{"report_id":"fd72784b-739f-4881-a9f9-94897ed39aa8","version":6,"status":"done","tags":["suspicious"],"date":"2026-02-14T02:17:49Z","url":{"schema":"https","addr":"fazaanewestbenefits.com/","fqdn":"fazaanewestbenefits.com","domain":"fazaanewestbenefits.com","tld":"com"},"ip":{"addr":"172.67.131.2","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fazaanewestbenefits.com/","fqdn":"fazaanewestbenefits.com","domain":"fazaanewestbenefits.com","tld":"com"},"title":"Fazaa Platinum Card — Premium Perks Across UAE","dom":{"size":21338,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14199)","md5":"281974b7b2c2331f4ea7687ee7fa3267","sha1":"f98af4bac478443c7c2729fe8ed405a715d4ae91","sha256":"ed2dc644c250be8d54e22bb4704c63b868d0fc9462f6840d2c9fdca070cf08c6","sha512":"87c2becc29536b984d9768a8526c4aa3fe71caa418adf61f82cf688ee1bde20dd0f99cd73728329c98742ecc496b4e87d89640b9f8fdeeb73846af1c7855333c","ssdeep":"192:4Q1fGtTTQBsDofbjK91bXqqRhiC7f2gG3FL:1CTQzbe/bXh7+Dh","tlshash":"40a22f54a9500e3a2d536ea246cceb0cc12bd1c2c9eb5a9d7ede014e07c2bd91fb6746","dom_hash":"domhashac75bbfc9df7aff904dc3c25729cd678","first_seen":"2026-02-14T02:17:56.612238Z","last_seen":"2026-02-14T02:17:56.612238Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"fazaanewestbenefits.com/","fqdn":"fazaanewestbenefits.com","domain":"fazaanewestbenefits.com","tld":"com"},"ip":{"addr":"172.67.131.2","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T02:17:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-14","alert":"Detects file containing Telegram Bot API","trigger":"fazaanewestbenefits.com/static/js/main.8717d3c9.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fazaanewestbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"fazaanewestbenefits.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":14,"request_count":12,"received_data":1532530,"sent_data":5470,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"adcbtemka.cc","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-30","domain_rank":0,"first_seen":"2025-10-10T09:38:26.740784Z","last_seen":"2026-02-12T21:27:49.564879Z","alert_count":0,"request_count":1,"received_data":593,"sent_data":559,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"fazaanewestbenefits.com/static/js/main.8717d3c9.js","fqdn":"fazaanewestbenefits.com","domain":"fazaanewestbenefits.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fdb51fb746c6a7f9493fd36a711ce13","sha1":"a897d654cd99696c83c1f5e2e89ceea6a90a5472","sha256":"560e4485bb9846c699a5efedfb9f80a70529bae50fbaa719d1e72524a6b2cb6d","sha512":"748bcfb4a8f1331c6c9b3328fc761d23b8af6917075ae4aff91bd4b8ba79b98836074d5a1bd265ea9249ef36e5871c2662042eec5391e2658e46d87fb3a874fe","ssdeep":"12288:S020yNMRA7xvXPzHQI5FI7RiAlrFfbogbZM:qZxPzZ5FI74uJDogbe","tlshash":"e7c45cc87251b5a5baa700e2547f4509f33e1a0eb80dc8b4b169fcca286454972b7ffd","size":585721,"data":"","first_seen":"2026-02-14T02:17:56.626938Z","last_seen":"2026-02-14T02:17:56.626938Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-14","alert":"Detects file containing Telegram Bot API","trigger":"fazaanewestbenefits.com/static/js/main.8717d3c9.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fazaanewestbenefits.com/static/css/main.b3019ecc.css","fqdn":"fazaanewestbenefits.com","domain":"fazaanewestbenefits.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fazaanewestbenefits.com/","date":"2026-02-14T02:17:27.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fazaanewestbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 12:44:38 GMT","end":"Mon, 11 May 2026 13:42:06 GMT"},"fingerprint":{"sha1":"BA:20:D1:2A:E6:1E:23:38:6D:A5:5D:25:7E:CD:14:66:1D:6D:A8:AA","sha256":"92:EA:08:53:2D:80:D5:44:B8:6F:01:8C:EE:E4:4C:DF:AA:96:E2:FA:90:42:16:68:0A:6E:CE:D7:DA:A0:C9:31"}}},"request":{"raw":"GET /static/css/main.b3019ecc.css HTTP/1.1\r\nHost: fazaanewestbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fazaanewestbenefits.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:17:27 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 13:48:21 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698b3725-b8ae\"\r\nexpires: Sat, 14 Feb 2026 14:17:27 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KS9hq8Th%2BLmUeYEt7XYFdI9yQiRSPzD8%2FFY%2FbEO8198R4Bzzk8qd%2FIoHKen%2FzrFY2e31GVAV256CrCXa9Z8eppgBTRHjR3%2BPX%2F%2BKt9UjeuWpZIEl0BmR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd911baad49b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47278,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (47169)","md5":"ea2c96e957ce8710496e2dd736657e1a","sha1":"0a3767431477207af790e651dbb138b3e3176c59","sha256":"62611cc74bca60f7715fdc374a032b6ae870ba62f8c9cfbeeda3e984dbd89e1b","sha512":"d3cbfb931a78da519c426fc7eed636d08a7facd3c0716ce85cb75ce8020c2e5302600c147b286d268d9258924496b6545f2715369add2b7eada21f59aac1e605","ssdeep":"384:/tF/Psi2aadNx0j/9NN01MwhwcZAbBj3b6gr:VF/PxPadQBNN01Mwhwc8rF","tlshash":"4623620caa51193a3c5398f6d6dcea5cd11ab4c1debb26de7dcb510887c27e70ea3604","first_seen":"2025-10-30T06:14:53.328001Z","last_seen":"2026-04-21T09:21:05.015047Z","times_seen":19,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fazaanewestbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fazaanewestbenefits.com/fazaa/black.png","fqdn":"fazaanewestbenefits.com","domain":"fazaanewestbenefits.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fazaanewestbenefits.com/","date":"2026-02-14T02:17:27.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fazaanewestbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 12:44:38 GMT","end":"Mon, 11 May 2026 13:42:06 GMT"},"fingerprint":{"sha1":"BA:20:D1:2A:E6:1E:23:38:6D:A5:5D:25:7E:CD:14:66:1D:6D:A8:AA","sha256":"92:EA:08:53:2D:80:D5:44:B8:6F:01:8C:EE:E4:4C:DF:AA:96:E2:FA:90:42:16:68:0A:6E:CE:D7:DA:A0:C9:31"}}},"request":{"raw":"GET /fazaa/black.png HTTP/1.1\r\nHost: fazaanewestbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fazaanewestbenefits.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:17:27 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 13:48:12 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698b371c-4f756\"\r\nexpires: Mon, 16 Mar 2026 02:17:27 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9U8nho%2B3oADrX4IqRp5RhRyUern%2ByCseul006BDeor6HorX%2FmUmFyTafn2x6rdXRSK4mfVP0tdP23NPq1rVMT5l6HezuUCqi799LexwlvaM%2FqYmp%2BgLT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd911bcb98db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":325462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1094 x 690, 8-bit/color RGBA, non-interlaced","md5":"fc60c2c87c4bebed57b0ca538330e0b2","sha1":"cbee4e1225bb57b2936bba5798e567e8729e8eb7","sha256":"4334dee14acc70fd8f401d27bdbe802692641faa53091789d5af64349c9fd28e","sha512":"97a485dd022987f381fa29f8399b292c8db1923bb440b542502df4ff0887db510e98890995ed46500f93aba4bdab0d88e47c43709b1774ca81666098dbb95ca8","ssdeep":"6144:X7qOWrSZjzWlZ3Uv7gaS7xHXkpZnP8WVUFwfBBLND0KWJo1IB1IHtw:X7TPIlZ3Uzgn7xHUHnPJVUF6BBLCKWee","tlshash":"96642365c161b0f470a2274a1eabd4887828ccf9db5872ecbd627704c02665daaf5f8d","first_seen":"2025-07-14T01:40:28.341387Z","last_seen":"2026-04-21T09:21:05.003013Z","times_seen":26,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fazaanewestbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fazaanewestbenefits.com/logo.png","fqdn":"fazaanewestbenefits.com","domain":"fazaanewestbenefits.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fazaanewestbenefits.com/","date":"2026-02-14T02:17:27.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fazaanewestbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 12:44:38 GMT","end":"Mon, 11 May 2026 13:42:06 GMT"},"fingerprint":{"sha1":"BA:20:D1:2A:E6:1E:23:38:6D:A5:5D:25:7E:CD:14:66:1D:6D:A8:AA","sha256":"92:EA:08:53:2D:80:D5:44:B8:6F:01:8C:EE:E4:4C:DF:AA:96:E2:FA:90:42:16:68:0A:6E:CE:D7:DA:A0:C9:31"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: fazaanewestbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fazaanewestbenefits.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:17:27 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 13:47:58 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698b370e-2ecf\"\r\nexpires: Mon, 16 Mar 2026 02:17:27 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pfIzYCCi%2BqoIBws%2F6FKlCCzeCwfzUrD5IcGL8q63hsk7gMlH1szOnw2rDdEsc3L3hx7kS4bdNAc3AUPVE3TRCYHIgKtt7ie3wj316udIWgttq%2FtV27LJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd911bcb990b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11983,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 190, 8-bit/color RGBA, non-interlaced","md5":"9a9b3fe96f9424b0b81f9ea501ec7b2c","sha1":"b854de9743f57eab9e0c07128b869a18a4ce7ef6","sha256":"103d2dcc222fcfa3687bea71569e5e5420de79864e657c15db6566bc7016bc4c","sha512":"7f06c0754c86690a7534a588e2471690fc91793078be5e82af37de5d807d491a325b807461538bd1b9f40aa6b594ab2431a617946f8cf90985a6cbddd40511d9","ssdeep":"192:hophvqeJYDcfDVcC2kgwmt2ooBrpSssc6UNleQHtF8oj3THyth5R/vAC9CerM/UM:homujD2C2tHtMlsc60FH7Hn6VAC9LMTx","tlshash":"ad32c02424de341794defae1a24b9913bf638e28af9d50d74935ce5d002907e2dc5f88","first_seen":"2025-07-14T01:40:28.343166Z","last_seen":"2026-04-21T09:21:05.004996Z","times_seen":26,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fazaanewestbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fazaanewestbenefits.com/f4.svg","fqdn":"fazaanewestbenefits.com","domain":"fazaanewestbenefits.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fazaanewestbenefits.com/","date":"2026-02-14T02:17:27.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fazaanewestbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 12:44:38 GMT","end":"Mon, 11 May 2026 13:42:06 GMT"},"fingerprint":{"sha1":"BA:20:D1:2A:E6:1E:23:38:6D:A5:5D:25:7E:CD:14:66:1D:6D:A8:AA","sha256":"92:EA:08:53:2D:80:D5:44:B8:6F:01:8C:EE:E4:4C:DF:AA:96:E2:FA:90:42:16:68:0A:6E:CE:D7:DA:A0:C9:31"}}},"request":{"raw":"GET /f4.svg HTTP/1.1\r\nHost: fazaanewestbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fazaanewestbenefits.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:17:27 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 13:47:55 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698b370b-329b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LCqt%2BBO9JRyo3ebvgSo66DVt5%2BEOniepxSKB2fOXba%2F1Cn%2BfR%2FyMBEYczv34nF5HVGJueGOj5RrP5x8lCPcoHNgGGdx%2FtDFT6qi%2BssRoGCJQhhBDhcy5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd911bcb996b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12955,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"49f2ba822c38198416ece6ff7029f322","sha1":"2c6d79bc7292347b963375c2b0633b1ba07391fc","sha256":"b82affff84599a0085bf78b687f166bbe616acb77a0e8be05e2b451b37d32f7d","sha512":"514ee5a7ca8f22e6b3bf0439b385e3bc1a7fffde88bbb72a592382c4e1db6c07c4ff7c5d34204700bf06a94cb0995c0ffa9142acc2adfcdb84dce83447cebd39","ssdeep":"192:aukGiUUTUXC8pH7xklBHRluMFX9TZ2ZrmNI1YOc5l+e7cyqWYRNZARceNdAXerI:x/fM8nQdJFNTZ2dmNV5lt4tWsQRcOzrI","tlshash":"1642d7f5ab7062e0e848e7a6b6254138795f78fb7fd5c288c355ad64bc521ad8c4ccc0","first_seen":"2025-07-14T01:40:28.338986Z","last_seen":"2026-07-03T15:07:23.460122Z","times_seen":49,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fazaanewestbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fazaanewestbenefits.com/creo.png","fqdn":"fazaanewestbenefits.com","domain":"fazaanewestbenefits.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fazaanewestbenefits.com/","date":"2026-02-14T02:17:27.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fazaanewestbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 12:44:38 GMT","end":"Mon, 11 May 2026 13:42:06 GMT"},"fingerprint":{"sha1":"BA:20:D1:2A:E6:1E:23:38:6D:A5:5D:25:7E:CD:14:66:1D:6D:A8:AA","sha256":"92:EA:08:53:2D:80:D5:44:B8:6F:01:8C:EE:E4:4C:DF:AA:96:E2:FA:90:42:16:68:0A:6E:CE:D7:DA:A0:C9:31"}}},"request":{"raw":"GET /creo.png HTTP/1.1\r\nHost: fazaanewestbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fazaanewestbenefits.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:17:27 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 13:47:54 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698b370a-8213f\"\r\nexpires: Mon, 16 Mar 2026 02:17:27 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7s0nIRGjXHwMagfRF7es5jtWLLQe8ijVW3mF%2BNWvrhDaiaTRfwOO%2Fc2ZS6QBDevDScEvwlv%2Fr1Ub1dFEjJvSs%2FAHOItEmdpCCVMM4HyfntHyEzox6rLA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd911bcb993b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":532799,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1593 x 708, 8-bit/color RGBA, non-interlaced","md5":"c58f6b402a1877f42414a4ed910ca595","sha1":"96b27c16e4d79dea44f97c9e95f402e52714f570","sha256":"daecb3f11e0fb91d28077aad2f09a4082301acb10e1b2cc0e615d035043322d9","sha512":"a5d0939513de2fc0740f70db7f746e26231f13bd2812f2cbbcbe6667c917e7a5f9fd0e235ff34e438ce51636e78f995d6c5851329d1db546fe1d328cfab3ee2d","ssdeep":"12288:0GTw4ZtcpjaVqBm4ZcLM4q8Oz4Ets6iNYtpUqjbs6:0LgtcZaVqB0o49ObriNNgQ6","tlshash":"53b423d4a8c428279e7d9b413533a8363d017a69c8f42e249e5f64b20c297dce51b7be","first_seen":"2025-07-14T01:40:28.34228Z","last_seen":"2026-04-21T09:21:05.016705Z","times_seen":26,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fazaanewestbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fazaanewestbenefits.com/logo192.png","fqdn":"fazaanewestbenefits.com","domain":"fazaanewestbenefits.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fazaanewestbenefits.com/","date":"2026-02-14T02:17:28.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fazaanewestbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 12:44:38 GMT","end":"Mon, 11 May 2026 13:42:06 GMT"},"fingerprint":{"sha1":"BA:20:D1:2A:E6:1E:23:38:6D:A5:5D:25:7E:CD:14:66:1D:6D:A8:AA","sha256":"92:EA:08:53:2D:80:D5:44:B8:6F:01:8C:EE:E4:4C:DF:AA:96:E2:FA:90:42:16:68:0A:6E:CE:D7:DA:A0:C9:31"}}},"request":{"raw":"GET /logo192.png HTTP/1.1\r\nHost: fazaanewestbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fazaanewestbenefits.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:17:28 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 13:47:59 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698b370f-14e3\"\r\nexpires: Mon, 16 Mar 2026 02:17:28 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jI350zx4r7m3rgkjLMhGY273AVM0mu%2B4%2F%2FNElmMm9qPZFRtmS1i68AtSBa7tEq%2BowKNU86NhSLnYPlLVNqxz8NkxCpZUt6RZ86DpSOi5Ja2QAOssNKKs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd911be2cfcb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5347,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"33dbdd0177549353eeeb785d02c294af","sha1":"7f4f2d68782a7fafceda84554ecab9b489877500","sha256":"c386396ec70db3608075b5fbfaac4ab1ccaa86ba05a68ab393ec551eb66c3e00","sha512":"e34572cf754ff7e1d0acb12d8275252230ad1dd9adc5858e807fef0fb61aea82cb1f9ca3ebab3eeb449460373140105f8d773e7bddbf6745f9e81cc1546621f4","ssdeep":"96:gMgJkzj81lSl2dxYAYKsHHVIqApHGoKf4slNb6LQbTehYx5AtKAdmTRwy/Ik2k3:gMct0nKsUwXTbnkeAMA+Twkv","tlshash":"deb18e4e37e13c238137de00aa8ee5ddff52c6ff81226144e24933e9243839d9591916","first_seen":"2023-04-21T11:39:01Z","last_seen":"2026-08-17T15:46:36.184826Z","times_seen":14151,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fazaanewestbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fazaanewestbenefits.com/","fqdn":"fazaanewestbenefits.com","domain":"fazaanewestbenefits.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T02:17:27.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fazaanewestbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 12:44:38 GMT","end":"Mon, 11 May 2026 13:42:06 GMT"},"fingerprint":{"sha1":"BA:20:D1:2A:E6:1E:23:38:6D:A5:5D:25:7E:CD:14:66:1D:6D:A8:AA","sha256":"92:EA:08:53:2D:80:D5:44:B8:6F:01:8C:EE:E4:4C:DF:AA:96:E2:FA:90:42:16:68:0A:6E:CE:D7:DA:A0:C9:31"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fazaanewestbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 02:17:27 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 13:47:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jSZEA74IIPyUOOVTLKL2jCwYUTYtyVOgCWtN1wtB2LqA3%2BvoRp3SosRQYvszIAm2beTnDdaBOnPM53HUZHQznMjpv%2FyC%2F%2Bsv3tmZd1zk%2FgSY%2FnKrdp1l\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cd911b8dbd72678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1624,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1618), with no line terminators","md5":"a18e8eca08d70550f4d5e3ff37e2e964","sha1":"20927e169abb94aca3d16646ad04cbba4f862524","sha256":"3936cfffe3f8471063e5ec7ec1fe8cea305991879fd70a07738a14d7b7051b09","sha512":"8e6de5ecaa7c9901e86e1b15ec905d8cbd0698c06e74a4106108064dbe124a60334ecea76480b4ff9555caed1d2f4fa79b39e547d62a73054ebdcf9cddb88872","ssdeep":"","tlshash":"6b31c063cd30881c6bb48335998bb01deaa4a845d610fc54f69a29db09c1ef28573f21","first_seen":"2026-02-14T02:17:56.624007Z","last_seen":"2026-02-14T02:17:56.624007Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":52,"dns":40,"connect":1,"send":0,"wait":67,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fazaanewestbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fazaanewestbenefits.com/fazaa/black.png","fqdn":"fazaanewestbenefits.com","domain":"fazaanewestbenefits.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fazaanewestbenefits.com/","date":"2026-02-14T02:17:27.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fazaanewestbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 12:44:38 GMT","end":"Mon, 11 May 2026 13:42:06 GMT"},"fingerprint":{"sha1":"BA:20:D1:2A:E6:1E:23:38:6D:A5:5D:25:7E:CD:14:66:1D:6D:A8:AA","sha256":"92:EA:08:53:2D:80:D5:44:B8:6F:01:8C:EE:E4:4C:DF:AA:96:E2:FA:90:42:16:68:0A:6E:CE:D7:DA:A0:C9:31"}}},"request":{"raw":"GET /fazaa/black.png HTTP/1.1\r\nHost: fazaanewestbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fazaanewestbenefits.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T16:43:02.353128Z","times_seen":17939481,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fazaanewestbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fazaanewestbenefits.com/logo.png","fqdn":"fazaanewestbenefits.com","domain":"fazaanewestbenefits.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fazaanewestbenefits.com/","date":"2026-02-14T02:17:27.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fazaanewestbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 12:44:38 GMT","end":"Mon, 11 May 2026 13:42:06 GMT"},"fingerprint":{"sha1":"BA:20:D1:2A:E6:1E:23:38:6D:A5:5D:25:7E:CD:14:66:1D:6D:A8:AA","sha256":"92:EA:08:53:2D:80:D5:44:B8:6F:01:8C:EE:E4:4C:DF:AA:96:E2:FA:90:42:16:68:0A:6E:CE:D7:DA:A0:C9:31"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: fazaanewestbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fazaanewestbenefits.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T16:43:02.353128Z","times_seen":17939481,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fazaanewestbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fazaanewestbenefits.com/creo.png","fqdn":"fazaanewestbenefits.com","domain":"fazaanewestbenefits.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fazaanewestbenefits.com/","date":"2026-02-14T02:17:27.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fazaanewestbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 12:44:38 GMT","end":"Mon, 11 May 2026 13:42:06 GMT"},"fingerprint":{"sha1":"BA:20:D1:2A:E6:1E:23:38:6D:A5:5D:25:7E:CD:14:66:1D:6D:A8:AA","sha256":"92:EA:08:53:2D:80:D5:44:B8:6F:01:8C:EE:E4:4C:DF:AA:96:E2:FA:90:42:16:68:0A:6E:CE:D7:DA:A0:C9:31"}}},"request":{"raw":"GET /creo.png HTTP/1.1\r\nHost: fazaanewestbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fazaanewestbenefits.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T16:43:02.353128Z","times_seen":17939481,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fazaanewestbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"adcbtemka.cc/","fqdn":"adcbtemka.cc","domain":"adcbtemka.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://fazaanewestbenefits.com/","date":"2026-02-14T02:17:27.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adcbtemka.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 10:11:58 GMT","end":"Thu, 26 Mar 2026 11:09:37 GMT"},"fingerprint":{"sha1":"22:89:8E:82:94:C9:5C:4F:5B:DA:64:5C:CB:8B:B0:4A:4A:A1:C2:4A","sha256":"97:82:B9:0F:11:4A:28:9B:F7:A5:17:E7:FD:BA:5F:4F:DD:2D:B9:C5:B6:1F:F1:47:41:EA:65:FD:CC:DB:AA:B5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: adcbtemka.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://fazaanewestbenefits.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: SfTXvGLvqrsQn4uuVWmvjw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 14 Feb 2026 02:17:28 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: vA0DHe74arbukrFi+79GBpc2AUM=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zs6i10Mc8X3W02Cl6l4uUXV6So%2FVqABZkv4VhHXGwKspxCc%2F5U0Qas3%2Fu3x8Zd0frX9DZQyT7pW5v20qiu3QgRFvyuYaWtwvugWcoIW77SSMoibjfFYhf4yzmOdIm8E%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9cd911bdcde7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T16:43:02.353128Z","times_seen":17939481,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":26,"connect":25,"send":0,"wait":64,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fazaanewestbenefits.com/favicon.png","fqdn":"fazaanewestbenefits.com","domain":"fazaanewestbenefits.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fazaanewestbenefits.com/","date":"2026-02-14T02:17:28.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fazaanewestbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 12:44:38 GMT","end":"Mon, 11 May 2026 13:42:06 GMT"},"fingerprint":{"sha1":"BA:20:D1:2A:E6:1E:23:38:6D:A5:5D:25:7E:CD:14:66:1D:6D:A8:AA","sha256":"92:EA:08:53:2D:80:D5:44:B8:6F:01:8C:EE:E4:4C:DF:AA:96:E2:FA:90:42:16:68:0A:6E:CE:D7:DA:A0:C9:31"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: fazaanewestbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fazaanewestbenefits.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:17:28 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 13:47:57 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698b370d-b91\"\r\nexpires: Mon, 16 Mar 2026 02:17:28 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XcJoLrjaOSee%2BuC8R4AK18leTa4wzXa5HyYAWbMbck0H2YsvxWrBFlfVYXw9z5VLeWYwAj1K0eTDgHdcEn4AYmUWa5cu%2BX%2B7X2oOZWAQSmqywAEf7pKM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd911be2d01b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2961,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 74 x 79, 8-bit/color RGBA, non-interlaced","md5":"a26cd9ab45ef085daa13dd8b57563b97","sha1":"b74ce91677d3bb9102877d1054caf3732985f7f0","sha256":"b062b6c7e29d69cd13560b49ec446defd5fa2ca5cc1c6180cab38ad9c4d1f570","sha512":"b3ab24c9bac033d73671794057630397d92d0ed8ee8c947fbadee00cf368ed33b2f72affe7445c1e851460595f0f25d9eeb047ce3cf0d1267ca539a9e5796dd7","ssdeep":"","tlshash":"f4516ccf37ad85e48f5a4d3c9d040b5c3681210c2b11aa40edd11dd30ebf08ebe016ae","first_seen":"2025-07-14T01:40:28.343908Z","last_seen":"2026-04-21T09:21:05.011045Z","times_seen":26,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fazaanewestbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fazaanewestbenefits.com/static/js/main.8717d3c9.js","fqdn":"fazaanewestbenefits.com","domain":"fazaanewestbenefits.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fazaanewestbenefits.com/","date":"2026-02-14T02:17:27.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fazaanewestbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 12:44:38 GMT","end":"Mon, 11 May 2026 13:42:06 GMT"},"fingerprint":{"sha1":"BA:20:D1:2A:E6:1E:23:38:6D:A5:5D:25:7E:CD:14:66:1D:6D:A8:AA","sha256":"92:EA:08:53:2D:80:D5:44:B8:6F:01:8C:EE:E4:4C:DF:AA:96:E2:FA:90:42:16:68:0A:6E:CE:D7:DA:A0:C9:31"}}},"request":{"raw":"GET /static/js/main.8717d3c9.js HTTP/1.1\r\nHost: fazaanewestbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fazaanewestbenefits.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:17:27 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 13:48:24 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698b3728-8eff9\"\r\nexpires: Sat, 14 Feb 2026 14:17:27 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1qWBUirWEhgvhbamknPI2ll78iHr7S7TnZlWcrXEfVXURt5mn3w1RPvWVEpVbA8Yqw3a4u2%2FYynYVjeBk3f08gYHpWwSqTPx4547ZS5LGC0tVvOvOQw%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd911baad45b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":585721,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"7fdb51fb746c6a7f9493fd36a711ce13","sha1":"a897d654cd99696c83c1f5e2e89ceea6a90a5472","sha256":"560e4485bb9846c699a5efedfb9f80a70529bae50fbaa719d1e72524a6b2cb6d","sha512":"748bcfb4a8f1331c6c9b3328fc761d23b8af6917075ae4aff91bd4b8ba79b98836074d5a1bd265ea9249ef36e5871c2662042eec5391e2658e46d87fb3a874fe","ssdeep":"12288:S020yNMRA7xvXPzHQI5FI7RiAlrFfbogbZM:qZxPzZ5FI74uJDogbe","tlshash":"e7c45cc87251b5a5baa700e2547f4509f33e1a0eb80dc8b4b169fcca286454972b7ffd","first_seen":"2026-02-14T02:17:56.626938Z","last_seen":"2026-02-14T02:17:56.626938Z","times_seen":1,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-14","alert":"Detects file containing Telegram Bot API","trigger":"fazaanewestbenefits.com/static/js/main.8717d3c9.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fazaanewestbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}}]}