{"report_id":"136a3348-c4a8-4e69-90dd-e2832224fc30","version":6,"status":"done","tags":["dyndns"],"date":"2023-12-05T07:26:13Z","url":{"schema":"http","addr":"strksmnge-pmblianspasea.dynnamn.ru/account/?view=login\u0026appIdKey=d993a4af1f52d77\u0026country=US","fqdn":"strksmnge-pmblianspasea.dynnamn.ru","domain":"dynnamn.ru","tld":"ru"},"ip":{"addr":"162.214.98.92","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"strksmnge-pmblianspasea.dynnamn.ru/account/?view=login\u0026appIdKey=d993a4af1f52d77\u0026country=US","fqdn":"strksmnge-pmblianspasea.dynnamn.ru","domain":"dynnamn.ru","tld":"ru"},"title":"403 Forbidden"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T09:03:40Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"strksmnge-pmblianspasea.dynnamn.ru","ip":{"addr":"162.214.98.92","port":80,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2019-09-16","domain_rank":0,"first_seen":"2023-12-01 12:07:23","last_seen":"2023-12-01 12:07:23","alert_count":6,"request_count":3,"received_data":1765,"sent_data":1578,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2023-12-05T07:26:01Z","timestamp":1701761161,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":33656,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO DYNAMIC_DNS Query to dynnamn .ru Domain","source":"{\"timestamp\":\"2023-12-05T07:26:01.894401+0000\",\"flow_id\":431166675592641,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.229\",\"src_port\":33656,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2038994,\"rev\":1,\"signature\":\"ET INFO DYNAMIC_DNS Query to dynnamn .ru Domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2022_09_26\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_09_26\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":43906,\"rrname\":\"strksmnge-pmblianspasea.dynnamn.ru\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":105,\"bytes_toclient\":0,\"start\":\"2023-12-05T07:26:01.894401+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-05T07:26:01Z","timestamp":1701761161,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":35521,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO DYNAMIC_DNS Query to dynnamn .ru Domain","source":"{\"timestamp\":\"2023-12-05T07:26:01.894565+0000\",\"flow_id\":2209631028487781,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.229\",\"src_port\":35521,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2038994,\"rev\":1,\"signature\":\"ET INFO DYNAMIC_DNS Query to dynnamn .ru Domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2022_09_26\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_09_26\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":9171,\"rrname\":\"strksmnge-pmblianspasea.dynnamn.ru\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":105,\"bytes_toclient\":0,\"start\":\"2023-12-05T07:26:01.894565+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-05T07:26:01Z","timestamp":1701761161,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":59896,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO DYNAMIC_DNS Query to dynnamn .ru Domain","source":"{\"timestamp\":\"2023-12-05T07:26:01.947351+0000\",\"flow_id\":440465279775895,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.229\",\"src_port\":59896,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2038994,\"rev\":1,\"signature\":\"ET INFO DYNAMIC_DNS Query to dynnamn .ru Domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2022_09_26\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_09_26\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":3262,\"rrname\":\"strksmnge-pmblianspasea.dynnamn.ru\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":105,\"bytes_toclient\":0,\"start\":\"2023-12-05T07:26:01.947351+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-05T07:26:03Z","timestamp":1701761163,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":54147,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO DYNAMIC_DNS Query to dynnamn .ru Domain","source":"{\"timestamp\":\"2023-12-05T07:26:03.221586+0000\",\"flow_id\":1924677128380818,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.229\",\"src_port\":54147,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2038994,\"rev\":1,\"signature\":\"ET INFO DYNAMIC_DNS Query to dynnamn .ru Domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2022_09_26\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_09_26\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":27247,\"rrname\":\"strksmnge-pmblianspasea.dynnamn.ru\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":105,\"bytes_toclient\":0,\"start\":\"2023-12-05T07:26:03.221586+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-05T07:26:04Z","timestamp":1701761164,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":56866,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO DYNAMIC_DNS Query to dynnamn .ru Domain","source":"{\"timestamp\":\"2023-12-05T07:26:04.041923+0000\",\"flow_id\":667067754521539,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.229\",\"src_port\":56866,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2038994,\"rev\":1,\"signature\":\"ET INFO DYNAMIC_DNS Query to dynnamn .ru Domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2022_09_26\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_09_26\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":16554,\"rrname\":\"strksmnge-pmblianspasea.dynnamn.ru\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":105,\"bytes_toclient\":0,\"start\":\"2023-12-05T07:26:04.041923+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"dynnamn.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"dynnamn.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"dynnamn.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"strksmnge-pmblianspasea.dynnamn.ru/account/?view=login\u0026appIdKey=d993a4af1f52d77\u0026country=US","fqdn":"strksmnge-pmblianspasea.dynnamn.ru","domain":"dynnamn.ru","tld":"ru"},"ip":{"addr":"162.214.98.92","port":80,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-05T07:26:03.244Z","timestamp":1701761163244,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /account/?view=login\u0026appIdKey=d993a4af1f52d77\u0026country=US HTTP/1.1\r\nHost: strksmnge-pmblianspasea.dynnamn.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Tue, 05 Dec 2023 07:25:56 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nSet-Cookie: PHPSESSID=f2a7d47af830c7dd32550ae5d5657df6; path=/\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":170,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with no line terminators","md5":"cbb55bcc4e4c013040b33e22faaa013d","sha1":"7995e35b37532ee7abe715f23225a88a81beb5d2","sha256":"afca372f9959cb6c46bde573d25172c1b223dac52cba20ffad3c8fc2ea09cc8e","sha512":"751a6fa05158382c18079bfeb1bd155651c5c0b003ac4a097541fdcc08a1eb3b17e06073a8ec68e9b2f42fe58de5f8b10ce0e10429fb45535a02352c8a5ffa49","ssdeep":"","tlshash":"8dc022afe28e200eb60322c018c712c06884027178d308d87e00b813c19087d860641c","first_seen":"2023-04-06T17:43:14Z","last_seen":"2026-05-19T08:55:23.678659Z","times_seen":198,"resource_available":true,"data":null}},"time_used":880,"timings":{"blocked":167,"dns":0,"connect":189,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"dynnamn.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"http","addr":"strksmnge-pmblianspasea.dynnamn.ru/account/?view=login\u0026appIdKey=d993a4af1f52d77\u0026country=US","fqdn":"strksmnge-pmblianspasea.dynnamn.ru","domain":"dynnamn.ru","tld":"ru"},"ip":{"addr":"162.214.98.92","port":80,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-05T07:26:03.244Z","timestamp":1701761163244,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /account/?view=login\u0026appIdKey=d993a4af1f52d77\u0026country=US HTTP/1.1\r\nHost: strksmnge-pmblianspasea.dynnamn.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=f2a7d47af830c7dd32550ae5d5657df6\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Tue, 05 Dec 2023 07:25:57 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":170,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with no line terminators","md5":"cbb55bcc4e4c013040b33e22faaa013d","sha1":"7995e35b37532ee7abe715f23225a88a81beb5d2","sha256":"afca372f9959cb6c46bde573d25172c1b223dac52cba20ffad3c8fc2ea09cc8e","sha512":"751a6fa05158382c18079bfeb1bd155651c5c0b003ac4a097541fdcc08a1eb3b17e06073a8ec68e9b2f42fe58de5f8b10ce0e10429fb45535a02352c8a5ffa49","ssdeep":"","tlshash":"8dc022afe28e200eb60322c018c712c06884027178d308d87e00b813c19087d860641c","first_seen":"2023-04-06T17:43:14Z","last_seen":"2026-05-19T08:55:23.678659Z","times_seen":198,"resource_available":true,"data":null}},"time_used":880,"timings":{"blocked":167,"dns":0,"connect":189,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"dynnamn.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"http","addr":"strksmnge-pmblianspasea.dynnamn.ru/favicon.ico","fqdn":"strksmnge-pmblianspasea.dynnamn.ru","domain":"dynnamn.ru","tld":"ru"},"ip":{"addr":"162.214.98.92","port":80,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://strksmnge-pmblianspasea.dynnamn.ru/account/?view=login\u0026appIdKey=d993a4af1f52d77\u0026country=US","date":"2023-12-05T07:26:04.051Z","timestamp":1701761164051,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: strksmnge-pmblianspasea.dynnamn.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://strksmnge-pmblianspasea.dynnamn.ru/account/?view=login\u0026appIdKey=d993a4af1f52d77\u0026country=US\r\nCookie: PHPSESSID=f2a7d47af830c7dd32550ae5d5657df6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Tue, 05 Dec 2023 07:25:58 GMT\r\nServer: Apache\r\nContent-Length: 315\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-05-21T09:24:42.087979Z","times_seen":145520,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"dynnamn.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}}]}