{"report_id":"f556307e-b923-44ba-9cdb-878fb88efd91","version":6,"status":"done","tags":[],"date":"2026-04-20T12:07:02Z","url":{"schema":"http","addr":"proofpoint-simulations.eu/","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":0,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"https","addr":"proofpoint-simulations.eu/","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"title":"Proofpoint Security Awareness Training","dom":{"size":2193,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (370)","md5":"dbf71de031cb1dd53b7758734f9c9f9a","sha1":"d360d1ac1fc1b9767d1ca8f95bdc18961656614e","sha256":"8a2a68c386bb7930ce2d1a352f85b892209aeceed09d5bd9bb5503682c99f879","sha512":"7f159c1d81b58f7dba8505b4107c20ff7a01ea94c7bb1a5c8a49e343ed0e8b6bbbb2afd08966433d8323088a076ebf57de12aea5805c12a2ababee09d21fd335","ssdeep":"","tlshash":"9e41b61eaf8d401f923561d02a367388546fdc22e3165cfaecf55568cbc428c49b3a9c","dom_hash":"domhashb2a9473ea45035cc47d95ad53d4ff2ad","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"proofpoint-simulations.eu/","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":0,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-25T12:07:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"proofpoint-simulations.eu","ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-10T20:11:46.955407Z","last_seen":"2026-02-24T20:25:20.815761Z","alert_count":33,"request_count":33,"received_data":156964,"sent_data":17356,"comment":"","tags":null,"fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"jQuery:1.11.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"proofpoint-simulations.eu/","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d81b92a071db2af4ccebc36ea2ad804","sha1":"f50114d86357f84c34163d8c08c3934030964261","sha256":"1f2fc28feb34f70ae76a80c8fcc8c3a1cb4d3c34e28e3db3f1c3e708bea79174","sha512":"a98037f86a0b775f812355d3af3cf4373dc086cbee3501f1d5b901b39a896ec26c394347e6e0c89252b8aa0ed81f0e26f6fa0cea3d682e7ac31139861a78d10a","ssdeep":"","tlshash":"e6a0220a02e208b3c2323300efffb3c0ae0020a880080822c0080ec03302883c0f2ceb","size":74,"data":"","first_seen":"2025-03-10T23:58:31.710463Z","last_seen":"2026-04-20T12:07:03.11039Z","times_seen":161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/assets/all.js?g=infopage","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"097f74fc8f861ece148262a652ab806a","sha1":"305ecb552c3ff6bd24b56333fab6e731eb81ed30","sha256":"39b4614f1c87cf0cfd1bc3375642e95825cb2018e0318a36aad766ddb5a8cbe9","sha512":"298c0cee6ea60226f4a3374a1d44b53046a1b7f35d80144abab528addc146ef35978fe53caab0246d91eeac7d6a58ea61276506112065de2fdbdbccfc5bc96a3","ssdeep":"384:Ldz9MmIbpuTuyshKCiSvm9m/QUYcBw6xwQPfwjU82bleXg7Gv:LrMlIT2Kd8Q4Bw6xwQPfwjUN5ew6v","tlshash":"84d2a51e305a393e1073b155770b364876bb47b967a89094b16d40a83f6283bc277fbe","size":28406,"data":"","first_seen":"2023-03-07T22:34:53Z","last_seen":"2026-04-20T14:36:40.689498Z","times_seen":1905,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/assets/ajax/libs/jquery/1.11.0/jquery.min.js","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fc25e27d42774aeae6edbc0a18b72aa","sha1":"b66ed708717bf0b4a005a4d0113af8843ef3b8ff","sha256":"b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682","sha512":"87d90a665c15d71ac872bd8bc003d9863964c7ec7ada6370b902b93c0bbd7770fe25730d946c7c6a465baa95efa74bc0e78af3f83aea615af35060cc8702a6c1","ssdeep":"1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Yn:bIO/e2D5c4LgtImLja98HrK","tlshash":"cc93e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","size":96381,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-20T14:44:03.522383Z","times_seen":23835,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=BrowserDetect%20-%20localStorage%20%3D%20true\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=BrowserDetect%20-%20localStorage%20%3D%20true\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 5f2de4fd-8e28-4e57-a142-6aa8f60adb1a\r\nx-runtime: 0.002126\r\nx-host-info: lw-prod-eu-i-0247081b43c38c21a, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=Loading%20Silverlight%20version\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=Loading%20Silverlight%20version\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 07552a15-1cbe-4f92-9333-699e38b1e60b\r\nx-runtime: 0.001533\r\nx-host-info: lw-prod-eu-i-0f5f9ad2fc5c844fa, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=browser_post_successful\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=browser_post_successful\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 1d9522d2-cdae-483c-a485-ba288a68b636\r\nx-runtime: 0.001710\r\nx-host-info: lw-prod-eu-i-0fd9b792b886e4ec7, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=BrowserDetect%20-%20plugin%20Chrome%20PDF%20Viewer\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=BrowserDetect%20-%20plugin%20Chrome%20PDF%20Viewer\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 87b7dc51-1512-49d0-9179-ff9f3eedadb6\r\nx-runtime: 0.002680\r\nx-host-info: lw-prod-eu-i-0fd9b792b886e4ec7, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=Loading%20WindowsMediaPlayer%20version\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=Loading%20WindowsMediaPlayer%20version\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 85796a06-3592-43dc-af91-e62ec34c0964\r\nx-runtime: 0.001309\r\nx-host-info: lw-prod-eu-i-0247081b43c38c21a, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=BrowserDetect%20-%20browser_version%20%3D%20134\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=BrowserDetect%20-%20browser_version%20%3D%20134\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 2c52f5ba-bb6f-4f0c-b1ce-943790f188e4\r\nx-runtime: 0.001564\r\nx-host-info: lw-prod-eu-i-0247081b43c38c21a, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/assets/psat_logo.png","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /assets/psat_logo.png HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 26 Jan 2026 13:50:01 GMT\r\nvary: Accept-Encoding\r\nserver: ThreatSim-Web-Server\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":10814,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 557 x 173, 8-bit/color RGBA, non-interlaced","md5":"c510b40b57c8de8c431e25e89eac656f","sha1":"00a6e6c8d8ff43dfce2e48f82469c02c33f9208f","sha256":"313ac720267e0d852f0b17055b68087b1d1cc4ce24f075864d4ab57a7f83b199","sha512":"c45920c956413c791a656be30709a412a596e029bcbc19fc784d605544810bff98f5a87c89d68f8a4a4c6741ac46dce7803f3f2350bd299ce6b2fd352765d6e4","ssdeep":"192:RqrKU2be54crJ6G5QxqA4eJVPhQHxPCgxreteur2INNpconhANAIykmJtT8KC:QrQipJ6GGxqAjJVJQHx3xr2r2INDconW","tlshash":"8e22cfadbd217e87c1f42134e166eccad031f20238746296b3986e78b0bbc7156f304a","first_seen":"2023-05-11T07:05:49Z","last_seen":"2026-04-20T12:07:03.107184Z","times_seen":206,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=BrowserDetect%20-%20hasCookies%20%3D%20true\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=BrowserDetect%20-%20hasCookies%20%3D%20true\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: e5a671b8-7557-46b1-bb22-247a0b6deea8\r\nx-runtime: 0.002489\r\nx-host-info: lw-prod-eu-i-0f5f9ad2fc5c844fa, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=BrowserDetect%20-%20os_version%20%3D%2010\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=BrowserDetect%20-%20os_version%20%3D%2010\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: dffb3bf4-6059-42c8-9d9a-2a59a9cf1cc0\r\nx-runtime: 0.001561\r\nx-host-info: lw-prod-eu-i-0f5f9ad2fc5c844fa, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=BrowserDetect%20-%20language%20%3D%20en-US\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=BrowserDetect%20-%20language%20%3D%20en-US\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: e25f5359-3c43-4a85-9713-a733729641ff\r\nx-runtime: 0.001995\r\nx-host-info: lw-prod-eu-i-0fd9b792b886e4ec7, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=BrowserDetect%20-%20plugin%20PDF%20Viewer\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=BrowserDetect%20-%20plugin%20PDF%20Viewer\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 3feb56a8-ac07-4aaa-8d11-c32280010f7e\r\nx-runtime: 0.001697\r\nx-host-info: lw-prod-eu-i-08eea27296d7c989f, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=BrowserDetect%20-%20plugin%20Chromium%20PDF%20Viewer\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=BrowserDetect%20-%20plugin%20Chromium%20PDF%20Viewer\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: afb18e81-3114-4d42-8df3-045f2baa9c09\r\nx-runtime: 0.002408\r\nx-host-info: lw-prod-eu-i-0247081b43c38c21a, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=Loading%20RealPlayer%20version\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=Loading%20RealPlayer%20version\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 024b875e-954a-4ab4-9660-ec48caaeca1e\r\nx-runtime: 0.001373\r\nx-host-info: lw-prod-eu-i-0fd9b792b886e4ec7, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-20T12:06:39.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"c0623a98220d6586761a01bc71f85279\"\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: dd2f542e-c424-4700-9e71-34d98eb4935b\r\nx-runtime: 0.002147\r\nx-host-info: lw-prod-eu-i-0fd9b792b886e4ec7, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"jQuery:1.11.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":2214,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (370)","md5":"cf0ae9d292ac3c2d9c565ac15bcacc77","sha1":"68cd806bcb5002034b5b143747636883483f3736","sha256":"c0623a98220d6586761a01bc71f85279d1893f40e75400864b0f9048bc2b0bfe","sha512":"353903182a5b2ea768388dd1b6c8857a1a0cf8a23b097f78ebee6b1ebeb973ca3648524debeea7af6e953a5de06ceea571cb31b2f78c740ff2892d39e2b8993e","ssdeep":"","tlshash":"0b41d72f9f8d401e423651d02a3673d8545fdc11e2969ceaece69568cbc428c9df3aac","first_seen":"2023-05-06T00:47:38Z","last_seen":"2026-04-20T12:07:03.107927Z","times_seen":173,"resource_available":true,"data":null}},"time_used":494,"timings":{"blocked":229,"dns":47,"connect":32,"send":0,"wait":36,"receive":0,"ssl":147},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/assets/ajax/libs/jquery/1.11.0/jquery.min.js","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /assets/ajax/libs/jquery/1.11.0/jquery.min.js HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 13:50:00 GMT\r\nvary: Accept-Encoding\r\nserver: ThreatSim-Web-Server\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":96381,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32341)","md5":"8fc25e27d42774aeae6edbc0a18b72aa","sha1":"b66ed708717bf0b4a005a4d0113af8843ef3b8ff","sha256":"b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682","sha512":"87d90a665c15d71ac872bd8bc003d9863964c7ec7ada6370b902b93c0bbd7770fe25730d946c7c6a465baa95efa74bc0e78af3f83aea615af35060cc8702a6c1","ssdeep":"1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Yn:bIO/e2D5c4LgtImLja98HrK","tlshash":"cc93e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-20T14:44:03.522383Z","times_seen":23835,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/assets/all.js?g=infopage","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /assets/all.js?g=infopage HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7191\r\nlast-modified: Mon, 26 Jan 2026 13:50:00 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: ThreatSim-Web-Server\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":28406,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"097f74fc8f861ece148262a652ab806a","sha1":"305ecb552c3ff6bd24b56333fab6e731eb81ed30","sha256":"39b4614f1c87cf0cfd1bc3375642e95825cb2018e0318a36aad766ddb5a8cbe9","sha512":"298c0cee6ea60226f4a3374a1d44b53046a1b7f35d80144abab528addc146ef35978fe53caab0246d91eeac7d6a58ea61276506112065de2fdbdbccfc5bc96a3","ssdeep":"384:Ldz9MmIbpuTuyshKCiSvm9m/QUYcBw6xwQPfwjU82bleXg7Gv:LrMlIT2Kd8Q4Bw6xwQPfwjUN5ew6v","tlshash":"84d2a51e305a393e1073b155770b364876bb47b967a89094b16d40a83f6283bc277fbe","first_seen":"2023-03-07T22:34:53Z","last_seen":"2026-04-20T14:36:40.689498Z","times_seen":1905,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/favicon.ico","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 0\r\nlast-modified: Mon, 26 Jan 2026 13:50:01 GMT\r\netag: \"69777109-0\"\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=BrowserDetect%20-%20colorDepth%20%3D%2024\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=BrowserDetect%20-%20colorDepth%20%3D%2024\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 8fe7d600-491d-46b0-8c9a-9bab49104f87\r\nx-runtime: 0.001668\r\nx-host-info: lw-prod-eu-i-0247081b43c38c21a, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=Skipping%20java%20detection\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=Skipping%20java%20detection\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 25deacc7-e3ac-4ad4-b433-14891a7e6dd3\r\nx-runtime: 0.001676\r\nx-host-info: lw-prod-eu-i-0247081b43c38c21a, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=BrowserDetect%20-%20plugin%20Microsoft%20Edge%20PDF%20Viewer\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=BrowserDetect%20-%20plugin%20Microsoft%20Edge%20PDF%20Viewer\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 64668778-4cea-4c65-87c9-2dd809da3935\r\nx-runtime: 0.002304\r\nx-host-info: lw-prod-eu-i-08eea27296d7c989f, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=BrowserDetect%20-%20plugin%20WebKit%20built-in%20PDF\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=BrowserDetect%20-%20plugin%20WebKit%20built-in%20PDF\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 0019d206-bf20-49fe-86ee-20d23aff0889\r\nx-runtime: 0.002492\r\nx-host-info: lw-prod-eu-i-0f5f9ad2fc5c844fa, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/log?id=infopage\u0026sev=1\u0026msg=PluginDetect%20is%20not%20defined\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /log?id=infopage\u0026sev=1\u0026msg=PluginDetect%20is%20not%20defined\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: image/gif; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 5c51a503-9b4f-4d1c-b74a-6d1ae16d772e\r\nx-runtime: 0.003053\r\nx-host-info: lw-prod-eu-i-0fd9b792b886e4ec7, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=Loading%20quicktime%20version\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=Loading%20quicktime%20version\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: cf61a973-f652-47af-aea0-058905248ba7\r\nx-runtime: 0.001625\r\nx-host-info: lw-prod-eu-i-08eea27296d7c989f, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=redirect_url%20is%20undefined\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=redirect_url%20is%20undefined\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 5336ab84-2ec6-43ef-b0e6-431fc5019ae1\r\nx-runtime: 0.001664\r\nx-host-info: lw-prod-eu-i-0f5f9ad2fc5c844fa, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=BrowserDetect%20-%20os%20%3D%20Windows\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=BrowserDetect%20-%20os%20%3D%20Windows\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 32c36957-5106-499e-8546-120e4ddcbaf1\r\nx-runtime: 0.001985\r\nx-host-info: lw-prod-eu-i-08eea27296d7c989f, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=BrowserDetect%20-%20sessionStorage%20%3D%20true\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=BrowserDetect%20-%20sessionStorage%20%3D%20true\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 4c7a2452-96e5-4606-97c0-bb557b2b16c2\r\nx-runtime: 0.001840\r\nx-host-info: lw-prod-eu-i-08eea27296d7c989f, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=BrowserDetect%20-%20browser%20%3D%20Firefox\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=BrowserDetect%20-%20browser%20%3D%20Firefox\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 460e7a14-91da-41a4-a73e-2222591ab5df\r\nx-runtime: 0.001964\r\nx-host-info: lw-prod-eu-i-0fd9b792b886e4ec7, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=BrowserDetect%20-%20width%20%3D%201280\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=BrowserDetect%20-%20width%20%3D%201280\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: fa3bf096-8a46-4161-8353-d32fa64bc4b7\r\nx-runtime: 0.001318\r\nx-host-info: lw-prod-eu-i-08eea27296d7c989f, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=Loading%20flash%20version\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=Loading%20flash%20version\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 09c402ec-2b06-47b6-9b98-d5de276210ea\r\nx-runtime: 0.002826\r\nx-host-info: lw-prod-eu-i-0f5f9ad2fc5c844fa, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/secure/browser_post","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"POST /secure/browser_post HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 1373\r\nOrigin: https://proofpoint-simulations.eu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1373,"data":"token=%7B%22guid%22%3A%22infopage%22%2C%22property%22%3A%22allInfo%22%2C%22value%22%3A%7B%22browser_details%22%3A%7B%22browser%22%3A%22Firefox%22%2C%22browser_version%22%3A%22134%22%2C%22os%22%3A%22Windows%22%2C%22os_version%22%3A%2210%22%2C%22hasLocalStorage%22%3Atrue%2C%22hasSessionStorage%22%3Atrue%2C%22hasCookies%22%3Atrue%2C%22user_agent%22%3A%22Mozilla%2F5.0+(Windows+NT+10.0%253B+Win64%253B+x64%253B+rv%3A134.0)+Gecko%2F20100101+Firefox%2F134.0%22%2C%22language%22%3A%22en-US%22%2C%22colorDepth%22%3A%2224%22%2C%22width%22%3A%221280%22%2C%22height%22%3A%221024%22%2C%22plugins%22%3A%7B%220%22%3A%7B%22name%22%3A%22PDF+Viewer%22%2C%22filename%22%3A%22internal-pdf-viewer%22%2C%22description%22%3A%22Portable+Document+Format%22%7D%2C%221%22%3A%7B%22name%22%3A%22Chrome+PDF+Viewer%22%2C%22filename%22%3A%22internal-pdf-viewer%22%2C%22description%22%3A%22Portable+Document+Format%22%7D%2C%222%22%3A%7B%22name%22%3A%22Chromium+PDF+Viewer%22%2C%22filename%22%3A%22internal-pdf-viewer%22%2C%22description%22%3A%22Portable+Document+Format%22%7D%2C%223%22%3A%7B%22name%22%3A%22Microsoft+Edge+PDF+Viewer%22%2C%22filename%22%3A%22internal-pdf-viewer%22%2C%22description%22%3A%22Portable+Document+Format%22%7D%2C%224%22%3A%7B%22name%22%3A%22WebKit+built-in+PDF%22%2C%22filename%22%3A%22internal-pdf-viewer%22%2C%22description%22%3A%22Portable+Document+Format%22%7D%7D%7D%7D%7D"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: image/gif; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: Accept-Encoding, Accept\r\ncache-control: no-cache\r\nx-request-id: 3cf2fdb8-b6cd-4544-8c98-5ee74d2df2ef\r\nx-runtime: 0.003205\r\nx-host-info: lw-prod-eu-i-08eea27296d7c989f, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=Loading%20pdf%20version\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=Loading%20pdf%20version\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 37e6e4b1-6591-409b-8291-420e32533142\r\nx-runtime: 0.001838\r\nx-host-info: lw-prod-eu-i-0247081b43c38c21a, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/trace?id=infopage\u0026msg=BrowserDetect%20-%20height%20%3D%201024\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /trace?id=infopage\u0026msg=BrowserDetect%20-%20height%20%3D%201024\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 57a23876-cbc5-42a1-9c29-cd62b40654b3\r\nx-runtime: 0.004012\r\nx-host-info: lw-prod-eu-i-0f5f9ad2fc5c844fa, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proofpoint-simulations.eu/log?id=infopage\u0026sev=1\u0026msg=can%27t%20access%20property%20%22getVersion%22%2C%20window.plugin_detector%20is%20undefined\u0026correlation_id=undefined","fqdn":"proofpoint-simulations.eu","domain":"proofpoint-simulations.eu","tld":"eu"},"ip":{"addr":"54.72.56.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proofpoint-simulations.eu/","date":"2026-04-20T12:06:40.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eu.threatsim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:AF:F5:80:1F:E2:42:7B:CF:80:E1:B0:CD:37:C9:42:F0:35:81:E2","sha256":"88:D9:84:B9:16:3F:9A:43:8D:82:C1:BF:2C:FA:42:A0:B5:EA:D2:05:64:46:82:43:E6:30:25:C3:AA:9C:22:BD"}}},"request":{"raw":"GET /log?id=infopage\u0026sev=1\u0026msg=can%27t%20access%20property%20%22getVersion%22%2C%20window.plugin_detector%20is%20undefined\u0026correlation_id=undefined HTTP/1.1\r\nHost: proofpoint-simulations.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proofpoint-simulations.eu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 12:06:40 GMT\r\ncontent-type: image/gif; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: cfd58904-76ff-4f14-8c78-e4aa39d48759\r\nx-runtime: 0.002305\r\nx-host-info: lw-prod-eu-i-0fd9b792b886e4ec7, ; d9f9d9e26b68bbaa23886675a617da0629901c07\r\nserver: ThreatSim-Web-Server\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T14:59:57.844835Z","times_seen":13979396,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"proofpoint-simulations.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}