0c6d2f53af859dfc1a790b6e7d84b7cfec221ad86982db1a0f8fd3a32b57080a95e232dd938ea94b38c6489d75310238c363ca9","ssdeep":"","tlshash":"d321ed695d4275182133316b7b9bb2587412002a3392dc003fac83e16fe0fa38407acd","first_seen":"2026-01-10T17:36:39.234566Z","last_seen":"2026-01-10T17:36:39.234566Z","times_seen":1,"resource_available":false,"data":null}},"time_used":648,"timings":{"blocked":60,"dns":40,"connect":1,"send":0,"wait":529,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"attack.humanfactor.ai","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/l10n/angular_en.js","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"104.26.0.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attack.humanfactor.ai/","date":"2026-01-10T17:36:09.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"humanfactor.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Nov 2025 20:29:46 GMT","end":"Wed, 25 Feb 2026 21:29:38 GMT"},"fingerprint":{"sha1":"9D:4D:8C:47:C9:A0:21:2F:7D:35:F1:21:9E:D4:3E:B1:49:2C:CB:8C","sha256":"50:99:18:07:CC:A6:A1:CB:DD:E1:84:7B:D2:8E:D7:51:8B:1D:00:D6:E5:7D:A1:E0:7D:D7:97:08:02:34:8D:39"}}},"request":{"raw":"GET /l10n/angular_en.js HTTP/1.1\r\nHost: attack.humanfactor.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attack.humanfactor.ai/login\r\nCookie: langCode=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 17:36:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Nov 2025 07:38:42 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FGtZeT7jpEohAGttMKMuWmRBVK1yhmvWePHi4tbOYkKCJ8rHBA%2FnjOktxtaeui3BqIh5iSKPKTDRXGfU6%2BJzhycVijK3dRobZ4D77CWZRcEyuw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6912e802-57a\"\r\ncontent-encoding: br\r\ncf-ray: 9bbdef5a98e55693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1402,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1400), with no line terminators","md5":"76a97cc18c753f0a706a9750b8fe8682","sha1":"21519f54d1ce089c0401075869796385d9e2688d","sha256":"ac19d5c8f3c53b47663351b6eeb0c87a2237a16d6b97c64face2deef9fcad9ba","sha512":"d2b3ff2e46eae7ade4c14671835a3f111c59c676ea57e567c7b834cbee14dc27fe5d2e14e693096f21db9f026b3453e37aedf67c17777fe29def4bebcdca0ff2","ssdeep":"","tlshash":"3721966c71f3a32e9695814cd8ae4c4efd5c911512c04994d4e4568a8baace4b1ae824","first_seen":"2026-01-10T17:36:39.23563Z","last_seen":"2026-01-10T17:36:39.23563Z","times_seen":1,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"attack.humanfactor.ai","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/image/icoSprite.svg","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"104.26.0.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://attack.humanfactor.ai/","date":"2026-01-10T17:36:08.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"humanfactor.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Nov 2025 20:29:46 GMT","end":"Wed, 25 Feb 2026 21:29:38 GMT"},"fingerprint":{"sha1":"9D:4D:8C:47:C9:A0:21:2F:7D:35:F1:21:9E:D4:3E:B1:49:2C:CB:8C","sha256":"50:99:18:07:CC:A6:A1:CB:DD:E1:84:7B:D2:8E:D7:51:8B:1D:00:D6:E5:7D:A1:E0:7D:D7:97:08:02:34:8D:39"}}},"request":{"raw":"GET /image/icoSprite.svg HTTP/1.1\r\nHost: attack.humanfactor.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attack.humanfactor.ai/login\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 17:36:08 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Nov 2025 07:38:42 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5iXy5G%2B%2FjcPMfadcXEfCSqCqVMIuk%2BDOk8qh0bFXzcYT%2FwXIhu%2FBHD5AyjB18LrIDXm8ia1du51NJtYvBM6hVmqHcsTKDov1LiZwRPwucvRbIA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6912e802-10fdc\"\r\ncontent-encoding: br\r\ncf-ray: 9bbdef54fb4e5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69596,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"30afe03923fa97095cbd3ac18d17c23a","sha1":"c8226577c94b496d207b9b842f38f33c3eca3a10","sha256":"9558e9e56ca7371e22dcea660a8e35a7b72d045ce910243c690d76b5e221469a","sha512":"49e2f0cbdfb62cc4757d7ca35e9e48111ddb12483dde246cb69049f3b26bf6cad8c5475ac81db416a3ec8aff364a0c7f8ed4f33a10dba1292318263c97258362","ssdeep":"1536:FEivld8UuxjQQekW+JLITbJAO1LITbzovi5u:D","tlshash":"3d63e7fa13f456e4e40293b1e62530aa396e34ff3f928e94b5ad4ee05f114dcc84b895","first_seen":"2026-01-10T17:36:39.23641Z","last_seen":"2026-01-10T17:36:39.23641Z","times_seen":1,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"attack.humanfactor.ai","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/static/3624373bce77a2ff170f.woff","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"104.26.0.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://attack.humanfactor.ai/","date":"2026-01-10T17:36:08.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"humanfactor.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Nov 2025 20:29:46 GMT","end":"Wed, 25 Feb 2026 21:29:38 GMT"},"fingerprint":{"sha1":"9D:4D:8C:47:C9:A0:21:2F:7D:35:F1:21:9E:D4:3E:B1:49:2C:CB:8C","sha256":"50:99:18:07:CC:A6:A1:CB:DD:E1:84:7B:D2:8E:D7:51:8B:1D:00:D6:E5:7D:A1:E0:7D:D7:97:08:02:34:8D:39"}}},"request":{"raw":"GET /static/3624373bce77a2ff170f.woff HTTP/1.1\r\nHost: attack.humanfactor.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attack.humanfactor.ai/main.bundle.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 17:36:08 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31836\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Nov 2025 07:38:42 GMT\r\netag: \"6912e802-7c5c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IUknlIV9d%2FTodB7AiZp5XVUT5TBq06v1khiQ2XcMQGtfExs3ajA0ID3GBxgWtQCJ875EQ05nPwu%2BvlcEJ6hzxSG5MReX3JExSxoKVBmWpvJwsg%3D%3D\"}]}\r\ncf-ray: 9bbdef54fb505693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31836,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31836, version 1.1","md5":"811c8baeca3bb3329488f729979c1fbc","sha1":"fa11215a4dc0a239a99ef7fb36627f1da270c9bc","sha256":"6298d6b65aad8ba42fc9124d645756a7f76de64901a501fb74d7a9f2086de63a","sha512":"7007a5442af0e850c1e5eab77d61d9a67d640637341f425ed20656058fc33eddd381e98aad8a2aeb040e7d035cc4b3e7a9514dffeac1df2589971cca9a8e6312","ssdeep":"768:OwWa3ftyNAhIKfIvcDXALnZb1ItFi+vgFpcxnCl70SxxiPWY:Oja31yyfm6XAL7Iji+oExna7ieY","tlshash":"a6e2f147fc0aaa00f35f57363180e3073a17ae09b6457ec09776a68c35098fadac6663","first_seen":"2023-06-04T01:25:48Z","last_seen":"2026-04-03T13:06:44.576828Z","times_seen":7,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"attack.humanfactor.ai","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/static/e9b18fc0b92e54ab0d84.png","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"104.26.0.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attack.humanfactor.ai/","date":"2026-01-10T17:36:09.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"humanfactor.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Nov 2025 20:29:46 GMT","end":"Wed, 25 Feb 2026 21:29:38 GMT"},"fingerprint":{"sha1":"9D:4D:8C:47:C9:A0:21:2F:7D:35:F1:21:9E:D4:3E:B1:49:2C:CB:8C","sha256":"50:99:18:07:CC:A6:A1:CB:DD:E1:84:7B:D2:8E:D7:51:8B:1D:00:D6:E5:7D:A1:E0:7D:D7:97:08:02:34:8D:39"}}},"request":{"raw":"GET /static/e9b18fc0b92e54ab0d84.png HTTP/1.1\r\nHost: attack.humanfactor.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attack.humanfactor.ai/main.bundle.css\r\nCookie: langCode=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 17:36:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 884582\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Nov 2025 07:38:42 GMT\r\netag: \"6912e802-d7f66\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FGYyeU5GpaUGaXXdnxRwY%2BDyW6DmANI1b4VhWL5X%2FXRDePVpMJCNuiZifdNUAhWSkfvSPv2TKozJIyYjyeVdkmK4DQghKTdFuKThTe%2FfRwe7hQ%3D%3D\"}]}\r\ncf-ray: 9bbdef5aa8f75693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":884582,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1921 x 2402, 8-bit/color RGBA, non-interlaced","md5":"b992f8f2bd2e6b18af3964e553f13d3d","sha1":"1ebb496c302334b2c47343ad2737c57c37136f2b","sha256":"df03abffdc4a301fd34ae18c435c85ea1b42f34c0a0584a3c794282c4f6de987","sha512":"6755df791ee0534075e599283fc2b116d039541197a6a0feade441219e894334d62d970c166c6651a0fe4296e0d5757c5f5d5211e03e6de5fae08f2002046fb5","ssdeep":"12288:R16hMWEG5M/RzTa0f3aaiCk+pHISaziRteL7Gyuu44k73n5k5gWUFiez28+sywNX:fWQGqI9Ck+RU6teLDarYJq28Byw6C17p","tlshash":"021533554998dceec63823bc4b395ebe2743c032a4e354e0dd2e08ea1648f4fd699d9c","first_seen":"2026-01-10T17:36:39.238403Z","last_seen":"2026-01-10T17:36:39.238403Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":474,"receive":644,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"attack.humanfactor.ai","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/favicon.png","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"104.26.0.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attack.humanfactor.ai/","date":"2026-01-10T17:36:06.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"humanfactor.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Nov 2025 20:29:46 GMT","end":"Wed, 25 Feb 2026 21:29:38 GMT"},"fingerprint":{"sha1":"9D:4D:8C:47:C9:A0:21:2F:7D:35:F1:21:9E:D4:3E:B1:49:2C:CB:8C","sha256":"50:99:18:07:CC:A6:A1:CB:DD:E1:84:7B:D2:8E:D7:51:8B:1D:00:D6:E5:7D:A1:E0:7D:D7:97:08:02:34:8D:39"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: attack.humanfactor.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attack.humanfactor.ai/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 17:36:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 11086\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Nov 2025 10:39:12 GMT\r\netag: \"691c4cd0-2b4e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L3KbFYZwArpUtEIDTXojR%2Fz4uySIcpFsHtwitm4j1Z%2Fk289wyEV0yngSDhNCBd%2B%2FI7596t2nvT%2BE2svPaGfZz6RxNvXQ8gnQkjee8lJ6DN2dww%3D%3D\"}]}\r\ncf-ray: 9bbdef492fad5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11086,"size_decoded":0,"mime_type":"image/png","magic":"MS Windows icon resource - 1 icon, 50x53, 32 bits/pixel","md5":"da253c901ea367128399e99cd14555f5","sha1":"baa493f988e729de4da6444396d50cba08c60340","sha256":"8c7a0b1a25e4014c1065a4f5c08824119a2b230049e6f3347108ebb17efaa789","sha512":"f98de2adb7a722801e0b89672e9d95a68e721d84d2b638dce81217313cbe4ccacba5d0c5965ebe738e5680e27ac6743a68910d7e93d1f1c9acd11eac74904190","ssdeep":"48:MOKcfPNTNT293ia+rS12wW4LNZWwDgFrxqRsiSuc0uhHMaLP:JHPNTNT293ia+rSEhG30RxqRsfi+","tlshash":"473222f43a0cd264c510357f49a9c2b677143e5e584c91963289bf6eb9fb00cc8a9b6f","first_seen":"2026-01-10T17:36:39.23927Z","last_seen":"2026-01-10T17:36:39.23927Z","times_seen":1,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":478,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"attack.humanfactor.ai","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/translations.json","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"104.26.0.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://attack.humanfactor.ai/","date":"2026-01-10T17:36:08.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"humanfactor.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Nov 2025 20:29:46 GMT","end":"Wed, 25 Feb 2026 21:29:38 GMT"},"fingerprint":{"sha1":"9D:4D:8C:47:C9:A0:21:2F:7D:35:F1:21:9E:D4:3E:B1:49:2C:CB:8C","sha256":"50:99:18:07:CC:A6:A1:CB:DD:E1:84:7B:D2:8E:D7:51:8B:1D:00:D6:E5:7D:A1:E0:7D:D7:97:08:02:34:8D:39"}}},"request":{"raw":"GET /translations.json HTTP/1.1\r\nHost: attack.humanfactor.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attack.humanfactor.ai/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 17:36:08 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Nov 2025 07:38:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eT%2BjRQVbJ6S%2BChAGJ8TJJSxcIlbrGRkgbw%2BUGU2f1aTzwJjjJZJWVBPlpTQKruXZDmDXWpNMHLHZP1XoBmtrqGYFV50P%2F2BkMiTYmuP4Qpsl6g%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"6912e802-1ce75d\"\r\ncontent-encoding: br\r\ncf-ray: 9bbdef54fb4a5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1894237,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (11281), with NEL line terminators","md5":"d1ce94d01ad5e61e770571864a7684ea","sha1":"f80e51a46606917359b7c8a1d4e4c1cce2dc00bf","sha256":"9dafac56f484477955eafcdb8f71da10b2b2e5a750166fd7efd4db29d960fad8","sha512":"55bc782cd0cbc49887b63ec367373b8ea375f374b1058f8af6e4c65e93953a8c63d63a0d9208ea88803bd697dbf02cb466922bee9fe2304f177d7ee1fb93cb1a","ssdeep":"12288:djnaTOUTI/VmydbKI4ADRLtGc/FBabtto5xuUl/pHxfP5S1IZjzP6fWNY3rTtCJe:hKIjtQto5pl/plsYe","tlshash":"b265529a21aa20d9116da963f4043fc93eb6c4fdbbdd412b45ac4b3d74de3d0823a2d5","first_seen":"2026-01-10T17:36:39.240028Z","last_seen":"2026-01-10T17:36:39.240028Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"attack.humanfactor.ai","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"attack.humanfactor.ai/main.bundle.css","fqdn":"attack.humanfactor.ai","domain":"humanfactor.ai","tld":"ai"},"ip":{"addr":"104.26.0.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://attack.humanfactor.ai/","date":"2026-01-10T17:36:04.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"humanfactor.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Nov 2025 20:29:46 GMT","end":"Wed, 25 Feb 2026 21:29:38 GMT"},"fingerprint":{"sha1":"9D:4D:8C:47:C9:A0:21:2F:7D:35:F1:21:9E:D4:3E:B1:49:2C:CB:8C","sha256":"50:99:18:07:CC:A6:A1:CB:DD:E1:84:7B:D2:8E:D7:51:8B:1D:00:D6:E5:7D:A1:E0:7D:D7:97:08:02:34:8D:39"}}},"request":{"raw":"GET /main.bundle.css HTTP/1.1\r\nHost: attack.humanfactor.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attack.humanfactor.ai/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 17:36:04 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Nov 2025 07:38:42 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BCq8wot8yGCf3594gGkayUYyv5dML7HYS%2Fl7q6U57Vl6XAwUuFg6G%2BRL5HCXPaowsItAGgqFdZsEwaJUIKzTJWqqfbsZQ%2B5X1uJ4pXOhf9VZNw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6912e802-bf2cc\"\r\ncontent-encoding: br\r\ncf-ray: 9bbdef3b6af75693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":783052,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (37431)","md5":"4fad73c782f20a0c3ec88f2d2f85b894","sha1":"d7858ab88599e94f37261cf6d37b4f759b6fd53f","sha256":"7cdcd3cb4a51b7bc714608335cf84ef0c1ed6aa13b57475e9c61153959eac2d7","sha512":"8f6d0f73f8f54be088a1c0ee494d4cd5b0c7d6561c7bc221c4b36ee50a1287317db7e372fb0a5dae8e9fff72cdc708ecb65fe6d7bbca19a262fc3775be51f1d2","ssdeep":"6144:SAE47z1q3QR3yNE2l74G3pcPGJ0ye6xRP+ljxWwb:SAEGz1b3yNEmkG3OPC0yekRP+xxWu","tlshash":"baf44d31a61430aeb637c077b6c0bb993129d213d6634ebbf556ba1cc6c71da0363b58","first_seen":"2026-01-10T17:36:39.240774Z","last_seen":"2026-01-10T17:36:39.240774Z","times_seen":1,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"attack.humanfactor.ai","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}