{"report_id":"ea98be0b-71fd-4428-97cd-6499073fc6fc","version":6,"status":"done","tags":[],"date":"2026-03-07T08:05:02Z","url":{"schema":"http","addr":"secureailink.com/ping/?redirect=https://trk.fuel-care-present-responsible.com/AyufVJnHcCLNyOm?cid={click_id}\u0026sub1=02272026-Tmo_clickers_send11_etoc_21600rec_27_feb_2026-ETOC-hash1025\u0026traffic=ETOC\u0026ip=35.187.132.233\u0026sub_id=undefined\u0026source=undefined\u0026landerIsActive=undefined","fqdn":"secureailink.com","domain":"secureailink.com","tld":"com"},"ip":{"addr":"13.248.213.92","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"secureailink.com/ping/?redirect=http://trk.fuel-care-present-responsible.com/AyufVJnHcCLNyOm?cid={click_id}\u0026sub1=02272026-Tmo_clickers_send11_etoc_21600rec_27_feb_2026-ETOC-hash1025\u0026traffic=ETOC\u0026ip=35.187.132.233\u0026sub_id=undefined\u0026source=undefined\u0026landerIsActive=undefined","fqdn":"secureailink.com","domain":"secureailink.com","tld":"com"},"title":"Error","dom":{"size":127,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"26f965d0d1794a2682e3b37af59248f3","sha1":"044f03161514d7515c576084e1e27459deff450e","sha256":"90a876b860e504a8e31948c9742f3347f3944ad6f9191d00978ab18ddfcca9a0","sha512":"ee6684e2ef8667839641ae0b52988ba4bf2f12e9e4b4215c8d73fa7f29d7e27fb9c27fe7ef1da6f65ba80b8d25ac891a2663a9e6738599c99dc357b083e21f54","ssdeep":"","tlshash":"95b02bda0200100a4e30c30418c372541cd5790e08a185006b006066d8d5023c586180","dom_hash":"domhash861c10d83d6a9eeb579a5baadc70a7e6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"secureailink.com/ping/?redirect=https://trk.fuel-care-present-responsible.com/AyufVJnHcCLNyOm?cid={click_id}\u0026sub1=02272026-Tmo_clickers_send11_etoc_21600rec_27_feb_2026-ETOC-hash1025\u0026traffic=ETOC\u0026ip=35.187.132.233\u0026sub_id=undefined\u0026source=undefined\u0026landerIsActive=undefined","fqdn":"secureailink.com","domain":"secureailink.com","tld":"com"},"ip":{"addr":"13.248.213.92","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-11T08:05:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"secureailink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"secureailink.com","ip":{"addr":"15.197.149.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-12-28","domain_rank":440144,"first_seen":"2025-02-08T00:57:25.741571Z","last_seen":"2026-03-01T15:20:42.400843Z","alert_count":2,"request_count":2,"received_data":2220,"sent_data":1395,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"secureailink.com/ping/?redirect=https://trk.fuel-care-present-responsible.com/AyufVJnHcCLNyOm?cid={click_id}\u0026sub1=02272026-Tmo_clickers_send11_etoc_21600rec_27_feb_2026-ETOC-hash1025\u0026traffic=ETOC\u0026ip=35.187.132.233\u0026sub_id=undefined\u0026source=undefined\u0026landerIsActive=undefined","fqdn":"secureailink.com","domain":"secureailink.com","tld":"com"},"ip":{"addr":"15.197.149.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T08:04:40.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secureailink.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 23:58:08 GMT","end":"Mon, 13 Apr 2026 23:58:07 GMT"},"fingerprint":{"sha1":"D4:A2:71:B1:56:09:98:EE:27:19:B0:62:C0:6E:17:F1:BE:FD:DE:4D","sha256":"50:3D:63:FE:E8:89:B7:49:50:E9:F6:2D:1B:F2:A0:0C:D7:C7:2A:F2:AE:9C:DE:B4:B1:2D:F6:50:C4:CC:E7:DE"}}},"request":{"raw":"GET /ping/?redirect=https://trk.fuel-care-present-responsible.com/AyufVJnHcCLNyOm?cid={click_id}\u0026sub1=02272026-Tmo_clickers_send11_etoc_21600rec_27_feb_2026-ETOC-hash1025\u0026traffic=ETOC\u0026ip=35.187.132.233\u0026sub_id=undefined\u0026source=undefined\u0026landerIsActive=undefined HTTP/1.1\r\nHost: secureailink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, PUT, POST, DELETE\r\naccess-control-allow-origin: *\r\naccess-control-request-headers: GET, PUT, POST, DELETE\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 07 Mar 2026 08:04:40 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=%2F0ta3v0nwxMhzRaAhdalS5K4L0OI%2BQlEBL27XVT3GIM%3D\\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\\u0026ts=1772870680\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=%2F0ta3v0nwxMhzRaAhdalS5K4L0OI%2BQlEBL27XVT3GIM%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1772870680\"\r\nserver: Heroku\r\nvia: 2.0 heroku-router\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\ncontent-length: 144\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":144,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"524b6af77f32b80c8e08b1f5be89de8d","sha1":"05eaa0210ad6e0456c6bcef4a2d1d53bebd391cb","sha256":"e5143f4a936075b29eb8e4e71d3581c88444618abac8b8c5d3a39a6d935efdfe","sha512":"503359bd8ab0213af879601fa541cc2ba14a6db578c2317ef8afe163f82900f5e968029ffb7a12176fbc8aa7f8d54bffa48652a086f3516062471494e6846027","ssdeep":"","tlshash":"8fc02bde1200210a0a30c3002ec2325434973b9e28e286006b82f027ecd5617c9cb288","first_seen":"2025-09-11T03:59:19.401754Z","last_seen":"2026-04-04T13:03:09.756411Z","times_seen":310,"resource_available":true,"data":null}},"time_used":684,"timings":{"blocked":291,"dns":77,"connect":103,"send":0,"wait":102,"receive":0,"ssl":108},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"secureailink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"secureailink.com/ping/?redirect=http://trk.fuel-care-present-responsible.com/AyufVJnHcCLNyOm?cid={click_id}\u0026sub1=02272026-Tmo_clickers_send11_etoc_21600rec_27_feb_2026-ETOC-hash1025\u0026traffic=ETOC\u0026ip=35.187.132.233\u0026sub_id=undefined\u0026source=undefined\u0026landerIsActive=undefined","fqdn":"secureailink.com","domain":"secureailink.com","tld":"com"},"ip":{"addr":"15.197.149.68","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T08:04:40.859Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ping/?redirect=http://trk.fuel-care-present-responsible.com/AyufVJnHcCLNyOm?cid={click_id}\u0026sub1=02272026-Tmo_clickers_send11_etoc_21600rec_27_feb_2026-ETOC-hash1025\u0026traffic=ETOC\u0026ip=35.187.132.233\u0026sub_id=undefined\u0026source=undefined\u0026landerIsActive=undefined HTTP/1.1\r\nHost: secureailink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Allow-Methods: GET, PUT, POST, DELETE\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Request-Headers: GET, PUT, POST, DELETE\r\nContent-Length: 144\r\nContent-Security-Policy: default-src 'none'\r\nContent-Type: text/html; charset=utf-8\r\nDate: Sat, 07 Mar 2026 08:04:41 GMT\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=qzxGxQbDNbt9P7wi9kUB7GQf0CzYWftZ7rKo11R%2BG7Q%3D\\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\\u0026ts=1772870681\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=qzxGxQbDNbt9P7wi9kUB7GQf0CzYWftZ7rKo11R%2BG7Q%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1772870681\"\r\nServer: Heroku\r\nVia: 1.1 heroku-router\r\nX-Content-Type-Options: nosniff\r\nX-Powered-By: Express\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":144,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"524b6af77f32b80c8e08b1f5be89de8d","sha1":"05eaa0210ad6e0456c6bcef4a2d1d53bebd391cb","sha256":"e5143f4a936075b29eb8e4e71d3581c88444618abac8b8c5d3a39a6d935efdfe","sha512":"503359bd8ab0213af879601fa541cc2ba14a6db578c2317ef8afe163f82900f5e968029ffb7a12176fbc8aa7f8d54bffa48652a086f3516062471494e6846027","ssdeep":"","tlshash":"8fc02bde1200210a0a30c3002ec2325434973b9e28e286006b82f027ecd5617c9cb288","first_seen":"2025-09-11T03:59:19.401754Z","last_seen":"2026-04-04T13:03:09.756411Z","times_seen":310,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":113,"dns":9,"connect":103,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"secureailink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}