{"report_id":"f4d0cc77-8a64-47a9-b6b5-5ae315d7975f","version":6,"status":"done","tags":[],"date":"2026-03-06T12:26:18Z","url":{"schema":"http","addr":"salvatech.com.au","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"final":{"url":{"schema":"https","addr":"salvatech.com.au/","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"title":"Truck Body Builder and Repairer | Tipper Bodies | 3-Way tipper bodies |TAG Trailers | Caravan Shells | Trailer \u0026 Caravan Chassis | Truck Body and Trailer Repairs | Ballarat, Bendigo, Castlemaine, Horsham, Maryborough, Melbourne.","dom":{"size":11418,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (578)","md5":"76360d6ea9a07ee666c7984ca8cb616d","sha1":"43bd46c8ad94e02888bbf84266ee35693cd2ac24","sha256":"28bae177dd0d07a2fe246bd5b938f9b40bb8307beb436cd021f164b13a4b0376","sha512":"e6f6a237d147d9c636831bb2f5a5b6ad05bba4a034f6cdb28c37dcb26e7a878aa5c204dd70c00f7ee453c10055e03633217b267e7629e069ae271101cff1f6fd","ssdeep":"192:Jm5RauDtr7uj17Z0qtAFVS769smeeQ5x9l1XzDF3bczbnAk3o3nJF0iNC6PH6n18:I58u5MZ0qtAFVS769smY5x9l1XzDF3b1","tlshash":"af327491bb05355b930b01acb2045be7769c46ba5384fa34f97709f9b3c4d2a2a3c39c","dom_hash":"domhashafd3f9e289c383bbb2b797ed212a2ae0","first_seen":"2026-03-06T12:26:23.689793Z","last_seen":"2026-03-06T12:29:39.473121Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"salvatech.com.au","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T12:26:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"salvatech.com.au","ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-06T12:26:18.597863Z","last_seen":"2026-03-06T12:26:18.597863Z","alert_count":23,"request_count":23,"received_data":485180,"sent_data":10167,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"salvatech.com.au/","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"introduction_type":"eventHandler","is_inline":false,"md5":"442172461a6bb3e63231a2db5eacd86b","sha1":"885f3860f40d4ba2ef5416adf89a47f6f2a020b8","sha256":"ef36215a3265b1b84282a0a1b4e5fc572f55a4bfffe9ba6800da670e88f06069","sha512":"bc70a05cfb96a02c4bcf4890cca2b39f2cb4267ffd2febdbb00602e4c2071149865872f3211185c3b422412e0372ef3bdda861a09763d2995dd3627052166ce1","ssdeep":"","tlshash":"b4d089ca922743cb8644c1bc024219f3b588823b3b08b0b5c087c8c04dd2371080c27f","size":277,"data":"","first_seen":"2026-03-06T12:26:23.735954Z","last_seen":"2026-03-06T12:29:39.514725Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"14f09c951e8d91a8d071f1f643ad7b97","sha1":"ef168d2199c66f16a62050a2e7fcfc11b0159a27","sha256":"2cbc7a1f156e6ac30ea1502c10856f14557e8eaba0f50668a7dcc85f8a4cd5bc","sha512":"96f09899df19dde3e412f92948b08c4ba0bc885eada3edd8300a6b7a7c7aeaf25b04f65c235e25679e8a0ad01f5190299d7c6665b8d8f37ef7e8422da61a2ffe","ssdeep":"","tlshash":"9011e18f170c718f8bca75f0589720847b2c45121de8f560dc18fac5d526fa2045fc86","size":980,"data":"","first_seen":"2023-03-08T19:45:01Z","last_seen":"2026-06-04T08:57:24.565062Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"salvatech.com.au/button2B.jpg","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salvatech.com.au/","date":"2026-03-06T12:25:58.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET /button2B.jpg HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salvatech.com.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 12:25:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Oct 2023 08:00:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5738\r\ndate: Fri, 06 Mar 2026 12:25:58 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5738,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", comment: \"\u0002\", baseline, precision 8, 150x24, components 3","md5":"d88254820cd1dd2bdb579b3d3875bccf","sha1":"ef1690f8108ecc056d75c02aa9b74f6a85767ab6","sha256":"53904fd30b26bf863b2c48c1b1cb32bb9bab01e6ec7e19caad417dc873b2e193","sha512":"fa32965fcdfdea6cbd2ed196c3ad51e4ad1494cf76415b79975426e0e15fcb4217bbeffa7e98dd1014b97e060d09f2eed7485f1377d56ca9f9aff54cce31a834","ssdeep":"96:zzEdl3O/vy53mH1ub3t2k81hMcEM0OxT54xuXMg9EHj6QsomGjz:HQl3O/vpIhDgOcEM0ETaxqMWELsLGn","tlshash":"92c19eae7605f5d48e6cab3c95160a68d1ee3235fc04af06727203c8a6c0567a28e32c","first_seen":"2026-03-06T12:26:23.693558Z","last_seen":"2026-03-06T12:29:39.488164Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":846,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/button18.jpg","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salvatech.com.au/","date":"2026-03-06T12:25:58.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET /button18.jpg HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salvatech.com.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 12:25:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Oct 2023 08:01:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4343\r\ndate: Fri, 06 Mar 2026 12:25:58 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4343,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", comment: \"\u0002\", baseline, precision 8, 150x24, components 3","md5":"71ab1d8f3d6a9e15f5785db2ca591f50","sha1":"6c3123eb88f26b404c13e1ca30c72b23ac116fc2","sha256":"97e809cacb310aafeb58fdb78805d1104f3560c01a4dc84078eebcdacc3cf47c","sha512":"cad93ba6528be8e67cf97643c0bad720a58d04868a14b86b3fbce9b5fc39498a6e32dbb31357b94cd16d2a2cfc4d21bb5afd15ec27317f05fd0c8d7dc3c8e568","ssdeep":"96:zzELkgOqWzKGC3XcPmQAHzF14yiBabQaA2GX8Dy:H7lvOGOXFRZ1kBp2GOy","tlshash":"6b916c0db7204a01dd3e9d3e5c0a275582c70f77f583ea233d3b6898a8142e75615a75","first_seen":"2026-03-06T12:26:23.696537Z","last_seen":"2026-03-06T12:29:39.508845Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":846,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/button1D.jpg","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salvatech.com.au/","date":"2026-03-06T12:25:59.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET /button1D.jpg HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salvatech.com.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 12:25:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Oct 2023 08:01:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3599\r\ndate: Fri, 06 Mar 2026 12:25:59 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3599,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", comment: \"\u0002\", baseline, precision 8, 150x24, components 3","md5":"8ba29e6c0df2a5a430f8d46bd4a9c1c4","sha1":"f7d372a4cc92d0006575fb9c84def2ceefb19384","sha256":"61c54b0952a6e1af5fac3a6c802b62a354ba4c7d06d3e02dfbfab26331967b27","sha512":"a983372ef4a0a9d1f8e3032f16151acb65b76107a0f75fdc011517806b9a17f9c83d2b2c3e57973bd557f94ebacff45c092bdb5351e10904a464080dcefedbb0","ssdeep":"","tlshash":"51712b25f772b688cf219df34a311327531668b2b9a0a112fd704e29c362c5b8105871","first_seen":"2026-03-06T12:26:23.699092Z","last_seen":"2026-03-06T12:29:39.495139Z","times_seen":2,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/button2D.jpg","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salvatech.com.au/","date":"2026-03-06T12:25:59.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET /button2D.jpg HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salvatech.com.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 12:25:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Oct 2023 08:00:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4571\r\ndate: Fri, 06 Mar 2026 12:25:59 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4571,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", comment: \"\u0002\", baseline, precision 8, 150x24, components 3","md5":"5f56850126e99458458c05502e79c77a","sha1":"538a0fa14c134d3b4a5c5a4d88ff726db9dda6d3","sha256":"ea060de4340d82dd1bba62fcae4d8f5f6da22470514419c58f1afdd2ff10cc9a","sha512":"f6c7cf01f462f98433235c61447fad67c77e3b0270f08616d9815e7b8f3d8428b2dac2fd9574f2557be2cf190aa2daf85dc476d451c31b85d5b9c7b0494fe58f","ssdeep":"96:zzEvvfSj/TZRQBcBbd10Bo5qOa1JuwjAXBz6ON61a:H7j/TZRp/yBxr4zEa","tlshash":"f0916d06cec57180dd4096368ece56ebe1feb1f3a54d982678a628225999c77e0c50e4","first_seen":"2026-03-06T12:26:23.701652Z","last_seen":"2026-03-06T12:29:39.512521Z","times_seen":2,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/button15.jpg","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salvatech.com.au/","date":"2026-03-06T12:25:59.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET /button15.jpg HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salvatech.com.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 12:25:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Oct 2023 08:01:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4225\r\ndate: Fri, 06 Mar 2026 12:25:59 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4225,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", comment: \"\u0002\", baseline, precision 8, 150x24, components 3","md5":"40d04b248d9802784cc042e5c28a0042","sha1":"d8c53cb33e1dd7d722ba3be7f08cf41a660c4aa8","sha256":"533a2d3ae80183f2a5a4084b615f8c421f96fd208cfc76a1753c68e99c3b9668","sha512":"4a90901433f58a44b6a3a93f362288c79e2cc46f7ee914a4801c45e0c7b0909126a7f2fea2a20bd9a788914f6a8c4d7ebad7e9f90ecf5327111f405a2e087cc2","ssdeep":"48:1cqrvIuESAA87LUCnHWtEG/abqFyXqIaSxCXavyAKcBSzh8fx2kRcVxyflS6kaGz:zzEP7LjpG5Fy5X4qvz9wifo/yf2P0m","tlshash":"aa916c0632a65987c9baa17b4d2d022341db33f31b58225770220c93df61bb751ea3a4","first_seen":"2026-03-06T12:26:23.704356Z","last_seen":"2026-03-06T12:29:39.513612Z","times_seen":2,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/button4.jpg","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salvatech.com.au/","date":"2026-03-06T12:25:59.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET /button4.jpg HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salvatech.com.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 12:26:00 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Oct 2023 08:00:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3673\r\ndate: Fri, 06 Mar 2026 12:26:00 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3673,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", comment: \"\u0002\", baseline, precision 8, 150x24, components 3","md5":"81941d0abf104e03c5f158a37f7cf99d","sha1":"cfe236206f3078625624d4fe52bc0ab17edf4859","sha256":"d1d15cb13d0eb35915a976317bb42ae86839a0bb446fae5bf75446769854dae8","sha512":"5cf86e33f8d5bee186cebde0b238471c92b9c70b7d69b74f0f4c3c7568d119f036e28cd49021c29a635fef0534987ec1ebc1bd58e2dbdd737aeb398f2e48deb2","ssdeep":"","tlshash":"9c714c5fa24483bddc72107a458d92ce6f94a1b2f364d296327f4457ca08ec7a40921c","first_seen":"2026-03-06T12:26:23.706815Z","last_seen":"2026-03-06T12:29:39.485443Z","times_seen":2,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T12:25:56.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Jul 2023 03:03:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2751\r\ndate: Fri, 06 Mar 2026 12:25:57 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11382,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (578)","md5":"1de561b7d74371582c3813ec92390915","sha1":"eb3abb868693a74881c70c0b6a3dd19e6899efce","sha256":"7ed94ff701edeb8c4d2fae711a19e03a6d95d9b6998f92c04044bc9c9b851d67","sha512":"fdef848b3441c57ec3be00c253b4f8c93a6601478c2fa5105e4d25987bafdd52b860eca2332c932a859fa976b1f3c5e04ffb55c19068ebd276594bac3c178daf","ssdeep":"192:Nm5RauDtr7uj17Z0qtAFVS769smeFw5x9j1XzrF3bUzbnEk3oZnJFIiNC6PH6n1f:E58u5MZ0qtAFVS769smv5x9j1XzrF3bw","tlshash":"d5327491bb09355b930b01acb2045bf7769c46b65384e674f9b709b9b3c4d2e2a3c39c","first_seen":"2026-03-06T12:26:23.70924Z","last_seen":"2026-03-06T12:29:39.49843Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2018,"timings":{"blocked":867,"dns":281,"connect":289,"send":0,"wait":283,"receive":1,"ssl":293},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/Salvatech%20logo-1.bmp","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salvatech.com.au/","date":"2026-03-06T12:25:58.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET /Salvatech%20logo-1.bmp HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salvatech.com.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 12:25:58 GMT\r\ncontent-type: image/bmp\r\nlast-modified: Sun, 18 Jun 2023 07:53:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 250542\r\ndate: Fri, 06 Mar 2026 12:25:58 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":250542,"size_decoded":0,"mime_type":"image/bmp","magic":"PC bitmap, Windows 3.x format, 662 x 126 x 24, resolution 3780 x 3780 px/m, cbSize 250542, bits offset 54","md5":"529f7b9d74f12c43b425166d3112a5cd","sha1":"a44863e4175be4e12da23a4947d13e8c7decb0e2","sha256":"aa1a57d2aebcf924c40519c766069c8837bc831e262a75b4ba9810fffd0296b5","sha512":"f9d9f87a075d1d3503b722035064c77458e3e8c479843047b74016f76a7d3363fe8cd1e43a955e97f8b13cc82c0548c88908341080d067e7959f312cdfc993c2","ssdeep":"768:jUI198eHFIHKbu5LoPZU6zk5p4XBU0l5LXJiwmRVJoaeeL0B5ga:ABKbDC6zxswcP9j0Tga","tlshash":"d834696f5dd2d0f1692ab9da48972f47f167def11c32321688ae754ddebf81028c180a","first_seen":"2026-03-06T12:26:23.710992Z","last_seen":"2026-03-06T12:29:39.482597Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1700,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":566,"receive":1134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/button2.jpg","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salvatech.com.au/","date":"2026-03-06T12:25:58.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET /button2.jpg HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salvatech.com.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 12:25:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Oct 2023 08:01:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4287\r\ndate: Fri, 06 Mar 2026 12:25:58 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4287,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", comment: \"\u0002\", baseline, precision 8, 150x24, components 3","md5":"9fd5b39000f8a6ab5083e36299a3db65","sha1":"e9201c1972c796a9c8de705b3329b29706649eb8","sha256":"611e25147c4e4806fab8ad69329ed193992d4a568db8f13c13c79d8856ac7b57","sha512":"fe22f716d27414690995f78fa09eed9786a18ae6ac558be16b8b007059728d1219c3f6fff782db05f7f2cb1de4a7dce3d03205fc627a1ea52d22904daa817a6d","ssdeep":"96:zzELnVlSNZDPCSBvylY3ZoU8OolyuZwhTE5R:HKSNZmSyEoU8OZuep6R","tlshash":"bb916c0bbb420540df75ae3b894f42eee0bea5b8758853433c551e3adde4407604d38e","first_seen":"2026-03-06T12:26:23.71286Z","last_seen":"2026-03-06T12:29:39.507726Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":846,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/SAL-001.jpg","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salvatech.com.au/","date":"2026-03-06T12:25:58.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET /SAL-001.jpg HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salvatech.com.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 12:25:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 18 Jun 2023 07:53:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 134974\r\ndate: Fri, 06 Mar 2026 12:25:58 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":134974,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=3120, bps=0, width=4160], baseline, precision 8, 666x410, components 3","md5":"c34c842da217a689e4224759b3b16c25","sha1":"dead54dc2c98eb4c60d939b6967f795b9be25fbc","sha256":"c53acf60d68cb397e6bdba5f14f719f50f79e7bbd4baa5f88c58a6d734372f1e","sha512":"1e0653d6eae1a87b9911600d9df826b555bc2bfc4f450942ae10ec5563bcdb7ec2954c298852e59778294f66142d43692e3f2a3f86087f071b04c778ad69e8fe","ssdeep":"3072:4mqSO2XgGTn9PCsnvH6P/S3T2a3sET1KN6P6:4mTn/HEdKkp","tlshash":"0cd31290f32ac3f4d17183b19a6567087473903beec83886b37da9617b56d72024b79e","first_seen":"2026-03-06T12:26:23.714495Z","last_seen":"2026-03-06T12:29:39.492313Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":842,"receive":573,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/button82.jpg","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salvatech.com.au/","date":"2026-03-06T12:25:59.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET /button82.jpg HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salvatech.com.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 12:25:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Oct 2023 08:00:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4798\r\ndate: Fri, 06 Mar 2026 12:25:59 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4798,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", comment: \"\u0002\", baseline, precision 8, 150x24, components 3","md5":"5facd901d753443762d37df1c7fb225e","sha1":"6240f8ff1a3676ff94854034e71bf6bf5057e8a3","sha256":"3fcdb4d9b105736074ecc2435643bae7be1d03f8ca174e89fefd785191ea806c","sha512":"e42135acaad8b05e0410830c0144a7a27d078713111a38a28426f5625e73f76114b7eff0fa1c6c4cb2fd46c48bb76ce49ee508df987e8dd86839eefbcbea384f","ssdeep":"96:zzEP7LtV/OO+Hypqp0anAaymtFUqrfscknHKJGyfR6mtoLFpK:H6VIHy0/Aaybwfs5HgGaIaWXK","tlshash":"afa16c06fe66158acd1b6b1f58712222977a2cb9bde37d0d3df4b111e805417fa92c2c","first_seen":"2026-03-06T12:26:23.716141Z","last_seen":"2026-03-06T12:29:39.496796Z","times_seen":2,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/button3.jpg","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salvatech.com.au/","date":"2026-03-06T12:25:59.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET /button3.jpg HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salvatech.com.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 12:26:00 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Oct 2023 08:00:55 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4194\r\ndate: Fri, 06 Mar 2026 12:26:00 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4194,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", comment: \"\u0002\", baseline, precision 8, 150x24, components 3","md5":"f02858e2d503e4b0584464be456e95df","sha1":"91b747337c4bb56b3e8dd6b07990981e5c73c442","sha256":"ce445a877dd0ef7479344ee9a78b0c397cc2e0fa56321246c343ef8ffe3caab4","sha512":"7606ef73c345fe52ccfc107f8926150b0d90390c7cab36913676618f777f5430e23ac4c8729a80a534de9a02068b42c73fc6b8e8b801e771e5c0fa2b7871a879","ssdeep":"96:zzEP7LDsmq7pjRdqLj1VxaxGRRlsP1L//CZaWm1qT6:HMsJ/ajFaxsKP1LXCZaTp","tlshash":"33816d43d35261548e9b4afbdfd38b0361a694f27a01b3187a30036edb59d76cb25a38","first_seen":"2026-03-06T12:26:23.717635Z","last_seen":"2026-03-06T12:29:39.479061Z","times_seen":2,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/button1C.jpg","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salvatech.com.au/","date":"2026-03-06T12:25:58.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET /button1C.jpg HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salvatech.com.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 12:25:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Oct 2023 08:01:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3669\r\ndate: Fri, 06 Mar 2026 12:25:58 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3669,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", comment: \"\u0002\", baseline, precision 8, 150x24, components 3","md5":"99e6108585315bdbac98d0f09333d875","sha1":"bbcd7fc36619ba9671be9049e93225ee8684d350","sha256":"2f3a0354090d4fbe305578676bdd925fb0bf10262603eb802a18319130e77469","sha512":"5a5139ba692f8ff0c875c567281a87ebeaffbcfa966d69292567aa203ba84aada868d81494f3c5a4559be577090d16a4013ce6230765bde4e0fce2bacad3c51b","ssdeep":"","tlshash":"55716d3eba185791f2282f3757d70490f26d37bbbb116e167e1185ec0d5c9c22658748","first_seen":"2026-03-06T12:26:23.719775Z","last_seen":"2026-03-06T12:29:39.501471Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":846,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/button17.jpg","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salvatech.com.au/","date":"2026-03-06T12:25:58.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET /button17.jpg HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salvatech.com.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 12:25:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Oct 2023 08:01:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4256\r\ndate: Fri, 06 Mar 2026 12:25:58 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4256,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", comment: \"\u0002\", baseline, precision 8, 150x24, components 3","md5":"f20512f0dd1e3d6aaa658daf5e14c532","sha1":"6cc90b4301677e0af2847206c5236990f79b7e05","sha256":"ca7f9c93adf45c1e3bff5ebefdf6cb7ae25d7ca83af8c785d13f2124036a89a3","sha512":"b04c317f6dfa7594edace9517e704f339da4a83297ab9fb9f5862a05a5d91d9955a5e395c6fbd68bd3058c2419bf6d6cf3845a4bc7dbbd6e727d9489293a3744","ssdeep":"96:zzEL6wPCveJSNZDPCSReOSosxbbfxY1yPz/eaTw+:HFwavfNZmSIqsZa1yPzm+","tlshash":"ab916be5bf60d1a15a264fbd7e2fc922132e40b2fc45b402bd6192b549c0487948c5b9","first_seen":"2026-03-06T12:26:23.721328Z","last_seen":"2026-03-06T12:29:39.490451Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":844,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/button1E.jpg","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salvatech.com.au/","date":"2026-03-06T12:25:59.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET /button1E.jpg HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salvatech.com.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 12:25:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Oct 2023 08:01:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3289\r\ndate: Fri, 06 Mar 2026 12:25:59 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3289,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", comment: \"\u0002\", baseline, precision 8, 150x24, components 3","md5":"0d225eda698dc2c978d06e520bce3b2e","sha1":"dfd022a073eb12c2ebe985a0552819928eaec9f2","sha256":"eb0b44851f5a00d8595edb64d8316eaf384caca754a1c13089518f3a10565aec","sha512":"c6d086a4062305e8ff3e477ce0134bd1307d094a449ed51bae5ada77da769200ce4a4d4f685d3cf9c263c566b704d53fb389a68eb3d06929099ed8d904f6268f","ssdeep":"","tlshash":"ed612a7efdaa15e5de02d9be455b826180d973f2f5f002d73a3644b28d048b2f20465d","first_seen":"2026-03-06T12:26:23.72285Z","last_seen":"2026-03-06T12:29:39.511468Z","times_seen":2,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/button13.jpg","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salvatech.com.au/","date":"2026-03-06T12:25:59.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET /button13.jpg HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salvatech.com.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 12:25:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Oct 2023 08:01:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4167\r\ndate: Fri, 06 Mar 2026 12:25:59 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4167,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", comment: \"\u0002\", baseline, precision 8, 150x24, components 3","md5":"566e9c8edc06087c4aed693e2500ac4b","sha1":"a096f890f95166adf3071e0fb1463d6b885383f8","sha256":"b5f8af3c535a8e53f6216d94cd59aa5367f6a81c50b5507cc8ed221ed61f1004","sha512":"3e0596a688cc2ccc6bded3ddf51b8a91de75528484a75e0bd6c1eb9b1bf5352ee03708d58a13abdaa19cbd3b4f331ece9db81528c897d95bacf771e71787c685","ssdeep":"48:1cqrvIuESAA87LUZ7RLy28k3VLEP7ps1kATfIdCqOW5hfu7vqNAES4Km4osmndG3:zzEP7L67E2e77dkKss54oXdGlCl9yIK","tlshash":"03819e69174e92ba88200377c92cf853d22960f3fe14fb003faa1874c3129cece555a9","first_seen":"2026-03-06T12:26:23.724375Z","last_seen":"2026-03-06T12:29:39.505396Z","times_seen":2,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/1300.jpg","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salvatech.com.au/","date":"2026-03-06T12:25:58.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET /1300.jpg HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salvatech.com.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 12:25:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 18 Jun 2023 07:51:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3604\r\ndate: Fri, 06 Mar 2026 12:25:58 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3604,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", comment: \"\u0002\", baseline, precision 8, 186x26, components 3","md5":"d6a39f87d7a9e0ef898e43b244d070d5","sha1":"1c53631509fa23f0dc053182161b479b42e235c9","sha256":"9609d94bc2ecca3d55f01ea8e9099e44c63dc31ae11021f9519d3d662d3c0bef","sha512":"86a986ef5b920e16684dd293706aea12b5e4d0cb9f315cd91b9bae010abedfebbaebb92d771ace4101f3ccb016c707498b812794864d01a323fef17998425cda","ssdeep":"","tlshash":"1771184f79d05ba0950f0b7f270438c2a0b61dc579a1460e9aa42eea49f02ff4966fe1","first_seen":"2026-03-06T12:26:23.726279Z","last_seen":"2026-03-06T12:29:39.499992Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":846,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/button100.jpg","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salvatech.com.au/","date":"2026-03-06T12:25:58.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET /button100.jpg HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salvatech.com.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 12:25:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Oct 2023 08:01:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4884\r\ndate: Fri, 06 Mar 2026 12:25:58 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4884,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", comment: \"\u0002\", baseline, precision 8, 150x24, components 3","md5":"8683a0d2f0ad2b41327c9d690d951b16","sha1":"4b02a09cfdb78aeb1a1769ea5cecee4b862f0dfd","sha256":"74258b631ec0218d5e94b420dc04a03088a6a473f527421fa4842c2b9cd03d08","sha512":"527b7dbc9da2a6cccd23ae2b71e33f5b3f6e2a417103f877adce70377712ffff335d65c497bc1591addee9d24f9dbdab6b5f95dd6e14f60947b9da1bc5c3a1b1","ssdeep":"96:zzELoo6i3+zeOy0wmsTadPL8qv+RYpGVDnrBzWzRBu07was0+XQ:Hi6i3+imh8WYK+Q8D9zWzzu07waH0Q","tlshash":"31a18e25f7c342c8eb1a3db93d8711e9530c663a7460a2c3b610d5b4891dfdfd254a45","first_seen":"2026-03-06T12:26:23.727738Z","last_seen":"2026-03-06T12:29:39.51039Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":843,"receive":285,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/favicon.ico","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salvatech.com.au/","date":"2026-03-06T12:25:58.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salvatech.com.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 06 Mar 2026 12:25:59 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-04T08:30:14.836401Z","times_seen":145698,"resource_available":true,"data":null}},"time_used":725,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":725,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/button2C.jpg","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salvatech.com.au/","date":"2026-03-06T12:25:59.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET /button2C.jpg HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salvatech.com.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 12:25:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Oct 2023 08:00:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5484\r\ndate: Fri, 06 Mar 2026 12:25:59 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5484,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", comment: \"\u0002\", baseline, precision 8, 150x24, components 3","md5":"1e16fa81da6513a753855d8008f62813","sha1":"9dabf1507b6c40349ebaa2db0ba907f322648113","sha256":"c0c3441b018459ae5a7b594c5172098b3771a0898407e4f9ee973eb1ae8b3638","sha512":"776c661667f17515690a1034d80a77b7ec94b6280c1f8927cdb66f7223d69f8931b9e70018a47488338e1a3a111ae2ea4addb1bf5a3b750637a59c5ed8ad0a3f","ssdeep":"96:zzEPF3EtOU4naOSbdPKnQna95306zIDy0ufP6hAAEY4bN/UOCcZ3lnMyrSHvcwxa:HK3WsaOSdKr953PUy0un6hsYk/U0Z3Jn","tlshash":"09b16ebe7e8248a8fd0be7ff19cb0951319d57f5b89123013d269ef19943522c1f5268","first_seen":"2026-03-06T12:26:23.730019Z","last_seen":"2026-03-06T12:29:39.502814Z","times_seen":2,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/button83.jpg","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salvatech.com.au/","date":"2026-03-06T12:25:59.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET /button83.jpg HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salvatech.com.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 12:25:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Oct 2023 08:00:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4166\r\ndate: Fri, 06 Mar 2026 12:25:59 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4166,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", comment: \"\u0002\", baseline, precision 8, 150x24, components 3","md5":"b4fc475dcb05488c8aae39af792cafa2","sha1":"324bf1e141eb72cabb7b844b70ec5c7a24774097","sha256":"3d1b846c82f511583753209444515b8caf9829684d48560dbfac776b3b57ba25","sha512":"519990be8d2e601cea6dc53175f7633e5680b7dc9319c4220925d7013cde15e32585d91773b357f7fc34f0f94a2263e17a664bf15eafddaaad7db691cbaf576b","ssdeep":"96:zzEcMGfrlg0LdvwS9Sgbq+II3IvbLU2dqOXT6jqYXIhsIibeVqb:HEWlgoVvSj+tKbGdj","tlshash":"a5816c0eee63828fea9047b98f1a53bb85ca31f2f25d16523f3169108c14bb3525074d","first_seen":"2026-03-06T12:26:23.731554Z","last_seen":"2026-03-06T12:29:39.504111Z","times_seen":2,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/button14.jpg","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salvatech.com.au/","date":"2026-03-06T12:25:59.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET /button14.jpg HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salvatech.com.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 12:25:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Oct 2023 08:01:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3640\r\ndate: Fri, 06 Mar 2026 12:25:59 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3640,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", comment: \"\u0002\", baseline, precision 8, 150x24, components 3","md5":"a1f842ce8d28619ace60785d1a392880","sha1":"69114a1eae83b2a4ba63a812b2a329d4df2bca17","sha256":"b421ad327f7b79cb5606aa25496853ccfedb5ec23128930d1caad75b3e4418f1","sha512":"a3f4db1fad388d92a825c61ecd052c1149e9db718cb987923da0541f26cc4159f5a8475c4b1ef433a0f277d25c2a12c0469ec6b44e1df98ab5f6fbeb568c41c6","ssdeep":"","tlshash":"fe715c9bcb04d2d6a49eb9f81dca4390d8293076e7505643fbb113a35b58ae3f524129","first_seen":"2026-03-06T12:26:23.732885Z","last_seen":"2026-03-06T12:29:39.506575Z","times_seen":2,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salvatech.com.au/button16.jpg","fqdn":"salvatech.com.au","domain":"salvatech.com.au","tld":"com.au"},"ip":{"addr":"40.82.203.58","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salvatech.com.au/","date":"2026-03-06T12:25:59.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salvatech.com.au","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 09:30:59 GMT","end":"Sun, 05 Apr 2026 09:30:58 GMT"},"fingerprint":{"sha1":"AF:DC:87:DE:23:93:D3:D6:85:33:4D:5A:20:15:6B:CF:A4:19:FE:0D","sha256":"C9:C6:AE:ED:46:E2:17:F4:CE:BF:B6:DA:1D:09:50:96:F5:54:F0:EB:70:B0:EC:00:D5:90:76:C1:0D:AD:14:C6"}}},"request":{"raw":"GET /button16.jpg HTTP/1.1\r\nHost: salvatech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salvatech.com.au/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 12:25:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Oct 2023 08:01:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3725\r\ndate: Fri, 06 Mar 2026 12:25:59 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3725,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", comment: \"\u0002\", baseline, precision 8, 150x24, components 3","md5":"050fc50ac2b8af44da71327eb57ed639","sha1":"45a3fbb850ee61da93393f658b17a475bcd294f6","sha256":"cc423ad24219f8491f15624cb2156c7ee44f42dd9de6175dbb7cf734bf63b8f1","sha512":"05c8df6c38037b4dd04956fe73af4a4d549201dbe03e70abee2ba390d56330bd8ad29ce11384a83e2e10ae8cb5cf9e74769a17d3185d564c21a21dab83f57bb4","ssdeep":"","tlshash":"26715d0df10727d6cc101bbeac9d6329e24631b1b4d56e57ba31c874d71c097a9503ba","first_seen":"2026-03-06T12:26:23.734545Z","last_seen":"2026-03-06T12:29:39.476266Z","times_seen":2,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"salvatech.com.au","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}