{"report_id":"eb159478-71e0-4de5-9938-cfea3f518286","version":0,"status":"done","tags":[],"date":"2026-06-30T22:03:42Z","url":{"schema":"http","addr":"renewhub-net.com/pages/ban.php","fqdn":"renewhub-net.com","domain":"renewhub-net.com","tld":"com"},"ip":{"addr":"158.94.209.89","port":0,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"renewhub-net.com/pages/ban.php","fqdn":"renewhub-net.com","domain":"renewhub-net.com","tld":"com"},"title":"renewhub-net.com/pages/ban.php","dom":{"size":1082,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (341)","md5":"62cb25383817ab645410565526f72f67","sha1":"4c9dc78a3ccedf523d98f1b01a841bf414f57008","sha256":"2d13bc29d61bad8eb76f20da1c2d87ca9fccfd4193c7c2198a1ea433ade0617f","sha512":"ff611f624611f04b2cb182f268765413743ca34f21ca2761d99d249896e5d146b1c106aca7be4dfa64a35edecd7ec88030b00ae0cdc8506d8c85a12778adeb54","ssdeep":"","tlshash":"e81112571050052b232307a1bcd1fb25ac8aa30fc515a580f5f642e91fe0dc6c9db47c","dom_hash":"domhash9d286b18aa2a66920faea925dfec8229","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"renewhub-net.com/pages/ban.php","fqdn":"renewhub-net.com","domain":"renewhub-net.com","tld":"com"},"ip":{"addr":"158.94.209.89","port":0,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-04T22:03:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"renewhub-net.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"renewhub-net.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"renewhub-net.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"renewhub-net.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-28T22:22:13.875484Z","alert_count":0,"request_count":1,"received_data":7111,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"renewhub-net.com","ip":{"addr":"158.94.209.89","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2025-09-27","domain_rank":0,"first_seen":"2025-10-11T09:44:07.634152Z","last_seen":"2026-06-30T10:01:54.790084Z","alert_count":20,"request_count":5,"received_data":1485510,"sent_data":2465,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.4.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"renewhub-net.com/assets/index-BkPZ0TR_.js","fqdn":"renewhub-net.com","domain":"renewhub-net.com","tld":"com"},"ip":{"addr":"158.94.209.89","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"82a49dfe999c5fe9337d9eed5e7e45e0","sha1":"630daa7cdf4809e335c44820cf398ccac2de8ab5","sha256":"73588eb483663678f69da85272111ed78ff074517d9eeb1219c457ac0e42f6aa","sha512":"5637adfa1b8da425c768cebf216902a477d25bbfcc426e16c879e41345d34c256ba04ee8818fa12b0ae5568e7b0c6a608fb7c75765b5760926abe2fc0c2b10d0","ssdeep":"24576:hRoEi6AMAj0l8lLNBi/4V9bJ4P5niRVwOdSLyDwAMl:hRri6AMAj0KlLNBi/4V9bJ4P5niRVwNt","tlshash":"c2659d9c7291b4319ba741d5a0bf001ab33a2924780dc894f07cd9de7eb6949a17bf7c","size":1466778,"data":"","first_seen":"2025-10-11T09:44:09.960308Z","last_seen":"2026-06-30T22:39:15.580982Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Noto+Sans:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://renewhub-net.com/pages/ban.php","date":"2026-06-30T22:03:19.845Z","timestamp":1782856999845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Noto+Sans:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://renewhub-net.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 30 Jun 2026 22:03:19 GMT\r\ndate: Tue, 30 Jun 2026 22:03:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6427,"size_decoded":1519,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"577fe91d11b998cd53eb3b96b08706a8","sha1":"6a9046f8ab638f34f53bd91a857c5a540bf355a9","sha256":"ea2e4c7bbca8bfbc56b65d398f9dad303de2eb2201f9cf375c1a7ad65b0bf2dc","sha512":"8b8c9e50d549d171f79ef81188bce77a7477f62594425cf51df238fbd507f344766b5f24e66f840d94fc574f8be2692bf701ca55b91e8317e17be6a2d2875206","ssdeep":"192:kuh0u/utuku033uxuwaSuzqImkBx3NIj7aC:kI0kORN3SjpUW","tlshash":"ddd11ee5445bd488aa438cd237cf7d36ad5e91612440d2bcaffd588c9caac3a433075e","first_seen":"2025-09-13T02:35:36.319896Z","last_seen":"2026-07-01T00:23:52.234528Z","times_seen":1827,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":37,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"renewhub-net.com/assets/index-BkPZ0TR_.js","fqdn":"renewhub-net.com","domain":"renewhub-net.com","tld":"com"},"ip":{"addr":"158.94.209.89","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://renewhub-net.com/pages/ban.php","date":"2026-06-30T22:03:19.849Z","timestamp":1782856999849,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"renewhub-net.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 17:10:40 GMT","end":"Thu, 10 Sep 2026 17:10:39 GMT"},"fingerprint":{"sha1":"89:C2:FF:49:4C:EE:F2:54:BD:33:F4:88:0D:F9:11:D3:D0:47:67:33","sha256":"E5:BF:11:E6:2D:66:3B:7D:01:CC:18:01:E2:A2:C6:B3:92:1A:66:7C:36:8D:C1:11:ED:6B:C1:13:28:5A:6A:11"}}},"request":{"raw":"GET /assets/index-BkPZ0TR_.js HTTP/1.1\r\nHost: renewhub-net.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://renewhub-net.com/pages/ban.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 30 Jun 2026 22:02:11 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 29 Jun 2025 18:08:32 GMT\r\nETag: \"16619a-638b9cc8a8800-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=2, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1466778,"size_decoded":469716,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37550)","md5":"219125d5fc44cbdffa756cd00e6bd68f","sha1":"7a8263f3949be8c3975ba2de90922a28f0448016","sha256":"c2ee9ff0010f181b649b4f382e65b7734863b3a7b089fb73fe23149fd61eda58","sha512":"64b2a5db479111c497a41fd5d12930c89c93d392d03717ce686a2718440c9d42936f120dc435f548b13ca0514cc5489ca17820b547049e90124a68a4c692fc1e","ssdeep":"24576:hRoEi6AMAj0l8lLNBi/4V9bJ4P5niRVwOdSLy0:hRri6AMAj0KlLNBi/4V9bJ4P5niRVwN/","tlshash":"89257cd87291b43197e746e590bf000ab33a2910780d84a4f17dddde3aba549a17bfbc","first_seen":"2025-10-11T09:44:09.945983Z","last_seen":"2026-06-30T22:39:15.575096Z","times_seen":6,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":311,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"renewhub-net.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"renewhub-net.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"renewhub-net.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"renewhub-net.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"renewhub-net.com/assets/index-BsOzLALy.css","fqdn":"renewhub-net.com","domain":"renewhub-net.com","tld":"com"},"ip":{"addr":"158.94.209.89","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://renewhub-net.com/pages/ban.php","date":"2026-06-30T22:03:19.851Z","timestamp":1782856999851,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"renewhub-net.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 17:10:40 GMT","end":"Thu, 10 Sep 2026 17:10:39 GMT"},"fingerprint":{"sha1":"89:C2:FF:49:4C:EE:F2:54:BD:33:F4:88:0D:F9:11:D3:D0:47:67:33","sha256":"E5:BF:11:E6:2D:66:3B:7D:01:CC:18:01:E2:A2:C6:B3:92:1A:66:7C:36:8D:C1:11:ED:6B:C1:13:28:5A:6A:11"}}},"request":{"raw":"GET /assets/index-BsOzLALy.css HTTP/1.1\r\nHost: renewhub-net.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://renewhub-net.com/pages/ban.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 30 Jun 2026 22:02:11 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 29 Jun 2025 18:08:32 GMT\r\nETag: \"3976-638b9cc8a8800-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 3835\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14710,"size_decoded":4181,"mime_type":"text/css","magic":"ASCII text, with very long lines (14709)","md5":"9d682f773dff688ec61ad8c8ba4062d1","sha1":"25ef5c604a8cc5f7327e06bbe58e644c47b3f4a6","sha256":"1b6ee9a04e488bfddcafe985489a342d305276034741ce54ddcc4b5c8c0b8c0e","sha512":"3b06bf46d3c2a4cdb81b8c1f966a46df7be202ee32212d04d55f4b7eb9b6e3a0d098ef26acc2ccaf30365e0ccd327b120272b1d4a6e4da87e22403d0008c3485","ssdeep":"192:vxaW9JyW9JyZ0xp2tLg6a1IO6fW+ZNjr2z/s85l3/JH:5/b2L/OUZNjrk/z","tlshash":"2d6276596704143a7c5380faf4e0fa89b21ab5d1ef2bd7eab8475110e7d63a21de3708","first_seen":"2025-10-11T09:44:09.948404Z","last_seen":"2026-06-30T22:39:15.5769Z","times_seen":6,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":61,"send":0,"wait":71,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"renewhub-net.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"renewhub-net.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"renewhub-net.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"renewhub-net.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"renewhub-net.com/api/bot","fqdn":"renewhub-net.com","domain":"renewhub-net.com","tld":"com"},"ip":{"addr":"158.94.209.89","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://renewhub-net.com/pages/ban.php","date":"2026-06-30T22:03:20.544Z","timestamp":1782857000544,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"renewhub-net.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 17:10:40 GMT","end":"Thu, 10 Sep 2026 17:10:39 GMT"},"fingerprint":{"sha1":"89:C2:FF:49:4C:EE:F2:54:BD:33:F4:88:0D:F9:11:D3:D0:47:67:33","sha256":"E5:BF:11:E6:2D:66:3B:7D:01:CC:18:01:E2:A2:C6:B3:92:1A:66:7C:36:8D:C1:11:ED:6B:C1:13:28:5A:6A:11"}}},"request":{"raw":"POST /api/bot HTTP/1.1\r\nHost: renewhub-net.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://renewhub-net.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://renewhub-net.com/pages/ban.php\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 30 Jun 2026 22:02:12 GMT\r\nServer: Apache\r\nAccess-Control-Allow-Origin: https://renewhub-net.com\r\nAccess-Control-Allow-Credentials: true\r\nVary: Origin\r\nAccess-Control-Expose-Headers: Authorization\r\nX-Powered-By: PHP/8.4.22, PleskLin\r\nKeep-Alive: timeout=2, max=98\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24,"size_decoded":402,"mime_type":"application/json","magic":"JSON text data","md5":"936879557ac2f2020b31ec4ac574180b","sha1":"cc21a239a20f61c5dca6d84b4ee5734369a0e9a9","sha256":"2a4b7ac210a142c078d9a49b11222d95f6e092b0e544a7bb70b3096934a55dea","sha512":"cc051d9bd73e5d954220dde3d6cea9564c877dece197eba019746956ff4d991dcc647be2b9cb08093eaceec30eaeb6916cd16a0411a3cdaa94e778afdf561567","ssdeep":"","tlshash":"49700022220a8ece2000228280280c0020e800b080008808c03c00088e000a030a2008","first_seen":"2025-04-08T11:37:44.740552Z","last_seen":"2026-06-30T22:39:15.578394Z","times_seen":172,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"renewhub-net.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"renewhub-net.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"renewhub-net.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"renewhub-net.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"renewhub-net.com/vite.svg","fqdn":"renewhub-net.com","domain":"renewhub-net.com","tld":"com"},"ip":{"addr":"158.94.209.89","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://renewhub-net.com/pages/ban.php","date":"2026-06-30T22:03:20.645Z","timestamp":1782857000645,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"renewhub-net.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 17:10:40 GMT","end":"Thu, 10 Sep 2026 17:10:39 GMT"},"fingerprint":{"sha1":"89:C2:FF:49:4C:EE:F2:54:BD:33:F4:88:0D:F9:11:D3:D0:47:67:33","sha256":"E5:BF:11:E6:2D:66:3B:7D:01:CC:18:01:E2:A2:C6:B3:92:1A:66:7C:36:8D:C1:11:ED:6B:C1:13:28:5A:6A:11"}}},"request":{"raw":"GET /vite.svg HTTP/1.1\r\nHost: renewhub-net.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://renewhub-net.com/pages/ban.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 30 Jun 2026 22:02:12 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 22 Aug 2024 19:05:58 GMT\r\nETag: \"5d9-6204a594ab180\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1497\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=2, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1497,"size_decoded":1794,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e3a10e157f75ada21ab742c022d5430","sha1":"f7f39d7237b791a945d52a5cd7a8fb365f313366","sha256":"4a748afd443918bb16591c834c401dae33e87861ab5dbad0811c3a3b4a9214fb","sha512":"fbf065e26d907454cb432a17d831f448e1c3df0f33cd681ccc52b63e5bc26bc9e4de08591a2de579e5b05219fcffd3b4d4261ada6fa55299e731343df860488d","ssdeep":"","tlshash":"2031451fda7fd4fec0a6cb48e612b047962c30d95e41c5b4d9845f0e64a19f17c0aa64","first_seen":"2023-05-18T16:20:30Z","last_seen":"2026-07-01T02:38:35.651148Z","times_seen":5838,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"renewhub-net.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"renewhub-net.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"renewhub-net.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"renewhub-net.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"renewhub-net.com/pages/ban.php","fqdn":"renewhub-net.com","domain":"renewhub-net.com","tld":"com"},"ip":{"addr":"158.94.209.89","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-30T22:03:19.080Z","timestamp":1782856999080,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"renewhub-net.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 17:10:40 GMT","end":"Thu, 10 Sep 2026 17:10:39 GMT"},"fingerprint":{"sha1":"89:C2:FF:49:4C:EE:F2:54:BD:33:F4:88:0D:F9:11:D3:D0:47:67:33","sha256":"E5:BF:11:E6:2D:66:3B:7D:01:CC:18:01:E2:A2:C6:B3:92:1A:66:7C:36:8D:C1:11:ED:6B:C1:13:28:5A:6A:11"}}},"request":{"raw":"GET /pages/ban.php HTTP/1.1\r\nHost: renewhub-net.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 30 Jun 2026 22:02:11 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 29 Jun 2025 18:08:32 GMT\r\nETag: \"300-638b9cc8a8800-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 411\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":768,"size_decoded":756,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"d17f9660d0430d168adb450b1facecca","sha1":"ae1de49419f7b9a48eeeadb6e889da45cb8c263c","sha256":"9cfb26dd2800df899cd71021e5c1c4bc9f52de6a069d905b9d4ea24c5e316e56","sha512":"cdba3da69bb92367f8e6410ead80a78454ada505341b5486dd170f87d29f76e7a163b3e31bf3d541292d5c04be0e6bc5de6b9affe7b6defb1772dec93fe773a7","ssdeep":"","tlshash":"0201155350908919232043a17dc1fa158d5bd60b47889e8875b650fe9fc07c2cadf57c","first_seen":"2025-10-11T09:44:09.935801Z","last_seen":"2026-06-30T22:39:15.570935Z","times_seen":6,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":12,"connect":69,"send":0,"wait":68,"receive":0,"ssl":135},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"renewhub-net.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"renewhub-net.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"renewhub-net.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"renewhub-net.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}