{"report_id":"11828329-87cc-4dd6-ae6a-e90742f14bbd","version":6,"status":"done","tags":["dyndns"],"date":"2026-01-31T14:03:24Z","url":{"schema":"http","addr":"federal.homedns.org","fqdn":"federal.homedns.org","domain":"federal.homedns.org","tld":"homedns.org"},"ip":{"addr":"91.208.206.5","port":0,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"final":{"url":{"schema":"https","addr":"federal.homedns.org/index.html","fqdn":"federal.homedns.org","domain":"federal.homedns.org","tld":"homedns.org"},"title":"Itaú 30 horas","dom":{"size":9699,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (882)","md5":"8e4eb26cd9763ac2dd680ea328a5b867","sha1":"bc0792b32d7be039a45c9d8562194425c76ea6c6","sha256":"68ef3da06085a4743382941a4ada0d1a693c08dcab648866808b799c4428d7c4","sha512":"6bb05a1fff29b404630967b82846cb0a5f2b85a6feb5b1319a006b91637944914339866aebfd6a652faf6cbc76da309ff06d152711c5b8fa941243d95e0bb602","ssdeep":"192:kw+ZJiWOdsuWhEck47ghJhdXYvyWyxtPVltY2X6DhJmUwz3UK3:F2indsuGN2WwT7","tlshash":"f412e71176e10d3ea0177274e2a5eed825f76423e3428d00b96f315e4fe8ee496276ec","dom_hash":"domhashb48c92aea3cebb6b86add953ea1f18ce","first_seen":"2026-01-31T13:39:23.708382Z","last_seen":"2026-01-31T21:04:31.628512Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"federal.homedns.org","fqdn":"federal.homedns.org","domain":"federal.homedns.org","tld":"homedns.org"},"ip":{"addr":"91.208.206.5","port":0,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-07T14:03:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"federal.homedns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]},"summary":[{"fqdn":"federal.homedns.org","ip":{"addr":"91.208.206.5","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"domain_registered":"2001-12-03","domain_rank":0,"first_seen":"2026-01-31T13:39:20.772722Z","last_seen":"2026-01-31T13:39:20.772722Z","alert_count":20,"request_count":10,"received_data":125062,"sent_data":4688,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"federal.homedns.org/index.html","fqdn":"federal.homedns.org","domain":"federal.homedns.org","tld":"homedns.org"},"ip":{"addr":"91.208.206.5","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"eventHandler","is_inline":false,"md5":"80e46566c84b7d543445dc561ffdf6bc","sha1":"96c3cca0404e88ca7711d5e47bd8408e2e73842c","sha256":"d043340bcd1d1515fa78889997843649c63e87c7de74ec7982fc6b750e1748a8","sha512":"a16d2cab085619a7bec7e8f5a28d61d88e50da863d71eee63effd0202a99329910b5463084294c235b048cee969a9d593119d8d2b8a88069f91bab1da14c57d3","ssdeep":"","tlshash":"0e6000000a08008000888000a0008280220828020208008000000888080023282a020a","size":15,"data":"","first_seen":"2026-01-31T13:39:23.738494Z","last_seen":"2026-01-31T21:04:31.649152Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"federal.homedns.org/index.html","fqdn":"federal.homedns.org","domain":"federal.homedns.org","tld":"homedns.org"},"ip":{"addr":"91.208.206.5","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a0f0cc16e70d3dbc37dc1cab1bbee62","sha1":"ecfc8158f82170fd01d08c7f3d0551c1cb8f269d","sha256":"383e6c2317062f15de2c0e9a25bc904d23e27f307b675b8dc2eb649556221e6a","sha512":"e748910e9ce2a1abfbcc2b6ad5e7e80c9086b4dfc03c78dc77be4c0a04857955257dace97d504378271ac242d9ef54407801567e436f6e680ba85a75a62b9624","ssdeep":"","tlshash":"6fd023546d80c50d193711356915475815fdd4334b05c9c1757fd74c4fc4f60c45ddc8","size":239,"data":"","first_seen":"2026-01-31T13:39:23.741052Z","last_seen":"2026-01-31T21:04:31.647934Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"federal.homedns.org/index.html","fqdn":"federal.homedns.org","domain":"federal.homedns.org","tld":"homedns.org"},"ip":{"addr":"91.208.206.5","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"3996b775d3652158a80a083a6e5a2b9d","sha1":"fde98937db2c7c8522d840bb0c7568aa6f6bf922","sha256":"fb41e004ccaf9fdf300be7017379ec2a56f3840051cb4debdf13e9657ff2923c","sha512":"56115fbc7a8177408203bdb2396e36d75c69577173cb5e94b952788e489d75dcc56fd8c9a9e425383ea75ce68f785cf6600314aa4af619d517763f00d090fd65","ssdeep":"","tlshash":"c211ef2f986b09fca15391bb13fa9074767a000ba152e705f90cd7128f44f500857ba8","size":968,"data":"","first_seen":"2026-01-31T13:39:23.743353Z","last_seen":"2026-01-31T21:04:31.651023Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"federal.homedns.org/index.html","fqdn":"federal.homedns.org","domain":"federal.homedns.org","tld":"homedns.org"},"ip":{"addr":"91.208.206.5","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"657a142e5efd65f5e29cd0f891561fd4","sha1":"0d1485fd900ccca20ee097c6c24d9fc2778bd210","sha256":"fcad8681e92c0ad6194eafaf468a83d2bc989e4fdf303ae258ff8679f01ef45c","sha512":"8ca35594201a347f57aa7887853b50a2246b49baf2d5e0cb9e54f1d3c4f0c1a42db30a8dfb402551ee7754946923d2b5c550e5b00975842f7af5607828d67a1e","ssdeep":"","tlshash":"7941c91eadb310601aa7327da2ef46487976212b640acd017e6c9b804f55c690bfeb8c","size":2004,"data":"","first_seen":"2026-01-31T13:39:23.746224Z","last_seen":"2026-01-31T21:04:31.652193Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"98f61a17617177e6c6347a13c5f540b3","sha1":"708da96c84b686404490086667c26df6165618db","sha256":"8a6731249668d671f751d8329cec10a2afdb73c0ed18c6693238622eb2c546e3","sha512":"7964b4510566ce2f4a8bd318cab7274695d6197ece5ab9c8e52856f67360f46e26ba08d9f4d162272d15bd75d629e0b337db274ab81b4f6973fbaed3786408c3","ssdeep":"","tlshash":"90a004d5d040d41c117541175c015114057d55714f1f14d35dd5d54d4cddf55c55555c","size":72,"data":"","first_seen":"2026-01-31T13:39:23.748649Z","last_seen":"2026-01-31T21:04:31.654284Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"federal.homedns.org/index_files/ga.js.download","fqdn":"federal.homedns.org","domain":"federal.homedns.org","tld":"homedns.org"},"ip":{"addr":"91.208.206.5","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://federal.homedns.org/index.html","date":"2026-01-31T14:03:03.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federal.homedns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:40:51 GMT","end":"Thu, 16 Apr 2026 19:40:50 GMT"},"fingerprint":{"sha1":"01:C7:61:91:9E:89:6B:87:EE:8F:27:0D:D8:5C:6B:A9:F7:64:C0:E9","sha256":"52:EF:F0:56:A2:E9:ED:1F:51:EF:A2:F9:E4:6A:C4:AF:0B:D0:D0:9A:E5:1C:79:C0:10:54:3A:2B:DE:59:EF:75"}}},"request":{"raw":"GET /index_files/ga.js.download HTTP/1.1\r\nHost: federal.homedns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://federal.homedns.org/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 14:03:03 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\netag: W/\"696aa1e5-e3b8\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58296,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"cbb42513032d6c09e496731ac16c20a9","sha1":"c92f38a701aad58408451d24dd4c47b05f158cf0","sha256":"d189695b2f3bb92369881f2428fa861dca9d9a94c638d9bdc4e2fa747d6f315b","sha512":"3d76f1018afceaba7cbb4083f4a5b5758966ec2aa5d5c6b07d72361782809f7ed4bd34ed9e0c4154d01a2db7192155de8251e5a834dd90b8d9823d916e1b7285","ssdeep":"768:cHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdom2:cmDD6oeFUycwpk06hWp1b99c7VM","tlshash":"8443021803de40a2cd8978d9426f2f3d842a1863da1c94bd1f5b6df4ca0d8a4767f1e9","first_seen":"2024-11-25T13:26:01.204756Z","last_seen":"2026-08-17T01:13:03.248565Z","times_seen":13994,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"federal.homedns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"federal.homedns.org/index_files/logo_nm.png","fqdn":"federal.homedns.org","domain":"federal.homedns.org","tld":"homedns.org"},"ip":{"addr":"91.208.206.5","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://federal.homedns.org/index.html","date":"2026-01-31T14:03:03.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federal.homedns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:40:51 GMT","end":"Thu, 16 Apr 2026 19:40:50 GMT"},"fingerprint":{"sha1":"01:C7:61:91:9E:89:6B:87:EE:8F:27:0D:D8:5C:6B:A9:F7:64:C0:E9","sha256":"52:EF:F0:56:A2:E9:ED:1F:51:EF:A2:F9:E4:6A:C4:AF:0B:D0:D0:9A:E5:1C:79:C0:10:54:3A:2B:DE:59:EF:75"}}},"request":{"raw":"GET /index_files/logo_nm.png HTTP/1.1\r\nHost: federal.homedns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://federal.homedns.org/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 14:03:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 10 Dec 2016 05:29:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"584b92d6-762\"\r\nexpires: Mon, 02 Mar 2026 14:03:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 38, 8-bit/color RGBA, non-interlaced","md5":"62fd3761c21e49596096044f0e9343ec","sha1":"bd5f1f547d5b335f80d07376a5f143c30116a060","sha256":"479e98acc92133600bf208703d3d6aa267e8b270291de67f999d96c20451a35f","sha512":"533a5d641395d489f9ff93176033c1daed064e9844e84e13cf60f61839d81b45e9a9326045fc23ef0db44df582a68956fda2f459c775bfaf5dba8035f8517cd8","ssdeep":"","tlshash":"5f412bfbc0280ca2ecb384826422c006a8ff5114c12a8af9044ed4b777fcdc796e7223","first_seen":"2026-01-31T13:39:23.714632Z","last_seen":"2026-01-31T21:04:31.644322Z","times_seen":3,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"federal.homedns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"federal.homedns.org/index_files/30_nm.png","fqdn":"federal.homedns.org","domain":"federal.homedns.org","tld":"homedns.org"},"ip":{"addr":"91.208.206.5","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://federal.homedns.org/index.html","date":"2026-01-31T14:03:03.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federal.homedns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:40:51 GMT","end":"Thu, 16 Apr 2026 19:40:50 GMT"},"fingerprint":{"sha1":"01:C7:61:91:9E:89:6B:87:EE:8F:27:0D:D8:5C:6B:A9:F7:64:C0:E9","sha256":"52:EF:F0:56:A2:E9:ED:1F:51:EF:A2:F9:E4:6A:C4:AF:0B:D0:D0:9A:E5:1C:79:C0:10:54:3A:2B:DE:59:EF:75"}}},"request":{"raw":"GET /index_files/30_nm.png HTTP/1.1\r\nHost: federal.homedns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://federal.homedns.org/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 14:03:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 10 Dec 2016 05:29:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"584b92d6-89a\"\r\nexpires: Mon, 02 Mar 2026 14:03:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 38, 8-bit/color RGBA, non-interlaced","md5":"2719fd1dfcdcf7b1ce328e68fd58329a","sha1":"54ea3b6ab9d7a0e633ad50bac41fd1ccc1ac50da","sha256":"2942283657612b371f42e59a6e28db8d2c3095fc31cf0b4eed39ccc5a1672485","sha512":"82a2a832dc0a92231b822308ba9d13e9192118bcc8f04edeaf6534d6ac8f1faab36cea5a6d4c7ae5cce11de886255022ade194a9472530e98f3fc6d5ac7e353a","ssdeep":"","tlshash":"b74109bdb23af8a1c2d2826f0b11611ef4fe439d1420f2b5c81708924b270687a90b85","first_seen":"2026-01-31T13:39:23.727484Z","last_seen":"2026-01-31T21:04:31.646327Z","times_seen":3,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"federal.homedns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"federal.homedns.org/index_files/seta_laranja.png","fqdn":"federal.homedns.org","domain":"federal.homedns.org","tld":"homedns.org"},"ip":{"addr":"91.208.206.5","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://federal.homedns.org/index.html","date":"2026-01-31T14:03:03.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federal.homedns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:40:51 GMT","end":"Thu, 16 Apr 2026 19:40:50 GMT"},"fingerprint":{"sha1":"01:C7:61:91:9E:89:6B:87:EE:8F:27:0D:D8:5C:6B:A9:F7:64:C0:E9","sha256":"52:EF:F0:56:A2:E9:ED:1F:51:EF:A2:F9:E4:6A:C4:AF:0B:D0:D0:9A:E5:1C:79:C0:10:54:3A:2B:DE:59:EF:75"}}},"request":{"raw":"GET /index_files/seta_laranja.png HTTP/1.1\r\nHost: federal.homedns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://federal.homedns.org/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 14:03:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 10 Dec 2016 05:29:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"584b92d6-9ea\"\r\nexpires: Mon, 02 Mar 2026 14:03:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2538,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 30, 8-bit/color RGBA, interlaced","md5":"46d9a2ea7961f10f19e8417377b921f4","sha1":"e8100ad3520a581fb87c58b57e64a03c75c54784","sha256":"56de049a54da6dd29c04507dfe38e70fca4d53ee7a95cde26d3a35183250a598","sha512":"73fb0838ff844b041bbc0ee19b2e5ee7dec41639961790a9a82d6704f495acc82a080ac4aa1811bfeca3a2f81d4895628e80576a39aa9da1de7d0325a6d3f383","ssdeep":"","tlshash":"24514c89ce44b89ba308c6e838f7a107dd87ab48f6a4f155548fc91c48721f5640dcce","first_seen":"2026-01-31T13:39:23.729638Z","last_seen":"2026-01-31T21:04:31.632397Z","times_seen":3,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"federal.homedns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"federal.homedns.org/favicon.png","fqdn":"federal.homedns.org","domain":"federal.homedns.org","tld":"homedns.org"},"ip":{"addr":"91.208.206.5","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://federal.homedns.org/index.html","date":"2026-01-31T14:03:03.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federal.homedns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:40:51 GMT","end":"Thu, 16 Apr 2026 19:40:50 GMT"},"fingerprint":{"sha1":"01:C7:61:91:9E:89:6B:87:EE:8F:27:0D:D8:5C:6B:A9:F7:64:C0:E9","sha256":"52:EF:F0:56:A2:E9:ED:1F:51:EF:A2:F9:E4:6A:C4:AF:0B:D0:D0:9A:E5:1C:79:C0:10:54:3A:2B:DE:59:EF:75"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: federal.homedns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://federal.homedns.org/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 14:03:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Oct 2016 19:26:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"58013150-443b\"\r\nexpires: Mon, 02 Mar 2026 14:03:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 152 x 152, 8-bit/color RGBA, interlaced","md5":"696864f69d214788c854cbcf5a9c8b1a","sha1":"a0e69ef8e5e73723ecb0afcdb246f0c7787c05ce","sha256":"4fa922c9585a89d32aa6cf00fb11471bd9ce5680aad8ef6f0fc2fc731db01ad6","sha512":"1769a171ae0a0c530747ae3cfe1fa7d3d1ff1fc96bbd5f38f4d7cfe29a2f5ba2fcb14c52cd1b70d7f54e1b94889c897180f657f97be8930ee586f58255a00f6e","ssdeep":"384:FsOYeJI9jNrWHtDLj/L+47gV748hIj1NkwZ:LVutNMtvj/C4xGIjgw","tlshash":"3d72c084257a16af3eb20a17b47e03b27060b865fba27b415d424245d9bccf67377194","first_seen":"2026-01-31T13:39:23.733055Z","last_seen":"2026-01-31T21:04:31.63668Z","times_seen":3,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"federal.homedns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"federal.homedns.org/","fqdn":"federal.homedns.org","domain":"federal.homedns.org","tld":"homedns.org"},"ip":{"addr":"91.208.206.5","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-31T14:03:02.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federal.homedns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:40:51 GMT","end":"Thu, 16 Apr 2026 19:40:50 GMT"},"fingerprint":{"sha1":"01:C7:61:91:9E:89:6B:87:EE:8F:27:0D:D8:5C:6B:A9:F7:64:C0:E9","sha256":"52:EF:F0:56:A2:E9:ED:1F:51:EF:A2:F9:E4:6A:C4:AF:0B:D0:D0:9A:E5:1C:79:C0:10:54:3A:2B:DE:59:EF:75"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: federal.homedns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 14:03:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: index.html\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9582,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T01:12:16.120648Z","times_seen":17927552,"resource_available":true,"data":null}},"time_used":762,"timings":{"blocked":168,"dns":43,"connect":56,"send":0,"wait":426,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"federal.homedns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"federal.homedns.org/index_files/iphone.css","fqdn":"federal.homedns.org","domain":"federal.homedns.org","tld":"homedns.org"},"ip":{"addr":"91.208.206.5","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://federal.homedns.org/index.html","date":"2026-01-31T14:03:03.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federal.homedns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:40:51 GMT","end":"Thu, 16 Apr 2026 19:40:50 GMT"},"fingerprint":{"sha1":"01:C7:61:91:9E:89:6B:87:EE:8F:27:0D:D8:5C:6B:A9:F7:64:C0:E9","sha256":"52:EF:F0:56:A2:E9:ED:1F:51:EF:A2:F9:E4:6A:C4:AF:0B:D0:D0:9A:E5:1C:79:C0:10:54:3A:2B:DE:59:EF:75"}}},"request":{"raw":"GET /index_files/iphone.css HTTP/1.1\r\nHost: federal.homedns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://federal.homedns.org/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 14:03:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 10 Dec 2016 05:29:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"584b92d6-431f\"\r\nexpires: Sun, 01 Feb 2026 02:03:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17183,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"c7d28c6c4b206afcae9af075fef45429","sha1":"d3097c85346b5f3a500516d1c0b9e1639435064e","sha256":"cc0b28086f0a607e5ce708f72b889dd407b96e6be85b71cd1c5ef08861da44da","sha512":"b8e5c5a9a614861e2f07744b61fc950fbf53133b00bc6a0ee3cca84a57ae7a88b1720571ea6b132f73e904ce58c4d725b9a1e4c66224f5588c72e963eaa5d798","ssdeep":"384:xVU7kjLPdLSVx4BzqgALF6f5MkuGusjXfCLjchet2Myyt2Hhzzuqorvg/ffEiS:xVU7kjLPdLSVx4BzqgALF6f+kuGusjXy","tlshash":"d572dc29ee090697f2379d1873737ad2e78c21435b9686247bd47b908fba4782520fcd","first_seen":"2026-01-31T13:39:23.72263Z","last_seen":"2026-01-31T21:04:31.642625Z","times_seen":3,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"federal.homedns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"federal.homedns.org/index_files/spacer.gif","fqdn":"federal.homedns.org","domain":"federal.homedns.org","tld":"homedns.org"},"ip":{"addr":"91.208.206.5","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://federal.homedns.org/index.html","date":"2026-01-31T14:03:03.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federal.homedns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:40:51 GMT","end":"Thu, 16 Apr 2026 19:40:50 GMT"},"fingerprint":{"sha1":"01:C7:61:91:9E:89:6B:87:EE:8F:27:0D:D8:5C:6B:A9:F7:64:C0:E9","sha256":"52:EF:F0:56:A2:E9:ED:1F:51:EF:A2:F9:E4:6A:C4:AF:0B:D0:D0:9A:E5:1C:79:C0:10:54:3A:2B:DE:59:EF:75"}}},"request":{"raw":"GET /index_files/spacer.gif HTTP/1.1\r\nHost: federal.homedns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://federal.homedns.org/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 14:03:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 45\r\nlast-modified: Sat, 10 Dec 2016 05:29:58 GMT\r\netag: \"584b92d6-2d\"\r\nexpires: Mon, 02 Mar 2026 14:03:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 5 x 5","md5":"c4e3e106fbcc28e9c5b2be2a78018886","sha1":"fe87fba9c2a6384dfe3827cf6608b0692cb79872","sha256":"e0f8dceb516151e70891cb4ed02aac4b5800b37c13d8328a35919472efe0f93e","sha512":"836727d22cb6b1734864fc1ef47c5acc29cf250451aad2ad57cff60a50c0a1cf4f7f8558262384685b4c4d21771ab346340dd053009e2ac5d91c4ddf71bb3e2d","ssdeep":"","tlshash":"ba900401fd50c014c10145345f7cc54433001c1d4d05054730fc1705dc345110413005","first_seen":"2023-04-05T02:54:02Z","last_seen":"2026-08-16T17:50:26.63708Z","times_seen":1261,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"federal.homedns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"federal.homedns.org/index_files/bg_iph_nm.png","fqdn":"federal.homedns.org","domain":"federal.homedns.org","tld":"homedns.org"},"ip":{"addr":"91.208.206.5","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://federal.homedns.org/index.html","date":"2026-01-31T14:03:03.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federal.homedns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:40:51 GMT","end":"Thu, 16 Apr 2026 19:40:50 GMT"},"fingerprint":{"sha1":"01:C7:61:91:9E:89:6B:87:EE:8F:27:0D:D8:5C:6B:A9:F7:64:C0:E9","sha256":"52:EF:F0:56:A2:E9:ED:1F:51:EF:A2:F9:E4:6A:C4:AF:0B:D0:D0:9A:E5:1C:79:C0:10:54:3A:2B:DE:59:EF:75"}}},"request":{"raw":"GET /index_files/bg_iph_nm.png HTTP/1.1\r\nHost: federal.homedns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://federal.homedns.org/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 14:03:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 10 Dec 2016 05:29:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"584b92d6-c6d\"\r\nexpires: Mon, 02 Mar 2026 14:03:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 4 x 80, 8-bit/color RGBA, non-interlaced","md5":"503cb0930cb7795d705b3d0a0adeb7ba","sha1":"1a4908dcdd2638a6ecf31d990ac360789e65cde4","sha256":"fea1d162a3c7bc8f7d4812a40b8047417ab6cc998ca87ab70df1a2d2b99ce3f4","sha512":"72eb777af8dba91c902f5de45a2688890c8d6b9cb1b372a1b8533f7341acd0f336ef547e83753e1fdec42f7b105cf5e7859f3377c9f722ceeed9269f65241251","ssdeep":"","tlshash":"54617c7f89b0a44fb8dcba424dcd2242977927ac8a63377894c169ef5055e0b5b270b4","first_seen":"2026-01-31T13:39:23.717779Z","last_seen":"2026-01-31T21:04:31.639852Z","times_seen":3,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"federal.homedns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"federal.homedns.org/index.html","fqdn":"federal.homedns.org","domain":"federal.homedns.org","tld":"homedns.org"},"ip":{"addr":"91.208.206.5","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-31T14:03:03.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federal.homedns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:40:51 GMT","end":"Thu, 16 Apr 2026 19:40:50 GMT"},"fingerprint":{"sha1":"01:C7:61:91:9E:89:6B:87:EE:8F:27:0D:D8:5C:6B:A9:F7:64:C0:E9","sha256":"52:EF:F0:56:A2:E9:ED:1F:51:EF:A2:F9:E4:6A:C4:AF:0B:D0:D0:9A:E5:1C:79:C0:10:54:3A:2B:DE:59:EF:75"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: federal.homedns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 14:03:03 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 20 Apr 2017 23:25:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"58f94372-256e\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9582,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (882)","md5":"bcb852dab4f9e0995961ad2636da21dc","sha1":"04b67bed15c30c292226765db9c1104120dcd2c0","sha256":"8e3ad948d0974fa8152c24e0ad3a633e0f35c195e3060cdcc5501b9562e29ed2","sha512":"a70776c0a1784d46c91cfb60ff9b2e5461d3d3bb8823c7c6b2430dd51e6de13387abc02cb46061498b31753d5f68feef0bf86ac7a274ad57024d653e93c4cd85","ssdeep":"192:kw+ZriWOdsuWhqck47ghJhdXYvyWyxtPTWlzHRw3jfcaj:FkindsuUN2WwAe","tlshash":"fb12c61176e50c3ea0177274e2b9edd825f77017e3428900b96f712e8fe4ee45a276ac","first_seen":"2026-01-31T13:39:23.735682Z","last_seen":"2026-01-31T21:04:31.640893Z","times_seen":3,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"federal.homedns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}}]}