{"report_id":"e84d7845-a786-40b4-b446-8f333ab6218c","version":6,"status":"done","tags":["microsoft","phishing"],"date":"2026-06-07T00:47:47Z","url":{"schema":"http","addr":"nethubcorp.com/a57dc89e5gafef46a46bc0d58a4d0b6cf305.html","fqdn":"nethubcorp.com","domain":"nethubcorp.com","tld":"com"},"ip":{"addr":"104.26.9.140","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nethubcorp.com/a57dc89e5gafef46a46bc0d58a4d0b6cf305.html","fqdn":"nethubcorp.com","domain":"nethubcorp.com","tld":"com"},"title":"Sign in to your account","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"966c8eff50f580abc31d16220ba58914","sha1":"f8d6abe447380a91dd23599ed4ee55c61c06a55f","sha256":"4e5d231e5d3551f2b700197224dba92a4b969b588100af8bdc4194f1b736b33d","sha512":"d111700ea18ba349d2ddff2ef45aff3edb7487503d7042663bb5bad82e22c1fb10438a476895275337d11331f064c0b3e71812b61dbe2ae9607760392edd631a","ssdeep":"","tlshash":"14e026e95d69c83475e4028620b5e39c1a3065a0bb11e64492e8dc7b8f10fd34c9294c","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nethubcorp.com/a57dc89e5gafef46a46bc0d58a4d0b6cf305.html","fqdn":"nethubcorp.com","domain":"nethubcorp.com","tld":"com"},"ip":{"addr":"104.26.9.140","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-12T00:47:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"nethubcorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"nethubcorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"lp.cybeready.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"summary":[{"fqdn":"nethubcorp.com","ip":{"addr":"104.26.9.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-02-12","domain_rank":0,"first_seen":"2025-05-29T08:44:44.844724Z","last_seen":"2026-06-07T00:22:56.644709Z","alert_count":12,"request_count":4,"received_data":78501,"sent_data":2210,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"lp.cybeready.net","ip":{"addr":"172.67.74.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-26","domain_rank":0,"first_seen":"2015-12-30T08:46:43Z","last_seen":"2026-06-01T16:49:01.179531Z","alert_count":8,"request_count":4,"received_data":11141,"sent_data":1921,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"nethubcorp.com/a57dc89e5gafef46a46bc0d58a4d0b6cf305.html","fqdn":"nethubcorp.com","domain":"nethubcorp.com","tld":"com"},"ip":{"addr":"104.26.9.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0937f6f318a7eda9aad00e5b1ce99a45","sha1":"03fb80016ffbc1f96df26979b71c478d3dcd7c5e","sha256":"4cae3771c189cb7e6ff2a727c3017c3b42676922b0759762708672e5ddfa7fdb","sha512":"9b2f42f32e685f23605a7bc41f3b5f55259287a3f21876e8e835c1840b8cf82af80da4c64b5fc10e4ef2c77112967da0eae7395731d69cb4838618fcdd0f3ad3","ssdeep":"","tlshash":"54a022e0b0803880028b0203b8233200b32c0cc028080808c8b200b02833a8008fb2c2","size":63,"data":"","first_seen":"2026-06-07T00:47:48.345628Z","last_seen":"2026-06-07T00:47:48.345628Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"92e1310476b2e7d5e931dfb607e32ddb","sha1":"dcfd95cfa98f9c22efe2638f0dac43e0efff33c4","sha256":"2b7970a38732466b9e38574534545a99d664427c9c99b92aa0aafa80b1d029f2","sha512":"c80f8d5738c27258c4fe601ae5f5dd5036c4695a2d353c88275147bf6fd4aebe66820972b4de918bef3d277ae3d62d9818325b16833d705f384a2ad58a2a22d7","ssdeep":"","tlshash":"3fd0a7d519698530729801466076e7a8267024a06b11654192e8cc2b5e11dd305a155c","size":217,"data":"","first_seen":"2026-06-07T00:47:48.347105Z","last_seen":"2026-06-07T00:47:48.347105Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nethubcorp.com/a57dc89e5gafef46a46bc0d58a4d0b6cf305.html","fqdn":"nethubcorp.com","domain":"nethubcorp.com","tld":"com"},"ip":{"addr":"104.26.9.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ccd7f81c0699ce2abdff139e23862c3","sha1":"7f8331209d8d0dbb61126c7824f68b99f313cc74","sha256":"af8fb4406418472ff72b946aba8d2e6675083d90b28c875158a778ba25de83b8","sha512":"5f8e57b2bd73dd3279be1a3187fe121d54832fbd0aff95846b55b3da95b21347ef2786ea98e2923f2c24e842323981aeb9018ee519a23a4ddeaedf1b8889adee","ssdeep":"","tlshash":"9111f63a7193047049ab65eb73e343853438414b3d16d669782cc2274fa2e6279f67bc","size":1079,"data":"","first_seen":"2025-06-18T12:47:46.405796Z","last_seen":"2026-06-07T02:37:35.058342Z","times_seen":483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nethubcorp.com/a57dc89e5gafef46a46bc0d58a4d0b6cf305.html","fqdn":"nethubcorp.com","domain":"nethubcorp.com","tld":"com"},"ip":{"addr":"104.26.9.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b1807ad6a74c031a9cab8a0e4728b241","sha1":"68e6ac609aedeb8c298ffc4378b45658a6b52e9a","sha256":"27a207795e2562b254844e886265e3b1c8cdb2c8ef3c00f9bd7a099efc1f10e8","sha512":"e1806c4c84524dee85b32b99fe29a12eefa82e076cac1405c198a762bce44ada582f35db2e3ef8e3c5c3f6e4c52d9142f1f51415a2db2df34e01f06943bdd6bf","ssdeep":"","tlshash":"68119cb53a1a5534d6c5418b317ee7a93e3260716a02a085c36ccc295d58e8714efcbe","size":902,"data":"","first_seen":"2026-06-07T00:47:48.349146Z","last_seen":"2026-06-07T00:47:48.349146Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nethubcorp.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"nethubcorp.com","domain":"nethubcorp.com","tld":"com"},"ip":{"addr":"104.26.9.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4244b49b0e25d8e52a55881ada6f2d5","sha1":"1ad4b2e3806e69498b2dc639cd18ca062778df65","sha256":"88ae2f623868693322597eafbc244618a51bbfe021a415c614c21f9356b5a2c6","sha512":"626bc1e24538af7c7fa5ffb5620a38954d27555502f88fbf35037ebc87a6f46fc6291db995fcef46b710ec0e416186f2a07142491f772739af2426fc68556fe0","ssdeep":"384:HOfO0HnsHNfJ1wakJEmu55bVRqcJyejNPFZlmmAq6uw2/3851j+D2vtuBdM0kDt:ufO0HsHxkJE3PbLqcJygzsmlw2E56Ont","tlshash":"c7a2d4d67ac7741c8337a534547b70eb716effb471484c08ae1091b9b867b14872aeac","size":22798,"data":"","first_seen":"2026-06-07T00:47:48.344301Z","last_seen":"2026-06-07T00:47:48.344301Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nethubcorp.com/cdn-cgi/challenge-platform/h/g/jsd/oneshot/8fc8ed1d8752/0.6101688332215858:1780790429:jUTwRc97gIgAzH7l4IQNneJeLNAmLYi_KPFbt5cIysU/a07ba53b2b615a0f","fqdn":"nethubcorp.com","domain":"nethubcorp.com","tld":"com"},"ip":{"addr":"104.26.9.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nethubcorp.com/a57dc89e5gafef46a46bc0d58a4d0b6cf305.html","date":"2026-06-07T00:47:26.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nethubcorp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 22:56:46 GMT","end":"Wed, 22 Jul 2026 23:56:42 GMT"},"fingerprint":{"sha1":"8F:B6:CE:7D:35:BA:7C:CA:D9:6E:3A:3B:74:6A:4A:53:23:77:96:4B","sha256":"40:9C:7E:D4:58:3D:5F:33:0F:21:22:EE:BA:72:70:98:29:06:0B:31:63:81:BE:8F:41:43:8C:B3:49:BF:56:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/8fc8ed1d8752/0.6101688332215858:1780790429:jUTwRc97gIgAzH7l4IQNneJeLNAmLYi_KPFbt5cIysU/a07ba53b2b615a0f HTTP/1.1\r\nHost: nethubcorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12218\r\nOrigin: https://nethubcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nethubcorp.com/a57dc89e5gafef46a46bc0d58a4d0b6cf305.html\r\nCookie: requestid=54143c2d8b67e6baf2ca640a6d9d6bf0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12218,"data":"GUAfoWvd-VPBQdQwpvKQlQNf-er9Q0AQGfv9vK1AQjfs9PgQuHNG9IzL9PpAv$QPfNIzQI61AvkQq9sQFBGwJ-4Jfsi-XJfvVtt5rQP25-pePH99XFPMga-2zPDCPp9Xpa6QvAYbFUjQNh61$6-zfQG-myh-y-QSJsjJYMzQq-zfs0AmWW0RAJNNNJNAeQI-Js-eqqgQvy2nfX-tcPCJDVVffvapfQ4Qs$upev$yuIH8-TbfxNj0Wug3VPfefvIJfQOVIJ$Ean3XfQTP4n2bH$WQQy2qlQFsQvxQHjisQ0NQPxb2z$lChpNzfQJ6zeOF2v9GOBl4F-vtQqqs-zxAFfQP-PP9JzjBKqBKpBAQdX1QOuUHAQsyjUOgINWqAQDkh-1YlhrvuEDu094WWpYStV1ylMa-1xy9pY+fzVVMAzvv2uyQwiQv-xGrNON$AAsN6iVIFNIaA3nKIQKr9XTbAQUjqzwj67X52rW2JqY2BO21pJ3YqW9Gj1aRJ+GJiDaJwzYi2lgIlRzQFwor9tFKepT0OsQUS05i$6AHHgKe0cU$weipRiVQGWljNlId6Txfi4KQG6BVwaqX5AXfeyxNrVauG4fL6WmlEfTEtxEsSI19P5ArjN$cIXqLXartugDm$UsW6K4PYqPGRfR8fvHE97LEYJ3EoFCY0-S33PvCLB9vVBXUU7hm$oUj1$Dh$Qx7FQ2QDeQDxP0hz0v0n9-oYrA8$zmxGVLXGMIeG2GhyTIIljFO1zKGz9+F5n69ETrscpLrMPHAJjJQ0QvcNWNP5Gj6Lt1jIWU3zY0zavkf9VvasMaF7vOPQ8vsFjaQdNFlLY7rkH8G5NQ2VQTfBA52wUgU-v9LWoPDAeorspe8H8pfg-s7jJQT-AffTnf8$U1jufWpfFPQI9NPsVzBhcwzbPQLWNrjG381V8vIf5JjN-WHqo-WVvvkb-56vvpl14mGrnO8h5vhQyzz4w9slkMh5bst-eRHWg6TXt2q$zsfjIhs7jRf8NDKt-+DNP2j6rj-sa18AODrfHU2-PJB8m8tSj-r5pj-usUuJt5d2$h2UtuQ-k2zh2M3fXWuDSXDYWFAF-FTrUP5fzUX2hh9P594BX+entymwkmQsvRTwjX4TfvLSfQuQntGQ5rr5sA2jqw8ojzDUC3txjbLsS5WFIkvmwIY97fhjmXj9EAJf8zB25g-bzj-SNUrzYNWHD7Tcj2rAVv9yUlHowtaJT6UaYDPbBvDHNW55K6joJQ$6r67M7Nbhs0fc$swpN-9$naLyefoLFWL$8bAAesJ$wzsDN+SWKqA$nUVQhkD7eerA13eXHPz1Y1wFxOmVUoA0KrttF7a7qVpFdd5ruA6PBQe3RmKXnUVz$PQV38XRff$yt9AXa9-emJSWFM5bTf83QsuONV-eQSVpsEHx8QS2-df-vE0fgrsrRb9AwyhwVpIh-SkRgba4n5iuift8kffQ2speh-bp7qb1PrEjn+xxFnR$r5nHySN1NyTLW-Ry7fQbq728QTpR-CPb4$pAV4$zor4hrkU7WeyderCuC7BQ4M4Usrhwt9sz-uUprQStVQr9BvCl7k7ag$Gxe2QzxkaeqBULtNQOa9eQPBLQGeIfuKAvljvPpG7KepBK-u-aj$NA5dl9QPybQJv9j9z9mfKj0LEfz2j$QKQVABKzX2qxmDFWBqAaDYGaNEFYD+qjGP3URPsOWJfD8-Q6081YVJH5J-Jwfd-758fy9pQ-hYndx0aQvPUKyyUG$nW+ETK9uWHUNPKOvr$xFlW-tdFBqz6SOhr5bGBBW-e+jDhowqKU5gjvUJAk-zzJN0JmzNeJ1W1jEy2tuFJd1z9JfgQIqJJQONgYqPrGA9VIj$6vfBzxjkvsHJ8j3KDvAG99QP320D18nAjQPtmktPypf7WsJ80l881A0Y9$frUQP7w48A$5KqwJvmpyXq8w1P0WeEzqIBPsL65mydXIKzAKdpeLz13xyBursDIyvhs-qOLv5Jl1kMPSGB3Nml9mdeTNM8QqNgFtktvWA9p0NQQHpRyd6Qv6-zmj963qyA$JqYJJHjrKH9vRL8QunAoHdgejln67vWGzJz2Bq33Odq2Gr6PDL1sXV12T+YRIFeBQlsHlVN8pv5N+IsXyFPn1tQxVSEY2k3Lba0V8J6J1Q-XE8$13RyqIbYaQ-BwHOzr+Ie1OqSanQqChGN7KW2xyHClxTDD9Hd1E$G9t0fA8Fd$Oqa$HeFAVvf6Q4hUkdIeH6LqkDapuB9nEXYnIpwVQky3qmvp0LuuJ6A9DQaInb7o-r0iP6imw2-aEuezgjA-SoOIvla-Fjvx$o$MagyfrxWAUywN38z0pzzJ0$VNvqQ0V72XR1--qt6$ssG$FuW5RGJBCAeuFPCO69mH13atuiP0RmuGXQ+-deUwVkG31X1CAFqxVI9$HwWsaI-8wAQQYysiwQdzRlg-603fHH68TNQVRqVeDm+JC3m4pJwm01B8JqObpS$s3la-d5BKp+X$xTQ-Ej6BXm9Al$EvqWOG$O2CysFNjAI9XvFHytArRgm9v9F2eijAQijQhEztBL9Jf01L$gGAvRk$+se-n-TDYsGn-SLvLbxRehJGm6Wu250EhPXHaj4bS1fQWjPYIeTz-JA5reMK7mVJaKC5YwDmNCkPsS5tqr9ivgfXAGmEP$t-erKeCXLecGdOhvTAvhqfyH9o5JOeGmlVxkH0wGUoR7PqUEAoO31f1zGcCNypJ7JO0J8XD5KgEh317cvL0uAXfAkgVsrj7-6PU1Fv0Noh5+eeNSUQ4aqxqAF+muRQ1Il2bme6pisRrlqG3Gp0Vo-3WUfQVFPozYJVYjwlftHIQO2gtLQJf4AmFAwD$vc1MJbr56ihohTkErY1TtvYgP22mhFvgmjohiK8Vtyjez1XPamx6XPhVGt3llRezRtUwgzFP2BVzLvXGHFvGAAsNjq4oVMNtdYXH-$rPKrehshmRDARpIb3GXH6yqj5PFVzkVLvHPAFPS+me8EfQv6twAav-PncK93q3lGB40rRzr6yOH9dgdJy1H6gOV7Jd0GCwwsfrD2LTa+1lvIz$Bx57Y6AILL-+Sm3RFWQF-QrOTxpgehwMV45qpqfBJts541$aaQY2gpnCVwdV3$LY-3u066MVz7hKuAU9lTlGemapkoA9Jc3XVNQIz6no9HU25sRnszPSyUwW8txqdBX6u$pvWzRibNW9chKgaq19Sfh+kE-IAF95o2f228lJEmcH9im8iOET-pakDNQq3QN$3zJHFAxvkyMzqAhmOw-BPfM6JaK24wV+ktawT3VqxxeWT4xjONHF9vAO4Flq9j4i5X2ibmWpibjQNDP$lp1$KiH3RfYsXQsLXyndGdkWxs6xTx2UMB4dsvYiS3wWKNvmajHexp9fQI4YyJ9zc9QVPWjLYsxlGm0zjLpzMFc0Wg2Jcf81nmu05Qpg7p8EBw4$2pvfjytv98he$841rg2zBv9W7zUQxfX53naQDl8Ekl9m3JPlq1cQ8mHEDhjW1wtwjrse-kknfFq0wQD0okSsbsegelANqYDE3rQ0QGBWwmT0w$NnNpWHHswjokdyTryWqlL8QET-bL4FD8Sh05QzfAL05LdL9LIFP5YgIzFs$p$J95tv55sJx0djxEprAQXjWQ-wjLP03homEYjp1-srIf-k9NLp8geeeoUV$hQNagtVtrfG8e1JwcLg0ATrpyHwmjDE0oSjOnYgJENh5Lam8YsWjgWnMhG8heoroJU8XshcjLTyU-J$B04e6H4eFFL1+p0WqYjg$y7zVpIj5s$FkWPcqzkexcdoKFP0zObYVNAAn$AP8V5P8lmzYsWohFPFDoSlHNGJ9WmQ6$UwAwwopzJo1lecaLdVMGa5MNQw9n$L8zflrY6sDqr0BVM8csbwtgW8UziJbwplwKCWEcX8xhUw7e+cPn7Fg5Izp8dYvyHskEVgkmHEjP9-We6kJgPgWJyv6pRNL1wP1P60eAm09vJlag98nYXFpATPmcvOzePyojUyBP4e0$hHye-EjvX8wEBEpPVwWnbzzGLemfPEIKbY95jP2EBmkpqQevbG7gVLbVHgHcdOM8-8wmPgkgIkKr9w1wFhSmPmE1UjD$NWKqEYRz5-Kompognk3VpcmYn$8wQKU$QV$H3cqfrKrGAwtvOhSG3Ej-qK8v$Lby9pTEsr9n9z3W2crGDhmV0wv-rkMlVlrvY$Ur9-bw2Ytnby35cw0fAN+-oysefcnEUscg9Wwlrzjq3KW5$v-LCe5QP0Uyc-mHAPvlVQwhsw9JRLHePNHExjK1oEtvdFv-+$Nholmy9ySrtw0gSqw8xA6AHlPGwGbpYo$AfcTrUs9vlVR03psO3GnzuWAgvQWkg0b-KEvLPgIfvhioQvlf0w4$aNnYBowJkFNoskLVd8h0yyU-Y0I1wvzz5rpcPGpnWQ6E408f+ohp5OjKqvbwmfWh4Ov5Um0K1lWOp5DEFe+gYGa0tcU1Snb-wg518raorAQuzA5wwNQK5v2gVQFoApvwAsCmhpDszGtNecCGJVlmQAQu6sUQcv9W2OCO407mttWjTKaovVukoGvlnHuVjckVXsNHVvOYrngjB-98XQ0l9pVqDOGHRfH$nAfRumfRgqgy1g4kXJIEgVwr8t9QsvVPEKpn6NkWvEwk6$vNsqE8S$Ll2hs$TK1DpQu$sNTksGEfuWkOF5Qv$Pt-3jdtQVEn9s7E8tvFqpHV9rkO5Nq1Ogxl5fHYOFuhkhBBzGTKYO1J5rYkUmKoqET$YOwnAKpYhGB0QF5-BkULB8lcqkjcTrSPpQBQu0dlFpxz7g-s8K+Kjld8V4Rkb5WlayIlkkO52RdeB1M$CEMXgJqwt0AvhmfY1B5P+mjV1zBLgqMGjrOHmWhYVOJyBFMXYpXNPzoPN--rUPte0wzNY1$Wwew4a5$PpvYWegWfwKWpqvtvzDvenAP5EWWPLkX5XWhqrFJevqGeA-mDHecJNN4fvwqQW1JHAQTOYJwEms2P9L9BJW2XFp-82mJwUXvAT-4FyVWRpJ8BpOComyaAQlJ4INUtTrzjWs5oBtuWLexkJu6tpjsvTEIXyjgJoJNyTV3DpjpW-X7KKRjryHwGLPcFVwjur5HPdEWDmnDm$q-WTNqJyPq-y19uQpPjqJN6sDIVM82uem58Sy+p-$vuMkmsMH8rW8Sma1xEA-Ol58M4xFptWVx4dqloEXAJvww5+ELArARtuhr1Fyy$9DAurn-4poG0hcgg1wV-nA6BwGLcCe8e9s8vH-prSRqstfgDbBXsVc41XPNOohLkEoQXBgqPJOtRDq5fU-HKpJOqgyBeHsQgQEAssGoNcFPGwGBQHAxcXzaWbsHBU198ihOOHXVexJF1IG-GTqwFTz+$MFmKqrYzQcOYVq5D$mFRHFFoftmcDFWwWB9-9lKwEcPA$jeDGK7ys1L$U4WRBo5HJRPnaH$5CmVw$zx625qD9kFf-GAzp8yooeuFnk3lYVPlWuDLRhyc0hwEiDJsiwiQ3ojKvzFrfOtLPJuWSHVw4HWK1l+mJO0KxOC03WGXbQqNxooJ5qAtrN2m5QxNpmhn4BXe8cDEuEF5g6POb5uR5$p-+hbRKRt2UWyLh6ABhejA0LAz-WM6$rYkpJvvm$ukOzvrHzmj7lLjKOOYDKaW+gTqFGNhxB8ABQFz8aEktQ1q24DFkV9wjX3JHc3zEj5Vm$jcCNYmjKvoL$TrTQvQ1Eyhocu6Ffenv80LM7$FXeQXjLNojrBmEnSR1PvJSH2JKVQlN-WyhQ0dO6QwPB9f+F8S8vYHIjbpBqJLK-feKcdAdxSQFQrJXDvOdYL$aGSqwsLGQSF4yXAYmYlR6RPG6tNtIDItp5oXqvVPVP8cVt3FPKsSf1toq6wtbm7laY4YYEana5lOUBuVstjFY$LWwcj05eVpqmE1vu4JKGlq4qHEwxVLVL06EA3mm$9rjOtumY6Pg4CNq8n$trKWHrdAkD5$yhVqfybYVGl687lKqrUlEmnnaqmKIhoca4Op1AUh0Vdwo8aGtNtQ9NvQlyeY1rrh+f-4JjMgdaPOxVo4VEcwUWS2BEMsvcCOUV3rOuMhUQVO3XbJaRW5CgtDAD7RN1emEHTEHv1IrQpNsB-03kpqJled8dR90wR7wxLAFusLPXBrMXf4ItNDr6TEfud4O1+R+XNH52wFTGFnt4jEhQvIDeBPfSt-nuhfGNXKGV9DDt3xutfg37t4XztIGuMDnzYfhW22nysYumTjV-wcXpoDtgL0EIKpEIrtAF1tuublB4GyT-wFy5HYHz8ww2JD9hJ8npuGDdl03WT0GnQGEKIulE-Apfb-bw9KsSDvUfxOy0GNYRW5q9T--4GEd6+uPNqVoD8ao6IRGN4AT-AmHgyAUe7p2qwdazY1g2uNgasP6P$lgzaoPq8BQaF6udUouFRNxDizqgL$N$74EzRf8wVxBQi4fGNt8-WQEEBeyOt-aEM6yEjvaz6mTk9PyFUWtdUhSQTBegvwGBc65P1Sl2bLSyPX6KoX62yuq79Pdw+quxR5wvWsMH5vv6+1-sy6PxF5dVWddX4mVvRdeSexx$eS48sFIzTchV$FBvprBPbuoE9xFylt9Sc7EYTd1e3BpjTEr6fiouojLVxur13usLhA6g0hbnhn8yMjgKwl+43RMB9sSpo91N$P$EMHFAG5R14tyxR9QRoqsGM6Ocu5l7ka8FaJBPog5yArsJaHpsVxUo6pGoXobAAFIpsxp50iPjCOhOa-egTQWeXK5-KVIxBd9Ycd4deCnWq6q1HdbqxWXBMd29m40Dr5ryJx1xH5Aqf3VxVeYRXq$DFcpY8F3XhxUttXScAyvwLg1vcBT2JL6nxp5kms4qRmHl048FvSHSwBiQmxDvB-2b6GApEORfOq70zRwELvixf4F0NFrSct93zX$q4q3JgBHpHpuplSwa6-hO1wcgVi-BJ8h0H7bY3IxF42h1NhKs3fj9tuY4bLW1o4itrn-B0e14COMt1UvSbc+5+YmSzAvrlWJvbzVjsD8as6OyaABPU9X85EMhpjG2-NcrDR$5AAv7ttXDWQsS-HM2V08QPm4SYxmOmw4x46jzxWE5i7TcRpzuq2BO371zbvOIF3DJPO1AD1o6dg8-tx5t$z6xFw9TUCaWNiViN3R3QzA0X2bQ95uB0vs65Qdk1hrCo0luwTJPRB0r0OdlxKQDBIcELwotpUNFOGMe5zWxl10A5P8clmU$fegkrSrPpkMp5L+Xhl94aQesdMDXFxKDm-wE+q$fyN1wyNIE$g4Wy--s0v6$MjcB9Mo71Mb00M-8Du8Y0Cg1cJxitLdAL1Th891SmW1xvQO9JDb-T0LoO7Uynz4VaGTGaVxaomaU4u0e5wqh2dW9cn-2PSw52aLhTzwJn1etvCqWtKHETqNDaT+3X3Qr56wwy9M+7mMUTYA6LJW3VqyLdoL3P5iNzqpKq-T53UI9nu6DNRYGUl$Uj5HCqpB+pd0Q2KsKqRWzyudWtK$qWsYCbPlnqotiBm4+MIjsb$vNu9PfaAehWtzz9K4neTv5WBrFn5wQyWWe-egFf7tQ6cxfUinwdNy0k-y6lHAi9rfOGBrfT+MAuQ$EPjKP1W2jdtBnYIIPzqAtYN0wGeNDDmeNYK0qbUCAOQdQbP1v9J31QUoqjteyARUtb9+fdPJfTictrfQULhLk2VXKwiSQfQdQHQCteQ$FpeK1j8L+vNQa0Yp8hQfmmPoK8VIDhs11wFzNvbzzIG6-hADvGmjgaz1OQ1Jgv5sg8wmAzwAIWE$vbeVgGd-jqArhRsAGqP0hsvXzqqFf-w$Jw-LF6zjmfdA5PnF-PQtjz4AnosKzJv5Aj8U2A1oh2hzeDzyB-OoIfjQrPXgWzCA2-YsfVPMq72AWB1ADwizp1ISKtd5HSfxv2j8AStJfOPYtPn9HQWPv-wNfL8HjbeYzL1PQPP-JjzgIt1ircTYfJjwT-9u-pqlYPumBe-zoGpktjfJjmP9-qfcttu-NQpkVGQTz0NaPTj5elm-dGoFN-Bjqz36osVmsjflA4$9tyJJ6QB5jMiW79vMAxhCQnjbe5WwAQjU1UDz+JoqQyrSWvPifbVYIv-o0ob-FvyAws9EFSjTrTDrO5msWN8etWgjSjdnrWofNeWctfeJakSWHesh95DAXTKhWbLF5vpqoGmvr-6QYQwsrcAtI-r$h3-etArKKorQjv0W11smO87BL2zKFJ0AzGwBmNTPcUT9UtTnLE8k-WWpVyeAlQhEvwWPSKPON3s-V3hQ-XjlwaOoILNjuztg8UIs5$voAaAq5$SaQIlsoNb9fjbz-02Im6-QhdSjeTzqwm6vmPA9+tMe2-OhYwWKf6t8VN$LRrvWzFhtl6vXFRYNPPmXQG9-lH8rlPaA8jVQsHqPsYP1Fy8aLNHVWarPBFnV9RkHokUzfd1RUoTNKPUQyWt5BepeJtpAPzfGQ7sdtJ0KFJp3ijLz$t98quTsv-Rt9WFRWFPv65zSgw999-ATNGWG0etDeKJ8ON2Ejpy9cfPpVksej45a22VjFsaruhNeBevDrRqar1fGeEj76PELmsbFJMb9C9-kw7NAjjjRl1Ntz-lwR5gAyzkxP3sfa3--Vx291ptrtQdv+tVhSmoTejvCWQN4Q-wh$Jb-SNNeqdSGRVGa5zJ4jHf5vfwldPuhiFsmG-5nQjQEzdDTdP9HmkYvffne8fzfsAQB-Gh8SWkQmPNF-spQVMqp5wwOsm5z9HAszpeVh$MlVJht-V5Er6LnNWQSNvQaJVsws8fQPWgy75-188kDMRUaOAc6aLTYAjH-6YSWWmhy28XN5WfIkW+fBQ7Q4JjQ77fSp6W3MwfW+aIhpz9kNI6dQgzL69v7FCQGQ0D2HwayF9vvxVbHOTs3$BhRWB-3Q3QR-PeD8NwNdNwe2$LF2WvDfysWeQQ-$vfnAyfdULrTn6i1zfJ0yphs5gEt-MhJzPeWp+TyD9GmOKPAOm-gAuscfcd-YjMk+NXv$mNssfK0r58ngBURD2s1Fa0rIda--e9drcIEXdpveJtP1FvPmvXvT8P7KtrFoS-8z8CVEt9OgQIUKQO1TWIa1k-jYKFfebGGjFP-n1eRccxtnzwOqRW+qyA5HrswrwAjmUm98VVEG72CWuQJ0D8sJHrwR9cAetEUrl5ph+MDzXV9fNlwrLyWF8o0kyAle9z4JuqioxtJ--5vL1DFBTxnj-rMj2Wm6Y0fhVqqjQefpF8USmQ9fzTuWt5uQnmP0kFk3PXFwf2d1iAdfNMmIyAzH2Wv6k6j9e28q8Bx0p-vzVKcfqeo0w5lj3m5cf+QXzwaLzdFUsAAzVXLsQqWzeseK1YV-D-RhLQGYw0OzwSP4QJ8AqPTzx-0P6jwDoUIU5nrBW4vb6nzKsfaNWTdF3qLgSWDaOTkHmBK6VwfPlO8WH55vqlQfoIwVjhFaAS8QmV+qpjuvF6eYsQK+AnrSQgQVyIgYYPPHq8A3+QpedtPVvvQng5kpmwdLYz5mPBrBrKpMox$RNz1LJyW5LoDPne13sVyKYifh$k0d3wfrfQLVl$4zb0lB3BdrsurvlT3ldcH$no+zN5LWkduAPLsi$XlhQKk70DcKasTzD3OsrownOB$jNnAKo9+Hsj7eom+A4makB+qBPjmd3yfOpAUwx$hI$QrQcmuILc8Ut$vudCS7xwxHT0u35cqaw4NlHT06B7T9VHav4H2vj3Jzpmr0-CqLlkIcMmzVWLE$BvC3H1whKy-CH2iiF7Mlntura8fob30-uM67Nl8B58q7HpmstLPhKm$Qn3avxLNl$FllMudhmow8XlKlbv0MMvpesoT7lDrfVqjyBPwf3lwrTRISdYFgm$zK9vgIzvMvKeHlBbsfvvB+AQpUs1DudBWybH9yt$qreWBgQQY9noUL9eWWkPpKxkzmNQi0xz$zBQ+898zVW$vdq$Co-oBvLMUFI2KIhTop3g8QS-Sfe1Dhy98dRHGf4Bpgv73v-$Fp+-ajgoufrmwKVU6MpNl2rLVQNzf4d1voQrQMUN1IH+$1q8TBmPFI9$YeOm7AMJfN98DIs3mNf9BW1JVsB1zoRfgJWppBod-XF7IV9uW-+kzyxFm$5fISSe-RFWI3-C-b69Rng5He53WawiNQ0d1CMd3$L7INQEDyDo-DlVGgs7G1FxoJ96W$vYfYItEqp3X8QpafyxzGoaA4e33jv8pplqy$uJTI2cqp1KFb$6v5Sd4GB-$qd3$Qdto9QMjSzd33dz3wgHuW0o+$JDsrG7NlHQhWQSJfkGOsBI5v4$gyGp$zBvnvzl$FppmozLW-elp3X82r5fR-WGW3bMqMTniVtLsqTfKk1UaIrHPb3J98RxkweuB$1qz1bqh4hW6xs3mc$5cIgdOrWFFiaA9wP2PJt73ve1UG8Q9G$P38+YiAk-uUxWuBtPUkt$WWsVLASp4JFA7eaWqdNryxeu$vWnPH3PvrJD4jcsnWVWP7T9f5jY-6UnILr$tEjybeognD6wvfD5IjDBK5UBp8wu4r0JbvD2D6-6WWHk1caQ2u6kcGx1Yt0fJw--P9IC8I9hFzhlin+v-$2GAGxoOrHmmhQz2gmPzrx8TDOIPD$SY+VkQFuTQCBhK9H6SplQG3$dkyILohHNuMEW6vKzevM-ruKW7quWvH6YyyD7A$2i$5qBxfN3-E5deX2nAuyXuGyvBHRxp6EyGmcT724XsV6uniDA$W2CXYs4Lyi6z$fTuALB6$yhmHU-TmS2YwX1gQ33a-qsJdD31mDW1iMkyYHD+yseLM0WoxIeLj5RqxyNMBjYpt4$ouly+mky9CqPhidkEXMhzVCOc1mux2MTMEJQB41mDzr9THXJQBk1faAr7WMPybyfpQ29rC9gP1f44poq0rW2lvxq4G1Uqh1KDfXYpBAyWqIyN-eSreFu11qKENwg58SBThJs2Eo-FGJeRL1TugrPnojyRyUp+$bj3D85YRBUErv5rQTHy5ARgt0a6rIwFhnAt+30arr5T+uQtFa8muErHWtdYq60y59EEas1YOj6Ugph7EbkdFJkGscma90U$JXystdpyo1GLWfP5jtMnAoBGLWDvajtM1eauGAJbPJ3DVlQ2+GQJBPYDuWpHaaQTJFdpbXMhbaO1cAtoavtqnwuW$2TuNxrDDPgD2EoJDSSIDJclqlEmp0HKBRg8muVXlVLY5Vtwpuu1XKDt39Vu8cHDmX6VVI9HDDc3ag$5Tf3YB6JeV2IyYp4opBD2pxWX$EQII5Eu2yV5wXgmRuJdBYpN2kjorpewbVEyqQbAUeDMaGD0lBWd14-WkG3j9vsqAzGfP6KXR3lMaifwUyUPJq6-GDh-sQxVG1wS-roAE4$wMxX$H-91PfP0AzO4g492WRyf0cKof1Wh4aFv3Dux8iOWE5u7X1t+tPoNwQAWNGBskXjmDIn6j7QBmVzNQQQP0mKHew9-feg5JQ4QJswXvsWS5ngGt1wwSQVQAAyAwWIUKt$1h6j30yfnaVMr6gTAvAT9qJHHtQQs2eSQvp-NveNkfveLmGArkAgjfRYjKDO5vwLoW0zueJAJ6PqHpAieURTBYotAQUvifWQGkzQQ6zfYUQQN5MTNx4QytDEnYQKQgQwsdna9oQvs6jxOz1ndhXycDTGx6RWfpAPIgsfgx6UGnzQwUgx6RRvP+upPbTgx2BwQwf-evDTxxaKkiVhrtPATVQWQ1MQktYEB+NsBeOJwBw5czQei2RCnybyAPiFe8T92O5evA8wQkXzzOYGXnYvwQQQXLJ-JLW+pQNfO3nRwuEBQTifeOQKIsagCqltGtpG9ew9vGTRQ1s7Q6KrgH0PEvWtw0VWH4FRihs1swm-boMfb60eDtpVPnutfnjAzClY$xV-inr-NTWz1TpLokNRA2tGdxVAgR5gbQKfbB57y3eFvfsazTKUfNhB$2UTkA1sJT8d-BQgjafPbCMpejX-AQqemK3QLLDsfyfgxWQ5QNQ-e-evAQwQJ-G4u6$992ti8d8SHvv50T566UM8yvrvoL$M5FsbAO2rSvx5hQaQxQTctAQwYbQtbS0OzSxp$zJPvQS0qVVypa58IoQiVQQwANiHvq-AxXomXtaz-KWtWhu5c3QciEQoLYhDncA+qQKQpQvtw8PeQ1QsfLQVOQnj-QBQr9JfOta8KAQGQKQSQA990-AvDQr92zsAPz-AvyxXbbCx4B5WJvOsxeQQoUSwfQQ"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Jun 2026 00:47:26 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: VymE1Myu2jRrUF2/8gmoWA==$/crH076TwvU3NfgSJIhy6Q==\r\nset-cookie: cf_clearance=vvPACrfz1Ij.0D6S3DJ_6KR.Pjjvrs8_wxDaJPl7CTg-1780793246-1.2.1.1-8MnKGnPjgzeEtnK1xtu.h0.9IXY_S91Jcqy2o5eUIR2vt._T5vwTJyQNRd89xZYN9p7BDtx1NXrjyqI6wvzAM8ALYNErhlLie_F80fjiFmQn5bwk9VZmFJ9CtiWqdk9ZTsIrbtP87_qqwfm2fSbkbr_r7u1.iETv9ZXWQybAe7mLIwuDrJW4GVsZTbPgFNJa3ulEdpNl6mp0NOcmbdm6pBs.KcU0kUovM8O9jFehUpVylWKxdrnH9VF4lCalOrzEqAEweL6OBS9AJVfSc9uT4X8WCbxyGsxRvLQBGWR2Kz_fiO71eMEk1scJyOPXUoRNveU5Nbt5TFdzN2cmwRAXvQ; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=nethubcorp.com; Expires=Mon, 07 Jun 2027 00:47:26 GMT\r\ntiming-allow-origin: https://nethubcorp.com\r\nserver: cloudflare\r\ncf-ray: a07ba5411cc45a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"nethubcorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"nethubcorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"lp.cybeready.net/beefree_images/cybeready_images/microsoft_signinoptions.svg","fqdn":"lp.cybeready.net","domain":"cybeready.net","tld":"net"},"ip":{"addr":"172.67.74.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nethubcorp.com/a57dc89e5gafef46a46bc0d58a4d0b6cf305.html","date":"2026-06-07T00:47:26.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cybeready.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 14:26:44 GMT","end":"Fri, 21 Aug 2026 14:26:43 GMT"},"fingerprint":{"sha1":"8C:E6:5D:EC:CB:1B:39:37:20:60:C2:4B:93:DB:32:F8:4F:50:6A:8D","sha256":"0D:5F:5B:AA:DE:08:BA:88:85:6D:BE:89:0B:FB:77:0C:3E:4D:73:0E:FC:CE:5F:CF:DC:8F:B7:98:30:C1:3F:1F"}}},"request":{"raw":"GET /beefree_images/cybeready_images/microsoft_signinoptions.svg HTTP/1.1\r\nHost: lp.cybeready.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nethubcorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Jun 2026 00:47:26 GMT\r\ncontent-type: image/svg+xml\r\nx-amz-id-2: GC5zDyJe13ZKxC/yYQTvPo7BtS5pVT4SRTpipVWG66ST/M1FOwnwvANOVk0Wkhsb5wZNYkVHPP8=\r\nx-amz-request-id: Y9BXXG1K5HMSQG5Z\r\nlast-modified: Tue, 10 Jun 2025 15:13:54 GMT\r\nvary: accept-encoding\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: wU8cUxM.CPzJAeWx5ZZ85SiUX5Ik75p7\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YEPSMb4R%2BAI9mIsfp7wVWr0Ip4qmHelsWIU8p%2FpdV4FvkkxfhmBLKybvl4V15mj4HK7vrHgdw3U0ihwdL3O4X4OGdOSh93vQ06IFTawf11fTMcPrfLimeAK%2BOHK3On2bv7M%3D\"}]}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4e48046ce74f4b89d45037c90576bfac\"\r\ncontent-encoding: br\r\ncf-ray: a07ba53efa0c0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1592,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e48046ce74f4b89d45037c90576bfac","sha1":"4a41b3b51ed787f7b33294202da72220c7cd2c32","sha256":"8e6db1634f1812d42516778fc890010aa57f3e39914fb4803df2c38abbf56d93","sha512":"b2bba2a68edaa1a08cfa31ed058afb5e6a3150aabb9a78db9f5ccc2364186d44a015986a57707b57e2cc855fa7da57861ad19fc4e7006c2c239c98063fe903cf","ssdeep":"","tlshash":"b931787f43b45ae7239017741760626c13f4ee917169d0b4dba30c9a8d4bd33327843a","first_seen":"2023-04-14T20:16:11Z","last_seen":"2026-06-20T19:49:30.459946Z","times_seen":85067,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":44,"dns":21,"connect":1,"send":0,"wait":151,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"lp.cybeready.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"lp.cybeready.net/beefree_images/cybeready_images/microsoft_logo.svg","fqdn":"lp.cybeready.net","domain":"cybeready.net","tld":"net"},"ip":{"addr":"172.67.74.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nethubcorp.com/a57dc89e5gafef46a46bc0d58a4d0b6cf305.html","date":"2026-06-07T00:47:26.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cybeready.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 14:26:44 GMT","end":"Fri, 21 Aug 2026 14:26:43 GMT"},"fingerprint":{"sha1":"8C:E6:5D:EC:CB:1B:39:37:20:60:C2:4B:93:DB:32:F8:4F:50:6A:8D","sha256":"0D:5F:5B:AA:DE:08:BA:88:85:6D:BE:89:0B:FB:77:0C:3E:4D:73:0E:FC:CE:5F:CF:DC:8F:B7:98:30:C1:3F:1F"}}},"request":{"raw":"GET /beefree_images/cybeready_images/microsoft_logo.svg HTTP/1.1\r\nHost: lp.cybeready.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nethubcorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Jun 2026 00:47:26 GMT\r\ncontent-type: image/svg+xml\r\nx-amz-id-2: vA6pQaYjHAOCZEUADLsqM6+nNoDFetStJsnqbWG60zESIYObc1uuZksaSo/zr9mm5A8nYU0jfY4=\r\nx-amz-request-id: FYV22A0TV3QXPCCC\r\nlast-modified: Tue, 10 Jun 2025 15:13:54 GMT\r\nvary: accept-encoding\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 1dePIZSyGBclK0kMZn.Nqv9_fbjCvZLm\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j2c3GpiYDL8uSh8qAiZoGojiBd86zBH0uurhxUoXwIhGFBZzeT8gYUmu0LpgQRLiR3Q9cbiLvzp3efdfRMMD7oo516D%2BgTJ6wqXDmR%2BJRjj644G1n%2FVDSquIIZlPOlBAvQE%3D\"}]}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ee5c8d9fb6248c938fd0dc19370e90bd\"\r\ncontent-encoding: br\r\ncf-ray: a07ba53ee9fd0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3651,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee5c8d9fb6248c938fd0dc19370e90bd","sha1":"d01a22720918b781338b5bbf9202b241a5f99ee4","sha256":"04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a","sha512":"c77215b729d0e60c97f075998e88775cd0f813b4d094dc2fdd13e5711d16f4e5993d4521d0fbd5bf7150b0dbe253d88b1b1ff60901f053113c5d7c1919852d58","ssdeep":"","tlshash":"6371117b132887dae9d4a78c2e997b8d377095c4b1b24290874328a5bc086f7f038d60","first_seen":"2023-04-06T08:44:24Z","last_seen":"2026-06-20T19:49:30.456403Z","times_seen":127199,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":46,"dns":5,"connect":1,"send":0,"wait":158,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"lp.cybeready.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"lp.cybeready.net/beefree_images/cybeready_images/microsoft_arrow_left.svg","fqdn":"lp.cybeready.net","domain":"cybeready.net","tld":"net"},"ip":{"addr":"172.67.74.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nethubcorp.com/a57dc89e5gafef46a46bc0d58a4d0b6cf305.html","date":"2026-06-07T00:47:26.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cybeready.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 14:26:44 GMT","end":"Fri, 21 Aug 2026 14:26:43 GMT"},"fingerprint":{"sha1":"8C:E6:5D:EC:CB:1B:39:37:20:60:C2:4B:93:DB:32:F8:4F:50:6A:8D","sha256":"0D:5F:5B:AA:DE:08:BA:88:85:6D:BE:89:0B:FB:77:0C:3E:4D:73:0E:FC:CE:5F:CF:DC:8F:B7:98:30:C1:3F:1F"}}},"request":{"raw":"GET /beefree_images/cybeready_images/microsoft_arrow_left.svg HTTP/1.1\r\nHost: lp.cybeready.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nethubcorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Jun 2026 00:47:26 GMT\r\ncontent-type: image/svg+xml\r\nx-amz-id-2: 6As2OH9IRxoORIMkzc7zU6fOkT66kI2xeRxmahIbnsCOcnbJsWdrdLxYbqvu22yfsZfYQXCCCuU=\r\nx-amz-request-id: Y9BRVFR6T28JFCST\r\nlast-modified: Tue, 10 Jun 2025 15:13:53 GMT\r\nvary: accept-encoding\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: KtZkBd1OFuJVqyYn1zxG0g5YcUgKC04K\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ngw57haDZnrDU8Qbt61aJJ9WLZqphpX1EiqpvUzjuxieGkLWz6JlefcZT6cxQb8Zy79J9XjSpZZEqlrluXofN1TsKot6quPzWPntY4BCVgfB83LwDWRUUKGLtnqm75bicy0%3D\"}]}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a9cc2824ef3517b6c4160dcf8ff7d410\"\r\ncontent-encoding: br\r\ncf-ray: a07ba53efa010731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":513,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a9cc2824ef3517b6c4160dcf8ff7d410","sha1":"8db9aebad84ca6e4225bfdd2458ff3821cc4f064","sha256":"34f9db946e89f031a80dfca7b16b2b686469c9886441261ae70a44da1dfa2d58","sha512":"aa3ddab0a1cff9533f9a668aba4fb5e3d75ed9f8aff8a1caa4c29f9126d85ff4529e82712c0119d2e81035d1ce1cc491ff9473384d211317d4d00e0e234ad97f","ssdeep":"","tlshash":"29f0598a41c8fb142ce08050dff8ea28540270c3fb4e5008b1922b18e2ef383f6406f5","first_seen":"2023-04-19T20:10:52Z","last_seen":"2026-06-19T12:41:18.007714Z","times_seen":30730,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":40,"dns":1,"connect":7,"send":0,"wait":158,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"lp.cybeready.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nethubcorp.com/a57dc89e5gafef46a46bc0d58a4d0b6cf305.html","fqdn":"nethubcorp.com","domain":"nethubcorp.com","tld":"com"},"ip":{"addr":"104.26.9.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-07T00:47:25.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nethubcorp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 22:56:46 GMT","end":"Wed, 22 Jul 2026 23:56:42 GMT"},"fingerprint":{"sha1":"8F:B6:CE:7D:35:BA:7C:CA:D9:6E:3A:3B:74:6A:4A:53:23:77:96:4B","sha256":"40:9C:7E:D4:58:3D:5F:33:0F:21:22:EE:BA:72:70:98:29:06:0B:31:63:81:BE:8F:41:43:8C:B3:49:BF:56:F3"}}},"request":{"raw":"GET /a57dc89e5gafef46a46bc0d58a4d0b6cf305.html HTTP/1.1\r\nHost: nethubcorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Jun 2026 00:47:26 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nx-amz-expiration: expiry-date=\"Thu, 11 Jun 2026 00:00:00 GMT\", rule-id=\"DeleteAfter30Days\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: oHzks32fQXRESdtamKfYJbMb_brG6FTL\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aghtzPv2aoWw%2FFFNibAvNETx7zeIh5BvyWRc6BRTr%2Fq3iJfH%2FJsAx7TbvDnscujz4mOLd8OUJweIGIJCbWQZYaWyQK%2F9uxp79F9WDiVtjRJeDzxRLHcVq8wE3tWWxm0d\"}]}\r\nset-cookie: requestid=54143c2d8b67e6baf2ca640a6d9d6bf0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a07ba53b2b615a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":30644,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (926), with CRLF, LF line terminators","md5":"93d8bc6c9d27d1c3b44a1062cb030797","sha1":"d30793a6246a274ea2c2284a2fabe4ba09fef652","sha256":"0c192a6011aecfd5301e2f435b4a23e241e20d3016ab089b0d0d6e0676218234","sha512":"b9d16641611ddfe00e59fc10201846a7cfeb04f22e00fb63771e0c3d53ec807a3b57d039d9ad95261adf45aa39c932edf746ca95672878701feaffb3e355aaea","ssdeep":"384:TNWKfYedKDww4mYCyJEUVjiMxnkQcgBg/SR+WfeBUrlDiXiA0nx/k:YFedKDSbCekMxPr8SAqx/k","tlshash":"b6d29560730d100b938242e973b97b63ee0cc912d60791bff4b496bacbd99544b29bf1","first_seen":"2026-06-07T00:47:48.342106Z","last_seen":"2026-06-07T00:47:48.342106Z","times_seen":1,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":30,"dns":1,"connect":1,"send":0,"wait":320,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"nethubcorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"nethubcorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"lp.cybeready.net/beefree_images/cybeready_images/microsoft_background.svg","fqdn":"lp.cybeready.net","domain":"cybeready.net","tld":"net"},"ip":{"addr":"172.67.74.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nethubcorp.com/a57dc89e5gafef46a46bc0d58a4d0b6cf305.html","date":"2026-06-07T00:47:26.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cybeready.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 14:26:44 GMT","end":"Fri, 21 Aug 2026 14:26:43 GMT"},"fingerprint":{"sha1":"8C:E6:5D:EC:CB:1B:39:37:20:60:C2:4B:93:DB:32:F8:4F:50:6A:8D","sha256":"0D:5F:5B:AA:DE:08:BA:88:85:6D:BE:89:0B:FB:77:0C:3E:4D:73:0E:FC:CE:5F:CF:DC:8F:B7:98:30:C1:3F:1F"}}},"request":{"raw":"GET /beefree_images/cybeready_images/microsoft_background.svg HTTP/1.1\r\nHost: lp.cybeready.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nethubcorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Jun 2026 00:47:26 GMT\r\ncontent-type: image/svg+xml\r\nx-amz-id-2: kTOaVBPmFMap4L4g+QOKf4TckoaIUpztb2uBa6SnIJI9O5r4KH+SUk+S9PZauVR8nmbPewyjSMU=\r\nx-amz-request-id: Y9BQSADV0DEWW5VC\r\nlast-modified: Tue, 10 Jun 2025 15:13:53 GMT\r\nvary: accept-encoding\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: HE2BsMHDGkQP7rguCXj9ECUOB52D_6DE\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1mT7jOi%2BYjKBc5gkbBThY3xryb9RBGXqSyyDhxOk5efQLpZju1ZqaIA7nN4qV5%2B3bbNsi7hlrMoxRQ%2BsBo3SMmyRhuIdWoTtCM6xahcLFIWoKEPsX4VTTpC4ui3xOkZHx90%3D\"}]}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"bc3d32a696895f78c19df6c717586a5d\"\r\ncontent-encoding: br\r\ncf-ray: a07ba53ef9fe0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1864,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc3d32a696895f78c19df6c717586a5d","sha1":"9191cb156a30a3ed79c44c0a16c95159e8ff689d","sha256":"0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68","sha512":"8d4f38907f3423a86d90575772b292680f7970527d2090fc005f9b096cc81d3f279d59ad76eafca30c3d4bbaf2276bbaa753e2a46a149424cf6f1c319ded5a64","ssdeep":"","tlshash":"4e310059c51d3566ec04c3aceae1d468315e71efa8a581c961849b3f95b0dce0eccb70","first_seen":"2023-04-12T23:20:27Z","last_seen":"2026-06-20T01:22:30.260949Z","times_seen":103553,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"lp.cybeready.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nethubcorp.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"nethubcorp.com","domain":"nethubcorp.com","tld":"com"},"ip":{"addr":"104.26.9.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nethubcorp.com/a57dc89e5gafef46a46bc0d58a4d0b6cf305.html","date":"2026-06-07T00:47:26.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nethubcorp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 22:56:46 GMT","end":"Wed, 22 Jul 2026 23:56:42 GMT"},"fingerprint":{"sha1":"8F:B6:CE:7D:35:BA:7C:CA:D9:6E:3A:3B:74:6A:4A:53:23:77:96:4B","sha256":"40:9C:7E:D4:58:3D:5F:33:0F:21:22:EE:BA:72:70:98:29:06:0B:31:63:81:BE:8F:41:43:8C:B3:49:BF:56:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: nethubcorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: requestid=54143c2d8b67e6baf2ca640a6d9d6bf0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 07 Jun 2026 00:47:26 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: a07ba53f5a255a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22798,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"nethubcorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"nethubcorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nethubcorp.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js?","fqdn":"nethubcorp.com","domain":"nethubcorp.com","tld":"com"},"ip":{"addr":"104.26.9.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nethubcorp.com/a57dc89e5gafef46a46bc0d58a4d0b6cf305.html","date":"2026-06-07T00:47:26.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nethubcorp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 22:56:46 GMT","end":"Wed, 22 Jul 2026 23:56:42 GMT"},"fingerprint":{"sha1":"8F:B6:CE:7D:35:BA:7C:CA:D9:6E:3A:3B:74:6A:4A:53:23:77:96:4B","sha256":"40:9C:7E:D4:58:3D:5F:33:0F:21:22:EE:BA:72:70:98:29:06:0B:31:63:81:BE:8F:41:43:8C:B3:49:BF:56:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js? HTTP/1.1\r\nHost: nethubcorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: requestid=54143c2d8b67e6baf2ca640a6d9d6bf0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Jun 2026 00:47:26 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a07ba53fbaaa5a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22798,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (22798), with no line terminators","md5":"b4244b49b0e25d8e52a55881ada6f2d5","sha1":"1ad4b2e3806e69498b2dc639cd18ca062778df65","sha256":"88ae2f623868693322597eafbc244618a51bbfe021a415c614c21f9356b5a2c6","sha512":"626bc1e24538af7c7fa5ffb5620a38954d27555502f88fbf35037ebc87a6f46fc6291db995fcef46b710ec0e416186f2a07142491f772739af2426fc68556fe0","ssdeep":"384:HOfO0HnsHNfJ1wakJEmu55bVRqcJyejNPFZlmmAq6uw2/3851j+D2vtuBdM0kDt:ufO0HsHxkJE3PbLqcJygzsmlw2E56Ont","tlshash":"c7a2d4d67ac7741c8337a534547b70eb716effb471484c08ae1091b9b867b14872aeac","first_seen":"2026-06-07T00:47:48.344301Z","last_seen":"2026-06-07T00:47:48.344301Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"nethubcorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"nethubcorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}}]}