{"report_id":"fbd8d021-b556-4c9b-9362-8dc100b980a1","version":0,"status":"done","tags":[],"date":"2026-10-01T15:58:07Z","url":{"schema":"https","addr":"annapolischarterfishing.com/cpsess/activemailsess399068/?uid=ravex@veltobox.net","fqdn":"annapolischarterfishing.com","domain":"annapolischarterfishing.com","tld":"com"},"ip":{"addr":"206.188.193.160","port":0,"asn":19871,"as":"Network Solutions, LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"annapolischarterfishing.com/cpsess/activemailsess399068/?uid=ravex@veltobox.net","fqdn":"annapolischarterfishing.com","domain":"annapolischarterfishing.com","tld":"com"},"title":"Webmail :: Welcome to Webmail","dom":{"size":36543,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20854)","md5":"06e0f49be4298eeecc35c5bd4a8cc249","sha1":"189c509364885661ddc1dac35c061c8af9dfad7c","sha256":"f7a068d0ba9dd812705caf187be0cd443ddbf036e4030722b9631e5865f99b43","sha512":"08c9d4892b74460d15297e30357e7e2a770af6558116ae8c70170068e93d33435eabe380c10cf13755939e68416535a635aeedabb9c3e270b8c4621d3cb53efb","ssdeep":"768:lXP3d2UpE6gyc8Q2i2BpbDTnVVDJDeE4mO8gMlOBl/XoOnqCgdKbqslJoaTrb5eQ:xP3oUq6gyc8tlvvDJPtsJecHdh","tlshash":"91f219b162c1fc4522835b36b367b1e5fc3a5c9ba8c8088df114bca4f5e4605fae9970","dom_hash":"domhashb50f45e0736596663743fa8724c7c5e2","first_seen":"2026-10-01T15:58:11.904019Z","last_seen":"2026-10-01T15:58:11.904019Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"annapolischarterfishing.com/cpsess/activemailsess399068/?uid=ravex@veltobox.net","fqdn":"annapolischarterfishing.com","domain":"annapolischarterfishing.com","tld":"com"},"ip":{"addr":"206.188.193.160","port":0,"asn":19871,"as":"Network Solutions, LLC","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-05T15:58:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"annapolischarterfishing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-09-28T08:52:26.182531Z","alert_count":0,"request_count":1,"received_data":89129,"sent_data":513,"comment":"","tags":null,"fingerprints":null},{"fqdn":"annapolischarterfishing.com","ip":{"addr":"206.188.193.160","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":37025,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"annapolischarterfishing.com/cpsess/activemailsess399068/?uid=ravex@veltobox.net","fqdn":"annapolischarterfishing.com","domain":"annapolischarterfishing.com","tld":"com"},"ip":{"addr":"206.188.193.160","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-10-01T23:27:35.085125Z","times_seen":763016,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-10-01T21:30:18.262496Z","times_seen":141533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"annapolischarterfishing.com/cpsess/activemailsess399068/?uid=ravex@veltobox.net","fqdn":"annapolischarterfishing.com","domain":"annapolischarterfishing.com","tld":"com"},"ip":{"addr":"206.188.193.160","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a1f9d6bf59b106bd2d6018e6190a64c","sha1":"13a5f20047b4cec85c4eeb46fca82e2af800106a","sha256":"e3f689322ac9cb1c53366bf35f4bbd62c713400766c448dc2ac51906ff975e3a","sha512":"14d657dd04ab1ca8d22d5d7e0795ab359a7a52abe83b48ec5e95516867e53822410516c705c8f60d302fee6c934e8a53aa9c154b478405b0ce9dd1aaf645086f","ssdeep":"384:32LlpBlDTnVVEiJDlsENKmO8gMlOBl/XoO9FqCgdKbqslJoasNwrb5LQNMwJb+Az:32BpbDTnVVDJDeE4mO8gMlOBl/XoOnqt","tlshash":"c892738666c1bc4523975b37732bb1e5f43a5c99b9c8098ef104bca0f5e5502fae8970","size":20860,"data":"","first_seen":"2026-10-01T15:58:11.908125Z","last_seen":"2026-10-01T15:58:11.908125Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"annapolischarterfishing.com/cpsess/activemailsess399068/?uid=ravex@veltobox.net","fqdn":"annapolischarterfishing.com","domain":"annapolischarterfishing.com","tld":"com"},"ip":{"addr":"206.188.193.160","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-10-01T22:48:55.572407Z","times_seen":240214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://annapolischarterfishing.com/cpsess/activemailsess399068/?uid=ravex@veltobox.net","date":"2026-10-01T15:57:39.536Z","timestamp":1790870259536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://annapolischarterfishing.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30774\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 30 Sep 2026 10:31:45 GMT\r\nexpires: Thu, 30 Sep 2027 10:31:45 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 105954\r\nlast-modified: Mon, 13 May 2019 14:37:17 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":88145,"size_decoded":31758,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-10-01T21:30:18.262496Z","times_seen":141533,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":5,"connect":15,"send":0,"wait":16,"receive":15,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"annapolischarterfishing.com/cpsess/activemailsess399068/?uid=ravex@veltobox.net","fqdn":"annapolischarterfishing.com","domain":"annapolischarterfishing.com","tld":"com"},"ip":{"addr":"206.188.193.160","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-01T15:57:38.419Z","timestamp":1790870258419,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"annapolischarterfishing.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 15 Sep 2026 00:00:00 GMT","end":"Thu, 01 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:BA:DB:EC:65:C6:47:80:8F:BF:38:CE:B4:83:38:B2:4A:83:0B:9B","sha256":"45:C0:9B:16:6A:9B:C7:88:D2:B2:1A:A6:42:D7:6C:D1:52:2E:01:9E:12:9F:85:29:28:B1:35:67:2F:AD:92:2E"}}},"request":{"raw":"GET /cpsess/activemailsess399068/?uid=ravex@veltobox.net HTTP/1.1\r\nHost: annapolischarterfishing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Thu, 01 Oct 2026 15:55:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":36620,"size_decoded":20590,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20840)","md5":"4e4e8c649538e7ddaed4978ec16fd0d1","sha1":"9c24ab6ef6bc29f704c1a89a65d477fc8afa664b","sha256":"011101d3863617d3cfecabe020baf456ae7da38a970c20f9f2e4fb812b4f2331","sha512":"c8abf18d0ecc959d93584935ebd17c832023be9d3c5a99026ac32de96eff2164f6267d78b861b7befbf2bc4f71f778fbd7b500e6c3fb48a3637b8fca0d31d65c","ssdeep":"768:jXP3d2UpE6gycdZii2BpbDTnVVDJDeE4mO8gMlOBl/XoOnqCgdKbqslJoaTrb5ez:LP3oUq6gycdQlvvDJPtsJecHdi","tlshash":"abf219b262c1fc4522835b36b367b1e5fc3a5c9ba9c4088df114bca4f5e4605fae9970","first_seen":"2026-10-01T15:58:11.906402Z","last_seen":"2026-10-01T15:58:11.906402Z","times_seen":1,"resource_available":true,"data":null}},"time_used":743,"timings":{"blocked":-1,"dns":212,"connect":104,"send":0,"wait":208,"receive":0,"ssl":219},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"annapolischarterfishing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}