{"report_id":"01bdece7-9380-47d0-9d16-e6465df8428a","version":6,"status":"done","tags":[],"date":"2026-03-02T20:08:31Z","url":{"schema":"http","addr":"ultimateshops.to","fqdn":"ultimateshops.to","domain":"ultimateshops.to","tld":"to"},"ip":{"addr":"43.169.14.10","port":0,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"ultimateshops.to/","fqdn":"ultimateshops.to","domain":"ultimateshops.to","tld":"to"},"title":"UltimateShop.to | UltimateShop CVV | Ultimateshop.ru - Login","dom":{"size":3644,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"f61e9638fcd365e6b39b05dd9ec8a371","sha1":"739747b918daf6908f3a587e7e6f39e46ad6ab95","sha256":"abde49c27f0e6c7e86afe7941f88460b6bac686a16f3f6b3046fa915b215ce5a","sha512":"2c94ea4d7a542daf3a4fc1002007ba72d11c0158f062d24cae5932b5ba66f86e5309268174d47255812a957f67fef9853ddaec51da3b05f4928a39ac70b72431","ssdeep":"","tlshash":"29710ea104b02a27b40184a09daa6d0defc6de13c74a5e74bdac0fc51fd2e92c9e751d","dom_hash":"domhash985308661f8d72f1e148b571e002c30e","first_seen":"2026-03-02T20:09:05.092979Z","last_seen":"2026-03-02T20:09:05.092979Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ultimateshops.to","fqdn":"ultimateshops.to","domain":"ultimateshops.to","tld":"to"},"ip":{"addr":"43.169.14.10","port":0,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-06T20:08:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ultimateshops.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"ultimateshops.to","ip":{"addr":"43.169.14.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-02T20:08:32.323351Z","last_seen":"2026-03-02T20:08:32.323351Z","alert_count":10,"request_count":10,"received_data":1128511,"sent_data":11342,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ultimateshops.to/public/assets/js/jquery.min.js","fqdn":"ultimateshops.to","domain":"ultimateshops.to","tld":"to"},"ip":{"addr":"43.169.14.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c14a783dfeb3d238ccd3edd840d82ee","sha1":"ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b","sha256":"80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0","sha512":"fa3e021ca60a9adbe570c6565c7370727904c4396c23a4c519daf258d05fae3e17bfb7607a0ab6dfe2b7150a4ec1b6a95e6d49675291be5f6a4e5679ad78d858","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:DIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"6f9309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89500,"data":"","first_seen":"2023-03-07T01:06:20Z","last_seen":"2026-08-05T20:56:32.124299Z","times_seen":21443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ultimateshops.to/public/assets/fonts/Nunito-Regular.woff","fqdn":"ultimateshops.to","domain":"ultimateshops.to","tld":"to"},"ip":{"addr":"43.169.14.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ultimateshops.to/","date":"2026-03-02T20:08:11.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultimateshops.to","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 19:21:00 GMT","end":"Tue, 24 Mar 2026 19:20:59 GMT"},"fingerprint":{"sha1":"F0:B0:5B:3F:A5:58:AD:7F:48:2A:D5:42:CC:57:A1:58:38:71:AF:2F","sha256":"A8:47:3A:07:47:3E:F8:C7:9D:3E:0D:9D:1B:58:20:9C:FA:59:2C:86:F3:AE:E2:D3:7E:0F:8C:5F:29:25:57:C2"}}},"request":{"raw":"GET /public/assets/fonts/Nunito-Regular.woff HTTP/1.1\r\nHost: ultimateshops.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ultimateshops.to/public/assets/css/app-saas.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNSWVp4cS9Hc3lvVTlvb1ZZZFpCNFE9PSIsInZhbHVlIjoiMEx1dGp3NmNOb3JtRnVxUkdUbmtwZlhNMWtmS0ZYNVBsS3BNdWt5MnJNK0FnQno4TEhRS25FYmdQV1ZwZFpzUXppQ2ZZZG1FY0JJRjlPTjllN2pFSFovUFlKUnNzSUlpaUxiaGhrUnpkM0pwTElTWEVkdGVCdEpDNXRzVmpNMU8iLCJtYWMiOiJhZjgzN2MxOGYwYTk2ZGZiOTRjODJiOGE0NzBhM2E4NjcwZGFiZGExOGQ1MzA1MjkwNzVkMTVhM2ZiNmY1N2Q3IiwidGFnIjoiIn0%3D; ultimateshops_session=eyJpdiI6IjVxUlZnaUN2bzd0L1hMM2hIcnVRWHc9PSIsInZhbHVlIjoiY3REclpNUzFNTkdvd2ZVQlpsdytkSjAzMFZqRC9oQ0w2enhZTGJBN3hsSzYrRlpWU3p4SjJwVWZIUzU1MThLbGVrT3FUeEFrZnZEYWhWQUt3blcwTUw0RmpyemlVTlkvSFY3SkJqOHFGVC9waWtzZFdyTHpDZEFJQThMZmZmVXciLCJtYWMiOiIxZDI3Y2MzNWJiNTRlNTU2ZDJiMmI5Y2Y5YzlmYmFiNWQwOTdkY2YyZjY3ZTViNTcyOGE1YzhhYzg4OWJmYzUwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 24 Dec 2023 02:40:14 GMT\r\nServer: nginx\r\nContent-Type: font/woff\r\nVary: Accept-Encoding,User-Agent\r\nContent-Length: 50968\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nDate: Mon, 02 Mar 2026 20:08:11 GMT\r\nEO-LOG-UUID: 11813214412872423574\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50968,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 50968, version 0.0","md5":"0b6a4ca6f3ae3d6fa835b10169786960","sha1":"24529a00bda2b948f3a2cbe2018f4a8a7aa23927","sha256":"407923cac09a4f8c2b7abfd927da9eb3694ec1ab5d13cf69b27ec4f69809d33e","sha512":"f21c0eed4e7a1b728eafc1ad6cbeba16e05ec4ac920a73795b92c0816476a2184d2078fa2a6e561bd546e3a70175e1d318929ff20147af8855773d3ee4d264e1","ssdeep":"1536:N7JSTI2mW5a8MAdXp1hm7Y56YH2znNyWltvy2cUYP:N9S8I5bXp1hm7Pu2znEWlgUc","tlshash":"923301546dae0003d9ec00b5da2a5ae08a1dedfa59205544653ce837e42b7a13ffde36","first_seen":"2023-05-10T15:08:16Z","last_seen":"2026-08-04T14:02:46.126078Z","times_seen":230,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ultimateshops.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultimateshops.to/public/assets/css/app-saas.min.css","fqdn":"ultimateshops.to","domain":"ultimateshops.to","tld":"to"},"ip":{"addr":"43.169.14.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultimateshops.to/","date":"2026-03-02T20:08:11.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultimateshops.to","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 19:21:00 GMT","end":"Tue, 24 Mar 2026 19:20:59 GMT"},"fingerprint":{"sha1":"F0:B0:5B:3F:A5:58:AD:7F:48:2A:D5:42:CC:57:A1:58:38:71:AF:2F","sha256":"A8:47:3A:07:47:3E:F8:C7:9D:3E:0D:9D:1B:58:20:9C:FA:59:2C:86:F3:AE:E2:D3:7E:0F:8C:5F:29:25:57:C2"}}},"request":{"raw":"GET /public/assets/css/app-saas.min.css HTTP/1.1\r\nHost: ultimateshops.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ultimateshops.to/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNSWVp4cS9Hc3lvVTlvb1ZZZFpCNFE9PSIsInZhbHVlIjoiMEx1dGp3NmNOb3JtRnVxUkdUbmtwZlhNMWtmS0ZYNVBsS3BNdWt5MnJNK0FnQno4TEhRS25FYmdQV1ZwZFpzUXppQ2ZZZG1FY0JJRjlPTjllN2pFSFovUFlKUnNzSUlpaUxiaGhrUnpkM0pwTElTWEVkdGVCdEpDNXRzVmpNMU8iLCJtYWMiOiJhZjgzN2MxOGYwYTk2ZGZiOTRjODJiOGE0NzBhM2E4NjcwZGFiZGExOGQ1MzA1MjkwNzVkMTVhM2ZiNmY1N2Q3IiwidGFnIjoiIn0%3D; ultimateshops_session=eyJpdiI6IjVxUlZnaUN2bzd0L1hMM2hIcnVRWHc9PSIsInZhbHVlIjoiY3REclpNUzFNTkdvd2ZVQlpsdytkSjAzMFZqRC9oQ0w2enhZTGJBN3hsSzYrRlpWU3p4SjJwVWZIUzU1MThLbGVrT3FUeEFrZnZEYWhWQUt3blcwTUw0RmpyemlVTlkvSFY3SkJqOHFGVC9waWtzZFdyTHpDZEFJQThMZmZmVXciLCJtYWMiOiIxZDI3Y2MzNWJiNTRlNTU2ZDJiMmI5Y2Y5YzlmYmFiNWQwOTdkY2YyZjY3ZTViNTcyOGE1YzhhYzg4OWJmYzUwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 24 Dec 2023 02:39:02 GMT\r\nContent-Encoding: br\r\nServer: nginx\r\nContent-Type: text/css\r\nVary: Accept-Encoding,User-Agent\r\nContent-Length: 56089\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nDate: Mon, 02 Mar 2026 20:08:11 GMT\r\nEO-LOG-UUID: 13008260594056960779\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":394048,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (62492)","md5":"03a238c04124d493a7761a4d5027ec12","sha1":"45c04e39a86461b77a5938ed0d065acfcb8e9374","sha256":"a688e4f7e77a91b8081140948b78fe0621055930596027e1d2b83be2d0feee50","sha512":"fb894f35b05f95a9260cca1440cffe85004b6d0c427bb8b69278a90353f314d132c714d5caa275fdca07d853ca82dc39f171b2a9a19dff36f4cc4e817790bb38","ssdeep":"6144:/uT9Jf4gSihtXQQbilbZTnmuD8IgDQxVRz5aySTSSO88/PPRJXH5h:tuiLPPRJXH5h","tlshash":"7a84a69bf0d0213ce867892983d477bd566ff452db022afab7c3a72447c67d20663948","first_seen":"2026-03-02T20:09:02.475949Z","last_seen":"2026-04-18T12:18:02.15667Z","times_seen":6,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ultimateshops.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultimateshops.to/public/assets/fonts/Nunito-Bold.woff","fqdn":"ultimateshops.to","domain":"ultimateshops.to","tld":"to"},"ip":{"addr":"43.169.14.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ultimateshops.to/","date":"2026-03-02T20:08:11.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultimateshops.to","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 19:21:00 GMT","end":"Tue, 24 Mar 2026 19:20:59 GMT"},"fingerprint":{"sha1":"F0:B0:5B:3F:A5:58:AD:7F:48:2A:D5:42:CC:57:A1:58:38:71:AF:2F","sha256":"A8:47:3A:07:47:3E:F8:C7:9D:3E:0D:9D:1B:58:20:9C:FA:59:2C:86:F3:AE:E2:D3:7E:0F:8C:5F:29:25:57:C2"}}},"request":{"raw":"GET /public/assets/fonts/Nunito-Bold.woff HTTP/1.1\r\nHost: ultimateshops.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ultimateshops.to/public/assets/css/app-saas.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNSWVp4cS9Hc3lvVTlvb1ZZZFpCNFE9PSIsInZhbHVlIjoiMEx1dGp3NmNOb3JtRnVxUkdUbmtwZlhNMWtmS0ZYNVBsS3BNdWt5MnJNK0FnQno4TEhRS25FYmdQV1ZwZFpzUXppQ2ZZZG1FY0JJRjlPTjllN2pFSFovUFlKUnNzSUlpaUxiaGhrUnpkM0pwTElTWEVkdGVCdEpDNXRzVmpNMU8iLCJtYWMiOiJhZjgzN2MxOGYwYTk2ZGZiOTRjODJiOGE0NzBhM2E4NjcwZGFiZGExOGQ1MzA1MjkwNzVkMTVhM2ZiNmY1N2Q3IiwidGFnIjoiIn0%3D; ultimateshops_session=eyJpdiI6IjVxUlZnaUN2bzd0L1hMM2hIcnVRWHc9PSIsInZhbHVlIjoiY3REclpNUzFNTkdvd2ZVQlpsdytkSjAzMFZqRC9oQ0w2enhZTGJBN3hsSzYrRlpWU3p4SjJwVWZIUzU1MThLbGVrT3FUeEFrZnZEYWhWQUt3blcwTUw0RmpyemlVTlkvSFY3SkJqOHFGVC9waWtzZFdyTHpDZEFJQThMZmZmVXciLCJtYWMiOiIxZDI3Y2MzNWJiNTRlNTU2ZDJiMmI5Y2Y5YzlmYmFiNWQwOTdkY2YyZjY3ZTViNTcyOGE1YzhhYzg4OWJmYzUwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 24 Dec 2023 02:40:04 GMT\r\nServer: nginx\r\nContent-Type: font/woff\r\nVary: Accept-Encoding,User-Agent\r\nContent-Length: 51940\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nDate: Mon, 02 Mar 2026 20:08:11 GMT\r\nEO-LOG-UUID: 8359141534410255388\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51940,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 51940, version 0.0","md5":"aa7097dd10f758681f3b0463a308629b","sha1":"7cd7d2c9a183e7abacdafe3fa5205bc84766919c","sha256":"8d61f02822a23eed57b81b3c4a26f7f1f3ae8cad589a14b41923baa0041b2399","sha512":"ed53c3aa4e4fee97c74a7120d56fd0d2b5b3550dac267e5577387b0a26a0e57890fbca405943b69973c658527e8981e516d5669aa4eb5cc232aa06c3d001836f","ssdeep":"768:xCerW4xpE+STc12KEir6mp799Sv6ehRLkXbwGSxX32/+C8f6NFbYm2ROk/e65+n9:xZFTSTI24rT799yzhTGwIPx2ROWTYuo","tlshash":"d433f216763e7260f8d93ebac522567448887db91c74f06137a94d33fe282d1c1ebe26","first_seen":"2023-05-10T15:08:16Z","last_seen":"2026-08-04T14:02:46.142776Z","times_seen":197,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ultimateshops.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultimateshops.to/public/assets/img/logo2.png","fqdn":"ultimateshops.to","domain":"ultimateshops.to","tld":"to"},"ip":{"addr":"43.169.14.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultimateshops.to/","date":"2026-03-02T20:08:11.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultimateshops.to","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 19:21:00 GMT","end":"Tue, 24 Mar 2026 19:20:59 GMT"},"fingerprint":{"sha1":"F0:B0:5B:3F:A5:58:AD:7F:48:2A:D5:42:CC:57:A1:58:38:71:AF:2F","sha256":"A8:47:3A:07:47:3E:F8:C7:9D:3E:0D:9D:1B:58:20:9C:FA:59:2C:86:F3:AE:E2:D3:7E:0F:8C:5F:29:25:57:C2"}}},"request":{"raw":"GET /public/assets/img/logo2.png HTTP/1.1\r\nHost: ultimateshops.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ultimateshops.to/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNSWVp4cS9Hc3lvVTlvb1ZZZFpCNFE9PSIsInZhbHVlIjoiMEx1dGp3NmNOb3JtRnVxUkdUbmtwZlhNMWtmS0ZYNVBsS3BNdWt5MnJNK0FnQno4TEhRS25FYmdQV1ZwZFpzUXppQ2ZZZG1FY0JJRjlPTjllN2pFSFovUFlKUnNzSUlpaUxiaGhrUnpkM0pwTElTWEVkdGVCdEpDNXRzVmpNMU8iLCJtYWMiOiJhZjgzN2MxOGYwYTk2ZGZiOTRjODJiOGE0NzBhM2E4NjcwZGFiZGExOGQ1MzA1MjkwNzVkMTVhM2ZiNmY1N2Q3IiwidGFnIjoiIn0%3D; ultimateshops_session=eyJpdiI6IjVxUlZnaUN2bzd0L1hMM2hIcnVRWHc9PSIsInZhbHVlIjoiY3REclpNUzFNTkdvd2ZVQlpsdytkSjAzMFZqRC9oQ0w2enhZTGJBN3hsSzYrRlpWU3p4SjJwVWZIUzU1MThLbGVrT3FUeEFrZnZEYWhWQUt3blcwTUw0RmpyemlVTlkvSFY3SkJqOHFGVC9waWtzZFdyTHpDZEFJQThMZmZmVXciLCJtYWMiOiIxZDI3Y2MzNWJiNTRlNTU2ZDJiMmI5Y2Y5YzlmYmFiNWQwOTdkY2YyZjY3ZTViNTcyOGE1YzhhYzg4OWJmYzUwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 24 Dec 2023 02:47:30 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 16650\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nDate: Mon, 02 Mar 2026 20:08:11 GMT\r\nEO-LOG-UUID: 11593632214160215823\r\nEO-Cache-Status: HIT\r\nCache-Control: max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16650,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 314 x 211, 8-bit/color RGBA, non-interlaced","md5":"e8897e515d98305c9c9d7fecddda23eb","sha1":"e6f4cc0bae4f78c969365f21c78e1e99f9586c22","sha256":"5e7c3f71ca02722b29af381c83fce7ba84111867ec5b36cf81ae507c599f4ab1","sha512":"882134c3a8a829315096a40ee1e856af617befec8aa91f459051afd03ba3e5983a9e4042e35f9dc0c1cc7b8f9fd0fa2400f7faf3f5a2c08c97ac520d847c4109","ssdeep":"384:51ndycNpyoBi3x3dXUicx9oQ06VhnnwSV8rI4jEywfYvhqt2u:5TDNECqfXrcx9PISVf4jEfB2u","tlshash":"ec72dfc103291ea2f25b52fe32384fe79e80c509903a822b07b564ce5f797b6f91588d","first_seen":"2024-08-19T16:09:08.704982Z","last_seen":"2026-04-18T12:18:02.158863Z","times_seen":12,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ultimateshops.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultimateshops.to/","fqdn":"ultimateshops.to","domain":"ultimateshops.to","tld":"to"},"ip":{"addr":"43.169.14.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T20:08:10.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultimateshops.to","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 19:21:00 GMT","end":"Tue, 24 Mar 2026 19:20:59 GMT"},"fingerprint":{"sha1":"F0:B0:5B:3F:A5:58:AD:7F:48:2A:D5:42:CC:57:A1:58:38:71:AF:2F","sha256":"A8:47:3A:07:47:3E:F8:C7:9D:3E:0D:9D:1B:58:20:9C:FA:59:2C:86:F3:AE:E2:D3:7E:0F:8C:5F:29:25:57:C2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ultimateshops.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\npragma: no-cache\r\nexpires: -1\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6IkNSWVp4cS9Hc3lvVTlvb1ZZZFpCNFE9PSIsInZhbHVlIjoiMEx1dGp3NmNOb3JtRnVxUkdUbmtwZlhNMWtmS0ZYNVBsS3BNdWt5MnJNK0FnQno4TEhRS25FYmdQV1ZwZFpzUXppQ2ZZZG1FY0JJRjlPTjllN2pFSFovUFlKUnNzSUlpaUxiaGhrUnpkM0pwTElTWEVkdGVCdEpDNXRzVmpNMU8iLCJtYWMiOiJhZjgzN2MxOGYwYTk2ZGZiOTRjODJiOGE0NzBhM2E4NjcwZGFiZGExOGQ1MzA1MjkwNzVkMTVhM2ZiNmY1N2Q3IiwidGFnIjoiIn0%3D; expires=Mon, 02-Mar-2026 22:08:10 GMT; Max-Age=7200; path=/; samesite=lax\nultimateshops_session=eyJpdiI6IjVxUlZnaUN2bzd0L1hMM2hIcnVRWHc9PSIsInZhbHVlIjoiY3REclpNUzFNTkdvd2ZVQlpsdytkSjAzMFZqRC9oQ0w2enhZTGJBN3hsSzYrRlpWU3p4SjJwVWZIUzU1MThLbGVrT3FUeEFrZnZEYWhWQUt3blcwTUw0RmpyemlVTlkvSFY3SkJqOHFGVC9waWtzZFdyTHpDZEFJQThMZmZmVXciLCJtYWMiOiIxZDI3Y2MzNWJiNTRlNTU2ZDJiMmI5Y2Y5YzlmYmFiNWQwOTdkY2YyZjY3ZTViNTcyOGE1YzhhYzg4OWJmYzUwIiwidGFnIjoiIn0%3D; expires=Mon, 02-Mar-2026 22:08:10 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nVary: Accept-Encoding,User-Agent\r\nCache-Control: private, must-revalidate\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Mon, 02 Mar 2026 20:08:10 GMT\r\nEO-LOG-UUID: 10460264175024983422\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":3964,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"de1d3c14864efeddf6759fefa1135976","sha1":"15c3a1989bf51e40959f46e2e4ca3b3da442ec6d","sha256":"349800cfab6f270f6eb047754b15d0401ec3fd75e3d083789fa487cbd8377739","sha512":"34008ba4285bfcddae7c36ffb753a6b4e29349fc2c021d37abfc2d84cece2a8c14ddd011d6a7a1f4e4d2997545d19a80af06fde2b674dea69b5df48c0ad771f6","ssdeep":"","tlshash":"4b81ffa104821d26a13280a08d666d4cff86c913c74a5a74bdec1bc72ff2d51c8e751d","first_seen":"2026-03-02T20:09:05.101291Z","last_seen":"2026-03-02T20:09:05.101291Z","times_seen":1,"resource_available":false,"data":null}},"time_used":991,"timings":{"blocked":425,"dns":353,"connect":17,"send":0,"wait":139,"receive":2,"ssl":52},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ultimateshops.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultimateshops.to/public/assets/css/icons.min.css","fqdn":"ultimateshops.to","domain":"ultimateshops.to","tld":"to"},"ip":{"addr":"43.169.14.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultimateshops.to/","date":"2026-03-02T20:08:11.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultimateshops.to","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 19:21:00 GMT","end":"Tue, 24 Mar 2026 19:20:59 GMT"},"fingerprint":{"sha1":"F0:B0:5B:3F:A5:58:AD:7F:48:2A:D5:42:CC:57:A1:58:38:71:AF:2F","sha256":"A8:47:3A:07:47:3E:F8:C7:9D:3E:0D:9D:1B:58:20:9C:FA:59:2C:86:F3:AE:E2:D3:7E:0F:8C:5F:29:25:57:C2"}}},"request":{"raw":"GET /public/assets/css/icons.min.css HTTP/1.1\r\nHost: ultimateshops.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ultimateshops.to/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNSWVp4cS9Hc3lvVTlvb1ZZZFpCNFE9PSIsInZhbHVlIjoiMEx1dGp3NmNOb3JtRnVxUkdUbmtwZlhNMWtmS0ZYNVBsS3BNdWt5MnJNK0FnQno4TEhRS25FYmdQV1ZwZFpzUXppQ2ZZZG1FY0JJRjlPTjllN2pFSFovUFlKUnNzSUlpaUxiaGhrUnpkM0pwTElTWEVkdGVCdEpDNXRzVmpNMU8iLCJtYWMiOiJhZjgzN2MxOGYwYTk2ZGZiOTRjODJiOGE0NzBhM2E4NjcwZGFiZGExOGQ1MzA1MjkwNzVkMTVhM2ZiNmY1N2Q3IiwidGFnIjoiIn0%3D; ultimateshops_session=eyJpdiI6IjVxUlZnaUN2bzd0L1hMM2hIcnVRWHc9PSIsInZhbHVlIjoiY3REclpNUzFNTkdvd2ZVQlpsdytkSjAzMFZqRC9oQ0w2enhZTGJBN3hsSzYrRlpWU3p4SjJwVWZIUzU1MThLbGVrT3FUeEFrZnZEYWhWQUt3blcwTUw0RmpyemlVTlkvSFY3SkJqOHFGVC9waWtzZFdyTHpDZEFJQThMZmZmVXciLCJtYWMiOiIxZDI3Y2MzNWJiNTRlNTU2ZDJiMmI5Y2Y5YzlmYmFiNWQwOTdkY2YyZjY3ZTViNTcyOGE1YzhhYzg4OWJmYzUwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 24 Dec 2023 02:39:26 GMT\r\nContent-Encoding: gzip\r\nServer: nginx\r\nContent-Type: text/css\r\nVary: Accept-Encoding,User-Agent\r\nContent-Length: 69836\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nDate: Mon, 02 Mar 2026 20:08:11 GMT\r\nEO-LOG-UUID: 15050339312839746526\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":444777,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"729b1dc7ae349cd4409dab81cd4c5590","sha1":"1336ca7786064f0beefcc830b7ee233db330e015","sha256":"b723bb31fd4606394f8c83dd8cafd67737148a3c6be6a2eb34c2dba850868f2e","sha512":"fb2ce682b396e169784b41820f2542897902aeb09664a4c2b34d1f94dc8fe8385aa54a33d8e630836eabb16cf363b42f2dc79b4bbe38beb5a42304b242c4ea20","ssdeep":"3072:/+P3uxi/KPbqwRDnt3A0wNw4ydthvVg81G0syx+G1:ZjqwP3A0wNwp7vVhG0syx+G1","tlshash":"7b945fe9e04d04c3b732c88beb90f788529bf2bac5950d54f15b660d5ec7a6012c6fb9","first_seen":"2024-08-19T15:03:59.181193Z","last_seen":"2026-07-17T06:32:46.323153Z","times_seen":29,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":39,"dns":1,"connect":17,"send":0,"wait":21,"receive":19,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ultimateshops.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultimateshops.to/public/assets/js/jquery.min.js","fqdn":"ultimateshops.to","domain":"ultimateshops.to","tld":"to"},"ip":{"addr":"43.169.14.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultimateshops.to/","date":"2026-03-02T20:08:11.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultimateshops.to","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 19:21:00 GMT","end":"Tue, 24 Mar 2026 19:20:59 GMT"},"fingerprint":{"sha1":"F0:B0:5B:3F:A5:58:AD:7F:48:2A:D5:42:CC:57:A1:58:38:71:AF:2F","sha256":"A8:47:3A:07:47:3E:F8:C7:9D:3E:0D:9D:1B:58:20:9C:FA:59:2C:86:F3:AE:E2:D3:7E:0F:8C:5F:29:25:57:C2"}}},"request":{"raw":"GET /public/assets/js/jquery.min.js HTTP/1.1\r\nHost: ultimateshops.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ultimateshops.to/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNSWVp4cS9Hc3lvVTlvb1ZZZFpCNFE9PSIsInZhbHVlIjoiMEx1dGp3NmNOb3JtRnVxUkdUbmtwZlhNMWtmS0ZYNVBsS3BNdWt5MnJNK0FnQno4TEhRS25FYmdQV1ZwZFpzUXppQ2ZZZG1FY0JJRjlPTjllN2pFSFovUFlKUnNzSUlpaUxiaGhrUnpkM0pwTElTWEVkdGVCdEpDNXRzVmpNMU8iLCJtYWMiOiJhZjgzN2MxOGYwYTk2ZGZiOTRjODJiOGE0NzBhM2E4NjcwZGFiZGExOGQ1MzA1MjkwNzVkMTVhM2ZiNmY1N2Q3IiwidGFnIjoiIn0%3D; ultimateshops_session=eyJpdiI6IjVxUlZnaUN2bzd0L1hMM2hIcnVRWHc9PSIsInZhbHVlIjoiY3REclpNUzFNTkdvd2ZVQlpsdytkSjAzMFZqRC9oQ0w2enhZTGJBN3hsSzYrRlpWU3p4SjJwVWZIUzU1MThLbGVrT3FUeEFrZnZEYWhWQUt3blcwTUw0RmpyemlVTlkvSFY3SkJqOHFGVC9waWtzZFdyTHpDZEFJQThMZmZmVXciLCJtYWMiOiIxZDI3Y2MzNWJiNTRlNTU2ZDJiMmI5Y2Y5YzlmYmFiNWQwOTdkY2YyZjY3ZTViNTcyOGE1YzhhYzg4OWJmYzUwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 24 Dec 2023 02:40:40 GMT\r\nContent-Encoding: br\r\nServer: nginx\r\nContent-Type: application/javascript\r\nVary: Accept-Encoding,User-Agent\r\nContent-Length: 31936\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nDate: Mon, 02 Mar 2026 20:08:11 GMT\r\nEO-LOG-UUID: 15987259448798774073\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"7c14a783dfeb3d238ccd3edd840d82ee","sha1":"ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b","sha256":"80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0","sha512":"fa3e021ca60a9adbe570c6565c7370727904c4396c23a4c519daf258d05fae3e17bfb7607a0ab6dfe2b7150a4ec1b6a95e6d49675291be5f6a4e5679ad78d858","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:DIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"6f9309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:06:20Z","last_seen":"2026-08-05T20:56:32.124299Z","times_seen":21443,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ultimateshops.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultimateshops.to/public/assets/img/captcha.png","fqdn":"ultimateshops.to","domain":"ultimateshops.to","tld":"to"},"ip":{"addr":"43.169.14.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultimateshops.to/","date":"2026-03-02T20:08:11.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultimateshops.to","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 19:21:00 GMT","end":"Tue, 24 Mar 2026 19:20:59 GMT"},"fingerprint":{"sha1":"F0:B0:5B:3F:A5:58:AD:7F:48:2A:D5:42:CC:57:A1:58:38:71:AF:2F","sha256":"A8:47:3A:07:47:3E:F8:C7:9D:3E:0D:9D:1B:58:20:9C:FA:59:2C:86:F3:AE:E2:D3:7E:0F:8C:5F:29:25:57:C2"}}},"request":{"raw":"GET /public/assets/img/captcha.png HTTP/1.1\r\nHost: ultimateshops.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ultimateshops.to/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNSWVp4cS9Hc3lvVTlvb1ZZZFpCNFE9PSIsInZhbHVlIjoiMEx1dGp3NmNOb3JtRnVxUkdUbmtwZlhNMWtmS0ZYNVBsS3BNdWt5MnJNK0FnQno4TEhRS25FYmdQV1ZwZFpzUXppQ2ZZZG1FY0JJRjlPTjllN2pFSFovUFlKUnNzSUlpaUxiaGhrUnpkM0pwTElTWEVkdGVCdEpDNXRzVmpNMU8iLCJtYWMiOiJhZjgzN2MxOGYwYTk2ZGZiOTRjODJiOGE0NzBhM2E4NjcwZGFiZGExOGQ1MzA1MjkwNzVkMTVhM2ZiNmY1N2Q3IiwidGFnIjoiIn0%3D; ultimateshops_session=eyJpdiI6IjVxUlZnaUN2bzd0L1hMM2hIcnVRWHc9PSIsInZhbHVlIjoiY3REclpNUzFNTkdvd2ZVQlpsdytkSjAzMFZqRC9oQ0w2enhZTGJBN3hsSzYrRlpWU3p4SjJwVWZIUzU1MThLbGVrT3FUeEFrZnZEYWhWQUt3blcwTUw0RmpyemlVTlkvSFY3SkJqOHFGVC9waWtzZFdyTHpDZEFJQThMZmZmVXciLCJtYWMiOiIxZDI3Y2MzNWJiNTRlNTU2ZDJiMmI5Y2Y5YzlmYmFiNWQwOTdkY2YyZjY3ZTViNTcyOGE1YzhhYzg4OWJmYzUwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 24 Dec 2023 02:44:16 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 4488\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nDate: Mon, 02 Mar 2026 20:08:11 GMT\r\nEO-LOG-UUID: 6426692940124522902\r\nEO-Cache-Status: HIT\r\nCache-Control: max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4488,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 50, 8-bit/color RGB, non-interlaced","md5":"d937d5fd669cdc17bc78712ece6f7264","sha1":"fe18b11dce1d8c416c754aa8fbb40dda0029be1f","sha256":"8220290db0f331ea68260726d0432991091bc72f995572769e1863a5f563a382","sha512":"caf6718791ed97321857e9cb01f27818ab64bb7d7df2b0ffcd24e4f742c1004c83fc9ee0d90a06f877633679790cc8d32f1f1b5075aa1edb248549ed57193914","ssdeep":"96:ZCuNx3xMPWdqj32iStS8+hZ87mz+W3f+aeBF1sfL6zT:ZCuNgIqzbQSZWmz+ifG","tlshash":"1f918c2f81242faf189ccc485f956f5ea626505a1274138e820347b81efff067acd86e","first_seen":"2026-03-02T20:09:05.104456Z","last_seen":"2026-03-02T20:10:49.935947Z","times_seen":2,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":72,"dns":0,"connect":21,"send":0,"wait":23,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ultimateshops.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultimateshops.to/public/assets/img/logo2.png","fqdn":"ultimateshops.to","domain":"ultimateshops.to","tld":"to"},"ip":{"addr":"43.169.14.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultimateshops.to/","date":"2026-03-02T20:08:11.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultimateshops.to","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 19:21:00 GMT","end":"Tue, 24 Mar 2026 19:20:59 GMT"},"fingerprint":{"sha1":"F0:B0:5B:3F:A5:58:AD:7F:48:2A:D5:42:CC:57:A1:58:38:71:AF:2F","sha256":"A8:47:3A:07:47:3E:F8:C7:9D:3E:0D:9D:1B:58:20:9C:FA:59:2C:86:F3:AE:E2:D3:7E:0F:8C:5F:29:25:57:C2"}}},"request":{"raw":"GET /public/assets/img/logo2.png HTTP/1.1\r\nHost: ultimateshops.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ultimateshops.to/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNSWVp4cS9Hc3lvVTlvb1ZZZFpCNFE9PSIsInZhbHVlIjoiMEx1dGp3NmNOb3JtRnVxUkdUbmtwZlhNMWtmS0ZYNVBsS3BNdWt5MnJNK0FnQno4TEhRS25FYmdQV1ZwZFpzUXppQ2ZZZG1FY0JJRjlPTjllN2pFSFovUFlKUnNzSUlpaUxiaGhrUnpkM0pwTElTWEVkdGVCdEpDNXRzVmpNMU8iLCJtYWMiOiJhZjgzN2MxOGYwYTk2ZGZiOTRjODJiOGE0NzBhM2E4NjcwZGFiZGExOGQ1MzA1MjkwNzVkMTVhM2ZiNmY1N2Q3IiwidGFnIjoiIn0%3D; ultimateshops_session=eyJpdiI6IjVxUlZnaUN2bzd0L1hMM2hIcnVRWHc9PSIsInZhbHVlIjoiY3REclpNUzFNTkdvd2ZVQlpsdytkSjAzMFZqRC9oQ0w2enhZTGJBN3hsSzYrRlpWU3p4SjJwVWZIUzU1MThLbGVrT3FUeEFrZnZEYWhWQUt3blcwTUw0RmpyemlVTlkvSFY3SkJqOHFGVC9waWtzZFdyTHpDZEFJQThMZmZmVXciLCJtYWMiOiIxZDI3Y2MzNWJiNTRlNTU2ZDJiMmI5Y2Y5YzlmYmFiNWQwOTdkY2YyZjY3ZTViNTcyOGE1YzhhYzg4OWJmYzUwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 24 Dec 2023 02:47:30 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 16650\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nDate: Mon, 02 Mar 2026 20:08:11 GMT\r\nEO-LOG-UUID: 15470606028134952788\r\nEO-Cache-Status: HIT\r\nCache-Control: max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16650,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 314 x 211, 8-bit/color RGBA, non-interlaced","md5":"e8897e515d98305c9c9d7fecddda23eb","sha1":"e6f4cc0bae4f78c969365f21c78e1e99f9586c22","sha256":"5e7c3f71ca02722b29af381c83fce7ba84111867ec5b36cf81ae507c599f4ab1","sha512":"882134c3a8a829315096a40ee1e856af617befec8aa91f459051afd03ba3e5983a9e4042e35f9dc0c1cc7b8f9fd0fa2400f7faf3f5a2c08c97ac520d847c4109","ssdeep":"384:51ndycNpyoBi3x3dXUicx9oQ06VhnnwSV8rI4jEywfYvhqt2u:5TDNECqfXrcx9PISVf4jEfB2u","tlshash":"ec72dfc103291ea2f25b52fe32384fe79e80c509903a822b07b564ce5f797b6f91588d","first_seen":"2024-08-19T16:09:08.704982Z","last_seen":"2026-04-18T12:18:02.158863Z","times_seen":12,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ultimateshops.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultimateshops.to/public/assets/fonts/Nunito-SemiBold.woff","fqdn":"ultimateshops.to","domain":"ultimateshops.to","tld":"to"},"ip":{"addr":"43.169.14.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ultimateshops.to/","date":"2026-03-02T20:08:11.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultimateshops.to","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 19:21:00 GMT","end":"Tue, 24 Mar 2026 19:20:59 GMT"},"fingerprint":{"sha1":"F0:B0:5B:3F:A5:58:AD:7F:48:2A:D5:42:CC:57:A1:58:38:71:AF:2F","sha256":"A8:47:3A:07:47:3E:F8:C7:9D:3E:0D:9D:1B:58:20:9C:FA:59:2C:86:F3:AE:E2:D3:7E:0F:8C:5F:29:25:57:C2"}}},"request":{"raw":"GET /public/assets/fonts/Nunito-SemiBold.woff HTTP/1.1\r\nHost: ultimateshops.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ultimateshops.to/public/assets/css/app-saas.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNSWVp4cS9Hc3lvVTlvb1ZZZFpCNFE9PSIsInZhbHVlIjoiMEx1dGp3NmNOb3JtRnVxUkdUbmtwZlhNMWtmS0ZYNVBsS3BNdWt5MnJNK0FnQno4TEhRS25FYmdQV1ZwZFpzUXppQ2ZZZG1FY0JJRjlPTjllN2pFSFovUFlKUnNzSUlpaUxiaGhrUnpkM0pwTElTWEVkdGVCdEpDNXRzVmpNMU8iLCJtYWMiOiJhZjgzN2MxOGYwYTk2ZGZiOTRjODJiOGE0NzBhM2E4NjcwZGFiZGExOGQ1MzA1MjkwNzVkMTVhM2ZiNmY1N2Q3IiwidGFnIjoiIn0%3D; ultimateshops_session=eyJpdiI6IjVxUlZnaUN2bzd0L1hMM2hIcnVRWHc9PSIsInZhbHVlIjoiY3REclpNUzFNTkdvd2ZVQlpsdytkSjAzMFZqRC9oQ0w2enhZTGJBN3hsSzYrRlpWU3p4SjJwVWZIUzU1MThLbGVrT3FUeEFrZnZEYWhWQUt3blcwTUw0RmpyemlVTlkvSFY3SkJqOHFGVC9waWtzZFdyTHpDZEFJQThMZmZmVXciLCJtYWMiOiIxZDI3Y2MzNWJiNTRlNTU2ZDJiMmI5Y2Y5YzlmYmFiNWQwOTdkY2YyZjY3ZTViNTcyOGE1YzhhYzg4OWJmYzUwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 24 Dec 2023 02:40:18 GMT\r\nServer: nginx\r\nContent-Type: font/woff\r\nVary: Accept-Encoding,User-Agent\r\nContent-Length: 51528\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nDate: Mon, 02 Mar 2026 20:08:11 GMT\r\nEO-LOG-UUID: 17640269926433249034\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51528,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 51528, version 0.0","md5":"e7ea8f78de534e08248fe3bf9689b5fa","sha1":"94a5628b737c683a82bec275c2586fdab27f02f6","sha256":"a3678dbbbe538a39c4e03d762fd090a3e576c3cdc690cd6476bed66498ccf4b6","sha512":"6076d6a9fb33a739728edeec2f10baf681c147c723d53eed0631aab5fae7b035bb78407f2d11d34368c5e5a7b11be69a2c5ad095923f9b2a467b1adb2acb5ad6","ssdeep":"768:ak9UYa1ZpZS9STc12qErak3eWtGU2voBmwFzTOsz6mpOE4eSu4CNF2RbmkWeJkOi:aX1ZpZ0STI2foU2w+g8oSu4CNSmXZO18","tlshash":"f23302f2bd923340a689297fd0c02f990d65048f96d48545376b767f083b27dfc5aa2e","first_seen":"2023-05-10T15:08:16Z","last_seen":"2026-08-04T14:02:46.133721Z","times_seen":136,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ultimateshops.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}