{"report_id":"0636e3d7-359c-4960-a9df-2cf03ffb357d","version":6,"status":"done","tags":[],"date":"2026-02-22T15:29:30Z","url":{"schema":"https","addr":"050c4f9cfee6.net/","fqdn":"050c4f9cfee6.net","domain":"050c4f9cfee6.net","tld":"net"},"ip":{"addr":"108.61.167.229","port":0,"asn":20473,"as":"AS-VULTR","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"050c4f9cfee6.net/","fqdn":"050c4f9cfee6.net","domain":"050c4f9cfee6.net","tld":"net"},"title":"SMS Panel","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"050c4f9cfee6.net/","fqdn":"050c4f9cfee6.net","domain":"050c4f9cfee6.net","tld":"net"},"ip":{"addr":"108.61.167.229","port":0,"asn":20473,"as":"AS-VULTR","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-29T15:29:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"050c4f9cfee6.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"050c4f9cfee6.net","ip":{"addr":"108.61.167.229","port":443,"asn":20473,"as":"AS-VULTR","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":3,"request_count":3,"received_data":1533994,"sent_data":1367,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"050c4f9cfee6.net/","fqdn":"050c4f9cfee6.net","domain":"050c4f9cfee6.net","tld":"net"},"ip":{"addr":"108.61.167.229","port":443,"asn":20473,"as":"AS-VULTR","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"af0ec867355aef08f7f500b1cc0512bd","sha1":"88256e120caf9036c58f538adf168fef904e132f","sha256":"9b5970840947fb00d81f9b545608217e60dc8a892d601c4bd83e9c27a179142d","sha512":"05283e5c30ca7689212a5368c7db7fd5fc4f7b762d575be18a6fe6b77f8315d4a916f4b291aa3e11526842cf03c9f92343c64edcda530a62216665b0218267ca","ssdeep":"1536:0ElGapHe9iHXsxCNYqP8W6cRCgaTTamUT05wPdjzuLbTF:dpHe9gsxCNYq0W6cRUnmJOF","tlshash":"d904c4b670f32035445361a69b6b5a063c21c903ad069d903b5c87e0af9bf78deb77d8","size":184459,"data":"","first_seen":"2026-02-22T15:29:37.973058Z","last_seen":"2026-02-22T15:29:37.973058Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"050c4f9cfee6.net/","fqdn":"050c4f9cfee6.net","domain":"050c4f9cfee6.net","tld":"net"},"ip":{"addr":"108.61.167.229","port":443,"asn":20473,"as":"AS-VULTR","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"722b16c5ade075445b08b92244d1271b","sha1":"990397e4e2a2447f2539324fa84b2c1c89699918","sha256":"60724b177564906ba84641357e2bf1270dec417b8abf2ab166eb72c6d1756ccf","sha512":"320852619ca2abb50864b79d4e25182cf435ba5a5a309f8e14236b7a5bad9e668e727fc063de830515ab4854b96b4240589b186087d7d1403a1ce0493ca73933","ssdeep":"192:X8Camj7vt2dq9rHtjjJyLvRSS7AmELVySCrNySiZYEUE1uEy0zyn:XImjFjYuCEa","tlshash":"151201a82efb2374c5a391b6578b83093531d0773546dd90b5bc8a805fc3ee0e9a67d4","size":9422,"data":"","first_seen":"2026-02-22T15:29:37.973968Z","last_seen":"2026-02-22T15:29:37.973968Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"050c4f9cfee6.net/","fqdn":"050c4f9cfee6.net","domain":"050c4f9cfee6.net","tld":"net"},"ip":{"addr":"108.61.167.229","port":443,"asn":20473,"as":"AS-VULTR","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-22T15:29:07.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"050c4f9cfee6.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:54:19 GMT","end":"Sat, 02 May 2026 22:54:18 GMT"},"fingerprint":{"sha1":"62:17:D7:0E:BE:C0:DE:57:8A:6E:18:68:05:33:94:EF:AD:CF:98:11","sha256":"F7:49:22:28:9D:CD:B1:FA:9A:8D:BC:39:89:44:94:C0:E3:83:C9:01:C8:5C:1B:FE:7C:5A:B2:EA:9B:B4:AA:53"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 050c4f9cfee6.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 22 Feb 2026 15:29:08 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nX-Frame-Options: ALLOWALL\r\nContent-Security-Policy: frame-ancestors *;\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type, Authorization, X-Telegram-Init-Data\r\nLast-Modified: Tue, 03 Feb 2026 11:46:52 GMT\r\nETag: \"4350e-649e9fed907d4-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 47880\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":275726,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (942)","md5":"ac77f2ede84954ad099dd00393240f91","sha1":"2d091679fb75cc062fa291decae2ed9b825241fa","sha256":"12d1f62361466bd4bde1775f0f6bdda98d00e095439615b4b65a61b26019fe1d","sha512":"c9af59c3192a4701ebf21e97cde39bcb43aadbe21dcb90982ef664c6cda176bcebbd6bc66a01b33b67e20a24431e1472e901a4c174b563f3cba9ce0719b115ba","ssdeep":"1536:HYLwtKgIX0h50kzlyE00FH9+QyJjkjvXobA5ElGapHe9iHXsxCNYqP8W6cRCgaTn:HwdpHe9gsxCNYq0W6cRUnmJOn","tlshash":"a444d56275f320355413a1a66bab5b063930d503d906de643b9c83a08fcbfb4ddb7b98","first_seen":"2026-02-22T15:29:37.970342Z","last_seen":"2026-02-22T15:29:37.970342Z","times_seen":1,"resource_available":false,"data":null}},"time_used":720,"timings":{"blocked":332,"dns":294,"connect":16,"send":0,"wait":25,"receive":27,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"050c4f9cfee6.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"050c4f9cfee6.net/assets/logo.png","fqdn":"050c4f9cfee6.net","domain":"050c4f9cfee6.net","tld":"net"},"ip":{"addr":"108.61.167.229","port":443,"asn":20473,"as":"AS-VULTR","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://050c4f9cfee6.net/","date":"2026-02-22T15:29:08.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"050c4f9cfee6.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:54:19 GMT","end":"Sat, 02 May 2026 22:54:18 GMT"},"fingerprint":{"sha1":"62:17:D7:0E:BE:C0:DE:57:8A:6E:18:68:05:33:94:EF:AD:CF:98:11","sha256":"F7:49:22:28:9D:CD:B1:FA:9A:8D:BC:39:89:44:94:C0:E3:83:C9:01:C8:5C:1B:FE:7C:5A:B2:EA:9B:B4:AA:53"}}},"request":{"raw":"GET /assets/logo.png HTTP/1.1\r\nHost: 050c4f9cfee6.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://050c4f9cfee6.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 22 Feb 2026 15:29:08 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nX-Frame-Options: ALLOWALL\r\nContent-Security-Policy: frame-ancestors *;\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type, Authorization, X-Telegram-Init-Data\r\nLast-Modified: Mon, 02 Feb 2026 17:13:22 GMT\r\nETag: \"132bcd-649da70b3951d\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1256397\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1256397,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1584 x 672, 8-bit/color RGBA, non-interlaced","md5":"d6586cf8d4adde0c82f5e4b092667f8e","sha1":"9f2ffc09eae25a2565e3fa48786553af00bd08e8","sha256":"97a10ace0b135267057684cc7eafef9ccb2328cee99da8ecce430b9c1d332516","sha512":"fd5f8b372a9ba67d8fb23e291e09498090e661574f2e38192236e4c95ccb7f67537e40e7829cc9e5e21b4951c15ea9abe1eac3bab451842982061caeb12c65ea","ssdeep":"24576:2KXS1g3voFdXe7+teC6e8W36fz50YmFji7:2KXa7RegP6e8WQ5VmFjI","tlshash":"e62533437aadd55f92228e4b19a0cd187b6459fccf5ec5f4bc0540be490d36354893be","first_seen":"2026-02-22T15:29:37.971266Z","last_seen":"2026-02-22T15:29:37.971266Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"050c4f9cfee6.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"050c4f9cfee6.net/favicon.ico","fqdn":"050c4f9cfee6.net","domain":"050c4f9cfee6.net","tld":"net"},"ip":{"addr":"108.61.167.229","port":443,"asn":20473,"as":"AS-VULTR","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://050c4f9cfee6.net/","date":"2026-02-22T15:29:08.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"050c4f9cfee6.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:54:19 GMT","end":"Sat, 02 May 2026 22:54:18 GMT"},"fingerprint":{"sha1":"62:17:D7:0E:BE:C0:DE:57:8A:6E:18:68:05:33:94:EF:AD:CF:98:11","sha256":"F7:49:22:28:9D:CD:B1:FA:9A:8D:BC:39:89:44:94:C0:E3:83:C9:01:C8:5C:1B:FE:7C:5A:B2:EA:9B:B4:AA:53"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 050c4f9cfee6.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://050c4f9cfee6.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 22 Feb 2026 15:29:08 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nX-Frame-Options: ALLOWALL\r\nContent-Security-Policy: frame-ancestors *;\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type, Authorization, X-Telegram-Init-Data\r\nContent-Length: 279\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":279,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4816492c72a0753be0d33776faae8cb2","sha1":"dc2b1f604ba8392f46c9c7969bdf1b5f8a980666","sha256":"e6c6628d50ae5364a151765df0634323e19c524c7193048175082e8e738bdf99","sha512":"5b1128110d47ad8800c41e310048606bbba7cc364ca02306059ec18f5c8cae86cab50f5d1569fc385822b30893e5f3037b3d6d59f40c829c3107254577034ffd","ssdeep":"","tlshash":"82d02bae504763864d12545039c216c2278d23e6a43ac2e82dc6e49752a853ecdda9dc","first_seen":"2026-02-22T15:29:37.972136Z","last_seen":"2026-02-22T15:29:37.972136Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"050c4f9cfee6.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
