{"report_id":"f9346a1c-9701-4a52-bf60-05cac3a64581","version":0,"status":"done","tags":["adobe","phishing"],"date":"2026-10-13T03:46:57Z","url":{"schema":"http","addr":"aligra.net/cg","fqdn":"aligra.net","domain":"aligra.net","tld":"net"},"ip":{"addr":"208.109.33.211","port":0,"asn":398101,"as":"GoDaddy.com, LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"aligra.net/cg/","fqdn":"aligra.net","domain":"aligra.net","tld":"net"},"title":"PDF Viewer","dom":{"size":2267506,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (31853)","md5":"3198cc9a2f1f5e60f418e0c6c9c77f55","sha1":"441328ac98dd0ef53593a1d46c8e7fc9f8de06ea","sha256":"fffa91f541dcc7d89f2f6cfdaf4d184a09116a9c2d85f7ef6c9092ddf9df806a","sha512":"fb847e4ca748eff992f78a5254c1e6bb41ad504602c09e95d72de85fc2ffb0ec913798ba7cc8a487814d3a0eea5a677bb0a2602bb7071617d1b747e2324bf7f3","ssdeep":"24576:3z+EHVWfOTn3cXuT8+o7rjyHlnOXuT8+o7rMXuT8+o7rly2lnE:a5flXS8+Q3MlnOXS8+QgXS8+Q5RlnE","tlshash":"fda5d81b8d0f56a07f3828bf4b8ba6497010f79395c39794f0df4c9df64ae1a264926c","dom_hash":"domhashfd773a223683bc9d693ce7c9e6a6a2e6","first_seen":"2026-10-13T03:47:03.321766Z","last_seen":"2026-10-13T04:38:44.648431Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"aligra.net/cg","fqdn":"aligra.net","domain":"aligra.net","tld":"net"},"ip":{"addr":"208.109.33.211","port":0,"asn":398101,"as":"GoDaddy.com, LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-17T03:46:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":3,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"aligra.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"medium","comment":"Associated with Adobe phishing","tags":["adobe","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"medium","comment":"Associated with Adobe phishing","tags":["adobe","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"high","comment":"Resource assosiated with Adobe phishing","tags":["adobe","phishing"],"meta":{"engine":"luna_v2","pattern_id":"hashhound.primary.http_response_data_sha256"}}]},"summary":[{"fqdn":"t2.gstatic.com","ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-07T00:09:56Z","last_seen":"2026-10-12T03:00:04.411241Z","alert_count":2,"request_count":2,"received_data":4623,"sent_data":1170,"comment":"","tags":null,"fingerprints":null},{"fqdn":"t3.gstatic.com","ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-06T20:15:36Z","last_seen":"2026-10-06T19:03:41.037653Z","alert_count":1,"request_count":1,"received_data":1510,"sent_data":585,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.softwareworld.co","ip":{"addr":"104.26.15.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-11-21","domain_rank":1864374,"first_seen":"2019-02-13T15:16:00Z","last_seen":"2026-10-07T05:56:44.757066Z","alert_count":1,"request_count":1,"received_data":16218,"sent_data":574,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"t1.gstatic.com","ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-06T22:57:20Z","last_seen":"2026-10-09T14:58:08.07655Z","alert_count":1,"request_count":1,"received_data":1014,"sent_data":588,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-10-11T23:07:18.039486Z","alert_count":0,"request_count":4,"received_data":1798,"sent_data":2235,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aligra.net","ip":{"addr":"208.109.33.211","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":10,"request_count":5,"received_data":1184750,"sent_data":2336,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"medium","comment":"Associated with Adobe phishing","tags":["adobe","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"high","comment":"Resource assosiated with Adobe phishing","tags":["adobe","phishing"],"meta":{"engine":"luna_v2","pattern_id":"hashhound.primary.http_response_data_sha256"}}]},"javascript":{"script":[{"url":{"schema":"https","addr":"aligra.net/cg/","fqdn":"aligra.net","domain":"aligra.net","tld":"net"},"ip":{"addr":"208.109.33.211","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba101a1042db70e458aee850644d8bf6","sha1":"94b4373895ee2a5ff6c39beaeaea01cdc630c998","sha256":"1c0d67d9503c7910eac461cacf928dde7802a484555b0969297f720e81a5da48","sha512":"5d8d42d2e0626f27fcbcec2ecd6a2cd5915232280dfc1ff4091b915328b4aedcf58fcae793a039ab0701ba07a9e62e8247bb198aa77bdd63d38f4addb882c55a","ssdeep":"","tlshash":"940142a55ef1243282aa50b31b0b6079292ee41713a8cbe0f9cc83088f8f5515372b4f","size":734,"data":"","first_seen":"2026-06-07T14:45:07.216735Z","last_seen":"2026-10-13T04:38:44.65518Z","times_seen":224,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aligra.net/cg/","fqdn":"aligra.net","domain":"aligra.net","tld":"net"},"ip":{"addr":"208.109.33.211","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"914a8a1d508d8698338a352d72338a37","sha1":"fbce8f9a58d01786b51b1c7eecfff5610a0e5f0e","sha256":"ad0c0fbab60e8f72ef98475a061b3f728b896b1d15265a90aa4dd4b1423131f0","sha512":"021ca4cc5c2d2eeb3fa6ab0f08293670421c5d8b4c33e9afc78ec9c1738a692b38caef6579027f46ad020ae990f99311978b4f0aa0f49dec93d7a1bb06359f4b","ssdeep":"48:hIj1mtpbEhYd8zdhi664jzWgIODmSxroa71/Krh86k7eGVrOUnGfUnvLDhVetscq:umf+ilm6gDxOr6rxV6biX+mi6","tlshash":"209185ffb9c704220753e03ba65e63c8382181076607f906ba9c7690ef91bb5167e5da","size":4238,"data":"","first_seen":"2026-10-13T03:38:19.167633Z","last_seen":"2026-10-13T04:38:44.655734Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aligra.net/cg/","fqdn":"aligra.net","domain":"aligra.net","tld":"net"},"ip":{"addr":"208.109.33.211","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"77bf24aa951c1f4d0398debd8bed2639","sha1":"92846a381c290a71b02fc7207b53378b5d6595e0","sha256":"abc3ab1067f42c3d5e0de8f560feaf26f1f009bcf5ce5779ea53a1b0ccc54cc2","sha512":"c9af6434a4e492a0412a4d5e1fe3f4b5c3dbe741a76d62902954131b45a4fb41bc537cf5cd4cd717ffd982ac3aa78f73ca7f8b67a80ecf61e266d0423aa3e8ff","ssdeep":"","tlshash":"16e01d5418e7e830117b50264b47660336467e370305b530778d4f7b9fd85abc9b66ed","size":304,"data":"","first_seen":"2026-06-07T14:45:07.217751Z","last_seen":"2026-10-13T04:38:44.656265Z","times_seen":201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aligra.net/cg/","fqdn":"aligra.net","domain":"aligra.net","tld":"net"},"ip":{"addr":"208.109.33.211","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"971aca9b1ac5295cf46e912fec41fc9b","sha1":"b11001cb7fa8fdbccf5e55fd74310c0e15436fee","sha256":"d21b27ed9b0cc61350d2c1834eb827a99fc82447d5bc78f781c6be7ef096fe30","sha512":"c6c830f36335d6944e019cec05d73cdf28a893e2346b29b893a0d54b114d3bcd8b3573e25cad4a0faf7a7bd9a28443fff63fa340e87ef4d2ae5d3905cd99c4c3","ssdeep":"12288:tXuT8+o7rl4ViiruHsXQ42LgsOkTarPqCqffORf9r96fTYD/kA2rae2mgrZvfmYq:tXuT8+o7rly2lnN","tlshash":"3bf4651b8e0f96a07b3828bf5787a6497010f79395c3a794f0ef4c4df646e1a264d26c","size":749612,"data":"","first_seen":"2026-10-13T03:38:19.170622Z","last_seen":"2026-10-13T04:38:44.656885Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"DOM Content Loaded - Initializing button handlers","filename":"https://aligra.net/cg/","line_number":3293,"column_number":17},{"level":"log","text":"Found buttons:1","filename":"https://aligra.net/cg/","line_number":3297,"column_number":17},{"level":"log","text":"%uD83D%uDE80 Initializing application...","filename":"https://aligra.net/cg/","line_number":3218,"column_number":15},{"level":"log","text":"Raw User Agent:mozilla/5.0 (windows nt 10.0; win64; x64; rv:134.0) gecko/20100101 firefox/134.0","filename":"https://aligra.net/cg/","line_number":2781,"column_number":15},{"level":"log","text":"%u2705 Detected Browser: Mozilla Firefox (Class: browser-firefox)","filename":"https://aligra.net/cg/","line_number":2917,"column_number":15},{"level":"log","text":"%uD83C%uDF10 Applied browser class:browser-firefox","filename":"https://aligra.net/cg/","line_number":3271,"column_number":17},{"level":"log","text":"%uD83C%uDFA8 Detected Color Scheme: Light Mode (Class: light-theme)","filename":"https://aligra.net/cg/","line_number":2963,"column_number":15},{"level":"log","text":"%uD83C%uDFA8 Applied theme class:light-theme","filename":"https://aligra.net/cg/","line_number":3276,"column_number":17},{"level":"log","text":"%uD83D%uDCCB Browser window classes:modal-content browser-firefox light-theme","filename":"https://aligra.net/cg/","line_number":3279,"column_number":17},{"level":"log","text":"%u2705 Theme change listeners activated","filename":"https://aligra.net/cg/","line_number":2995,"column_number":19},{"level":"log","text":"%u2705 Application initialized successfully","filename":"https://aligra.net/cg/","line_number":3284,"column_number":17},{"level":"log","text":"%u2705 PDF viewer elements found, initializing...","filename":"https://aligra.net/cg/","line_number":3705,"column_number":17},{"level":"log","text":"%uD83D%uDCC4 Initializing PDF viewer with3base64 images...","filename":"https://aligra.net/cg/","line_number":3723,"column_number":19},{"level":"log","text":"%uD83D%uDCCB Creating3thumbnails...","filename":"https://aligra.net/cg/","line_number":3754,"column_number":19},{"level":"log","text":"%uD83D%uDCD1 Sidebar populated","filename":"https://aligra.net/cg/","line_number":3732,"column_number":19},{"level":"log","text":"%u23F3 Preloading images...","filename":"https://aligra.net/cg/","line_number":3736,"column_number":19},{"level":"log","text":"%u2705 PDF viewer initialized with3images","filename":"https://aligra.net/cg/","line_number":3741,"column_number":21},{"level":"log","text":"%uD83D%uDD04 Started automatic slideshow (4s interval)","filename":"https://aligra.net/cg/","line_number":3744,"column_number":23},{"level":"log","text":"%u2705 Thumbnail1loaded successfully","filename":"https://aligra.net/cg/","line_number":3779,"column_number":23},{"level":"log","text":"%u2705 Thumbnail2loaded successfully","filename":"https://aligra.net/cg/","line_number":3779,"column_number":23},{"level":"log","text":"%u2705 Thumbnail3loaded successfully","filename":"https://aligra.net/cg/","line_number":3779,"column_number":23},{"level":"log","text":"%u2705 Loading screen hidden","filename":"https://aligra.net/cg/","line_number":3227,"column_number":19}]},"http":[{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=firefox.com\u0026sz=32","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aligra.net/cg/","date":"2026-10-13T03:46:26.205Z","timestamp":1791863186205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"GET /s2/favicons?domain=firefox.com\u0026sz=32 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aligra.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nlocation: https://t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://firefox.com\u0026size=32\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\ndate: Tue, 13 Oct 2026 03:46:26 GMT\r\nexpires: Tue, 13 Oct 2026 04:16:26 GMT\r\ncache-control: public, max-age=1800\r\nserver: sffe\r\ncontent-length: 331\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T06:30:54.669451Z","times_seen":19073715,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aligra.net/favicon.ico","fqdn":"aligra.net","domain":"aligra.net","tld":"net"},"ip":{"addr":"208.109.33.211","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aligra.net/cg/","date":"2026-10-13T03:46:26.268Z","timestamp":1791863186268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoconfig.aligra.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Sep 2026 04:18:16 GMT","end":"Mon, 30 Nov 2026 04:18:15 GMT"},"fingerprint":{"sha1":"5F:92:5B:42:FA:0C:EB:26:21:64:40:E1:1C:92:D0:40:34:12:DB:9E","sha256":"96:7E:09:F2:48:59:31:D5:0B:B4:4B:6F:F6:B5:3D:4A:18:FA:91:85:CA:E3:48:96:41:72:1D:0E:A5:C1:D8:2A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: aligra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aligra.net/cg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-length: 355\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Tue, 13 Oct 2026 03:46:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":509,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-10-13T06:34:19.656249Z","times_seen":66176,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"aligra.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"medium","comment":"Associated with Adobe phishing","tags":["adobe","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=firefox.com\u0026size=32","fqdn":"t2.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aligra.net/cg/","date":"2026-10-13T03:46:26.410Z","timestamp":1791863186410,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://firefox.com\u0026size=32 HTTP/1.1\r\nHost: t2.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aligra.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-location: https://www.firefox.com/media/img/favicons/firefox/browser/favicon.f093404c0135.ico\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 2120\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 10 Oct 2026 12:31:00 GMT\r\nexpires: Sat, 17 Oct 2026 12:31:00 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Mon, 21 Oct 2019 21:24:53 GMT\r\ncontent-type: image/png\r\nage: 227726\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2120,"size_decoded":3004,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"e67fc1084abebeebc0b022264ad39a12","sha1":"ca7893888d27c6bd8b666bd8363bc77612854f90","sha256":"9008abbdc6ebe0a8b9f92c79f32c76db036c55e20b7dd10269a061e9b6221fef","sha512":"69d755f56454566e3a0f6599a6fb0f957636052b018b60575269c5587cda2c7833b2e844424650779c54e006e001e680c3267b0ae5280f3ba3e9a370edfa1d63","ssdeep":"","tlshash":"8a41e996be792c9034ce60e9d3a1079479fd6ce056226464886bdc2b2eff81021c1b87","first_seen":"2026-02-22T08:42:21.453196Z","last_seen":"2026-10-13T04:38:44.652363Z","times_seen":318,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":16,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"high","comment":"Resource assosiated with Adobe phishing","tags":["adobe","phishing"],"meta":{"engine":"luna_v2","pattern_id":"hashhound.primary.http_response_data_sha256"}}]}},{"url":{"schema":"https","addr":"t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=adobe.com\u0026size=32","fqdn":"t2.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aligra.net/cg/","date":"2026-10-13T03:46:26.411Z","timestamp":1791863186411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://adobe.com\u0026size=32 HTTP/1.1\r\nHost: t2.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aligra.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-location: https://www.adobe.com/upp/img/favicons/favicon.ico\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 769\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 10 Oct 2026 02:08:45 GMT\r\nexpires: Sat, 17 Oct 2026 02:08:45 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Thu, 26 Dec 2024 10:09:52 GMT\r\ncontent-type: image/png\r\nage: 265061\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":769,"size_decoded":1619,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"78488a870c040f278f877c0553a14182","sha1":"84b2085ed0d83aa7483046e138fa96d549eadca1","sha256":"9bfaabdc7b2b02ebeef1361b492b146ceac137762f60195d5513aeedf25e33df","sha512":"7a37c6a3f18b594c30caebfdf32538bc5b201277a70ea75a3774cf47cd9e0a0d9c714ef04ac0d73cae60cf3b88f8d988e8998cfec7cf8ed32556d75b90f7c4cd","ssdeep":"","tlshash":"ab01babb470f552cccc1cf9155880e18ba9add6cd42e1677154db323c3a3ea45142b2d","first_seen":"2025-09-15T14:36:52.897965Z","last_seen":"2026-10-13T04:38:44.651125Z","times_seen":330,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":16,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"high","comment":"Resource assosiated with Adobe phishing","tags":["adobe","phishing"],"meta":{"engine":"luna_v2","pattern_id":"hashhound.primary.http_response_data_sha256"}}]}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=adobe.com\u0026sz=32","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aligra.net/cg/","date":"2026-10-13T03:46:26.202Z","timestamp":1791863186202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"GET /s2/favicons?domain=adobe.com\u0026sz=32 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aligra.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nlocation: https://t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://adobe.com\u0026size=32\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\ndate: Tue, 13 Oct 2026 03:46:26 GMT\r\nexpires: Tue, 13 Oct 2026 04:16:26 GMT\r\ncache-control: public, max-age=1800\r\nserver: sffe\r\ncontent-length: 329\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T06:30:54.669451Z","times_seen":19073715,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":3,"connect":23,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aligra.net/cg/","fqdn":"aligra.net","domain":"aligra.net","tld":"net"},"ip":{"addr":"208.109.33.211","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T03:46:24.922Z","timestamp":1791863184922,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoconfig.aligra.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Sep 2026 04:18:16 GMT","end":"Mon, 30 Nov 2026 04:18:15 GMT"},"fingerprint":{"sha1":"5F:92:5B:42:FA:0C:EB:26:21:64:40:E1:1C:92:D0:40:34:12:DB:9E","sha256":"96:7E:09:F2:48:59:31:D5:0B:B4:4B:6F:F6:B5:3D:4A:18:FA:91:85:CA:E3:48:96:41:72:1D:0E:A5:C1:D8:2A"}}},"request":{"raw":"GET /cg/ HTTP/1.1\r\nHost: aligra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 13 Oct 2026 03:46:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":1183162,"size_decoded":413507,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (31834)","md5":"e25147126055aac5db5d3d7d506f39fe","sha1":"d42a6296b1d04c96f92e31ce31c93e199b1f6a1b","sha256":"54d8063ab7751f8d8b8e7000feea799767839c5d9312aba4e0f4a9755f33582a","sha512":"575d062c58843b7753b039377d6a25201599e89d612d7e43a4128f905d05785a313fed5c244748181e5068e4d6c83ff03622e2f1843fcb437d3d22d956f8eaec","ssdeep":"12288:BgLk/VgEH1TWfOLnx0J3jjXuT8+o7rl4ViiruHsXQ42LgsOkTarPqCqffORf9r9c:Bz+EHVWfOTQ3nXuT8+o7rlyo","tlshash":"89251a1b8d0f56a07f3828bf4b8ba6497010f69395c39794f0de4c9dfb46e1a264936c","first_seen":"2026-10-13T03:38:19.164037Z","last_seen":"2026-10-13T04:38:44.649684Z","times_seen":3,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"aligra.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"medium","comment":"Associated with Adobe phishing","tags":["adobe","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"aligra.net/cg/m/js/utils.js","fqdn":"aligra.net","domain":"aligra.net","tld":"net"},"ip":{"addr":"208.109.33.211","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aligra.net/cg/","date":"2026-10-13T03:46:25.746Z","timestamp":1791863185746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoconfig.aligra.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Sep 2026 04:18:16 GMT","end":"Mon, 30 Nov 2026 04:18:15 GMT"},"fingerprint":{"sha1":"5F:92:5B:42:FA:0C:EB:26:21:64:40:E1:1C:92:D0:40:34:12:DB:9E","sha256":"96:7E:09:F2:48:59:31:D5:0B:B4:4B:6F:F6:B5:3D:4A:18:FA:91:85:CA:E3:48:96:41:72:1D:0E:A5:C1:D8:2A"}}},"request":{"raw":"GET /cg/m/js/utils.js HTTP/1.1\r\nHost: aligra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aligra.net/cg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-length: 355\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Tue, 13 Oct 2026 03:46:25 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":509,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-10-13T06:34:19.656249Z","times_seen":66176,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"aligra.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"medium","comment":"Associated with Adobe phishing","tags":["adobe","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"t3.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=google.com\u0026size=32","fqdn":"t3.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aligra.net/cg/","date":"2026-10-13T03:46:26.409Z","timestamp":1791863186409,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://google.com\u0026size=32 HTTP/1.1\r\nHost: t3.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aligra.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-location: https://www.google.com/images/branding/product/1x/gsa_android_144dp.png\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 639\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 11 Oct 2026 10:04:46 GMT\r\nexpires: Sun, 18 Oct 2026 10:04:46 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Sat, 04 Jul 2026 23:16:08 GMT\r\ncontent-type: image/png\r\nage: 150100\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":639,"size_decoded":1510,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"5a6fd7b92e134a10bc9101c94fc866ee","sha1":"cca67cc699afd301ad9064b44f3593e1fc9221bd","sha256":"0504d5e09ee20d436e733ae1d5f545a3e4fcad66889cf98670512ea908a9ad8c","sha512":"94e2910594f69d7af86309d2a71d9c23160b895e35b70530134faba8914d131e21f8eb4ece43e0fd7d47a0edce64a4687575769d9cd8cb7d06806cdefda04aa5","ssdeep":"","tlshash":"8cf02398d9d0b476dcfd433f82924a8ef99a0c552a1b2da9c60888345900112e4e2613","first_seen":"2026-04-22T08:57:47.536393Z","last_seen":"2026-10-13T04:38:44.654642Z","times_seen":299,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":16,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"high","comment":"Resource assosiated with Adobe phishing","tags":["adobe","phishing"],"meta":{"engine":"luna_v2","pattern_id":"hashhound.primary.http_response_data_sha256"}}]}},{"url":{"schema":"https","addr":"aligra.net/cg","fqdn":"aligra.net","domain":"aligra.net","tld":"net"},"ip":{"addr":"208.109.33.211","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T03:46:24.449Z","timestamp":1791863184449,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoconfig.aligra.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Sep 2026 04:18:16 GMT","end":"Mon, 30 Nov 2026 04:18:15 GMT"},"fingerprint":{"sha1":"5F:92:5B:42:FA:0C:EB:26:21:64:40:E1:1C:92:D0:40:34:12:DB:9E","sha256":"96:7E:09:F2:48:59:31:D5:0B:B4:4B:6F:F6:B5:3D:4A:18:FA:91:85:CA:E3:48:96:41:72:1D:0E:A5:C1:D8:2A"}}},"request":{"raw":"GET /cg HTTP/1.1\r\nHost: aligra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nlocation: https://aligra.net/cg/\r\ncontent-length: 270\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Tue, 13 Oct 2026 03:46:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T06:30:54.669451Z","times_seen":19073715,"resource_available":true,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":21,"connect":146,"send":0,"wait":146,"receive":0,"ssl":151},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"aligra.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"medium","comment":"Associated with Adobe phishing","tags":["adobe","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.softwareworld.co/assets/software/logo/adobe-acrobat-reader.jpg","fqdn":"www.softwareworld.co","domain":"softwareworld.co","tld":"co"},"ip":{"addr":"104.26.15.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aligra.net/cg/","date":"2026-10-13T03:46:26.200Z","timestamp":1791863186200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"softwareworld.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:02:14 GMT","end":"Sat, 21 Nov 2026 03:02:11 GMT"},"fingerprint":{"sha1":"C3:DC:1C:26:62:8F:EB:CE:EB:B1:50:CB:9F:DC:54:B8:A7:A1:0A:D4","sha256":"B7:67:65:AC:13:3F:85:6A:26:F3:05:00:11:39:63:68:5B:F9:F6:4A:04:70:E0:AA:67:27:0E:D1:BA:C3:BC:01"}}},"request":{"raw":"GET /assets/software/logo/adobe-acrobat-reader.jpg HTTP/1.1\r\nHost: www.softwareworld.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aligra.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-cache: Hit from cloudfront\r\ndate: Tue, 13 Oct 2026 03:46:26 GMT\r\ncontent-type: image/jpeg\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a49b5b71db121525-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 54825\r\ncache-control: public, max-age=31536000, immutable, no-store\r\netag: \"da6ecf6ab63ad917bbc44a6c33b084f7\"\r\nlast-modified: Fri, 28 Nov 2025 12:29:44 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nvia: 1.1 2a1f7d47d7641ae8baf84743cec275d0.cloudfront.net (CloudFront)\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=21143\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pitk3u7qXtK6do9tERnixZOht55pZAJTnXGbo57uX10yL2WPV3uXK6srzYWZa8SFoN49s6CIrqLk%2BkVISFc6o9u90pETk89wEGReppmIkIFLz%2FZosf8DrrYFZasj62CgxvLPFRDl\"}]}\r\npriority: u=4,i\r\nx-amz-cf-id: cOVHcbMczO8Yw9rkS815kXc5AY6ebv4ZSMFMLigWDAC-QSeTKO_qTA==\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-server-side-encryption: AES256\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15108\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15108,"size_decoded":16218,"mime_type":"image/png","magic":"PNG image data, 245 x 250, 8-bit/color RGB, non-interlaced","md5":"199b1fd48ea0a0dad4ce3eb57b3a05e7","sha1":"fdfe5595d7909e5a7be8329213c4026577c2db17","sha256":"680472287740390402ac631bdc9c1c89b9f68a6deda10b5f0b0af23059d5bffe","sha512":"1bff457e0f6bc08b7cf8ca1c1b1d58a9ee37fe68a291e9114110bc8492c34fd780a91b45c60a0ffb0cb07924c717ad83456f55317a4d94bdc7fc2fcf5debaf54","ssdeep":"192:Qb7KwKe7xFvLIBhKEU7cZH1Zzjc1ccnCAnIw+AiC0r4sgyj6S88mVzHihKzi3abb:CVBO/LicbFcecPnb8r4WjL8ZPmZSd7J","tlshash":"6162c006f0d65135e64674b44bff143b7be1ebe4472bcb441f8559c172c102843e9b6a","first_seen":"2026-03-08T16:00:11.939114Z","last_seen":"2026-10-13T04:38:44.651734Z","times_seen":269,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":4,"connect":14,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"high","comment":"Resource assosiated with Adobe phishing","tags":["adobe","phishing"],"meta":{"engine":"luna_v2","pattern_id":"hashhound.primary.http_response_data_sha256"}}]}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=google.com\u0026sz=32","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aligra.net/cg/","date":"2026-10-13T03:46:26.203Z","timestamp":1791863186203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"GET /s2/favicons?domain=google.com\u0026sz=32 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aligra.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nlocation: https://t3.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://google.com\u0026size=32\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 330\r\nx-xss-protection: 0\r\ndate: Tue, 13 Oct 2026 03:45:27 GMT\r\nexpires: Tue, 13 Oct 2026 04:15:27 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 59\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T06:30:54.669451Z","times_seen":19073715,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=microsoft.com\u0026sz=32","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aligra.net/cg/","date":"2026-10-13T03:46:26.204Z","timestamp":1791863186204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"GET /s2/favicons?domain=microsoft.com\u0026sz=32 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aligra.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nlocation: https://t1.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://microsoft.com\u0026size=32\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 333\r\nx-xss-protection: 0\r\ndate: Tue, 13 Oct 2026 03:30:48 GMT\r\nexpires: Tue, 13 Oct 2026 04:00:48 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 938\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T06:30:54.669451Z","times_seen":19073715,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aligra.net/config_recaptcha_public.php","fqdn":"aligra.net","domain":"aligra.net","tld":"net"},"ip":{"addr":"208.109.33.211","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aligra.net/cg/","date":"2026-10-13T03:46:25.755Z","timestamp":1791863185755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoconfig.aligra.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Sep 2026 04:18:16 GMT","end":"Mon, 30 Nov 2026 04:18:15 GMT"},"fingerprint":{"sha1":"5F:92:5B:42:FA:0C:EB:26:21:64:40:E1:1C:92:D0:40:34:12:DB:9E","sha256":"96:7E:09:F2:48:59:31:D5:0B:B4:4B:6F:F6:B5:3D:4A:18:FA:91:85:CA:E3:48:96:41:72:1D:0E:A5:C1:D8:2A"}}},"request":{"raw":"GET /config_recaptcha_public.php HTTP/1.1\r\nHost: aligra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aligra.net/cg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 20\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 13 Oct 2026 03:46:25 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16,"size_decoded":213,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text","md5":"4845f01eaa8068384625e302e9a4eb05","sha1":"fb6ff8293fa45e17ba97f84954e7d1d5b0d38f87","sha256":"8a482f2271a42c5f54c96e816a84340a6f2357a5b81f927d07d00788f5140a41","sha512":"bb58f2438524b518b19f2b74c5d598460735958f77c310ba3710520d1d88ce7975449977c9965dbca87cd6a824c8ab82e56bea6d571d79594079f0a0ea404d77","ssdeep":"","tlshash":"4160000c03030f0c00c0c03ccfc00030000c03000cc033f00000c00c000000c3cc00fc","first_seen":"2023-03-13T05:02:59Z","last_seen":"2026-10-13T05:56:13.021238Z","times_seen":13551,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"aligra.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"medium","comment":"Associated with Adobe phishing","tags":["adobe","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"t1.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=microsoft.com\u0026size=32","fqdn":"t1.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aligra.net/cg/","date":"2026-10-13T03:46:26.407Z","timestamp":1791863186407,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://microsoft.com\u0026size=32 HTTP/1.1\r\nHost: t1.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aligra.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-location: https://www.microsoft.com/favicon.ico?v2\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 174\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 08 Oct 2026 05:34:12 GMT\r\nexpires: Thu, 15 Oct 2026 05:34:12 GMT\r\ncache-control: public, max-age=604800\r\nage: 425534\r\nlast-modified: Wed, 29 Nov 2017 12:34:19 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174,"size_decoded":1014,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"bc389aed0c2a7c8f164a8bd33a8b5f04","sha1":"cc874db08353cca08fb7aef541e8d7bc7d8dbe52","sha256":"32fdca4d0cdf1a6aa625c50b188a8ccef0ed9ed7714eb37e796049c4dc10be2b","sha512":"6b7cee17760cc911138278e9c9735ca3e9748e6542304035a109d4a5069c87f566bef9d05f7b0f3e4e64873c1747207e5abd3ab8bf6861b3d2e04f38bac082e8","ssdeep":"","tlshash":"aec0c0c394f03c2fc01e2cb22a03008098b1001b13101c150801c0360d6f1d838401b7","first_seen":"2024-03-21T18:03:08Z","last_seen":"2026-10-13T04:38:44.652994Z","times_seen":344,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":16,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"high","comment":"Resource assosiated with Adobe phishing","tags":["adobe","phishing"],"meta":{"engine":"luna_v2","pattern_id":"hashhound.primary.http_response_data_sha256"}}]}}]}