{"report_id":"f8eb7f17-6226-4528-ba29-fc2fd68cd237","version":6,"status":"done","tags":[],"date":"2025-09-06T12:09:07Z","url":{"schema":"http","addr":"www.paypal-securecheck-update.com","fqdn":"www.paypal-securecheck-update.com","domain":"paypal-securecheck-update.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"www.paypal-securecheck-update.com/","fqdn":"www.paypal-securecheck-update.com","domain":"paypal-securecheck-update.com","tld":"com"},"title":"SSL Server Test"},"submit":{"url":{"schema":"http","addr":"www.paypal-securecheck-update.com","fqdn":"www.paypal-securecheck-update.com","domain":"paypal-securecheck-update.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-11T12:09:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.paypal-securecheck-update.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-09-04","domain_rank":0,"first_seen":"2025-09-06T06:17:20.172508Z","last_seen":"2025-09-06T06:17:20.172508Z","alert_count":0,"request_count":3,"received_data":11808,"sent_data":1311,"comment":"","tags":null,"fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.paypal-securecheck-update.com/","fqdn":"www.paypal-securecheck-update.com","domain":"paypal-securecheck-update.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-06T12:08:46.726Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.paypal-securecheck-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":97,"connect":26,"send":0,"wait":0,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.paypal-securecheck-update.com/","fqdn":"www.paypal-securecheck-update.com","domain":"paypal-securecheck-update.com","tld":"com"},"ip":{"addr":"185.199.111.153","port":80,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-06T12:08:46.901Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.paypal-securecheck-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: keep-alive\r\nContent-Length: 610\r\nServer: GitHub.com\r\nContent-Type: text/html; charset=utf-8\r\nLast-Modified: Sat, 06 Sep 2025 10:00:38 GMT\r\nAccess-Control-Allow-Origin: *\r\nETag: W/\"68bc0646-420\"\r\nexpires: Sat, 06 Sep 2025 12:18:47 GMT\r\nCache-Control: max-age=600\r\nContent-Encoding: gzip\r\nx-proxy-cache: MISS\r\nX-GitHub-Request-Id: 82F9:262F26:1615788:16401BA:68BC244E\r\nAccept-Ranges: bytes\r\nAge: 0\r\nDate: Sat, 06 Sep 2025 12:08:47 GMT\r\nVia: 1.1 varnish\r\nX-Served-By: cache-hel1410029-HEL\r\nX-Cache: MISS\r\nX-Cache-Hits: 0\r\nX-Timer: S1757160527.947705,VS0,VE126\r\nVary: Accept-Encoding\r\nX-Fastly-Request-ID: 805134084bd3cb462f8431d9fa2d496bc5a79c76\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1056,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"006f3dcde461d88281a219155103ece7","sha1":"e32a13020f9ec657ae43bb50b095b9f71deb9e54","sha256":"75bc0c25faf484ef4269ed5c24c8680fd39eb3590774a41317990166bdf2605c","sha512":"5289a1f03118ab3e13a2510017e77be568911e6c047993e8cb270041fd8971fa5fc9985677906e465f27b2a3d8fc65684397cd473e58fef976398025dde2a621","ssdeep":"","tlshash":"7b11618f00b51b6384419125bfcb32851f09726b43a99984bc89a633d6c5d10e72bfec","first_seen":"2025-09-06T12:09:08.735263Z","last_seen":"2025-09-06T12:09:08.735263Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":28,"dns":1,"connect":29,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.paypal-securecheck-update.com/favicon.ico","fqdn":"www.paypal-securecheck-update.com","domain":"paypal-securecheck-update.com","tld":"com"},"ip":{"addr":"185.199.111.153","port":80,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.paypal-securecheck-update.com/","date":"2025-09-06T12:08:47.229Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.paypal-securecheck-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.paypal-securecheck-update.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nConnection: keep-alive\r\nContent-Length: 5254\r\nServer: GitHub.com\r\nContent-Type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\nAccess-Control-Allow-Origin: *\r\nETag: W/\"64d248ca-24a3\"\r\nContent-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\nContent-Encoding: gzip\r\nx-proxy-cache: MISS\r\nX-GitHub-Request-Id: 6A32:156724:1678520:16A2F90:68BC244E\r\nAccept-Ranges: bytes\r\nAge: 0\r\nDate: Sat, 06 Sep 2025 12:08:47 GMT\r\nVia: 1.1 varnish\r\nX-Served-By: cache-hel1410029-HEL\r\nX-Cache: MISS\r\nX-Cache-Hits: 0\r\nX-Timer: S1757160527.244331,VS0,VE130\r\nVary: Accept-Encoding\r\nX-Fastly-Request-ID: e17d0c293fdad80f4e52aacdc99f145c63a42de1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":9379,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-11T00:20:15.058998Z","times_seen":19115,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
