{"report_id":"0bc0442f-a450-4453-b432-0abadf3c995d","version":6,"status":"done","tags":[],"date":"2025-10-11T00:06:35Z","url":{"schema":"http","addr":"stuoutlets.com/","fqdn":"stuoutlets.com","domain":"stuoutlets.com","tld":"com"},"ip":{"addr":"104.16.210.68","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"stuoutlets.com/","fqdn":"stuoutlets.com","domain":"stuoutlets.com","tld":"com"},"title":"500 Internal Server Error"},"submit":{"url":{"schema":"http","addr":"stuoutlets.com/","fqdn":"stuoutlets.com","domain":"stuoutlets.com","tld":"com"},"ip":{"addr":"104.16.210.68","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-15T00:06:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"stuoutlets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"stuoutlets.com","ip":{"addr":"104.16.210.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-09","domain_rank":0,"first_seen":"2025-10-11T00:06:36.020991Z","last_seen":"2025-10-11T00:06:36.020991Z","alert_count":2,"request_count":2,"received_data":1623,"sent_data":1154,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"stuoutlets.com/","fqdn":"stuoutlets.com","domain":"stuoutlets.com","tld":"com"},"ip":{"addr":"104.16.210.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b989042ee7d6ea959c4e9df24aff4ad2","sha1":"6a715c0064061fbfd68e63c7288b4d4b1401a5a5","sha256":"67a1d1f334bc2dd1a06db91b967419197e882b8645a6796ea65ae8838b612a4e","sha512":"b09265ca7e2457eeb3de71bb97b2e048244c4f69a7348a4ceb24b9589397eab61282faea4936e9626aa0fd374ad921dedeeddc13d113abdab76eec954c5c402a","ssdeep":"","tlshash":"e08004104401553343c535cd100515d30f5303443704c5c0fc00c74d1040145c10f7ff","size":36,"data":"","first_seen":"2025-10-11T00:06:39.694612Z","last_seen":"2025-10-11T00:06:39.694612Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"stuoutlets.com/","fqdn":"stuoutlets.com","domain":"stuoutlets.com","tld":"com"},"ip":{"addr":"104.16.210.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-11T00:06:13.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stuoutlets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 18:33:37 GMT","end":"Wed, 07 Jan 2026 19:33:26 GMT"},"fingerprint":{"sha1":"B1:B6:32:78:1D:BE:3C:67:B4:6C:88:BD:87:11:63:ED:D8:A9:BA:D9","sha256":"2E:87:09:21:0D:6E:8F:AB:AA:E3:FA:88:86:00:6E:7F:DF:04:91:68:A4:B1:90:97:99:4D:51:6C:50:64:A4:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: stuoutlets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 00:06:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-trace-id: 97D407A0-4CCD-7CD2-84BD-A3ADBCB4FB7D\r\nexecution-time: 0.0246129036\r\ntrace_id: 97D407A0-4CCD-7CD2-84BD-A3ADBCB4FB7D\r\nset-cookie: shop_global_visit_id=2E648ABC-A6D3-DB02-2C10-B8293C6464DA; expires=Tue, 09-Oct-2035 00:06:13 GMT; Max-Age=315360000; path=/\nshop_checkout_visit_id=88D5E780-70AD-BE60-BCCA-16006964843A; expires=Tue, 09-Oct-2035 00:06:13 GMT; Max-Age=315360000; path=/\nshop_global_visit_session=68B1C822-58BB-CFDC-3C80-306752CE3FF2; expires=Sun, 12-Oct-2025 00:06:13 GMT; Max-Age=86400; path=/\nPHPSESSID=8e64d943c850b6ea57bc15a1392f8b42; path=/\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 98ca1c3fafb37127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":295,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"fd21d1dcbe45b397e42a15aa5bd0c100","sha1":"a8ebd050cb1b812740f28d6305af36167d6b30b7","sha256":"03ae2ee6e99ae8934c146800a3c007ce76e3e51ee68e66c838f2972d4c49a03a","sha512":"5bf55ad5b34ab5bb85e37149b4e9ae14ff2663e697b753bf9e8cbfab9f941613a80a621f4f7dc4d3846235f3e1bba40cb7a1cdc30c4db8cdba470e0942ffe51d","ssdeep":"","tlshash":"52e02b275d03aa25946b254491837bc8db9a851728dac480d1c2cb97e1c77c7ca4f3ed","first_seen":"2025-10-11T00:06:39.691919Z","last_seen":"2025-10-11T00:06:39.691919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":305,"dns":286,"connect":1,"send":0,"wait":200,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"stuoutlets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stuoutlets.com/favicon.ico","fqdn":"stuoutlets.com","domain":"stuoutlets.com","tld":"com"},"ip":{"addr":"104.16.210.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stuoutlets.com/","date":"2025-10-11T00:06:14.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stuoutlets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 18:33:37 GMT","end":"Wed, 07 Jan 2026 19:33:26 GMT"},"fingerprint":{"sha1":"B1:B6:32:78:1D:BE:3C:67:B4:6C:88:BD:87:11:63:ED:D8:A9:BA:D9","sha256":"2E:87:09:21:0D:6E:8F:AB:AA:E3:FA:88:86:00:6E:7F:DF:04:91:68:A4:B1:90:97:99:4D:51:6C:50:64:A4:2F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: stuoutlets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stuoutlets.com/\r\nCookie: shop_global_visit_id=2E648ABC-A6D3-DB02-2C10-B8293C6464DA; shop_checkout_visit_id=88D5E780-70AD-BE60-BCCA-16006964843A; shop_global_visit_session=68B1C822-58BB-CFDC-3C80-306752CE3FF2; PHPSESSID=8e64d943c850b6ea57bc15a1392f8b42\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 00:06:14 GMT\r\ncontent-type: image/x-icon\r\ncontent-encoding: br\r\nlast-modified: Tue, 18 Jun 2024 08:33:28 GMT\r\netag: W/\"66714658-46\"\r\ncf-cache-status: EXPIRED\r\nexpires: Sun, 19 Oct 2025 00:06:14 GMT\r\ncache-control: public, max-age=691200\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98ca1c41fce9b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 1x1, 32 bits/pixel","md5":"735ddbd8a50494b34bbed5fe68727c42","sha1":"ab6c96f55f6f9383c8c73f2838d07398529a4b8f","sha256":"23d7bcc5e68b94d6e03382ac1d9a14ab2d0134772682ae0dd1b2e8b4c85afc51","sha512":"b3a7773c84719a1864c911422a7e6f37efecc6952dbe85bfcdb095fd0434487fbb44d0d810890d96a50f4bf3ef8a3c32a47de5115f8e0cefab7431f10eee9928","ssdeep":"","tlshash":"51a00082b300008ec0000f3000f30b0b2a2cc0028a3a230302200308aca32c8080a3c2","first_seen":"2023-05-07T20:28:17Z","last_seen":"2026-05-05T05:33:19.576889Z","times_seen":4710,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"stuoutlets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}
