{"report_id":"eb6ac56a-e183-41ca-b007-7e6253d8e89f","version":0,"status":"done","tags":[],"date":"2026-07-12T21:23:43Z","url":{"schema":"http","addr":"skyhighexpressng.com/Officesupport/office-3D8/index.php","fqdn":"skyhighexpressng.com","domain":"skyhighexpressng.com","tld":"com"},"ip":{"addr":"192.185.146.139","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"skyhighexpressng.com/Officesupport/office-3D8/index.php","fqdn":"skyhighexpressng.com","domain":"skyhighexpressng.com","tld":"com"},"title":"404 - PAGE NOT FOUND","dom":{"size":11709,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (358)","md5":"be14c6d3417b597cb825a61174be6704","sha1":"9b494aaffb9ef62950130782f0f70128a34ea0ea","sha256":"8870e9a92099488f10e42a0642a7fe181d3948ca6e6ee071c2929b9c5dd7a4f1","sha512":"2f0672c73ecc522b7dad6b886f1c5df153fa727dd6add4bd1692b0d5b55810761b5e11f2c82939f25f33c5a993fbe56cdc3899c1566c8d49a933ecdb6b1e0849","ssdeep":"192:UpvXn2H25Zg48lNYGu6C9tdROxktft1zQOPta+rzvHlPuPQXGuV27BHplXtAyU/O:uvX2H25i4YYn6et7TBvhtN4IcpRtrU/O","tlshash":"1332950bab4c063b1312459a7458639a370fc87fe3661bb474bfc16867d16a649f23ec","dom_hash":"domhash0e09a840320e41cb10fbc34fb1f47272","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"skyhighexpressng.com/Officesupport/office-3D8/index.php","fqdn":"skyhighexpressng.com","domain":"skyhighexpressng.com","tld":"com"},"ip":{"addr":"192.185.146.139","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T21:23:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"skyhighexpressng.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"skyhighexpressng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"skyhighexpressng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"skyhighexpressng.com","ip":{"addr":"192.185.146.139","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"domain_registered":"2016-10-16","domain_rank":0,"first_seen":"2018-02-17T19:38:19Z","last_seen":"2026-07-11T00:24:00.346174Z","alert_count":27,"request_count":9,"received_data":47982,"sent_data":4808,"comment":"","tags":null,"fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"skyhighexpressng.com/Officesupport/office-3D8/index.php","fqdn":"skyhighexpressng.com","domain":"skyhighexpressng.com","tld":"com"},"ip":{"addr":"192.185.146.139","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b913398522191be2fac4843d79f54eb","sha1":"b4dc5f7aead65de38d62fa88920f78e65275f69b","sha256":"f0f160b5d828af6fd343ae2c2ddd1ef820153bc31be89b55048c8a804f3a9adb","sha512":"1bad7afe544378f7d69b686a2bcae5be19407dbe374d976b902ea312a9e2d701db3bdecbf7c26bee9487f629b387103208c357d7b7cd6b5acf7b0b183f9ab811","ssdeep":"","tlshash":"7cb0222e38c30000022b20cc0b3fc020380c080b20c2c880be0c88802f8003eb808a2f","size":97,"data":"","first_seen":"2026-06-03T19:13:55.801607Z","last_seen":"2026-07-17T14:38:22.734459Z","times_seen":203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyhighexpressng.com/cgi-sys/js/simple-expand.min.js","fqdn":"skyhighexpressng.com","domain":"skyhighexpressng.com","tld":"com"},"ip":{"addr":"192.185.146.139","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"42cb9467fd660b25209863c072e69342","sha1":"c4d32879d225f46588fba989f8a2afcb9b49a519","sha256":"7989430e3c85121caa76c6da31aa38d43ef139062e2c3bd4f4350b62fe90d4d4","sha512":"f248177d888d767c375f5f725598cbcfcd48be0ac92be5f446fc010659c52100de8ce4cb025f7b34ea3179e34368492f00cd4392129a9f2d323fd185c210b4d0","ssdeep":"","tlshash":"cb5122cdb1c2b08ec79766f1540f4206b0351eadaa57e474f039e0666928847ac1bfbf","size":2782,"data":"","first_seen":"2023-03-07T01:11:26Z","last_seen":"2026-07-17T14:38:22.733436Z","times_seen":10169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"skyhighexpressng.com/Officesupport/office-3D8/index.php","fqdn":"skyhighexpressng.com","domain":"skyhighexpressng.com","tld":"com"},"ip":{"addr":"192.185.146.139","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T21:23:07.644Z","timestamp":1783891387644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyhighexpressng.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 08:33:12 GMT","end":"Tue, 08 Sep 2026 08:33:11 GMT"},"fingerprint":{"sha1":"28:27:6C:B5:51:DA:C4:AB:3C:3A:B1:BB:2F:54:F8:F7:38:89:EF:D7","sha256":"1F:93:93:D4:5A:7B:C2:E6:AB:A8:99:6D:0D:59:45:3A:CE:6D:13:03:50:72:1A:BB:62:BF:31:1F:17:3A:EC:C6"}}},"request":{"raw":"GET /Officesupport/office-3D8/index.php HTTP/1.1\r\nHost: skyhighexpressng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nlast-modified: Wed, 11 Mar 2026 03:02:57 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4677\r\ncontent-type: text/html\r\ndate: Sun, 12 Jul 2026 21:23:08 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11816,"size_decoded":4927,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (358)","md5":"a8063bd37d3c8fb3176a6bf140558a4d","sha1":"e32cf4b407db3d3773ded13ff64b70fdbad7735f","sha256":"bccb23d41c2cc69cf0c7d22c4314ca8181a513c6999b73e45307792830f4e482","sha512":"82d749f6b17b21587fb345ca196a2aa83eca80ad66ed9c1ab88b36709bed14175d53afefe9acc0dafc4fad78ffb8df155193a6829bc857ad6d68b1c84af7b854","ssdeep":"192:bpvXn2H25Zx48DNYGu6C9tdDOxktft1zQOPtaUrzvHlPuPQXGuV27BHplXtAUU/s:FvX2H25v4CYn6etFTBvhtv4IcpRtlU/s","tlshash":"bd32940bab4c063b1312459a7458639a370fc87fe2661bb474bfc06867d16a649f23dc","first_seen":"2023-04-05T03:58:47Z","last_seen":"2026-07-17T18:43:03.096648Z","times_seen":15935,"resource_available":true,"data":null}},"time_used":698,"timings":{"blocked":-1,"dns":264,"connect":126,"send":0,"wait":176,"receive":0,"ssl":132},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"skyhighexpressng.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"skyhighexpressng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"skyhighexpressng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"skyhighexpressng.com/Officesupport/office-3D8/index.php","fqdn":"skyhighexpressng.com","domain":"skyhighexpressng.com","tld":"com"},"ip":{"addr":"192.185.146.139","port":80,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T21:23:08.481Z","timestamp":1783891388481,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Officesupport/office-3D8/index.php HTTP/1.1\r\nHost: skyhighexpressng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Sun, 12 Jul 2026 21:23:08 GMT\r\nServer: Apache\r\nLocation: https://skyhighexpressng.com/Officesupport/office-3D8/index.php\r\nContent-Length: 287\r\nKeep-Alive: timeout=5, max=75\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T22:40:27.187426Z","times_seen":17324316,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":4,"connect":116,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"skyhighexpressng.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"skyhighexpressng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"skyhighexpressng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyhighexpressng.com/cgi-sys/images/x.png","fqdn":"skyhighexpressng.com","domain":"skyhighexpressng.com","tld":"com"},"ip":{"addr":"192.185.146.139","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyhighexpressng.com/Officesupport/office-3D8/index.php","date":"2026-07-12T21:23:08.989Z","timestamp":1783891388989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyhighexpressng.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 08:33:12 GMT","end":"Tue, 08 Sep 2026 08:33:11 GMT"},"fingerprint":{"sha1":"28:27:6C:B5:51:DA:C4:AB:3C:3A:B1:BB:2F:54:F8:F7:38:89:EF:D7","sha256":"1F:93:93:D4:5A:7B:C2:E6:AB:A8:99:6D:0D:59:45:3A:CE:6D:13:03:50:72:1A:BB:62:BF:31:1F:17:3A:EC:C6"}}},"request":{"raw":"GET /cgi-sys/images/x.png HTTP/1.1\r\nHost: skyhighexpressng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyhighexpressng.com/Officesupport/office-3D8/index.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 11 Mar 2026 03:00:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2672\r\ncontent-type: image/png\r\ndate: Sun, 12 Jul 2026 21:23:09 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2672,"size_decoded":2875,"mime_type":"image/png","magic":"PNG image data, 97 x 97, 8-bit colormap, non-interlaced","md5":"f851db995b0253a71d638f779be88330","sha1":"5f5319e016676e6b92f7e597b837677ddf52c0a5","sha256":"2c024e287d53dcc084b60b01a69990c369e758dc7c91b0fe4791f02d18aae61a","sha512":"ab09faecbb8c24acade89efc25515c2b25c12c378144180e5b807309f793720e30bce75a604515181554068fe4baad34e4ee050a6b5c5f9485d1e4712b9ec724","ssdeep":"","tlshash":"c5515ca7efa4ca4137faa7d3418e48a218e0146dfed5a745013258690e2a3b0f73d3b1","first_seen":"2023-04-30T21:05:15Z","last_seen":"2026-07-17T01:31:20.253534Z","times_seen":7154,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"skyhighexpressng.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"skyhighexpressng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"skyhighexpressng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyhighexpressng.com/cgi-sys/images/404mid.gif","fqdn":"skyhighexpressng.com","domain":"skyhighexpressng.com","tld":"com"},"ip":{"addr":"192.185.146.139","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyhighexpressng.com/Officesupport/office-3D8/index.php","date":"2026-07-12T21:23:09.130Z","timestamp":1783891389130,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyhighexpressng.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 08:33:12 GMT","end":"Tue, 08 Sep 2026 08:33:11 GMT"},"fingerprint":{"sha1":"28:27:6C:B5:51:DA:C4:AB:3C:3A:B1:BB:2F:54:F8:F7:38:89:EF:D7","sha256":"1F:93:93:D4:5A:7B:C2:E6:AB:A8:99:6D:0D:59:45:3A:CE:6D:13:03:50:72:1A:BB:62:BF:31:1F:17:3A:EC:C6"}}},"request":{"raw":"GET /cgi-sys/images/404mid.gif HTTP/1.1\r\nHost: skyhighexpressng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyhighexpressng.com/Officesupport/office-3D8/index.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 11 Mar 2026 03:00:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 120\r\ncontent-type: image/gif\r\ndate: Sun, 12 Jul 2026 21:23:09 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":120,"size_decoded":322,"mime_type":"image/gif","magic":"GIF image data, version 89a, 868 x 4","md5":"dc8055f43fbb4a4b6dfb298ec35188f2","sha1":"1ffc540743de1cdb929d9d1218978005141e8d9d","sha256":"b857737891b84293b3df526b48ce3d54fdcc5789c250eadff9dd38e3c2c68caf","sha512":"2cc173efba132e4352582f000f226e86a9a898b8a3ac1ba9633b2f19838b618ee3047555928e5258cc97e514d6f96adf86391f7c6104288f1a61543e93b13518","ssdeep":"","tlshash":"76b0926cc6a0aa50aedc287fa3e96658d43d467c8144cdef558eaa012a867e1310949e","first_seen":"2023-04-30T21:05:15Z","last_seen":"2026-07-17T14:38:22.731121Z","times_seen":10187,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"skyhighexpressng.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"skyhighexpressng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"skyhighexpressng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyhighexpressng.com/Officesupport/office-3D8/index.php","fqdn":"skyhighexpressng.com","domain":"skyhighexpressng.com","tld":"com"},"ip":{"addr":"192.185.146.139","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T21:23:08.727Z","timestamp":1783891388727,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyhighexpressng.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 08:33:12 GMT","end":"Tue, 08 Sep 2026 08:33:11 GMT"},"fingerprint":{"sha1":"28:27:6C:B5:51:DA:C4:AB:3C:3A:B1:BB:2F:54:F8:F7:38:89:EF:D7","sha256":"1F:93:93:D4:5A:7B:C2:E6:AB:A8:99:6D:0D:59:45:3A:CE:6D:13:03:50:72:1A:BB:62:BF:31:1F:17:3A:EC:C6"}}},"request":{"raw":"GET /Officesupport/office-3D8/index.php HTTP/1.1\r\nHost: skyhighexpressng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nlast-modified: Wed, 11 Mar 2026 03:02:57 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4677\r\ncontent-type: text/html\r\ndate: Sun, 12 Jul 2026 21:23:08 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":11816,"size_decoded":4927,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (358)","md5":"a8063bd37d3c8fb3176a6bf140558a4d","sha1":"e32cf4b407db3d3773ded13ff64b70fdbad7735f","sha256":"bccb23d41c2cc69cf0c7d22c4314ca8181a513c6999b73e45307792830f4e482","sha512":"82d749f6b17b21587fb345ca196a2aa83eca80ad66ed9c1ab88b36709bed14175d53afefe9acc0dafc4fad78ffb8df155193a6829bc857ad6d68b1c84af7b854","ssdeep":"192:bpvXn2H25Zx48DNYGu6C9tdDOxktft1zQOPtaUrzvHlPuPQXGuV27BHplXtAUU/s:FvX2H25v4CYn6etFTBvhtv4IcpRtlU/s","tlshash":"bd32940bab4c063b1312459a7458639a370fc87fe2661bb474bfc06867d16a649f23dc","first_seen":"2023-04-05T03:58:47Z","last_seen":"2026-07-17T18:43:03.096648Z","times_seen":15935,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"skyhighexpressng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"skyhighexpressng.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"skyhighexpressng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyhighexpressng.com/cgi-sys/js/simple-expand.min.js","fqdn":"skyhighexpressng.com","domain":"skyhighexpressng.com","tld":"com"},"ip":{"addr":"192.185.146.139","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://skyhighexpressng.com/Officesupport/office-3D8/index.php","date":"2026-07-12T21:23:08.984Z","timestamp":1783891388984,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyhighexpressng.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 08:33:12 GMT","end":"Tue, 08 Sep 2026 08:33:11 GMT"},"fingerprint":{"sha1":"28:27:6C:B5:51:DA:C4:AB:3C:3A:B1:BB:2F:54:F8:F7:38:89:EF:D7","sha256":"1F:93:93:D4:5A:7B:C2:E6:AB:A8:99:6D:0D:59:45:3A:CE:6D:13:03:50:72:1A:BB:62:BF:31:1F:17:3A:EC:C6"}}},"request":{"raw":"GET /cgi-sys/js/simple-expand.min.js HTTP/1.1\r\nHost: skyhighexpressng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyhighexpressng.com/Officesupport/office-3D8/index.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 11 Mar 2026 03:00:21 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1191\r\ncontent-type: text/javascript\r\ndate: Sun, 12 Jul 2026 21:23:09 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2782,"size_decoded":1447,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2608)","md5":"42cb9467fd660b25209863c072e69342","sha1":"c4d32879d225f46588fba989f8a2afcb9b49a519","sha256":"7989430e3c85121caa76c6da31aa38d43ef139062e2c3bd4f4350b62fe90d4d4","sha512":"f248177d888d767c375f5f725598cbcfcd48be0ac92be5f446fc010659c52100de8ce4cb025f7b34ea3179e34368492f00cd4392129a9f2d323fd185c210b4d0","ssdeep":"","tlshash":"cb5122cdb1c2b08ec79766f1540f4206b0351eadaa57e474f039e0666928847ac1bfbf","first_seen":"2023-03-07T01:11:26Z","last_seen":"2026-07-17T14:38:22.733436Z","times_seen":10169,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"skyhighexpressng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"skyhighexpressng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"skyhighexpressng.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyhighexpressng.com/cgi-sys/images/404top_w.jpg","fqdn":"skyhighexpressng.com","domain":"skyhighexpressng.com","tld":"com"},"ip":{"addr":"192.185.146.139","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyhighexpressng.com/Officesupport/office-3D8/index.php","date":"2026-07-12T21:23:09.127Z","timestamp":1783891389127,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyhighexpressng.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 08:33:12 GMT","end":"Tue, 08 Sep 2026 08:33:11 GMT"},"fingerprint":{"sha1":"28:27:6C:B5:51:DA:C4:AB:3C:3A:B1:BB:2F:54:F8:F7:38:89:EF:D7","sha256":"1F:93:93:D4:5A:7B:C2:E6:AB:A8:99:6D:0D:59:45:3A:CE:6D:13:03:50:72:1A:BB:62:BF:31:1F:17:3A:EC:C6"}}},"request":{"raw":"GET /cgi-sys/images/404top_w.jpg HTTP/1.1\r\nHost: skyhighexpressng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyhighexpressng.com/Officesupport/office-3D8/index.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 11 Mar 2026 03:03:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4335\r\ncontent-type: image/jpeg\r\ndate: Sun, 12 Jul 2026 21:23:09 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4335,"size_decoded":4539,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 868x169, components 3","md5":"de6ecbbb2471827d90bf32c47a0cbc45","sha1":"ffeaafe8b9ca2752908c5d4e95e4803ef7ffdd18","sha256":"5cae6c33f0f9d4449ce8539a60e7d40eba2ddc75979fc26284854a29c36d08cb","sha512":"faf0f054ef55b3362ba26615bc670dcc0471d660bbfbc4d086ce8cb143d31235afc4ad4332fb669cab4ed422c99fe67ab31d8e955d9b18f21a4cfdd33090d496","ssdeep":"48:Ivi3ZsdwUKPGIhuF/ig2BamU/CSkMKisRHcfZakyWr9A9RSxNRXbRzwn:HpowU4ovDPCSrKishcxjyWrCCb+n","tlshash":"a491c6e3a7f46121cbdfb73a32187841ab806e918947d73c483944b4733e2af52ca168","first_seen":"2023-04-30T21:05:15Z","last_seen":"2026-07-17T14:38:22.730586Z","times_seen":10193,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"skyhighexpressng.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"skyhighexpressng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"skyhighexpressng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyhighexpressng.com/cgi-sys/images/404bottom.gif","fqdn":"skyhighexpressng.com","domain":"skyhighexpressng.com","tld":"com"},"ip":{"addr":"192.185.146.139","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyhighexpressng.com/Officesupport/office-3D8/index.php","date":"2026-07-12T21:23:09.133Z","timestamp":1783891389133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyhighexpressng.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 08:33:12 GMT","end":"Tue, 08 Sep 2026 08:33:11 GMT"},"fingerprint":{"sha1":"28:27:6C:B5:51:DA:C4:AB:3C:3A:B1:BB:2F:54:F8:F7:38:89:EF:D7","sha256":"1F:93:93:D4:5A:7B:C2:E6:AB:A8:99:6D:0D:59:45:3A:CE:6D:13:03:50:72:1A:BB:62:BF:31:1F:17:3A:EC:C6"}}},"request":{"raw":"GET /cgi-sys/images/404bottom.gif HTTP/1.1\r\nHost: skyhighexpressng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyhighexpressng.com/Officesupport/office-3D8/index.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 11 Mar 2026 03:00:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 537\r\ncontent-type: image/gif\r\ndate: Sun, 12 Jul 2026 21:23:09 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":537,"size_decoded":739,"mime_type":"image/gif","magic":"GIF image data, version 89a, 868 x 14","md5":"54eb288427acf79ed320efd4916fe0b7","sha1":"67ba813ff74d52035d70fcda58b57563f01fb829","sha256":"70e4a5f9f7d98c1564b17ecc69196fed4f74fe5afb2c61b4fb7045dd3309dc4f","sha512":"c7c00a268ada15fc6b19f64860dd5ce92fa69e6b64e2d7b3ada02b74e6cc3c4eb4466bba443752a76f4ee908fa93f3683c6256f7a473b05c86ecaebbcac125e1","ssdeep":"","tlshash":"e3f05c1880f753f8c8401134a03880ca6dac00ca13ae093a6a2a38625aa0aba308b32d","first_seen":"2023-04-30T21:05:15Z","last_seen":"2026-07-17T14:38:22.731645Z","times_seen":10181,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"skyhighexpressng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"skyhighexpressng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"skyhighexpressng.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyhighexpressng.com/favicon.ico","fqdn":"skyhighexpressng.com","domain":"skyhighexpressng.com","tld":"com"},"ip":{"addr":"192.185.146.139","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyhighexpressng.com/Officesupport/office-3D8/index.php","date":"2026-07-12T21:23:09.258Z","timestamp":1783891389258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyhighexpressng.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 08:33:12 GMT","end":"Tue, 08 Sep 2026 08:33:11 GMT"},"fingerprint":{"sha1":"28:27:6C:B5:51:DA:C4:AB:3C:3A:B1:BB:2F:54:F8:F7:38:89:EF:D7","sha256":"1F:93:93:D4:5A:7B:C2:E6:AB:A8:99:6D:0D:59:45:3A:CE:6D:13:03:50:72:1A:BB:62:BF:31:1F:17:3A:EC:C6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: skyhighexpressng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://skyhighexpressng.com/Officesupport/office-3D8/index.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nlast-modified: Wed, 11 Mar 2026 03:02:57 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4677\r\ncontent-type: text/html\r\ndate: Sun, 12 Jul 2026 21:23:09 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":11816,"size_decoded":4927,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (358)","md5":"a8063bd37d3c8fb3176a6bf140558a4d","sha1":"e32cf4b407db3d3773ded13ff64b70fdbad7735f","sha256":"bccb23d41c2cc69cf0c7d22c4314ca8181a513c6999b73e45307792830f4e482","sha512":"82d749f6b17b21587fb345ca196a2aa83eca80ad66ed9c1ab88b36709bed14175d53afefe9acc0dafc4fad78ffb8df155193a6829bc857ad6d68b1c84af7b854","ssdeep":"192:bpvXn2H25Zx48DNYGu6C9tdDOxktft1zQOPtaUrzvHlPuPQXGuV27BHplXtAUU/s:FvX2H25v4CYn6etFTBvhtv4IcpRtlU/s","tlshash":"bd32940bab4c063b1312459a7458639a370fc87fe2661bb474bfc06867d16a649f23dc","first_seen":"2023-04-05T03:58:47Z","last_seen":"2026-07-17T18:43:03.096648Z","times_seen":15935,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"skyhighexpressng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"skyhighexpressng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"skyhighexpressng.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}