{"report_id":"e52a236a-3129-482f-bed6-0d959a26b5a5","version":6,"status":"done","tags":["netflix","phishing"],"date":"2026-05-16T12:42:07Z","url":{"schema":"http","addr":"eastern247hospital.co.zw/","fqdn":"eastern247hospital.co.zw","domain":"eastern247hospital.co.zw","tld":"co.zw"},"ip":{"addr":"69.175.99.163","port":0,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"eastern247hospital.co.zw/","fqdn":"eastern247hospital.co.zw","domain":"eastern247hospital.co.zw","tld":"co.zw"},"title":"Netflix","dom":{"size":4075,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2897)","md5":"8fd9009ce3bb4acd6d48693a22da2af8","sha1":"0ae17fad398c3f0de9d3b7c122b5fffb315264c4","sha256":"661eabacbf9409d4c2f217fb0df43996b834ed424d120f4aa27053f938747e5c","sha512":"9dfd8a671a6f2d4c2724906e995116be06e9aa2759af95502dd5ff74b597e294c7accf89f092c37be2c02bad374af9c5584ba249c8eeb9b48dabb608aad08caa","ssdeep":"","tlshash":"8881b7b68c95d96b8e9102c3f41d774fb982534adb6346806ae8cff075e06e4ccd6149","dom_hash":"domhash154fc1e892caea4481f1b9e5e307c060","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"eastern247hospital.co.zw/","fqdn":"eastern247hospital.co.zw","domain":"eastern247hospital.co.zw","tld":"co.zw"},"ip":{"addr":"69.175.99.163","port":0,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-20T12:42:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":2,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-16T12:41:47Z","timestamp":1778935307,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":34092,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-05-16T12:41:47.815043+0000\",\"flow_id\":445108500257393,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":34092,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3512,\"start\":\"2026-05-16T12:41:47.809585+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-16","alert":"Phishing Block","trigger":"eastern247hospital.co.zw","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"eastern247hospital.co.zw","ip":{"addr":"69.175.99.163","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-09T09:26:48.792851Z","last_seen":"2026-05-09T09:26:48.792851Z","alert_count":35,"request_count":7,"received_data":2070259,"sent_data":3284,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-05-11T13:08:39.015591Z","alert_count":0,"request_count":1,"received_data":269,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"eastern247hospital.co.zw/","fqdn":"eastern247hospital.co.zw","domain":"eastern247hospital.co.zw","tld":"co.zw"},"ip":{"addr":"69.175.99.163","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b6cc20be7b555d7792ed032828291b64","sha1":"5b6e9465a0683316c86dc607d7235f3fb6745d6b","sha256":"ad488196012abe7566ba1cca336245b4304cd1803eb699f5f5447dba59f07f91","sha512":"facea6edf36fe195fbf94437b766fc9e56f210ddc209be64df9cdf3401d3af93c47c348e614f86f45f6ced1b6bb3e614b3bb7e0a590a14a414f962a0a67aed8e","ssdeep":"","tlshash":"6cf0a39d3c56f05737f93634c2238a6f3755170175839524ca45cc3468549865886d4d","size":445,"data":"","first_seen":"2025-04-06T09:07:32.155851Z","last_seen":"2026-06-07T02:01:46.692255Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eastern247hospital.co.zw/assets/index-aMka_Kdt.js","fqdn":"eastern247hospital.co.zw","domain":"eastern247hospital.co.zw","tld":"co.zw"},"ip":{"addr":"69.175.99.163","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0d240ed5a939c31254bda3c7b3960de","sha1":"e1c949133bee075888a950fce9e22a1952c5436e","sha256":"7e557a57691186e4f9baef064a552f610bd4b8f4170defcc9767d08e7e8dcdc3","sha512":"2a55a09335dea6ee2ff91c54e71413655842982f758d6da82a35730d63e88611e29b966a991b65538c08f7f2610054faba0a5dc1cddac94cfef6408763411eea","ssdeep":"49152:MzetIAO168VxBzmJuvAEHhWa5XzyfuFdEZi7y0ua8TxDuozFiRFo0/Yg4ZHzF/lT:x868t4cX4uFdNjgL","tlshash":"869529d97277e83a499a3284355f0117762b1be0f4ceca80b398ca4539e153cb937b79","size":2043721,"data":"","first_seen":"2025-02-22T22:51:45.416053Z","last_seen":"2026-07-21T20:10:38.279574Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"eastern247hospital.co.zw/assets/index-aMka_Kdt.js","fqdn":"eastern247hospital.co.zw","domain":"eastern247hospital.co.zw","tld":"co.zw"},"ip":{"addr":"69.175.99.163","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eastern247hospital.co.zw/","date":"2026-05-16T12:41:46.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eastern247hospital.co.zw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 03:41:03 GMT","end":"Sat, 18 Jul 2026 03:41:02 GMT"},"fingerprint":{"sha1":"6F:E2:71:B0:E2:50:71:1B:91:22:EF:EF:F8:88:F2:A6:4A:B2:71:92","sha256":"86:DD:5D:85:29:E5:AB:D3:0E:12:F5:E5:89:20:8F:47:59:14:5D:8B:06:61:69:A3:10:3B:AF:09:14:A6:70:AD"}}},"request":{"raw":"GET /assets/index-aMka_Kdt.js HTTP/1.1\r\nHost: eastern247hospital.co.zw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eastern247hospital.co.zw/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 12:41:46 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 09 Jan 2025 12:29:10 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2043721\r\nKeep-Alive: timeout=5, max=29\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2043721,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (37550)","md5":"ee82927aeb57371b18add4c25d82b001","sha1":"2195bdf1ac1008f1ebad7df9464ef6a639166f86","sha256":"207c2eb04337273324b37f918720e072bf92bbb198c17427d89aed00ef0e0faa","sha512":"cbdf6f5a90833cdc4d249bce0000a48d3a25df754d1ddf2893ec5eba23da9a4deb8fd1ff05e4bc52fcf32bfebc9913a3338ec70a5d94e79cf6d43d93b1804445","ssdeep":"24576:MzetIOnrVQ16jzP/MqkMH4YQ3w1uq6xBzmJuvAEHhWa6QK:MzetIAO168VxBzmJuvAEHhWa5K","tlshash":"d125a2d9663bdd3e09993344364f0213ba6f1be1f1de9a8063c4da0539e053cb9366b9","first_seen":"2025-07-28T04:52:12.165243Z","last_seen":"2026-07-21T20:10:38.276916Z","times_seen":55,"resource_available":false,"data":null}},"time_used":1018,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":901,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-16","alert":"Phishing Block","trigger":"eastern247hospital.co.zw","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"eastern247hospital.co.zw/favicon.ico","fqdn":"eastern247hospital.co.zw","domain":"eastern247hospital.co.zw","tld":"co.zw"},"ip":{"addr":"69.175.99.163","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eastern247hospital.co.zw/","date":"2026-05-16T12:41:47.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eastern247hospital.co.zw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 03:41:03 GMT","end":"Sat, 18 Jul 2026 03:41:02 GMT"},"fingerprint":{"sha1":"6F:E2:71:B0:E2:50:71:1B:91:22:EF:EF:F8:88:F2:A6:4A:B2:71:92","sha256":"86:DD:5D:85:29:E5:AB:D3:0E:12:F5:E5:89:20:8F:47:59:14:5D:8B:06:61:69:A3:10:3B:AF:09:14:A6:70:AD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: eastern247hospital.co.zw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eastern247hospital.co.zw/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 12:41:47 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 06 Jun 2024 21:54:04 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 9854\r\nKeep-Alive: timeout=5, max=28\r\nConnection: Keep-Alive\r\nContent-Type: image/x-icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9854,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"58f54d9ea15176671802bebeee4da4cb","sha1":"4ba1cb97814772435962f3ac25af0def81851735","sha256":"9c5f7722c5df8eb24dda20ecc01c9f73e3103e10052fd980da4e7d9f753a97d3","sha512":"32e6c1ac6220b03bafb9215e4db4cf91352573c34a82accc893b4c7d4d3194d495e241c2f814372930a988688492926fe1d9a5576d2e46378c9f6d1e927c71db","ssdeep":"48:5uZhmwr2VEbaA+8H3J7HZqH0S/DHDHp8HfH5gAaqHwMqHBVqH/6BqHAtvqHAAcqK:shm0AN6YHEOFtwVPmyqPmorAtAco","tlshash":"8a12a02710c35d6cfe016eb8d297ec3a517d40ddeefe82e79a81bd390612146a5cb8e4","first_seen":"2023-09-08T13:51:14Z","last_seen":"2026-07-21T20:10:38.278031Z","times_seen":2170,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-16","alert":"Phishing Block","trigger":"eastern247hospital.co.zw","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"eastern247hospital.co.zw/Panel/stats/update.php?put=totale","fqdn":"eastern247hospital.co.zw","domain":"eastern247hospital.co.zw","tld":"co.zw"},"ip":{"addr":"69.175.99.163","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eastern247hospital.co.zw/","date":"2026-05-16T12:41:47.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eastern247hospital.co.zw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 03:41:03 GMT","end":"Sat, 18 Jul 2026 03:41:02 GMT"},"fingerprint":{"sha1":"6F:E2:71:B0:E2:50:71:1B:91:22:EF:EF:F8:88:F2:A6:4A:B2:71:92","sha256":"86:DD:5D:85:29:E5:AB:D3:0E:12:F5:E5:89:20:8F:47:59:14:5D:8B:06:61:69:A3:10:3B:AF:09:14:A6:70:AD"}}},"request":{"raw":"GET /Panel/stats/update.php?put=totale HTTP/1.1\r\nHost: eastern247hospital.co.zw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eastern247hospital.co.zw/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 12:41:47 GMT\r\nServer: Apache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nKeep-Alive: timeout=5, max=29\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6b2ded51d81a4403d8a4bd25fa1e57ee","sha1":"e5fd9cfe0e8039111d54b588e77b2bb0cad41c3a","sha256":"a4c3ed04a95a3da14a9d235c83d868bed7c0f45cf7f3faa751ee8f50598d2211","sha512":"07b8a32b38151e20c27bf64ee5fa32cf2f19e2ef0f749e50ecf8069a368eddd1f0822b7b4dea7e8380d9e26425efbeb54ccac432c09b75b82356afcf94cec37d","ssdeep":"","tlshash":"54300000000000003000000c00003000000000000c0000000000000000000000000000","first_seen":"2023-03-09T12:27:28Z","last_seen":"2026-07-21T20:10:38.274777Z","times_seen":2606,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-16","alert":"Phishing Block","trigger":"eastern247hospital.co.zw","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eastern247hospital.co.zw/","date":"2026-05-16T12:41:47.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Apr 2026 21:16:17 GMT","end":"Tue, 28 Jul 2026 22:16:15 GMT"},"fingerprint":{"sha1":"6D:CC:48:D6:E1:8C:50:0D:7C:B9:13:15:F0:18:E0:73:56:59:60:F7","sha256":"00:FD:76:18:CB:8D:B6:5A:4C:B7:0A:37:77:28:B1:01:5C:3D:6A:E4:2D:06:02:C1:9D:B8:6B:F8:6F:F8:31:77"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eastern247hospital.co.zw\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eastern247hospital.co.zw/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 16 May 2026 12:41:47 GMT\r\ncontent-type: application/json\r\ncontent-length: 21\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9fca7569ec850afe-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":20,"dns":3,"connect":1,"send":0,"wait":94,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eastern247hospital.co.zw/config-30/panel.php","fqdn":"eastern247hospital.co.zw","domain":"eastern247hospital.co.zw","tld":"co.zw"},"ip":{"addr":"69.175.99.163","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eastern247hospital.co.zw/","date":"2026-05-16T12:41:47.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eastern247hospital.co.zw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 03:41:03 GMT","end":"Sat, 18 Jul 2026 03:41:02 GMT"},"fingerprint":{"sha1":"6F:E2:71:B0:E2:50:71:1B:91:22:EF:EF:F8:88:F2:A6:4A:B2:71:92","sha256":"86:DD:5D:85:29:E5:AB:D3:0E:12:F5:E5:89:20:8F:47:59:14:5D:8B:06:61:69:A3:10:3B:AF:09:14:A6:70:AD"}}},"request":{"raw":"GET /config-30/panel.php HTTP/1.1\r\nHost: eastern247hospital.co.zw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eastern247hospital.co.zw/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 12:41:48 GMT\r\nServer: Apache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nKeep-Alive: timeout=5, max=27\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":191,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"736473f81c5b973fce53cf152902d033","sha1":"0a7dbcde04f2e1fd054ca42fbdf50b93688a0687","sha256":"e81ef6ca02a0d9dba5a1d984b7f907f92cbcad909ed66759b17220bd10404c92","sha512":"ff0e64848edb9316bed46afa931e77c1c91e0ff76715c6b7c39e85bb1eb5379c0b60404efafd0101377715a6677d34cda43babab49391436031a0a44b00d1645","ssdeep":"","tlshash":"10c012854dc0253aed19880015b1bf934d7e65735112d04530cd1c853572817607ca5b","first_seen":"2026-05-09T09:26:54.08872Z","last_seen":"2026-06-02T13:28:12.087984Z","times_seen":11,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":184,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-16","alert":"Phishing Block","trigger":"eastern247hospital.co.zw","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"eastern247hospital.co.zw/","fqdn":"eastern247hospital.co.zw","domain":"eastern247hospital.co.zw","tld":"co.zw"},"ip":{"addr":"69.175.99.163","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-16T12:41:45.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eastern247hospital.co.zw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 03:41:03 GMT","end":"Sat, 18 Jul 2026 03:41:02 GMT"},"fingerprint":{"sha1":"6F:E2:71:B0:E2:50:71:1B:91:22:EF:EF:F8:88:F2:A6:4A:B2:71:92","sha256":"86:DD:5D:85:29:E5:AB:D3:0E:12:F5:E5:89:20:8F:47:59:14:5D:8B:06:61:69:A3:10:3B:AF:09:14:A6:70:AD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: eastern247hospital.co.zw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 12:41:45 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 05 Nov 2024 21:19:10 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1165\r\nKeep-Alive: timeout=5, max=30\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1165,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"98f31d6c289ea89f6b41ca3a772266b0","sha1":"7ee3288aa32547b691a32f7cc658e7d68f2b953c","sha256":"66ff02e98e7a94c742331f6419eee5948dfa4e54f43c5a40a07b8243e420abb0","sha512":"0ed7a09115eb39325b9925af801348fd71a4f998a36a848febf3370e10fcb322d9e6bf9e5e8e9d604b872862cb3ecea9302c2d5e3eea3935858c0ffdd15740bc","ssdeep":"","tlshash":"fa2133091c01e81613b25234fab2d60de77653066782fe04f6d2843a3f90a858ccb59c","first_seen":"2024-11-11T09:51:02.171172Z","last_seen":"2026-07-21T20:10:38.273172Z","times_seen":75,"resource_available":true,"data":null}},"time_used":1238,"timings":{"blocked":560,"dns":331,"connect":111,"send":0,"wait":118,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-16","alert":"Phishing Block","trigger":"eastern247hospital.co.zw","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"eastern247hospital.co.zw/assets/index-DmeVuRrr.css","fqdn":"eastern247hospital.co.zw","domain":"eastern247hospital.co.zw","tld":"co.zw"},"ip":{"addr":"69.175.99.163","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eastern247hospital.co.zw/","date":"2026-05-16T12:41:46.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eastern247hospital.co.zw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 03:41:03 GMT","end":"Sat, 18 Jul 2026 03:41:02 GMT"},"fingerprint":{"sha1":"6F:E2:71:B0:E2:50:71:1B:91:22:EF:EF:F8:88:F2:A6:4A:B2:71:92","sha256":"86:DD:5D:85:29:E5:AB:D3:0E:12:F5:E5:89:20:8F:47:59:14:5D:8B:06:61:69:A3:10:3B:AF:09:14:A6:70:AD"}}},"request":{"raw":"GET /assets/index-DmeVuRrr.css HTTP/1.1\r\nHost: eastern247hospital.co.zw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eastern247hospital.co.zw/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 12:41:46 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 21 Aug 2024 01:26:52 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 13333\r\nKeep-Alive: timeout=5, max=30\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13333,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13332)","md5":"f6d14b7be48b1b6c56bc0e4620d37e6e","sha1":"b4272007722b701e2846da86fbc9b5d9deb34c2a","sha256":"4e85734a29bd47f9f47994b75f046edf3566ca99fba709b51bf7ffaf464cf618","sha512":"463351ed8e4fa03366e517ec216aba9da0ee0acc8fca1b719c0dd498f6753433c6ed2239a4e80308ad5de894498fe74a1001f6ac3b0cd54a1f5531cb06176e1c","ssdeep":"192:vxwOW9JyW9Jy7ecONu1ps2ZNQOLXM6/s86l3rHN:5wRojZNP/6","tlshash":"c45298296754103abd1380faf8d4fa49b11ab0d1df3bd7baa5876504f7d22e318a3708","first_seen":"2024-08-23T10:38:11Z","last_seen":"2026-07-21T20:10:38.273708Z","times_seen":108,"resource_available":false,"data":null}},"time_used":653,"timings":{"blocked":210,"dns":1,"connect":109,"send":0,"wait":115,"receive":102,"ssl":114},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-16","alert":"Phishing Block","trigger":"eastern247hospital.co.zw","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"eastern247hospital.co.zw/antibots/check.php?ip=91.90.42.154","fqdn":"eastern247hospital.co.zw","domain":"eastern247hospital.co.zw","tld":"co.zw"},"ip":{"addr":"69.175.99.163","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eastern247hospital.co.zw/","date":"2026-05-16T12:41:48.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eastern247hospital.co.zw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 03:41:03 GMT","end":"Sat, 18 Jul 2026 03:41:02 GMT"},"fingerprint":{"sha1":"6F:E2:71:B0:E2:50:71:1B:91:22:EF:EF:F8:88:F2:A6:4A:B2:71:92","sha256":"86:DD:5D:85:29:E5:AB:D3:0E:12:F5:E5:89:20:8F:47:59:14:5D:8B:06:61:69:A3:10:3B:AF:09:14:A6:70:AD"}}},"request":{"raw":"GET /antibots/check.php?ip=91.90.42.154 HTTP/1.1\r\nHost: eastern247hospital.co.zw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eastern247hospital.co.zw/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 12:41:48 GMT\r\nServer: Apache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nKeep-Alive: timeout=5, max=26\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":48,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"881d6e6677d8741104cf93385a005eff","sha1":"8cb2a44a81edd7547ddcc0ff9820b88fca4581fa","sha256":"2c7f466239d4cc73113ebd6caa6a02d086ab91ff1db7809eacfeba0c27a2d5f7","sha512":"ee5d57f892a97c5ff0433e373daf000b709873dd2f55f94f10f2687f1c9cf97f54ea2b67c53f8be3e37658be5486f5a9a67c298599df1668c976295c4ab366ad","ssdeep":"","tlshash":"ed900272850144051452454a9257a2254fe15c05c34a602a4cc44a0514186212796560","first_seen":"2024-08-19T18:44:30.816399Z","last_seen":"2026-05-16T12:42:13.479145Z","times_seen":7,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":184,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-16","alert":"Phishing Block","trigger":"eastern247hospital.co.zw","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"eastern247hospital.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}}]}