{"report_id":"08cb31c9-e8cb-4a23-b2e5-762d135dbf58","version":0,"status":"done","tags":[],"date":"2026-08-19T23:08:46Z","url":{"schema":"http","addr":"wconnectusercrds.com/","fqdn":"wconnectusercrds.com","domain":"wconnectusercrds.com","tld":"com"},"ip":{"addr":"185.87.121.5","port":0,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"final":{"url":{"schema":"https","addr":"wconnectusercrds.com/","fqdn":"wconnectusercrds.com","domain":"wconnectusercrds.com","tld":"com"},"title":"Test","dom":{"size":1298,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"8e4b310b43b34af7904741e97f51b4d4","sha1":"b033e7a2b860dbe69e91d11ab2cad622ba22d0ed","sha256":"965ae9e730f0fa8c9390e3d4a7ea6a6e51723948b6950710a9f9a2d098279f80","sha512":"59ae716ccab62d54cb992a8a6aba5763dbcf68cdf25cb5b3e731b5bc2e0aae0b9a7ce68003c8c0c2c826acffbe32228e9193182648ddcae08997262c034d808b","ssdeep":"","tlshash":"5221716b1cbb528a506079c4d2a3688a7588f023b04dcdcc7fdcd31a8fe728584136ce","dom_hash":"domhash949bcdc4ecfbf59535f40fb01574ce82","first_seen":"2026-08-19T22:39:50.351353Z","last_seen":"2026-08-19T23:08:51.607499Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wconnectusercrds.com/","fqdn":"wconnectusercrds.com","domain":"wconnectusercrds.com","tld":"com"},"ip":{"addr":"185.87.121.5","port":0,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-23T23:08:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"wconnectusercrds.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"wconnectusercrds.com","ip":{"addr":"185.87.121.5","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"domain_registered":"2026-07-29","domain_rank":0,"first_seen":"2026-08-19T22:39:46.190638Z","last_seen":"2026-08-19T22:39:46.190638Z","alert_count":5,"request_count":5,"received_data":2937975,"sent_data":2545,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wconnectusercrds.com/","fqdn":"wconnectusercrds.com","domain":"wconnectusercrds.com","tld":"com"},"ip":{"addr":"185.87.121.5","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"162a81aadc613519175525134148b5aa","sha1":"71357696f76bc1282ba31cce1cd2764cc753ec99","sha256":"0c325c3a5781e77c0dbe52d21a37423f21ddccf21250bfbaf46be27248edbe68","sha512":"21229cf58188b94277864aaad6e6d5beaf070b9fd0bc79d0d0cb76fce583c4ead1ab2a391f14670f310749e0c410de3f6176fb6390172966b177cdc363b81e95","ssdeep":"","tlshash":"d9112d6708bb12899154a6d9d2871c46b299f067748dcdcc7eccd71a8fd714281626ce","size":1051,"data":"","first_seen":"2026-08-19T22:39:50.359694Z","last_seen":"2026-08-19T23:08:51.625453Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wconnectusercrds.com/assets_/jquery.min.js?2","fqdn":"wconnectusercrds.com","domain":"wconnectusercrds.com","tld":"com"},"ip":{"addr":"185.87.121.5","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2f5f8be1c47821e267132f5a9e5e6c1","sha1":"a4c520a7bb3ca22d3df68e3a7fcc83bf84cc6e5f","sha256":"e9ba58e888aeb492b02a86d11cd21210215df4ef487544843a0c6de8285ddf7f","sha512":"5b7a3589eebfbd7429fd63f39b31b1c77322bd0d3093b968d4176fdc9f7ab57747c71ce9ed4ea8457feef607011cfa486ec1aa871bc62ded771f08e0970373f4","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvak7:AYh8eip3huuf6IidlrvakdtQ47GKr","tlshash":"4293f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89478,"data":"","first_seen":"2026-08-19T22:39:50.355457Z","last_seen":"2026-08-19T23:08:51.620055Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wconnectusercrds.com/assets_/init.js?2","fqdn":"wconnectusercrds.com","domain":"wconnectusercrds.com","tld":"com"},"ip":{"addr":"185.87.121.5","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c518e9e8cdbb95aa78d5062c8f19da7","sha1":"7aee06b6ddfc70bb23d90b4b3513facfc96c3669","sha256":"9e15226be52195e3c9367b4bec41cbc8217c92b5093a97379a3f2f2e5d812bb8","sha512":"560319d7c5e1c60f4932459a17bea7e3a98f07affbf2a271ec986295655bd0126f0d5da917bc0883a66309c75ee17d753b7ad38da02375e493fb7aff329247ac","ssdeep":"","tlshash":"02319d6abf700f7583825fcb7d3a60c5d577c89518a048e6b1169cf528b23129bd1533","size":1708,"data":"","first_seen":"2026-08-19T22:39:50.356662Z","last_seen":"2026-08-19T23:08:51.622793Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wconnectusercrds.com/assets_/bundle.js","fqdn":"wconnectusercrds.com","domain":"wconnectusercrds.com","tld":"com"},"ip":{"addr":"185.87.121.5","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b207bf1a5bafba4705d5d7817bdf8024","sha1":"de0039e61c07df3a2b5f3e80737e0de4c26f61bb","sha256":"cb00c3a52e23472b9f24bd65a7f6757d2f6a1126d830ac913e102fc5cfa39c09","sha512":"96fe0d832e391f040a074526a4e8d5e7e410d3940370cb9401e405b149dedde33463b482e6f5c75567012c1f319bb9a816ee8f3f1fd24e4e2c286ed53c616321","ssdeep":"49152:O6ZZtdTCRtqQAHgT+btevp3omecZS4EgJ+qA:TDbteFecE4Egs","tlshash":"2dd5198473a5f062879624e0043b500eb23eba2da84d516cf758e8f77db99c5963bf34","size":2840120,"data":"","first_seen":"2026-08-19T22:39:50.361336Z","last_seen":"2026-08-19T23:08:51.627923Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wconnectusercrds.com/assets_/bundle.js","fqdn":"wconnectusercrds.com","domain":"wconnectusercrds.com","tld":"com"},"ip":{"addr":"185.87.121.5","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wconnectusercrds.com/","date":"2026-08-19T23:08:16.038Z","timestamp":1787180896038,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wconnectusercrds.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 11:03:50 GMT","end":"Tue, 27 Oct 2026 11:03:49 GMT"},"fingerprint":{"sha1":"13:4D:DB:DF:07:93:2C:42:78:0B:FB:A5:2F:B1:B1:4F:49:98:10:18","sha256":"F4:A9:81:31:2E:A3:E9:B0:8B:06:83:E6:5F:B8:3A:40:45:50:0A:E7:3E:C0:C1:5D:28:6E:80:80:FC:31:0C:99"}}},"request":{"raw":"GET /assets_/bundle.js HTTP/1.1\r\nHost: wconnectusercrds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wconnectusercrds.com/\r\nCookie: PHPSESSID=cbe75777ee883ab2c3872d1f282939be\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 19 Aug 2026 23:08:16 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2840120\r\nLast-Modified: Mon, 03 Aug 2026 12:42:22 GMT\r\nConnection: keep-alive\r\nETag: \"6a708cae-2b5638\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2840120,"size_decoded":2840387,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"1347be62bcae12f4e99845a0717ef76b","sha1":"276dc9bc6e23ffbf3ad2770a46f383032c45253e","sha256":"b6f6ccb667c1f5cc8a20fa2c62c4eea53260fa0d32965cf5f810e5bce5f1a6c8","sha512":"1a8d0050bfcc20da698252814971bd2c4467bfe7f86e6933b11a3e1eedb0fb6f2a8a884f98242d3abd73e15e6d508c58c561b5803689c4fad574b241f4494742","ssdeep":"6144:PBktx2UHTRqRyv9CZZw83D7QGej4yhCdV04qCNvmsz0N5CNvmsdw0UBpVtCNvmsS:O6ZZFx1yodTqamsG5amsyRtamsEIamsB","tlshash":"8925f9807774b062875a29d0042b504ef37efa2d584a057cf658e8f67cfa9846a3ef35","first_seen":"2026-02-02T11:20:43.648414Z","last_seen":"2026-08-19T23:08:51.611387Z","times_seen":42,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":27,"send":0,"wait":55,"receive":180,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"wconnectusercrds.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wconnectusercrds.com/favicon.ico","fqdn":"wconnectusercrds.com","domain":"wconnectusercrds.com","tld":"com"},"ip":{"addr":"185.87.121.5","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wconnectusercrds.com/","date":"2026-08-19T23:08:16.780Z","timestamp":1787180896780,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wconnectusercrds.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 11:03:50 GMT","end":"Tue, 27 Oct 2026 11:03:49 GMT"},"fingerprint":{"sha1":"13:4D:DB:DF:07:93:2C:42:78:0B:FB:A5:2F:B1:B1:4F:49:98:10:18","sha256":"F4:A9:81:31:2E:A3:E9:B0:8B:06:83:E6:5F:B8:3A:40:45:50:0A:E7:3E:C0:C1:5D:28:6E:80:80:FC:31:0C:99"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wconnectusercrds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wconnectusercrds.com/\r\nCookie: PHPSESSID=cbe75777ee883ab2c3872d1f282939be\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 19 Aug 2026 23:08:16 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 3957\r\nLast-Modified: Tue, 28 Jul 2026 16:15:21 GMT\r\nConnection: keep-alive\r\nETag: \"6a68d599-f75\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3957,"size_decoded":4208,"mime_type":"image/x-icon","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"a552a641d4bc935c9000c3f6de801d84","sha1":"065d916ed1d936ffae201991471f8a005758bcab","sha256":"c4ea3b6781710ef195491520b377be4d84b9c216a2378c1c703c432de8b854d2","sha512":"2ba67501840ad9f18f515101ac674d693068d402a3af1ef4b32ec6f603bdfef3a94731a6842b06a38d0d99e7f5a6f074613d10dbbb18dd69bf7b1577255dbb97","ssdeep":"","tlshash":"03816c502ec06172edb779712826a2509417ba9dafae82e681314ccd876abc0ea0d134","first_seen":"2026-08-19T22:39:50.358531Z","last_seen":"2026-08-19T23:08:51.61357Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"wconnectusercrds.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wconnectusercrds.com/","fqdn":"wconnectusercrds.com","domain":"wconnectusercrds.com","tld":"com"},"ip":{"addr":"185.87.121.5","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-19T23:08:15.703Z","timestamp":1787180895703,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wconnectusercrds.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 11:03:50 GMT","end":"Tue, 27 Oct 2026 11:03:49 GMT"},"fingerprint":{"sha1":"13:4D:DB:DF:07:93:2C:42:78:0B:FB:A5:2F:B1:B1:4F:49:98:10:18","sha256":"F4:A9:81:31:2E:A3:E9:B0:8B:06:83:E6:5F:B8:3A:40:45:50:0A:E7:3E:C0:C1:5D:28:6E:80:80:FC:31:0C:99"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wconnectusercrds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 19 Aug 2026 23:08:15 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: PHPSESSID=cbe75777ee883ab2c3872d1f282939be; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"cbe75777ee883ab2c3872d1f282939be","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=cbe75777ee883ab2c3872d1f282939be; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1292,"size_decoded":1082,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"fa1355847cfff4c42d3e13f3e980f977","sha1":"2fc584d6b30159016f8742ce44ed7d17ea5b2d10","sha256":"7cbb08fb22d0faded1039cd09025b50d97b9b47fd30de7d11edc9407831262cd","sha512":"b7c99d5b46f56585158f010cd8cc7192c0a3e61083adad3295d049c524bfc3b95f05a74d04a74e4623c7e396bac06f7ac3073369263e1d3b131ec4564524c770","ssdeep":"","tlshash":"49212e0628b892894130b9d5e2635c89f194f022b58dc9ccbadcd7174fb378888236ce","first_seen":"2026-08-19T22:39:50.354406Z","last_seen":"2026-08-19T23:08:51.616397Z","times_seen":2,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":8,"connect":28,"send":0,"wait":28,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"wconnectusercrds.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wconnectusercrds.com/assets_/jquery.min.js?2","fqdn":"wconnectusercrds.com","domain":"wconnectusercrds.com","tld":"com"},"ip":{"addr":"185.87.121.5","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wconnectusercrds.com/","date":"2026-08-19T23:08:16.036Z","timestamp":1787180896036,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wconnectusercrds.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 11:03:50 GMT","end":"Tue, 27 Oct 2026 11:03:49 GMT"},"fingerprint":{"sha1":"13:4D:DB:DF:07:93:2C:42:78:0B:FB:A5:2F:B1:B1:4F:49:98:10:18","sha256":"F4:A9:81:31:2E:A3:E9:B0:8B:06:83:E6:5F:B8:3A:40:45:50:0A:E7:3E:C0:C1:5D:28:6E:80:80:FC:31:0C:99"}}},"request":{"raw":"GET /assets_/jquery.min.js?2 HTTP/1.1\r\nHost: wconnectusercrds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wconnectusercrds.com/\r\nCookie: PHPSESSID=cbe75777ee883ab2c3872d1f282939be\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 19 Aug 2026 23:08:16 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 89478\r\nLast-Modified: Wed, 08 Dec 2021 16:43:36 GMT\r\nConnection: keep-alive\r\nETag: \"61b0e0b8-15d86\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89478,"size_decoded":89742,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65534), with CRLF line terminators","md5":"d2f5f8be1c47821e267132f5a9e5e6c1","sha1":"a4c520a7bb3ca22d3df68e3a7fcc83bf84cc6e5f","sha256":"e9ba58e888aeb492b02a86d11cd21210215df4ef487544843a0c6de8285ddf7f","sha512":"5b7a3589eebfbd7429fd63f39b31b1c77322bd0d3093b968d4176fdc9f7ab57747c71ce9ed4ea8457feef607011cfa486ec1aa871bc62ded771f08e0970373f4","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvak7:AYh8eip3huuf6IidlrvakdtQ47GKr","tlshash":"4293f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2026-08-19T22:39:50.355457Z","last_seen":"2026-08-19T23:08:51.620055Z","times_seen":2,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"wconnectusercrds.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wconnectusercrds.com/assets_/init.js?2","fqdn":"wconnectusercrds.com","domain":"wconnectusercrds.com","tld":"com"},"ip":{"addr":"185.87.121.5","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wconnectusercrds.com/","date":"2026-08-19T23:08:16.037Z","timestamp":1787180896037,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wconnectusercrds.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 11:03:50 GMT","end":"Tue, 27 Oct 2026 11:03:49 GMT"},"fingerprint":{"sha1":"13:4D:DB:DF:07:93:2C:42:78:0B:FB:A5:2F:B1:B1:4F:49:98:10:18","sha256":"F4:A9:81:31:2E:A3:E9:B0:8B:06:83:E6:5F:B8:3A:40:45:50:0A:E7:3E:C0:C1:5D:28:6E:80:80:FC:31:0C:99"}}},"request":{"raw":"GET /assets_/init.js?2 HTTP/1.1\r\nHost: wconnectusercrds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wconnectusercrds.com/\r\nCookie: PHPSESSID=cbe75777ee883ab2c3872d1f282939be\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 19 Aug 2026 23:08:16 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1708\r\nLast-Modified: Mon, 03 Aug 2026 12:55:17 GMT\r\nConnection: keep-alive\r\nETag: \"6a708fb5-6ac\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1708,"size_decoded":1969,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1708), with no line terminators","md5":"2c518e9e8cdbb95aa78d5062c8f19da7","sha1":"7aee06b6ddfc70bb23d90b4b3513facfc96c3669","sha256":"9e15226be52195e3c9367b4bec41cbc8217c92b5093a97379a3f2f2e5d812bb8","sha512":"560319d7c5e1c60f4932459a17bea7e3a98f07affbf2a271ec986295655bd0126f0d5da917bc0883a66309c75ee17d753b7ad38da02375e493fb7aff329247ac","ssdeep":"","tlshash":"02319d6abf700f7583825fcb7d3a60c5d577c89518a048e6b1169cf528b23129bd1533","first_seen":"2026-08-19T22:39:50.356662Z","last_seen":"2026-08-19T23:08:51.622793Z","times_seen":2,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":27,"send":0,"wait":27,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"wconnectusercrds.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}