{"report_id":"e396cfb9-742a-40f1-b7ca-f467879d1f11","version":0,"status":"done","tags":[],"date":"2026-08-17T19:53:24Z","url":{"schema":"http","addr":"messenger-verrification-supporst.us/login","fqdn":"messenger-verrification-supporst.us","domain":"messenger-verrification-supporst.us","tld":"us"},"ip":{"addr":"38.110.228.206","port":0,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"messenger-verrification-supporst.us/login","fqdn":"messenger-verrification-supporst.us","domain":"messenger-verrification-supporst.us","tld":"us"},"title":"Verify Account","dom":{"size":31468,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"16ed63b467faa5642b4bbc99e2ec0e0e","sha1":"0ee23d5d79074194b8367e1409321ab2c3badd6f","sha256":"7bb7319ea2bb8b35549f80bb5025e423886ead06e10f91b37664eaa622c9e744","sha512":"56b0ee5ba7d0bd84d66f58b1a4484f949ddc0f5402efef375f2c6c3eb2eb4b8b810fc4eaf12745e5f9c29a176dad9aae5d8cd0596fa57b5c39ecd4a00ff0d245","ssdeep":"768:OeRNSHFVA8JLdv3O9U+WxHeevIl16f1BrtHzMCO:OeRkH3A8JLk9U+WxHeevIl16f1Brh1O","tlshash":"63e2a82732b310169697e0bc6ff34709323191079106ca293eac5654df8ef969ab7bdc","dom_hash":"domhashab22c6b8214b3aadf34659b400f5ad57","first_seen":"2026-08-17T19:53:25.780953Z","last_seen":"2026-08-17T19:53:25.780953Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"messenger-verrification-supporst.us/login","fqdn":"messenger-verrification-supporst.us","domain":"messenger-verrification-supporst.us","tld":"us"},"ip":{"addr":"38.110.228.206","port":0,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-21T19:53:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"messenger-verrification-supporst.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"messenger-verrification-supporst.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"messenger-verrification-supporst.us","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"messenger-verrification-supporst.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"messenger-verrification-supporst.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-08-16T23:15:38.642647Z","alert_count":0,"request_count":1,"received_data":3022,"sent_data":575,"comment":"","tags":null,"fingerprints":null},{"fqdn":"messenger-verrification-supporst.us","ip":{"addr":"38.110.228.206","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"2026-08-11","domain_rank":0,"first_seen":"2026-08-17T07:54:40.255542Z","last_seen":"2026-08-17T07:54:40.255542Z","alert_count":5,"request_count":1,"received_data":29810,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"i.postimg.cc","ip":{"addr":"195.154.239.26","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"domain_registered":"2016-06-11","domain_rank":103883,"first_seen":"2018-04-11T10:01:12Z","last_seen":"2026-08-13T20:27:19.339193Z","alert_count":0,"request_count":3,"received_data":287007,"sent_data":1695,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"i.postimg.cc/m2vp8JJz/show.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.26","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://messenger-verrification-supporst.us/login","date":"2026-08-17T19:52:57.729Z","timestamp":1786996377729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /m2vp8JJz/show.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://messenger-verrification-supporst.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Mon, 17 Aug 2026 19:52:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 14608\r\nlast-modified: Sat, 24 Jan 2026 18:53:22 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":14608,"size_decoded":14973,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"f1e2ef29b5d8bbf22101d11163cd1ce8","sha1":"7fa0b269fdc7d590764fd2cb0a2729811799234e","sha256":"b5df9896b244d1dc0f0f32e97a303c32e1c53f61e6ecb5ded7cd284aac109e0a","sha512":"cbd4f14e40b3d72a951c8c36cce1d0e46d7724cad298b72ca63e1b3986e912eea2bcd29b435d13580f4b82c71303f0c3f01e89672dc5d11b0d2ad7a610eebd81","ssdeep":"384:PwPjKMPAnSJChkyuulgtcsFje57q5C0DlYkFmzhQ:PwPuMRUpFgXjc2s0O9W","tlshash":"7462cf4a5c96f82bc6cb9b4c8b7e76e1528c28f7c55b3ee100516c83281dc2a1f31ed6","first_seen":"2026-05-02T13:57:42.724981Z","last_seen":"2026-08-17T19:53:25.783093Z","times_seen":7,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":125,"receive":4,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://messenger-verrification-supporst.us/login","date":"2026-08-17T19:52:57.730Z","timestamp":1786996377730,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://messenger-verrification-supporst.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 02:29:48 GMT\r\nexpires: Thu, 20 Aug 2026 02:29:48 GMT\r\ncache-control: public, max-age=604800\r\nage: 408190\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":3022,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-08-17T21:56:03.40995Z","times_seen":710702,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":2,"dns":1,"connect":16,"send":0,"wait":21,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"messenger-verrification-supporst.us/login","fqdn":"messenger-verrification-supporst.us","domain":"messenger-verrification-supporst.us","tld":"us"},"ip":{"addr":"38.110.228.206","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-17T19:52:56.519Z","timestamp":1786996376519,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"messenger-verrification-supporst.us","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:06:37 GMT","end":"Mon, 09 Nov 2026 08:06:36 GMT"},"fingerprint":{"sha1":"63:65:2B:91:35:CE:FF:24:4B:47:9C:17:CE:34:D5:86:A0:C9:67:14","sha256":"6A:3B:16:D5:65:37:C3:21:78:7B:B5:0B:15:09:37:E5:66:A0:0E:21:CE:72:EF:2D:9B:3A:B4:AE:B1:E0:14:E6"}}},"request":{"raw":"GET /login HTTP/1.1\r\nHost: messenger-verrification-supporst.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 17 Aug 2026 19:52:57 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Cookie\r\nSet-Cookie: session=.eJxFzlEKwjAMBuCrjD4PnM6JytgR9ALCWNOinV0729SxiXc3ZQVffsKX8JMPA4UzO7Or15blDGww6CJcrJu6mejRPmWEl9-Nfj9xIt2ZewtWSGJpIlig8RbEsRSUACKreRM782zNta7e8IbOx1TJlasOfRX4Cd7ELrHolTKx1mOH8v9cSHtcEPVQltoRLmpMnxRFsWXfH98jQt0.aoNmmQ.S38KMBCdUCgQjwqCveC82f25Ddk; HttpOnly; Path=/\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"session","value":".eJxFzlEKwjAMBuCrjD4PnM6JytgR9ALCWNOinV0729SxiXc3ZQVffsKX8JMPA4UzO7Or15blDGww6CJcrJu6mejRPmWEl9-Nfj9xIt2ZewtWSGJpIlig8RbEsRSUACKreRM782zNta7e8IbOx1TJlasOfRX4Cd7ELrHolTKx1mOH8v9cSHtcEPVQltoRLmpMnxRFsWXfH98jQt0.aoNmmQ.S38KMBCdUCgQjwqCveC82f25Ddk","quoted":false,"path":"/","raw_expires":"","max_age":0,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"session=.eJxFzlEKwjAMBuCrjD4PnM6JytgR9ALCWNOinV0729SxiXc3ZQVffsKX8JMPA4UzO7Or15blDGww6CJcrJu6mejRPmWEl9-Nfj9xIt2ZewtWSGJpIlig8RbEsRSUACKreRM782zNta7e8IbOx1TJlasOfRX4Cd7ELrHolTKx1mOH8v9cSHtcEPVQltoRLmpMnxRFsWXfH98jQt0.aoNmmQ.S38KMBCdUCgQjwqCveC82f25Ddk; HttpOnly; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":29310,"size_decoded":8822,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"4f875382bbfe6b8bdbc9e9ab8a61edba","sha1":"5151b42588de28fcadbce214d599a6bf695e1fc1","sha256":"fc8be3af22cf9e7edd222631152ab8515bf30fff77531d653bd0b92371b6decf","sha512":"d03313d384ead3288eb7c1ac4be7e4cac285d685d471c919966e59e42db20360b930e5d80086fdd51c20baa09553636a09f52b704595fd7ac1f6802599c2b492","ssdeep":"768:deyNSHFVA8JLdv3O9U+WxHeevIl16f1BrtDCC0:deykH3A8JLk9U+WxHeevIl16f1Br1X0","tlshash":"c7d2986732a310159297e0bc6ff3470932319107a506cb293eac5254df8ef969ab7bdc","first_seen":"2026-08-17T19:53:25.784352Z","last_seen":"2026-08-17T19:53:25.784352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":850,"timings":{"blocked":-1,"dns":8,"connect":170,"send":0,"wait":335,"receive":0,"ssl":337},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"messenger-verrification-supporst.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"messenger-verrification-supporst.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"messenger-verrification-supporst.us","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"messenger-verrification-supporst.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"messenger-verrification-supporst.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/NMgs5shY/unnamed.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.26","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://messenger-verrification-supporst.us/login","date":"2026-08-17T19:52:57.717Z","timestamp":1786996377717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /NMgs5shY/unnamed.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://messenger-verrification-supporst.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Mon, 17 Aug 2026 19:52:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 134352\r\nlast-modified: Sun, 28 Dec 2025 16:31:09 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":134352,"size_decoded":134718,"mime_type":"image/png","magic":"PNG image data, 1280 x 720, 8-bit/color RGB, non-interlaced","md5":"c46e3f29b4463c1c8d47722bf63a91b2","sha1":"3263c1e488cd7dcf995d27d9a33af5c410cd736e","sha256":"f56334b128d85a8150677cfdbe24cffdc744aa441a3b417f7fd91ce77b8d395b","sha512":"3baaa3c48048173527adb4f6101bc96df7249de6298e422d12d011da8517c25904041c3e7371638b5ac8259ef439c627f86564b8a189083a1086f5ee60578d0e","ssdeep":"3072:76XrPX2NBnYJhYmkpMGDmUl2ghnVZC6UO8Ye1d2UDc:GGiQ3pwYVCN1dTw","tlshash":"e9d30140f3bfd899d4984a78747a3a063ba32e28a6daffa75f814f41bf1c5e45d00464","first_seen":"2026-08-17T07:54:44.549307Z","last_seen":"2026-08-17T19:53:25.78562Z","times_seen":5,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":4,"connect":29,"send":0,"wait":33,"receive":92,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/dtY3P9kL/lading1.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.26","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://messenger-verrification-supporst.us/login","date":"2026-08-17T19:52:57.719Z","timestamp":1786996377719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /dtY3P9kL/lading1.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://messenger-verrification-supporst.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Mon, 17 Aug 2026 19:52:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 136950\r\nlast-modified: Thu, 22 Jan 2026 16:04:02 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136950,"size_decoded":137316,"mime_type":"image/png","magic":"PNG image data, 1200 x 630, 8-bit/color RGBA, non-interlaced","md5":"1a0340bb355e91394db52d9b9961eed0","sha1":"232ef6b378b42c414eb20d6c9377f0928b417d7a","sha256":"004500aa76061d37e8b6a1ca4bf63555eb158111cf794eed0f98fd96820eed52","sha512":"724523052b26cb3bf7c06342456e8cd2147cbd26938788bf9821705b9b4abf5b8aad3e566501af7b0b5b64f1e462c517325775ba68e5493c50e7f54a028b85c3","ssdeep":"3072:ojAa32QjqEyLWIMzL/WLcvR//ic2sZM7KAPiqvH:ojAa32WqvgzsctRi7KEiqvH","tlshash":"a1d3e086dcd96773e893dc7d9e114f8cbe41710e41dd4a3aee318a68b34ba31bc46849","first_seen":"2026-08-17T07:54:44.552346Z","last_seen":"2026-08-17T19:53:25.786243Z","times_seen":5,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":2,"connect":30,"send":0,"wait":140,"receive":14,"ssl":301},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}