{"report_id":"e5a69edf-e6f8-4a85-b7e4-8c4db10612d9","version":6,"status":"done","tags":[],"date":"2026-03-28T20:13:01Z","url":{"schema":"http","addr":"www.user-account.net/load_training?guid=06c050c1cae10d43\u0026correlation_id=0ffc01c3-30b3-417b-b348-e25946753f5c","fqdn":"www.user-account.net","domain":"user-account.net","tld":"net"},"ip":{"addr":"52.16.161.190","port":0,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"http","addr":"www.user-account.net/load_training?guid=06c050c1cae10d43\u0026correlation_id=0ffc01c3-30b3-417b-b348-e25946753f5c","fqdn":"www.user-account.net","domain":"user-account.net","tld":"net"},"title":"The page cannot be found","dom":{"size":2203,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"952afe3aa88c47d5772eb33a420b865e","sha1":"2db12125804bc35b64706527385262a9ce72c74d","sha256":"817801a365864b4e26999e676479b239845ac92f87ea822b9e8ffde44c46dcc8","sha512":"e5bda8362d1f5199095931bada9d3fea8cbe8711463eb08ff4a2b0c44fc14eb1f5739b571767762017019eddf1324cf95ee3bf01560c4eda305b9594631b07d8","ssdeep":"","tlshash":"07414227bbf436a332820650278637849f1a405bc7689e1a755d633caf8de81d9d33ed","dom_hash":"domhash97913a43cf7e652b8b30dfdc3bb0526c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.user-account.net/load_training?guid=06c050c1cae10d43\u0026correlation_id=0ffc01c3-30b3-417b-b348-e25946753f5c","fqdn":"www.user-account.net","domain":"user-account.net","tld":"net"},"ip":{"addr":"52.16.161.190","port":0,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T20:13:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"www.user-account.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.user-account.net","ip":{"addr":"63.34.182.19","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2018-06-29","domain_rank":0,"first_seen":"2019-04-17T09:42:30Z","last_seen":"2026-03-01T18:28:33.121672Z","alert_count":3,"request_count":3,"received_data":6015,"sent_data":1580,"comment":"","tags":null,"fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.user-account.net/load_training?guid=06c050c1cae10d43\u0026correlation_id=0ffc01c3-30b3-417b-b348-e25946753f5c","fqdn":"www.user-account.net","domain":"user-account.net","tld":"net"},"ip":{"addr":"63.34.182.19","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T20:12:38.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"shoppingbuyrewards.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 18 Jan 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DF:8E:7B:E0:B8:F5:09:31:58:CC:13:17:6B:3A:F8:49:DA:35:6A:EB","sha256":"B5:E6:86:B8:62:24:4C:F9:1A:08:B5:88:93:45:A8:2A:DC:B0:F0:52:BF:DE:53:8C:B1:10:A5:80:B5:19:BB:E7"}}},"request":{"raw":"GET /load_training?guid=06c050c1cae10d43\u0026correlation_id=0ffc01c3-30b3-417b-b348-e25946753f5c HTTP/1.1\r\nHost: www.user-account.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 410 Gone\r\ndate: Sat, 28 Mar 2026 20:12:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nset-cookie: EXFILGUID=c050cae10d; path=/\r\nx-request-id: fe9e6a29-2470-48b4-9cff-7327e5f7e496\r\nx-runtime: 0.013545\r\nx-host-info: lw-prod-eu-i-0f5f9ad2fc5c844fa, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"410","status_text":"Gone","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":2284,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"5bd19ddfccf7ecdfcde144c5e0995950","sha1":"7b7600f87ff8109a87a8ebb6a1d95c5e6182a3a9","sha256":"ae6a9278116a9385e11a8fdbf4dbb0327578bb59a9cc5a6c785a6f155874e76c","sha512":"ead10765091d01c64e356104e669c6665b653ac2a24e1b937cadcdba1e855b021909c0aef7df67256f3657cb48453d46164dd519ce9a8aacdf4e72261df004cb","ssdeep":"","tlshash":"fd41582bb7f026a222820600278537949f16405bc7684f0a715d623c9f8dec1c9d73ed","first_seen":"2024-08-19T14:47:14.132821Z","last_seen":"2026-04-03T18:26:29.589228Z","times_seen":70,"resource_available":true,"data":null}},"time_used":1052,"timings":{"blocked":499,"dns":83,"connect":33,"send":0,"wait":53,"receive":0,"ssl":381},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"www.user-account.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.user-account.net/load_training?guid=06c050c1cae10d43\u0026correlation_id=0ffc01c3-30b3-417b-b348-e25946753f5c","fqdn":"www.user-account.net","domain":"user-account.net","tld":"net"},"ip":{"addr":"63.34.182.19","port":80,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T20:12:39.621Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /load_training?guid=06c050c1cae10d43\u0026correlation_id=0ffc01c3-30b3-417b-b348-e25946753f5c HTTP/1.1\r\nHost: www.user-account.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: EXFILGUID=c050cae10d\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 410 Gone\r\nDate: Sat, 28 Mar 2026 20:12:39 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Download-Options: noopen\r\nX-Permitted-Cross-Domain-Policies: none\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nCache-Control: no-cache\r\nX-Request-Id: 123b574c-b727-4955-a450-2380f09d1f5d\r\nX-Runtime: 0.012618\r\nX-Host-Info: lw-prod-eu-i-0fd9b792b886e4ec7, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nServer: ThreatSim-Web-Server\r\n\r\n","headers":null,"cookies":null,"status_code":"410","status_text":"Gone","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":2284,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"5bd19ddfccf7ecdfcde144c5e0995950","sha1":"7b7600f87ff8109a87a8ebb6a1d95c5e6182a3a9","sha256":"ae6a9278116a9385e11a8fdbf4dbb0327578bb59a9cc5a6c785a6f155874e76c","sha512":"ead10765091d01c64e356104e669c6665b653ac2a24e1b937cadcdba1e855b021909c0aef7df67256f3657cb48453d46164dd519ce9a8aacdf4e72261df004cb","ssdeep":"","tlshash":"fd41582bb7f026a222820600278537949f16405bc7684f0a715d623c9f8dec1c9d73ed","first_seen":"2024-08-19T14:47:14.132821Z","last_seen":"2026-04-03T18:26:29.589228Z","times_seen":70,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":31,"dns":1,"connect":34,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"www.user-account.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.user-account.net/favicon.ico","fqdn":"www.user-account.net","domain":"user-account.net","tld":"net"},"ip":{"addr":"63.34.182.19","port":80,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.user-account.net/load_training?guid=06c050c1cae10d43\u0026correlation_id=0ffc01c3-30b3-417b-b348-e25946753f5c","date":"2026-03-28T20:12:39.819Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.user-account.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.user-account.net/load_training?guid=06c050c1cae10d43\u0026correlation_id=0ffc01c3-30b3-417b-b348-e25946753f5c\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: EXFILGUID=c050cae10d\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 20:12:39 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLast-Modified: Mon, 26 Jan 2026 13:50:00 GMT\r\nETag: \"69777108-0\"\r\nServer: ThreatSim-Web-Server\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"www.user-account.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}