{"report_id":"f4221990-4f16-4c46-87bb-3607251c02f4","version":0,"status":"done","tags":[],"date":"2026-06-08T13:32:07Z","url":{"schema":"http","addr":"popandc.be/wp-admin/js/cgi-ent/index--000","fqdn":"popandc.be","domain":"popandc.be","tld":"be"},"ip":{"addr":"213.186.33.4","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"final":{"url":{"schema":"http","addr":"popandc.be/wp-admin/js/cgi-ent/index--000","fqdn":"popandc.be","domain":"popandc.be","tld":"be"},"title":"Sign In","dom":{"size":59222,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (4003)","md5":"b2d62b85ab0e75eb4581081dcb10c3fb","sha1":"538fbcde6eb39e4c037a4364659d87d31b5f1d17","sha256":"53d725b4719c50371464df7ad2de602db818e9bf4be119d1878b38b36eb31e45","sha512":"c08fccac2580297bf8283a8361db7851fa987837d3ff5964ebc950a918b91e353a44f110010b4f17bdd7a58c343050158d95baaea5a81b9451878e9cb29ac3f5","ssdeep":"768:s7FSF3FuWFzF+fs8utovnh8utovWX9KTHjrCt1WtjL/plyA7qvE6mw:GQl0WxMTvCvPfCt1WtjLRlyA7q86mw","tlshash":"f3436536619341badcb3cac857eb2a463e849887e0c9d12477ac9ad84f838d5d47d3dc","dom_hash":"domhash72d6f6c130d1a077e4d133e782f391eb","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"popandc.be/wp-admin/js/cgi-ent/index--000","fqdn":"popandc.be","domain":"popandc.be","tld":"be"},"ip":{"addr":"213.186.33.4","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-13T13:32:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"popandc.be","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"popandc.be","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"popandc.be","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"popandc.be","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"boxmap1.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"boxmap1.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"popandc.be","ip":{"addr":"213.186.33.4","port":80,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2016-04-07","domain_rank":0,"first_seen":"2026-06-05T14:01:57.42767Z","last_seen":"2026-06-05T14:01:57.42767Z","alert_count":8,"request_count":2,"received_data":60361,"sent_data":934,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"boxmap1.netlify.app","ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-05-08","domain_rank":6502258,"first_seen":"2025-02-24T22:41:17.250034Z","last_seen":"2026-06-05T14:01:57.963905Z","alert_count":4,"request_count":2,"received_data":606,"sent_data":1073,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}]},{"fqdn":"media.tenor.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1995-07-30","domain_rank":25102,"first_seen":"2018-06-14T22:58:10Z","last_seen":"2026-06-06T21:04:52.19892Z","alert_count":0,"request_count":1,"received_data":36617,"sent_data":556,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.capitalone.com","ip":{"addr":"95.101.10.160","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1995-03-13","domain_rank":10533,"first_seen":"2014-02-11T17:09:30Z","last_seen":"2026-05-26T04:26:30.697538Z","alert_count":0,"request_count":1,"received_data":16145,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"popandc.be/wp-admin/js/cgi-ent/index--000","fqdn":"popandc.be","domain":"popandc.be","tld":"be"},"ip":{"addr":"213.186.33.4","port":80,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d22fd2c62d5e2394825bd26ec6b6df5","sha1":"2e91873ecc4b942eefdbbf2283859d8ae93de0a1","sha256":"65dab87b4a6e1ea35e4a0817b500884faeb4388d8ab9fdb7f97b97edb8d4b897","sha512":"fc034422aed6d493302ef9d5121851e0d54c15c59afe019a741310ca3bba80f504ffe8eb70da1e33ef3d243b9569a122f916e71b134fa3a18ef0f3e7022e87e3","ssdeep":"96:80hxqlOvJCM1t5XiXQZCbhDhWtEkiyLMExLlyA7J0vE6OTPh/:klksgt5XigZCt1WtnjL/plyA7qvE6mZ","tlshash":"b6a2af04a19715fdadb388c952eb1b8b3ec01887d4c9c02934adeaea5f974d1d4783ed","size":22624,"data":"","first_seen":"2026-06-08T13:32:08.453557Z","last_seen":"2026-06-08T22:54:01.093656Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"popandc.be/wp-admin/js/cgi-ent/index--000","fqdn":"popandc.be","domain":"popandc.be","tld":"be"},"ip":{"addr":"213.186.33.4","port":80,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-08T13:31:45.481Z","timestamp":1780925505481,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-admin/js/cgi-ent/index--000 HTTP/1.1\r\nHost: popandc.be\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 08 Jun 2026 13:31:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 9791\r\nserver: Apache\r\ncontent-location: index--000.html\r\nvary: negotiate,Accept-Encoding\r\ntcn: choice\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-iplb-request-id: C3407698:E3E2_D5BA2104:0050_6A26C441_207701:6CED2\r\nx-iplb-instance: 51911\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":60021,"size_decoded":10131,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3979), with CRLF line terminators","md5":"d2136c16d37a0d6b511db08a333aec74","sha1":"1442e2763bff8f0119c624df450a00c0c32b9bb4","sha256":"297ef149a73e297678f1f1c8d9eec4afed7f14c517612917e18ed219d46d4e75","sha512":"73823e5f18724952243aef6eee92cb89f099e7497d5ba994f5c2369d67d4888afc01a50146901770058fae3c303a9cfafae99e36f0770a25f7037ec387f59f5f","ssdeep":"768:HRE8ptowdy8ptowIzAz9zizzuoGR0fDsK++xgrjPiEPTV:HRywawIExmfMR0fDsK+mgrjP1PTV","tlshash":"3743633a618042bac8b3cad44be71a86fe845887d0c5d32476ac97561fb34d5d07ebdc","first_seen":"2026-06-05T14:01:59.946376Z","last_seen":"2026-06-08T22:54:01.092582Z","times_seen":6,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":4,"connect":21,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"popandc.be","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"popandc.be","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"popandc.be","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"popandc.be","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boxmap1.netlify.app/quest.png","fqdn":"boxmap1.netlify.app","domain":"boxmap1.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://popandc.be/wp-admin/js/cgi-ent/index--000","date":"2026-06-08T13:31:45.668Z","timestamp":1780925505668,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /quest.png HTTP/1.1\r\nHost: boxmap1.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://popandc.be/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, max-age=0\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Mon, 08 Jun 2026 13:31:45 GMT\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-nf-request-id: 01KTKPX86QN6J6MVM7T3FXRCNG\r\ncontent-length: 50\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-16T18:40:23.893606Z","times_seen":17295235,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"boxmap1.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"boxmap1.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boxmap1.netlify.app/fdccap.png","fqdn":"boxmap1.netlify.app","domain":"boxmap1.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://popandc.be/wp-admin/js/cgi-ent/index--000","date":"2026-06-08T13:31:45.671Z","timestamp":1780925505671,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /fdccap.png HTTP/1.1\r\nHost: boxmap1.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://popandc.be/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, max-age=0\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Mon, 08 Jun 2026 13:31:45 GMT\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-nf-request-id: 01KTKPX86QJ7WDKKDFDMT9CNTY\r\ncontent-length: 50\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-16T18:40:23.893606Z","times_seen":17295235,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"boxmap1.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"boxmap1.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"media.tenor.com/3hvO7nAaRD0AAAAj/sbpl-loading.gif","fqdn":"media.tenor.com","domain":"tenor.com","tld":"com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://popandc.be/wp-admin/js/cgi-ent/index--000","date":"2026-06-08T13:31:45.672Z","timestamp":1780925505672,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c.tenor.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:11 GMT","end":"Mon, 10 Aug 2026 18:37:10 GMT"},"fingerprint":{"sha1":"E6:00:9D:11:F4:3A:46:3E:B1:AB:63:86:F0:9F:54:E8:FF:87:DF:31","sha256":"F7:12:FB:50:70:53:65:C1:C7:A8:1C:01:37:58:40:BF:A5:9A:38:F6:89:59:D7:5D:C2:F8:64:03:57:BF:77:6C"}}},"request":{"raw":"GET /3hvO7nAaRD0AAAAj/sbpl-loading.gif HTTP/1.1\r\nHost: media.tenor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://popandc.be/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-tenor-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"media-tenor-team\"\r\nreport-to: {\"group\":\"media-tenor-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-tenor-team\"}]}\r\ncontent-length: 35785\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 08 Jun 2026 13:31:45 GMT\r\nexpires: Tue, 09 Jun 2026 13:31:45 GMT\r\ncache-control: public, max-age=86400\r\nlast-modified: Wed, 29 Jan 2020 18:33:33 GMT\r\ncontent-type: image/gif\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":35785,"size_decoded":36617,"mime_type":"image/gif","magic":"GIF image data, version 89a, 65 x 65","md5":"f92d3031ac1aee52188aa6f2ff45aa65","sha1":"62afa1547f1dbf992a21e5f8f18df37bf467e543","sha256":"d8fd3b8de6ebc841171cc5cfa9325f2919e5cfe1e39f0da798da2eee2cfcb4ac","sha512":"2ad2b34196cf755b1610890855ea517f54ef3bcdcbddc0d96f9c50811ffb4fcbbfe58269f65e37ac7a02054681be2ed71ae94789cd80df7d19a8b6e4495b2efe","ssdeep":"768:czMxIqxhreL3vmMCuAyeIqohwiM4KFm8L+TNww04nF2:czMOqXi3vltQge4KFx+TNw0nF2","tlshash":"4bf2f1b7738ecae432276e22d65e275d83fcf7ca881d6518840bb50036069c7b95d916","first_seen":"2025-11-02T20:58:44.304945Z","last_seen":"2026-06-20T23:24:57.904469Z","times_seen":154,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":28,"receive":18,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.capitalone.com/favicon.ico","fqdn":"www.capitalone.com","domain":"capitalone.com","tld":"com"},"ip":{"addr":"95.101.10.160","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://popandc.be/wp-admin/js/cgi-ent/index--000","date":"2026-06-08T13:31:45.915Z","timestamp":1780925505915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.capitalone.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F4:05:60:A7:59:F5:95:63:65:28:6E:65:D4:FD:89:29:41:E2:12:82","sha256":"05:5F:8E:44:6E:B5:16:A0:39:1A:04:18:E7:FA:AF:42:A2:DD:30:14:90:B8:9B:89:57:42:EF:69:9E:0A:40:61"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.capitalone.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://popandc.be/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/vnd.microsoft.icon\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 04 Jun 2026 20:16:05 GMT\r\nx-amz-expiration: expiry-date=\"Wed, 04 Jun 2031 00:00:00 GMT\", rule-id=\"S3Data:Prune www-capitalone-com\"\r\netag: \"d27e1739c7477b10ec6917546ae61f1d\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ODE7DY8B3LB6cm34OmYshAQMC0GuSwh0\r\naccept-ranges: bytes\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: aKlvelmGkyOCcI6Xa6WhTV3rjCmCa-VkNwyZ4kOkFQB0r13vpPVj1g==\r\ncontent-encoding: gzip\r\ncontent-length: 2178\r\ncache-control: max-age=2592000\r\ndate: Mon, 08 Jun 2026 13:31:45 GMT\r\nvary: Accept-Encoding\r\nset-cookie: TLTUID=5A7E7A74C975D8D7469160284D5988FB; expires=Sat, 07-Jun-2031 13:31:45 GMT; path=/; domain=.capitalone.com; secure\nTLTSID=EC920B0282AA5CE5FDA68FB9CC12B943; expires=Mon, 08-Jun-2026 15:31:45 GMT; path=/; domain=.capitalone.com; secure\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15086,"size_decoded":3237,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"d27e1739c7477b10ec6917546ae61f1d","sha1":"bb36ab8bce726ce72a2d74a8529526bca0fa515d","sha256":"5f2123af80970c0478de7f373c9d861d886e070592ebcd55fa372d8dfc9752ec","sha512":"f8905a386f0d492e37d086fefd9e0eca1ef915551242554b70803f3fe89d4d7173565820f391f14f392d71861c8c43f3f8ecb4c5569491db9a2006f80bd0f64d","ssdeep":"96:WnvwwlPwSVOJilFV9HNya8arOd9e9DAthhrXTF14/sKFVNe4WiInwjr:Mf9DNF2e9DALhrjFeUmNlWz4","tlshash":"2e6262a362824eb4d8671530e9569b2dc272efea8df4fd042d387a2b4b352c5500b7c1","first_seen":"2023-04-18T09:27:51Z","last_seen":"2026-07-15T10:09:55.671343Z","times_seen":701,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":26,"connect":1,"send":0,"wait":11,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popandc.be/wp-admin/js/cgi-ent/index--000","fqdn":"popandc.be","domain":"popandc.be","tld":"be"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-08T13:31:42.325Z","timestamp":1780925502325,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-admin/js/cgi-ent/index--000 HTTP/1.1\r\nHost: popandc.be\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-16T18:40:23.893606Z","times_seen":17295235,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"popandc.be","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"popandc.be","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"popandc.be","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"popandc.be","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}