{"report_id":"f05b112f-daf7-4027-873e-197c1db9b248","version":6,"status":"done","tags":[],"date":"2026-03-09T12:54:17Z","url":{"schema":"http","addr":"myconnnezsionaoutebdm.icu","fqdn":"myconnnezsionaoutebdm.icu","domain":"myconnnezsionaoutebdm.icu","tld":"icu"},"ip":{"addr":"45.77.144.230","port":0,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"apps.rackspace.com/wmidentity/Account/Login?ReturnUrl=%2Fwmidentity%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_mode%3Dform_post%26response_type%3Dcode%2520id_token%26redirect_uri%3Dhttps%253A%252F%252Fapps.rackspace.com%252Flogin.php%26client_id%3Dwebmail%26nonce%3D66d01748bc72126b79d488e596fbd975%26state%3D89fa27ac130c94bb0d8291c6fa813a29%26scope%3Dopenid%2520profile%2520email%2520webmail%2520openid","fqdn":"apps.rackspace.com","domain":"rackspace.com","tld":"com"},"title":"Rackspace Webmail: Hosted Email for Business","dom":{"size":9430,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"36c5b0f0f6c4c7e821ac8a550d7fdf45","sha1":"1a95a55041ebac39ed022f6ff27483d9e86657e8","sha256":"1384690e40e761e5652cd569460a844caaf5009b9f0b22bdb14f02bc71259f73","sha512":"3677f0b6b667bb75f6dfd3e88c99f5d07559875841812b7970e67675887512ad6f19c36a4564e9aa7a3aafd26a682650f74b863279867f011c4fcc0c399d5679","ssdeep":"192:bIDR/bDwxusEImU6ll1EL9i5dKwvI/PJuBbJ6x1u/tW2zJrMJ:bMFXINAmPSD/tdmJ","tlshash":"6c1240595ab31505b903e964bfe66b122724c113c60acd6d7eeca78ccfcb9859c9338c","dom_hash":"domhash7173549707e7aef97b8d2e0865fa8b95","first_seen":"2026-03-09T12:54:23.478149Z","last_seen":"2026-03-09T12:54:23.478149Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"myconnnezsionaoutebdm.icu","fqdn":"myconnnezsionaoutebdm.icu","domain":"myconnnezsionaoutebdm.icu","tld":"icu"},"ip":{"addr":"45.77.144.230","port":0,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-13T12:54:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-09T12:53:55Z","timestamp":1773060835,"ip_dst":{"addr":"45.77.144.230","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":57778,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-03-09T12:53:55.064291+0000\",\"flow_id\":1583076675314145,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.41\",\"src_port\":57778,\"dest_ip\":\"45.77.144.230\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"myconnnezsionaoutebdm.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":927,\"bytes_toclient\":3517,\"start\":\"2026-03-09T12:53:54.877025+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"apps.rackspace.com","ip":{"addr":"69.20.91.24","port":443,"asn":27357,"as":"RACKSPACE","country":"United States","country_code":"US"},"domain_registered":"1998-08-14","domain_rank":93827,"first_seen":"2013-06-19T00:23:06Z","last_seen":"2026-03-03T10:44:05.115116Z","alert_count":0,"request_count":8,"received_data":157014,"sent_data":5973,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"static.emailsrvr.com","ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2003-01-14","domain_rank":1918818,"first_seen":"2018-03-02T21:06:24Z","last_seen":"2026-02-27T10:56:32.148564Z","alert_count":0,"request_count":2,"received_data":40693,"sent_data":987,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":3,"received_data":66682,"sent_data":1391,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"myconnnezsionaoutebdm.icu","ip":{"addr":"45.77.144.230","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":30,"request_count":10,"received_data":114349,"sent_data":5310,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":7,"received_data":307797,"sent_data":3906,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"myconnnezsionaoutebdm.icu/","fqdn":"myconnnezsionaoutebdm.icu","domain":"myconnnezsionaoutebdm.icu","tld":"icu"},"ip":{"addr":"45.77.144.230","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e0a9e591c4c695f74eddaa07f0240ab","sha1":"c9d8b1507490eeab24561dce702ecd7f64b8ce7d","sha256":"26018e817522f1550af11387b4615c9c46f34e634a42d30a9058f1eb7b3ea467","sha512":"a27816175fbe5e9c7e091a6aab90ac12fbfa37068f14c1252e61dc9c10b13004a0679f6f397957a7eddf9e9faca24c16cf7e1dc848fdd4a572c66fa8e8272657","ssdeep":"","tlshash":"3b31af2b32b3087206ef267e27de9b163075400b240684497f7c9f549f50f45ab77ba5","size":1714,"data":"","first_seen":"2026-01-31T08:57:24.485475Z","last_seen":"2026-03-09T22:13:36.799684Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myconnnezsionaoutebdm.icu/secure/index.html#error=invalidlogin","fqdn":"myconnnezsionaoutebdm.icu","domain":"myconnnezsionaoutebdm.icu","tld":"icu"},"ip":{"addr":"45.77.144.230","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e0a9e591c4c695f74eddaa07f0240ab","sha1":"c9d8b1507490eeab24561dce702ecd7f64b8ce7d","sha256":"26018e817522f1550af11387b4615c9c46f34e634a42d30a9058f1eb7b3ea467","sha512":"a27816175fbe5e9c7e091a6aab90ac12fbfa37068f14c1252e61dc9c10b13004a0679f6f397957a7eddf9e9faca24c16cf7e1dc848fdd4a572c66fa8e8272657","ssdeep":"","tlshash":"3b31af2b32b3087206ef267e27de9b163075400b240684497f7c9f549f50f45ab77ba5","size":1714,"data":"","first_seen":"2026-01-31T08:57:24.485475Z","last_seen":"2026-03-09T22:13:36.799684Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps.rackspace.com/wmidentity/dist/webmailLogin.js?v=dn70RwATRXPGR3I_MlY9aK9fMX6zSf1GYvcRvRv-UFc=","fqdn":"apps.rackspace.com","domain":"rackspace.com","tld":"com"},"ip":{"addr":"69.20.91.24","port":443,"asn":27357,"as":"RACKSPACE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f4cbd4e66a20e5de87d500611f951b7","sha1":"912a87eb118c4bcfb6ceac6e8177b0c3a584d0dc","sha256":"767ef44700134573c647723f32563d68af5f317eb349fd4662f711bd1bfe5057","sha512":"8f365893517d43c5c96d5fb825a3d593c885d18381ae5ea4e0ab436890f21b12b1b8c591a9af01716cf89d06af297c7b2a577088060bc6ad49c9c9bae7a6621f","ssdeep":"1536:9yKs3V+5x4PIl2l0wfHNp+kx6+efSo9tzNl+rWT0EtOBTjea0:zs3sAPOCAHdT0EtwTje1","tlshash":"edb3738cbedaf09543a37175812f600bf37a2a55745e94e0e26ad1e1ac7888f4137f2d","size":114002,"data":"","first_seen":"2023-03-07T13:48:02Z","last_seen":"2026-07-14T14:33:27.621973Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,400,500,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://myconnnezsionaoutebdm.icu/","date":"2026-03-09T12:53:55.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Roboto:100,400,500,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myconnnezsionaoutebdm.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 09 Mar 2026 12:53:55 GMT\r\ndate: Mon, 09 Mar 2026 12:53:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21548,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1136f392c371b088f0043aae4828aeb5","sha1":"e32ca01d0900b870c265c5fce43862cd87d6d1f5","sha256":"0ee78f6d4d18f45992e30edb48ddd3f5de177d12d2908bec2d842819a3596416","sha512":"e2fed6042f4c7a74d172934f91a7af25476416010dd585d435bbc4c0300c3c06b775458ecf4b9da3be211da33a770865df93c6f4cd8829aa4abca75caceb750e","ssdeep":"384:DF9fzF9kF9FF9hF9y4F9/qY4eF9cF98F939fa9D9w9k9yf9/qY459L9r9c9fF9Yg:DFZFCFHFHFY4FRLFuFWFFMl22YfRiJhO","tlshash":"39a20ea10417440097834ce223cebf35fe1f92507142d0b5abfd9b6baddbca652693ad","first_seen":"2026-02-20T00:46:02.870901Z","last_seen":"2026-08-22T10:31:32.785085Z","times_seen":207,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":81,"dns":1,"connect":8,"send":0,"wait":22,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myconnnezsionaoutebdm.icu/imgs/faviconV2.png","fqdn":"myconnnezsionaoutebdm.icu","domain":"myconnnezsionaoutebdm.icu","tld":"icu"},"ip":{"addr":"45.77.144.230","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myconnnezsionaoutebdm.icu/","date":"2026-03-09T12:53:55.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myconnnezsionaoutebdm.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 17:38:52 GMT","end":"Sat, 06 Jun 2026 17:38:51 GMT"},"fingerprint":{"sha1":"35:97:1F:30:93:7E:73:46:0A:75:BD:7D:20:6A:A8:CB:D4:F2:2D:04","sha256":"00:F6:B6:11:62:61:BB:BC:90:DB:5E:14:FA:E5:04:94:3D:C1:CF:86:99:8C:B2:90:6A:D0:57:91:1A:31:8C:36"}}},"request":{"raw":"GET /imgs/faviconV2.png HTTP/1.1\r\nHost: myconnnezsionaoutebdm.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myconnnezsionaoutebdm.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 09 Mar 2026 12:53:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 303\r\nLast-Modified: Tue, 15 Oct 2024 23:30:16 GMT\r\nConnection: keep-alive\r\nETag: \"670efb08-12f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":303,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"6573330225ca8156b75f252e3c7decc8","sha1":"90a2c3ab7da3f3d38ca2c9188f09a3d66502b662","sha256":"46ffd8099db48d6ef9561acae21f76dedfb63d1f6e10b600467d2fadea252422","sha512":"573e2585ad776ceedc4063c1ba328877535affc8cdcf3a09baf13a1774fd6dac09bb9d7a31708eb255592088f435a97aa6147672eb48a6747860993deda48ffa","ssdeep":"","tlshash":"96e07dd7a7d81e3eda45a7729554a804e161072b005100433d02edde0b60258515521b","first_seen":"2023-06-02T14:19:02Z","last_seen":"2026-08-22T10:31:32.795009Z","times_seen":104,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://myconnnezsionaoutebdm.icu/secure/index.html#error=invalidlogin","date":"2026-03-09T12:53:58.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://myconnnezsionaoutebdm.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 05:12:01 GMT\r\nexpires: Mon, 08 Mar 2027 05:12:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 114117\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-22T19:24:39.680481Z","times_seen":270323,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps.rackspace.com/favicon.ico","fqdn":"apps.rackspace.com","domain":"rackspace.com","tld":"com"},"ip":{"addr":"69.20.91.24","port":443,"asn":27357,"as":"RACKSPACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps.rackspace.com/wmidentity/Account/Login?ReturnUrl=%2Fwmidentity%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_mode%3Dform_post%26response_type%3Dcode%2520id_token%26redirect_uri%3Dhttps%253A%252F%252Fapps.rackspace.com%252Flogin.php%26client_id%3Dwebmail%26nonce%3D66d01748bc72126b79d488e596fbd975%26state%3D89fa27ac130c94bb0d8291c6fa813a29%26scope%3Dopenid%2520profile%2520email%2520webmail%2520openid","date":"2026-03-09T12:54:04.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps.rackspace.com","organization":"Rackspace Technology, Inc."},"issuer":{"commonName":"Thawte EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Fri, 21 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9F:3C:70:E3:77:29:37:EC:CC:3A:5C:4C:5F:6C:57:93:76:A2:BD:B5","sha256":"DE:44:DC:A7:C1:CE:7B:29:89:08:D9:8B:A6:D8:4E:B2:A3:E8:6B:64:B2:8B:62:95:7B:C0:B8:4B:B9:9D:2A:87"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: apps.rackspace.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.rackspace.com/wmidentity/Account/Login?ReturnUrl=%2Fwmidentity%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_mode%3Dform_post%26response_type%3Dcode%2520id_token%26redirect_uri%3Dhttps%253A%252F%252Fapps.rackspace.com%252Flogin.php%26client_id%3Dwebmail%26nonce%3D66d01748bc72126b79d488e596fbd975%26state%3D89fa27ac130c94bb0d8291c6fa813a29%26scope%3Dopenid%2520profile%2520email%2520webmail%2520openid\r\nCookie: openid_connect_nonce=66d01748bc72126b79d488e596fbd975; openid_connect_state=89fa27ac130c94bb0d8291c6fa813a29\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Mon, 09 Mar 2026 12:54:04 GMT\r\nContent-Type: image/x-ico\r\nContent-Length: 1150\r\nConnection: keep-alive\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-ico","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"b39d40f5f7935d7499d2610ce36c9428","sha1":"d5e99095fa1f3d94f991ab01e8f4d0d7e3667cbe","sha256":"453800da3256a06ddeb36cbcf66cdfb788fd140021d3785de9fab8dfb246f977","sha512":"7ff301514b06a79b7eba7edab1f5979d6bc7a896a4e1896acee42c47bd18e36e428ef2c478d467e025095b1282de1dcaafd03c5ba9e924d32ebabdda86376dd0","ssdeep":"","tlshash":"8c21e6522381e711f8baccb30906e664d1f8ec5f5c522d0151ae326d57308c525b1f7f","first_seen":"2023-05-02T14:41:04Z","last_seen":"2026-08-16T11:33:43.486315Z","times_seen":268,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps.rackspace.com/login.php","fqdn":"apps.rackspace.com","domain":"rackspace.com","tld":"com"},"ip":{"addr":"69.20.91.24","port":443,"asn":27357,"as":"RACKSPACE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T12:54:02.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps.rackspace.com","organization":"Rackspace Technology, Inc."},"issuer":{"commonName":"Thawte EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Fri, 21 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9F:3C:70:E3:77:29:37:EC:CC:3A:5C:4C:5F:6C:57:93:76:A2:BD:B5","sha256":"DE:44:DC:A7:C1:CE:7B:29:89:08:D9:8B:A6:D8:4E:B2:A3:E8:6B:64:B2:8B:62:95:7B:C0:B8:4B:B9:9D:2A:87"}}},"request":{"raw":"GET /login.php HTTP/1.1\r\nHost: apps.rackspace.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Mon, 09 Mar 2026 12:54:02 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Frame-Options: SAMEORIGIN\r\nSet-Cookie: openid_connect_nonce=66d01748bc72126b79d488e596fbd975; expires=Tue, 10-Mar-2026 12:54:02 GMT; Max-Age=86400; path=/\nopenid_connect_state=89fa27ac130c94bb0d8291c6fa813a29; expires=Tue, 10-Mar-2026 12:54:02 GMT; Max-Age=86400; path=/\r\nLocation: https://apps.rackspace.com/wmidentity/connect/authorize?response_mode=form_post\u0026response_type=code+id_token\u0026redirect_uri=https%3A%2F%2Fapps.rackspace.com%2Flogin.php\u0026client_id=webmail\u0026nonce=66d01748bc72126b79d488e596fbd975\u0026state=89fa27ac130c94bb0d8291c6fa813a29\u0026scope=openid+profile+email+webmail+openid\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":9462,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T19:26:52.117381Z","times_seen":18040627,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":292,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps.rackspace.com/wmidentity/Account/Login?ReturnUrl=%2Fwmidentity%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_mode%3Dform_post%26response_type%3Dcode%2520id_token%26redirect_uri%3Dhttps%253A%252F%252Fapps.rackspace.com%252Flogin.php%26client_id%3Dwebmail%26nonce%3D66d01748bc72126b79d488e596fbd975%26state%3D89fa27ac130c94bb0d8291c6fa813a29%26scope%3Dopenid%2520profile%2520email%2520webmail%2520openid","fqdn":"apps.rackspace.com","domain":"rackspace.com","tld":"com"},"ip":{"addr":"69.20.91.24","port":443,"asn":27357,"as":"RACKSPACE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T12:54:02.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps.rackspace.com","organization":"Rackspace Technology, Inc."},"issuer":{"commonName":"Thawte EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Fri, 21 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9F:3C:70:E3:77:29:37:EC:CC:3A:5C:4C:5F:6C:57:93:76:A2:BD:B5","sha256":"DE:44:DC:A7:C1:CE:7B:29:89:08:D9:8B:A6:D8:4E:B2:A3:E8:6B:64:B2:8B:62:95:7B:C0:B8:4B:B9:9D:2A:87"}}},"request":{"raw":"GET /wmidentity/Account/Login?ReturnUrl=%2Fwmidentity%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_mode%3Dform_post%26response_type%3Dcode%2520id_token%26redirect_uri%3Dhttps%253A%252F%252Fapps.rackspace.com%252Flogin.php%26client_id%3Dwebmail%26nonce%3D66d01748bc72126b79d488e596fbd975%26state%3D89fa27ac130c94bb0d8291c6fa813a29%26scope%3Dopenid%2520profile%2520email%2520webmail%2520openid HTTP/1.1\r\nHost: apps.rackspace.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: openid_connect_nonce=66d01748bc72126b79d488e596fbd975; openid_connect_state=89fa27ac130c94bb0d8291c6fa813a29\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Mon, 09 Mar 2026 12:54:03 GMT\r\nContent-Type: text/html\r\nContent-Length: 9462\r\nConnection: keep-alive\r\nCache-Control: no-cache, no-store\r\nContent-Security-Policy: frame-ancestors 'self';\r\nPragma: no-cache\r\nSet-Cookie: .AspNetCore.Antiforgery.9TtSrW0hzOs=CfDJ8C9JbzfMhuZPt6XTc-PPbnY4wmqYJMQ2GtUDSegKSWWcK8tDUuTn9v8hyu2ZycISUIYsScF9N3gRz4CbrWvOKGGj33b-dwqieYcECl5u3h7wMxdlsSEURvPpcn66VGA5xteCP09slpmCQsM-pGBvzA8; path=/wmidentity; samesite=lax; httponly\r\nX-Co-Correlation-Id: 0HNJB31CII4RJ:00000012\r\nX-Co-Url: https://apps.rackspace.com/wmidentity/Account/Login?ReturnUrl=%2Fwmidentity%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_mode%3Dform_post%26response_type%3Dcode%2520id_token%26redirect_uri%3Dhttps%253A%252F%252Fapps.rackspace.com%252Flogin.php%26client_id%3Dwebmail%26nonce%3D66d01748bc72126b79d488e596fbd975%26state%3D89fa27ac130c94bb0d8291c6fa813a29%26scope%3Dopenid%2520profile%2520email%2520webmail%2520openid\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":9462,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"1e7ab612dd8f0b7b332dad8452764376","sha1":"4b932a52e984de8565b020ddcffc4942128d6de4","sha256":"455fc1059983777c160080fc2d2a9ac42f66f9e6dee85a6b1b03be24442defe9","sha512":"640bf4e58ebaea9522c7d293e482df77fad3da7cdaad5c8729594bba81ff5bb4a8d5ee469dea8d4d68150ad67bbb31618aa0ab3d46bb485a927bb441dc4cde3e","ssdeep":"192:FIDR/bDwxusEImU6ll1EL9i5dKwvI/PJuBbJ6x1u0+W26JiQMN:FMFXINAmPSD0+dBlN","tlshash":"77124f595ab31505b903e964bfe66b122325c113c60acd6d7eeca78ccfcb9859c9338c","first_seen":"2026-03-09T12:54:23.491429Z","last_seen":"2026-03-09T12:54:23.491429Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,400,500,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apps.rackspace.com/wmidentity/Account/Login?ReturnUrl=%2Fwmidentity%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_mode%3Dform_post%26response_type%3Dcode%2520id_token%26redirect_uri%3Dhttps%253A%252F%252Fapps.rackspace.com%252Flogin.php%26client_id%3Dwebmail%26nonce%3D66d01748bc72126b79d488e596fbd975%26state%3D89fa27ac130c94bb0d8291c6fa813a29%26scope%3Dopenid%2520profile%2520email%2520webmail%2520openid","date":"2026-03-09T12:54:03.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Roboto:100,400,500,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.rackspace.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 09 Mar 2026 12:54:04 GMT\r\ndate: Mon, 09 Mar 2026 12:54:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21548,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1136f392c371b088f0043aae4828aeb5","sha1":"e32ca01d0900b870c265c5fce43862cd87d6d1f5","sha256":"0ee78f6d4d18f45992e30edb48ddd3f5de177d12d2908bec2d842819a3596416","sha512":"e2fed6042f4c7a74d172934f91a7af25476416010dd585d435bbc4c0300c3c06b775458ecf4b9da3be211da33a770865df93c6f4cd8829aa4abca75caceb750e","ssdeep":"384:DF9fzF9kF9FF9hF9y4F9/qY4eF9cF98F939fa9D9w9k9yf9/qY459L9r9c9fF9Yg:DFZFCFHFHFY4FRLFuFWFFMl22YfRiJhO","tlshash":"39a20ea10417440097834ce223cebf35fe1f92507142d0b5abfd9b6baddbca652693ad","first_seen":"2026-02-20T00:46:02.870901Z","last_seen":"2026-08-22T10:31:32.785085Z","times_seen":207,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":69,"dns":1,"connect":8,"send":0,"wait":22,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.emailsrvr.com/beta_apps_rackspace_com/images/Rackspace_Technology_Logo_RGB_WHT.png","fqdn":"static.emailsrvr.com","domain":"emailsrvr.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps.rackspace.com/wmidentity/Account/Login?ReturnUrl=%2Fwmidentity%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_mode%3Dform_post%26response_type%3Dcode%2520id_token%26redirect_uri%3Dhttps%253A%252F%252Fapps.rackspace.com%252Flogin.php%26client_id%3Dwebmail%26nonce%3D66d01748bc72126b79d488e596fbd975%26state%3D89fa27ac130c94bb0d8291c6fa813a29%26scope%3Dopenid%2520profile%2520email%2520webmail%2520openid","date":"2026-03-09T12:54:03.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.emailsrvr.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 07 Jan 2026 00:00:00 GMT","end":"Tue, 07 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"72:0C:10:B8:BE:2C:26:6F:8A:E8:63:E7:12:96:97:74:09:EE:5E:A7","sha256":"5E:9D:F7:7D:46:3B:33:1F:C6:53:2E:F4:A2:DB:61:59:64:48:0A:BA:A2:97:7F:39:FA:0B:60:B5:65:01:8F:14"}}},"request":{"raw":"GET /beta_apps_rackspace_com/images/Rackspace_Technology_Logo_RGB_WHT.png HTTP/1.1\r\nHost: static.emailsrvr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.rackspace.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 12:54:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 8173\r\ncache-control: public, max-age=604800\r\nlast-modified: Mon, 13 Jul 2020 19:51:24 GMT\r\netag: \"ffe73fd4e59d61:0\"\r\nx-powered-by: ASP.NET\r\nx-azure-ref: 20260309T125404Z-16c6dc4f4d6p9lgfhC1SVGb14w0000000kf000000000c4gt\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache: TCP_HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":8173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 247, 8-bit colormap, non-interlaced","md5":"28263b070e6cc2fc679f2b4dac7d1d69","sha1":"82b6ea53695926e0d9fe8e10aacd02a228df53e3","sha256":"97669a98a4d13725fbefcfd567ea8adf12fc3c06eef40e71d824bb47267ccb18","sha512":"6c750837fc3d386b0d6414b41c9c9c10b880e14b88e84a618b95838f905df1a0be0f77cfaff7cb40843ad37b5caff10f8435d869fa12116c8f6717ae2e487572","ssdeep":"192:XeYiWDuKMnpQvLtwOKToYECE4hwAfqWh7m:Xet4uWzAToYDRpqgm","tlshash":"dcf1bf619f9ca427ecae91ef7b2370e34c419d7425c5c358065171c8423c589878efc1","first_seen":"2023-05-01T11:07:57Z","last_seen":"2026-05-23T06:02:50.027194Z","times_seen":1075,"resource_available":false,"data":null}},"time_used":997,"timings":{"blocked":487,"dns":250,"connect":7,"send":0,"wait":17,"receive":0,"ssl":228},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apps.rackspace.com/wmidentity/Account/Login?ReturnUrl=%2Fwmidentity%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_mode%3Dform_post%26response_type%3Dcode%2520id_token%26redirect_uri%3Dhttps%253A%252F%252Fapps.rackspace.com%252Flogin.php%26client_id%3Dwebmail%26nonce%3D66d01748bc72126b79d488e596fbd975%26state%3D89fa27ac130c94bb0d8291c6fa813a29%26scope%3Dopenid%2520profile%2520email%2520webmail%2520openid","date":"2026-03-09T12:54:04.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://apps.rackspace.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 05:12:01 GMT\r\nexpires: Mon, 08 Mar 2027 05:12:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 114123\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-22T19:24:39.680481Z","times_seen":270323,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":65,"dns":1,"connect":7,"send":0,"wait":8,"receive":9,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myconnnezsionaoutebdm.icu/","fqdn":"myconnnezsionaoutebdm.icu","domain":"myconnnezsionaoutebdm.icu","tld":"icu"},"ip":{"addr":"45.77.144.230","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T12:53:54.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myconnnezsionaoutebdm.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 17:38:52 GMT","end":"Sat, 06 Jun 2026 17:38:51 GMT"},"fingerprint":{"sha1":"35:97:1F:30:93:7E:73:46:0A:75:BD:7D:20:6A:A8:CB:D4:F2:2D:04","sha256":"00:F6:B6:11:62:61:BB:BC:90:DB:5E:14:FA:E5:04:94:3D:C1:CF:86:99:8C:B2:90:6A:D0:57:91:1A:31:8C:36"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: myconnnezsionaoutebdm.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 09 Mar 2026 12:53:55 GMT\r\nContent-Type: text/html\r\nLast-Modified: Fri, 01 Nov 2024 22:24:56 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"67255538-28ec\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10476,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"d701c5abffb7cbda07ae905ac880d4ef","sha1":"bf42b879c545ef09d54007109acdd649cd0a9f09","sha256":"86acfc0526b63d3e009741fd4c005be16e7441c5982a1d9ae9ba1b41e59c3497","sha512":"7b3a4b7fcac8d4ef23116e2d79a3cab01472c8be2b6903dd9ad8afa2ecd76ef4b6187525a2fe9720324d6294c8f704a2e26aec82508367b086a03c08f8d8c77b","ssdeep":"192:bZDR/bDwxusEImU6ll1EL9i5dKwvI/PJuBbJ6x1qqJV6iUToj:b1FXINAmPSw6iUe","tlshash":"2622425656b30416a943a5687ffb6b023220c113c50acd5d7feca78ccfcaa859ca379c","first_seen":"2026-01-31T08:57:24.479129Z","last_seen":"2026-03-09T22:13:36.796788Z","times_seen":4,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":256,"dns":62,"connect":91,"send":0,"wait":91,"receive":1,"ssl":100},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://myconnnezsionaoutebdm.icu/","date":"2026-03-09T12:53:55.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://myconnnezsionaoutebdm.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 05:12:01 GMT\r\nexpires: Mon, 08 Mar 2027 05:12:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 114114\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-22T19:24:39.680481Z","times_seen":270323,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":150,"dns":0,"connect":22,"send":0,"wait":21,"receive":12,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myconnnezsionaoutebdm.icu/secure/index.html#error=invalidlogin","fqdn":"myconnnezsionaoutebdm.icu","domain":"myconnnezsionaoutebdm.icu","tld":"icu"},"ip":{"addr":"45.77.144.230","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T12:53:58.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myconnnezsionaoutebdm.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 17:38:52 GMT","end":"Sat, 06 Jun 2026 17:38:51 GMT"},"fingerprint":{"sha1":"35:97:1F:30:93:7E:73:46:0A:75:BD:7D:20:6A:A8:CB:D4:F2:2D:04","sha256":"00:F6:B6:11:62:61:BB:BC:90:DB:5E:14:FA:E5:04:94:3D:C1:CF:86:99:8C:B2:90:6A:D0:57:91:1A:31:8C:36"}}},"request":{"raw":"GET /secure/index.html HTTP/1.1\r\nHost: myconnnezsionaoutebdm.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://myconnnezsionaoutebdm.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 09 Mar 2026 12:53:58 GMT\r\nContent-Type: text/html\r\nLast-Modified: Fri, 01 Nov 2024 22:46:56 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"67255a60-28ef\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10479,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"392187d5022153876e543ce37be2fa02","sha1":"2a6a64e46b5fef61ef964ab22ed4bd1ad8cee624","sha256":"0ac8260ad9ca4068142d661707076809cd26eedfaa70c5d9459c8c7c7de3f463","sha512":"a638655ca173d080270529667bfd2c06cc728cf55826a60807a299a605d8419bd6788fafb7c609f944f19faae55bf5a8abb92d9cf9396b988a2636af9e71cb3f","ssdeep":"192:bNDR/bDwxusEImU6ll1EL9i5dKwvI/PJuBbJ6x1UqJV6iUToj:bJFXINAmPSG6iUe","tlshash":"1a22425556b30416a943a5687ffb6b023220c113c50acd5d7feca78ccfcaa859ca379c","first_seen":"2026-01-31T08:57:24.481543Z","last_seen":"2026-03-09T22:13:36.798808Z","times_seen":4,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myconnnezsionaoutebdm.icu/xpost.php","fqdn":"myconnnezsionaoutebdm.icu","domain":"myconnnezsionaoutebdm.icu","tld":"icu"},"ip":{"addr":"45.77.144.230","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T12:53:57.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myconnnezsionaoutebdm.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 17:38:52 GMT","end":"Sat, 06 Jun 2026 17:38:51 GMT"},"fingerprint":{"sha1":"35:97:1F:30:93:7E:73:46:0A:75:BD:7D:20:6A:A8:CB:D4:F2:2D:04","sha256":"00:F6:B6:11:62:61:BB:BC:90:DB:5E:14:FA:E5:04:94:3D:C1:CF:86:99:8C:B2:90:6A:D0:57:91:1A:31:8C:36"}}},"request":{"raw":"POST /xpost.php HTTP/1.1\r\nHost: myconnnezsionaoutebdm.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 19\r\nOrigin: https://myconnnezsionaoutebdm.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myconnnezsionaoutebdm.icu/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":19,"data":"username=\u0026password="}},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 09 Mar 2026 12:53:58 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: ./secure/index.html#error=invalidlogin\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10479,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T19:26:52.117381Z","times_seen":18040627,"resource_available":true,"data":null}},"time_used":581,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":581,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myconnnezsionaoutebdm.icu/imgs/Rackspace_Technology_Logo_RGB_WHT.png","fqdn":"myconnnezsionaoutebdm.icu","domain":"myconnnezsionaoutebdm.icu","tld":"icu"},"ip":{"addr":"45.77.144.230","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myconnnezsionaoutebdm.icu/secure/index.html#error=invalidlogin","date":"2026-03-09T12:53:58.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myconnnezsionaoutebdm.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 17:38:52 GMT","end":"Sat, 06 Jun 2026 17:38:51 GMT"},"fingerprint":{"sha1":"35:97:1F:30:93:7E:73:46:0A:75:BD:7D:20:6A:A8:CB:D4:F2:2D:04","sha256":"00:F6:B6:11:62:61:BB:BC:90:DB:5E:14:FA:E5:04:94:3D:C1:CF:86:99:8C:B2:90:6A:D0:57:91:1A:31:8C:36"}}},"request":{"raw":"GET /imgs/Rackspace_Technology_Logo_RGB_WHT.png HTTP/1.1\r\nHost: myconnnezsionaoutebdm.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myconnnezsionaoutebdm.icu/secure/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 09 Mar 2026 12:53:58 GMT\r\nContent-Type: image/png\r\nContent-Length: 8173\r\nLast-Modified: Tue, 15 Oct 2024 23:24:10 GMT\r\nConnection: keep-alive\r\nETag: \"670ef99a-1fed\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 247, 8-bit colormap, non-interlaced","md5":"28263b070e6cc2fc679f2b4dac7d1d69","sha1":"82b6ea53695926e0d9fe8e10aacd02a228df53e3","sha256":"97669a98a4d13725fbefcfd567ea8adf12fc3c06eef40e71d824bb47267ccb18","sha512":"6c750837fc3d386b0d6414b41c9c9c10b880e14b88e84a618b95838f905df1a0be0f77cfaff7cb40843ad37b5caff10f8435d869fa12116c8f6717ae2e487572","ssdeep":"192:XeYiWDuKMnpQvLtwOKToYECE4hwAfqWh7m:Xet4uWzAToYDRpqgm","tlshash":"dcf1bf619f9ca427ecae91ef7b2370e34c419d7425c5c358065171c8423c589878efc1","first_seen":"2023-05-01T11:07:57Z","last_seen":"2026-05-23T06:02:50.027194Z","times_seen":1075,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apps.rackspace.com/","fqdn":"apps.rackspace.com","domain":"rackspace.com","tld":"com"},"ip":{"addr":"69.20.91.24","port":443,"asn":27357,"as":"RACKSPACE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T12:54:01.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps.rackspace.com","organization":"Rackspace Technology, Inc."},"issuer":{"commonName":"Thawte EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Fri, 21 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9F:3C:70:E3:77:29:37:EC:CC:3A:5C:4C:5F:6C:57:93:76:A2:BD:B5","sha256":"DE:44:DC:A7:C1:CE:7B:29:89:08:D9:8B:A6:D8:4E:B2:A3:E8:6B:64:B2:8B:62:95:7B:C0:B8:4B:B9:9D:2A:87"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: apps.rackspace.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://myconnnezsionaoutebdm.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Mon, 09 Mar 2026 12:54:01 GMT\r\nContent-Type: text/html;charset=UTF-8\r\nContent-Length: 228\r\nConnection: keep-alive\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":228,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"149fb671c4fd01d7d2f1d08d8c6a9509","sha1":"901184597446c87cf4497e669f5be6a1c37196c1","sha256":"50fa139c75cae92a46a5c870a90998365b26a9b85e7d35f80560dab62d8f5ca0","sha512":"28a9d8828bdfbc6ad0d5ffb665cfb131c9edb88a4a26d4755087c96d500dfd17e866beae78bfd28454b72a5a54a1c8739e66da09f33b8efcb4642704734b7e16","ssdeep":"","tlshash":"88d0a7db702452554162eb8035e6a742182383871980019ce59090d3c4eab1ed50b6ae","first_seen":"2023-09-04T10:51:07Z","last_seen":"2026-06-04T03:12:32.363113Z","times_seen":26,"resource_available":true,"data":null}},"time_used":1126,"timings":{"blocked":515,"dns":15,"connect":93,"send":0,"wait":96,"receive":0,"ssl":405},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apps.rackspace.com/wmidentity/Account/Login?ReturnUrl=%2Fwmidentity%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_mode%3Dform_post%26response_type%3Dcode%2520id_token%26redirect_uri%3Dhttps%253A%252F%252Fapps.rackspace.com%252Flogin.php%26client_id%3Dwebmail%26nonce%3D66d01748bc72126b79d488e596fbd975%26state%3D89fa27ac130c94bb0d8291c6fa813a29%26scope%3Dopenid%2520profile%2520email%2520webmail%2520openid","date":"2026-03-09T12:54:04.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://apps.rackspace.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 05:12:01 GMT\r\nexpires: Mon, 08 Mar 2027 05:12:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 114123\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-22T19:24:39.680481Z","times_seen":270323,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":87,"dns":1,"connect":7,"send":0,"wait":8,"receive":4,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,400,500,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://myconnnezsionaoutebdm.icu/secure/index.html#error=invalidlogin","date":"2026-03-09T12:53:58.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Roboto:100,400,500,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myconnnezsionaoutebdm.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 09 Mar 2026 12:53:58 GMT\r\ndate: Mon, 09 Mar 2026 12:53:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21548,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1136f392c371b088f0043aae4828aeb5","sha1":"e32ca01d0900b870c265c5fce43862cd87d6d1f5","sha256":"0ee78f6d4d18f45992e30edb48ddd3f5de177d12d2908bec2d842819a3596416","sha512":"e2fed6042f4c7a74d172934f91a7af25476416010dd585d435bbc4c0300c3c06b775458ecf4b9da3be211da33a770865df93c6f4cd8829aa4abca75caceb750e","ssdeep":"384:DF9fzF9kF9FF9hF9y4F9/qY4eF9cF98F939fa9D9w9k9yf9/qY459L9r9c9fF9Yg:DFZFCFHFHFY4FRLFuFWFFMl22YfRiJhO","tlshash":"39a20ea10417440097834ce223cebf35fe1f92507142d0b5abfd9b6baddbca652693ad","first_seen":"2026-02-20T00:46:02.870901Z","last_seen":"2026-08-22T10:31:32.785085Z","times_seen":207,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://myconnnezsionaoutebdm.icu/secure/index.html#error=invalidlogin","date":"2026-03-09T12:53:58.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://myconnnezsionaoutebdm.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 05:12:01 GMT\r\nexpires: Mon, 08 Mar 2027 05:12:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 114117\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-22T19:24:39.680481Z","times_seen":270323,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps.rackspace.com/favicon.ico","fqdn":"apps.rackspace.com","domain":"rackspace.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps.rackspace.com/","date":"2026-03-09T12:54:01.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps.rackspace.com","organization":"Rackspace Technology, Inc."},"issuer":{"commonName":"Thawte EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Fri, 21 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9F:3C:70:E3:77:29:37:EC:CC:3A:5C:4C:5F:6C:57:93:76:A2:BD:B5","sha256":"DE:44:DC:A7:C1:CE:7B:29:89:08:D9:8B:A6:D8:4E:B2:A3:E8:6B:64:B2:8B:62:95:7B:C0:B8:4B:B9:9D:2A:87"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: apps.rackspace.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.rackspace.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T19:26:52.117381Z","times_seen":18040627,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps.rackspace.com/index.php","fqdn":"apps.rackspace.com","domain":"rackspace.com","tld":"com"},"ip":{"addr":"69.20.91.24","port":443,"asn":27357,"as":"RACKSPACE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T12:54:01.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps.rackspace.com","organization":"Rackspace Technology, Inc."},"issuer":{"commonName":"Thawte EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Fri, 21 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9F:3C:70:E3:77:29:37:EC:CC:3A:5C:4C:5F:6C:57:93:76:A2:BD:B5","sha256":"DE:44:DC:A7:C1:CE:7B:29:89:08:D9:8B:A6:D8:4E:B2:A3:E8:6B:64:B2:8B:62:95:7B:C0:B8:4B:B9:9D:2A:87"}}},"request":{"raw":"GET /index.php HTTP/1.1\r\nHost: apps.rackspace.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Mon, 09 Mar 2026 12:54:02 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Frame-Options: SAMEORIGIN\r\nLocation: https://apps.rackspace.com/login.php\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9462,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T19:26:52.117381Z","times_seen":18040627,"resource_available":true,"data":null}},"time_used":499,"timings":{"blocked":190,"dns":1,"connect":92,"send":0,"wait":111,"receive":1,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps.rackspace.com/wmidentity/dist/webmailLogin.js?v=dn70RwATRXPGR3I_MlY9aK9fMX6zSf1GYvcRvRv-UFc=","fqdn":"apps.rackspace.com","domain":"rackspace.com","tld":"com"},"ip":{"addr":"69.20.91.24","port":443,"asn":27357,"as":"RACKSPACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apps.rackspace.com/wmidentity/Account/Login?ReturnUrl=%2Fwmidentity%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_mode%3Dform_post%26response_type%3Dcode%2520id_token%26redirect_uri%3Dhttps%253A%252F%252Fapps.rackspace.com%252Flogin.php%26client_id%3Dwebmail%26nonce%3D66d01748bc72126b79d488e596fbd975%26state%3D89fa27ac130c94bb0d8291c6fa813a29%26scope%3Dopenid%2520profile%2520email%2520webmail%2520openid","date":"2026-03-09T12:54:03.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps.rackspace.com","organization":"Rackspace Technology, Inc."},"issuer":{"commonName":"Thawte EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Fri, 21 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9F:3C:70:E3:77:29:37:EC:CC:3A:5C:4C:5F:6C:57:93:76:A2:BD:B5","sha256":"DE:44:DC:A7:C1:CE:7B:29:89:08:D9:8B:A6:D8:4E:B2:A3:E8:6B:64:B2:8B:62:95:7B:C0:B8:4B:B9:9D:2A:87"}}},"request":{"raw":"GET /wmidentity/dist/webmailLogin.js?v=dn70RwATRXPGR3I_MlY9aK9fMX6zSf1GYvcRvRv-UFc= HTTP/1.1\r\nHost: apps.rackspace.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.rackspace.com/wmidentity/Account/Login?ReturnUrl=%2Fwmidentity%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_mode%3Dform_post%26response_type%3Dcode%2520id_token%26redirect_uri%3Dhttps%253A%252F%252Fapps.rackspace.com%252Flogin.php%26client_id%3Dwebmail%26nonce%3D66d01748bc72126b79d488e596fbd975%26state%3D89fa27ac130c94bb0d8291c6fa813a29%26scope%3Dopenid%2520profile%2520email%2520webmail%2520openid\r\nCookie: .AspNetCore.Antiforgery.9TtSrW0hzOs=CfDJ8C9JbzfMhuZPt6XTc-PPbnY4wmqYJMQ2GtUDSegKSWWcK8tDUuTn9v8hyu2ZycISUIYsScF9N3gRz4CbrWvOKGGj33b-dwqieYcECl5u3h7wMxdlsSEURvPpcn66VGA5xteCP09slpmCQsM-pGBvzA8; openid_connect_nonce=66d01748bc72126b79d488e596fbd975; openid_connect_state=89fa27ac130c94bb0d8291c6fa813a29\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Mon, 09 Mar 2026 12:54:04 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 114002\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nContent-Security-Policy: frame-ancestors 'self';\r\nEtag: \"1d78eb47479b5d2\"\r\nLast-Modified: Wed, 11 Aug 2021 13:26:13 GMT\r\nX-Co-Correlation-Id: 0HNJ1LU5S4E3Q:0000000D\r\nX-Co-Url: https://apps.rackspace.com/wmidentity/dist/webmailLogin.js?v=dn70RwATRXPGR3I_MlY9aK9fMX6zSf1GYvcRvRv-UFc=\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114002,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50037), with LF, NEL line terminators","md5":"2f4cbd4e66a20e5de87d500611f951b7","sha1":"912a87eb118c4bcfb6ceac6e8177b0c3a584d0dc","sha256":"767ef44700134573c647723f32563d68af5f317eb349fd4662f711bd1bfe5057","sha512":"8f365893517d43c5c96d5fb825a3d593c885d18381ae5ea4e0ab436890f21b12b1b8c591a9af01716cf89d06af297c7b2a577088060bc6ad49c9c9bae7a6621f","ssdeep":"1536:9yKs3V+5x4PIl2l0wfHNp+kx6+efSo9tzNl+rWT0EtOBTjea0:zs3sAPOCAHdT0EtwTje1","tlshash":"edb3738cbedaf09543a37175812f600bf37a2a55745e94e0e26ad1e1ac7888f4137f2d","first_seen":"2023-03-07T13:48:02Z","last_seen":"2026-07-14T14:33:27.621973Z","times_seen":106,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":279,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myconnnezsionaoutebdm.icu/imgs/Suspicious-Email-Banner.jpg","fqdn":"myconnnezsionaoutebdm.icu","domain":"myconnnezsionaoutebdm.icu","tld":"icu"},"ip":{"addr":"45.77.144.230","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myconnnezsionaoutebdm.icu/","date":"2026-03-09T12:53:55.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myconnnezsionaoutebdm.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 17:38:52 GMT","end":"Sat, 06 Jun 2026 17:38:51 GMT"},"fingerprint":{"sha1":"35:97:1F:30:93:7E:73:46:0A:75:BD:7D:20:6A:A8:CB:D4:F2:2D:04","sha256":"00:F6:B6:11:62:61:BB:BC:90:DB:5E:14:FA:E5:04:94:3D:C1:CF:86:99:8C:B2:90:6A:D0:57:91:1A:31:8C:36"}}},"request":{"raw":"GET /imgs/Suspicious-Email-Banner.jpg HTTP/1.1\r\nHost: myconnnezsionaoutebdm.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myconnnezsionaoutebdm.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 09 Mar 2026 12:53:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 31715\r\nLast-Modified: Tue, 15 Oct 2024 23:23:26 GMT\r\nConnection: keep-alive\r\nETag: \"670ef96e-7be3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31715,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 190x294, components 3","md5":"9a457ecb967c34f7b32732c0b2b2209f","sha1":"b51b39359e84580e17153f4a9826788d9ab3d252","sha256":"ee608b4a41a47f8df45dd1d505afb39cb7293e7a33c094b756764a85d67fca47","sha512":"934f5296650fac053feb494b59824e05359d69303adeb1900ae79d4e5c268b6ed322bf6dc7a1c81539e3d148ae09addae387f01ee8ffd1d6ac93a8de733a5765","ssdeep":"768:zjjjjjjjjI9JdUCb+ZpXbH31IOtythAxvJh5uw83taTeW7cIe4AA8FhKfRBjjjjE:89J2Cb+j7q5tYu/36bwIh8FhCMvlf2A","tlshash":"c5e2bee7ea5b77cbefe81624f2832b4dbac47a8800566ccc51ed2e51a412439c5643fd","first_seen":"2023-05-02T01:33:09Z","last_seen":"2026-05-23T06:02:50.032543Z","times_seen":872,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":119,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myconnnezsionaoutebdm.icu/imgs/Rackspace_Technology_Logo_RGB_WHT.png","fqdn":"myconnnezsionaoutebdm.icu","domain":"myconnnezsionaoutebdm.icu","tld":"icu"},"ip":{"addr":"45.77.144.230","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myconnnezsionaoutebdm.icu/","date":"2026-03-09T12:53:55.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myconnnezsionaoutebdm.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 17:38:52 GMT","end":"Sat, 06 Jun 2026 17:38:51 GMT"},"fingerprint":{"sha1":"35:97:1F:30:93:7E:73:46:0A:75:BD:7D:20:6A:A8:CB:D4:F2:2D:04","sha256":"00:F6:B6:11:62:61:BB:BC:90:DB:5E:14:FA:E5:04:94:3D:C1:CF:86:99:8C:B2:90:6A:D0:57:91:1A:31:8C:36"}}},"request":{"raw":"GET /imgs/Rackspace_Technology_Logo_RGB_WHT.png HTTP/1.1\r\nHost: myconnnezsionaoutebdm.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myconnnezsionaoutebdm.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 09 Mar 2026 12:53:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 8173\r\nLast-Modified: Tue, 15 Oct 2024 23:24:10 GMT\r\nConnection: keep-alive\r\nETag: \"670ef99a-1fed\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 247, 8-bit colormap, non-interlaced","md5":"28263b070e6cc2fc679f2b4dac7d1d69","sha1":"82b6ea53695926e0d9fe8e10aacd02a228df53e3","sha256":"97669a98a4d13725fbefcfd567ea8adf12fc3c06eef40e71d824bb47267ccb18","sha512":"6c750837fc3d386b0d6414b41c9c9c10b880e14b88e84a618b95838f905df1a0be0f77cfaff7cb40843ad37b5caff10f8435d869fa12116c8f6717ae2e487572","ssdeep":"192:XeYiWDuKMnpQvLtwOKToYECE4hwAfqWh7m:Xet4uWzAToYDRpqgm","tlshash":"dcf1bf619f9ca427ecae91ef7b2370e34c419d7425c5c358065171c8423c589878efc1","first_seen":"2023-05-01T11:07:57Z","last_seen":"2026-05-23T06:02:50.027194Z","times_seen":1075,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":98,"dns":0,"connect":91,"send":0,"wait":90,"receive":1,"ssl":106},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myconnnezsionaoutebdm.icu/imgs/Suspicious-Email-Banner.jpg","fqdn":"myconnnezsionaoutebdm.icu","domain":"myconnnezsionaoutebdm.icu","tld":"icu"},"ip":{"addr":"45.77.144.230","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myconnnezsionaoutebdm.icu/secure/index.html#error=invalidlogin","date":"2026-03-09T12:53:58.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myconnnezsionaoutebdm.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 17:38:52 GMT","end":"Sat, 06 Jun 2026 17:38:51 GMT"},"fingerprint":{"sha1":"35:97:1F:30:93:7E:73:46:0A:75:BD:7D:20:6A:A8:CB:D4:F2:2D:04","sha256":"00:F6:B6:11:62:61:BB:BC:90:DB:5E:14:FA:E5:04:94:3D:C1:CF:86:99:8C:B2:90:6A:D0:57:91:1A:31:8C:36"}}},"request":{"raw":"GET /imgs/Suspicious-Email-Banner.jpg HTTP/1.1\r\nHost: myconnnezsionaoutebdm.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myconnnezsionaoutebdm.icu/secure/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 09 Mar 2026 12:53:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 31715\r\nLast-Modified: Tue, 15 Oct 2024 23:23:26 GMT\r\nConnection: keep-alive\r\nETag: \"670ef96e-7be3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31715,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 190x294, components 3","md5":"9a457ecb967c34f7b32732c0b2b2209f","sha1":"b51b39359e84580e17153f4a9826788d9ab3d252","sha256":"ee608b4a41a47f8df45dd1d505afb39cb7293e7a33c094b756764a85d67fca47","sha512":"934f5296650fac053feb494b59824e05359d69303adeb1900ae79d4e5c268b6ed322bf6dc7a1c81539e3d148ae09addae387f01ee8ffd1d6ac93a8de733a5765","ssdeep":"768:zjjjjjjjjI9JdUCb+ZpXbH31IOtythAxvJh5uw83taTeW7cIe4AA8FhKfRBjjjjE:89J2Cb+j7q5tYu/36bwIh8FhCMvlf2A","tlshash":"c5e2bee7ea5b77cbefe81624f2832b4dbac47a8800566ccc51ed2e51a412439c5643fd","first_seen":"2023-05-02T01:33:09Z","last_seen":"2026-05-23T06:02:50.032543Z","times_seen":872,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://myconnnezsionaoutebdm.icu/secure/index.html#error=invalidlogin","date":"2026-03-09T12:53:58.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://myconnnezsionaoutebdm.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 05:12:01 GMT\r\nexpires: Mon, 08 Mar 2027 05:12:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 114117\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-22T19:24:39.680481Z","times_seen":270323,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myconnnezsionaoutebdm.icu/secure/xpost.php","fqdn":"myconnnezsionaoutebdm.icu","domain":"myconnnezsionaoutebdm.icu","tld":"icu"},"ip":{"addr":"45.77.144.230","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T12:54:00.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myconnnezsionaoutebdm.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 17:38:52 GMT","end":"Sat, 06 Jun 2026 17:38:51 GMT"},"fingerprint":{"sha1":"35:97:1F:30:93:7E:73:46:0A:75:BD:7D:20:6A:A8:CB:D4:F2:2D:04","sha256":"00:F6:B6:11:62:61:BB:BC:90:DB:5E:14:FA:E5:04:94:3D:C1:CF:86:99:8C:B2:90:6A:D0:57:91:1A:31:8C:36"}}},"request":{"raw":"POST /secure/xpost.php HTTP/1.1\r\nHost: myconnnezsionaoutebdm.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 19\r\nOrigin: https://myconnnezsionaoutebdm.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myconnnezsionaoutebdm.icu/secure/index.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":19,"data":"username=\u0026password="}},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 09 Mar 2026 12:54:01 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: https://apps.rackspace.com/\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":228,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T19:26:52.117381Z","times_seen":18040627,"resource_available":true,"data":null}},"time_used":535,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://myconnnezsionaoutebdm.icu/","date":"2026-03-09T12:53:55.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://myconnnezsionaoutebdm.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 05:12:01 GMT\r\nexpires: Mon, 08 Mar 2027 05:12:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 114114\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-22T19:24:39.680481Z","times_seen":270323,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":100,"dns":1,"connect":21,"send":0,"wait":23,"receive":29,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myconnnezsionaoutebdm.icu/imgs/faviconV2.png","fqdn":"myconnnezsionaoutebdm.icu","domain":"myconnnezsionaoutebdm.icu","tld":"icu"},"ip":{"addr":"45.77.144.230","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myconnnezsionaoutebdm.icu/secure/index.html#error=invalidlogin","date":"2026-03-09T12:53:58.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myconnnezsionaoutebdm.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 17:38:52 GMT","end":"Sat, 06 Jun 2026 17:38:51 GMT"},"fingerprint":{"sha1":"35:97:1F:30:93:7E:73:46:0A:75:BD:7D:20:6A:A8:CB:D4:F2:2D:04","sha256":"00:F6:B6:11:62:61:BB:BC:90:DB:5E:14:FA:E5:04:94:3D:C1:CF:86:99:8C:B2:90:6A:D0:57:91:1A:31:8C:36"}}},"request":{"raw":"GET /imgs/faviconV2.png HTTP/1.1\r\nHost: myconnnezsionaoutebdm.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myconnnezsionaoutebdm.icu/secure/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 09 Mar 2026 12:53:58 GMT\r\nContent-Type: image/png\r\nContent-Length: 303\r\nLast-Modified: Tue, 15 Oct 2024 23:30:16 GMT\r\nConnection: keep-alive\r\nETag: \"670efb08-12f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":303,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"6573330225ca8156b75f252e3c7decc8","sha1":"90a2c3ab7da3f3d38ca2c9188f09a3d66502b662","sha256":"46ffd8099db48d6ef9561acae21f76dedfb63d1f6e10b600467d2fadea252422","sha512":"573e2585ad776ceedc4063c1ba328877535affc8cdcf3a09baf13a1774fd6dac09bb9d7a31708eb255592088f435a97aa6147672eb48a6747860993deda48ffa","ssdeep":"","tlshash":"96e07dd7a7d81e3eda45a7729554a804e161072b005100433d02edde0b60258515521b","first_seen":"2023-06-02T14:19:02Z","last_seen":"2026-08-22T10:31:32.795009Z","times_seen":104,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"myconnnezsionaoutebdm.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apps.rackspace.com/wmidentity/connect/authorize?response_mode=form_post\u0026response_type=code+id_token\u0026redirect_uri=https%3A%2F%2Fapps.rackspace.com%2Flogin.php\u0026client_id=webmail\u0026nonce=66d01748bc72126b79d488e596fbd975\u0026state=89fa27ac130c94bb0d8291c6fa813a29\u0026scope=openid+profile+email+webmail+openid","fqdn":"apps.rackspace.com","domain":"rackspace.com","tld":"com"},"ip":{"addr":"69.20.91.24","port":443,"asn":27357,"as":"RACKSPACE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T12:54:02.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps.rackspace.com","organization":"Rackspace Technology, Inc."},"issuer":{"commonName":"Thawte EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Fri, 21 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9F:3C:70:E3:77:29:37:EC:CC:3A:5C:4C:5F:6C:57:93:76:A2:BD:B5","sha256":"DE:44:DC:A7:C1:CE:7B:29:89:08:D9:8B:A6:D8:4E:B2:A3:E8:6B:64:B2:8B:62:95:7B:C0:B8:4B:B9:9D:2A:87"}}},"request":{"raw":"GET /wmidentity/connect/authorize?response_mode=form_post\u0026response_type=code+id_token\u0026redirect_uri=https%3A%2F%2Fapps.rackspace.com%2Flogin.php\u0026client_id=webmail\u0026nonce=66d01748bc72126b79d488e596fbd975\u0026state=89fa27ac130c94bb0d8291c6fa813a29\u0026scope=openid+profile+email+webmail+openid HTTP/1.1\r\nHost: apps.rackspace.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: openid_connect_nonce=66d01748bc72126b79d488e596fbd975; openid_connect_state=89fa27ac130c94bb0d8291c6fa813a29\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Mon, 09 Mar 2026 12:54:02 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nContent-Security-Policy: frame-ancestors 'self';\r\nLocation: https://apps.rackspace.com/wmidentity/Account/Login?ReturnUrl=%2Fwmidentity%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_mode%3Dform_post%26response_type%3Dcode%2520id_token%26redirect_uri%3Dhttps%253A%252F%252Fapps.rackspace.com%252Flogin.php%26client_id%3Dwebmail%26nonce%3D66d01748bc72126b79d488e596fbd975%26state%3D89fa27ac130c94bb0d8291c6fa813a29%26scope%3Dopenid%2520profile%2520email%2520webmail%2520openid\r\nX-Co-Correlation-Id: 0HNGMVLSSQQ2O:0000000E\r\nX-Co-Url: https://apps.rackspace.com/wmidentity/connect/authorize?response_mode=form_post\u0026response_type=code+id_token\u0026redirect_uri=https%3A%2F%2Fapps.rackspace.com%2Flogin.php\u0026client_id=webmail\u0026nonce=66d01748bc72126b79d488e596fbd975\u0026state=89fa27ac130c94bb0d8291c6fa813a29\u0026scope=openid+profile+email+webmail+openid\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9462,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T19:26:52.117381Z","times_seen":18040627,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.emailsrvr.com/apps_rackspace_com/images/Suspicious-Email-Banner.jpg","fqdn":"static.emailsrvr.com","domain":"emailsrvr.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps.rackspace.com/wmidentity/Account/Login?ReturnUrl=%2Fwmidentity%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_mode%3Dform_post%26response_type%3Dcode%2520id_token%26redirect_uri%3Dhttps%253A%252F%252Fapps.rackspace.com%252Flogin.php%26client_id%3Dwebmail%26nonce%3D66d01748bc72126b79d488e596fbd975%26state%3D89fa27ac130c94bb0d8291c6fa813a29%26scope%3Dopenid%2520profile%2520email%2520webmail%2520openid","date":"2026-03-09T12:54:03.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.emailsrvr.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 07 Jan 2026 00:00:00 GMT","end":"Tue, 07 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"72:0C:10:B8:BE:2C:26:6F:8A:E8:63:E7:12:96:97:74:09:EE:5E:A7","sha256":"5E:9D:F7:7D:46:3B:33:1F:C6:53:2E:F4:A2:DB:61:59:64:48:0A:BA:A2:97:7F:39:FA:0B:60:B5:65:01:8F:14"}}},"request":{"raw":"GET /apps_rackspace_com/images/Suspicious-Email-Banner.jpg HTTP/1.1\r\nHost: static.emailsrvr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.rackspace.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 12:54:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31715\r\ncache-control: public, max-age=604800\r\nlast-modified: Fri, 28 Sep 2018 18:18:39 GMT\r\netag: \"5b1d4cae5757d41:0\"\r\nx-powered-by: ASP.NET\r\nx-azure-ref: 20260309T125404Z-16c6dc4f4d6p9lgfhC1SVGb14w0000000kf000000000c4gs\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache: TCP_HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":31715,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 190x294, components 3","md5":"9a457ecb967c34f7b32732c0b2b2209f","sha1":"b51b39359e84580e17153f4a9826788d9ab3d252","sha256":"ee608b4a41a47f8df45dd1d505afb39cb7293e7a33c094b756764a85d67fca47","sha512":"934f5296650fac053feb494b59824e05359d69303adeb1900ae79d4e5c268b6ed322bf6dc7a1c81539e3d148ae09addae387f01ee8ffd1d6ac93a8de733a5765","ssdeep":"768:zjjjjjjjjI9JdUCb+ZpXbH31IOtythAxvJh5uw83taTeW7cIe4AA8FhKfRBjjjjE:89J2Cb+j7q5tYu/36bwIh8FhCMvlf2A","tlshash":"c5e2bee7ea5b77cbefe81624f2832b4dbac47a8800566ccc51ed2e51a412439c5643fd","first_seen":"2023-05-02T01:33:09Z","last_seen":"2026-05-23T06:02:50.032543Z","times_seen":872,"resource_available":false,"data":null}},"time_used":991,"timings":{"blocked":483,"dns":249,"connect":7,"send":0,"wait":14,"receive":4,"ssl":230},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}