{"report_id":"192d1e65-ff19-4136-9f20-5a020f783c12","version":6,"status":"done","tags":[],"date":"2026-01-10T07:11:09Z","url":{"schema":"http","addr":"sutongb.shop/","fqdn":"sutongb.shop","domain":"sutongb.shop","tld":"shop"},"ip":{"addr":"104.21.7.113","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sutongb.shop/","fqdn":"sutongb.shop","domain":"sutongb.shop","tld":"shop"},"title":"sutongb.shop/","dom":{"size":80,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"e4fd67ec895a157030e6f0982d66a5ec","sha1":"5bde172699e9cf0b443df25fb74c524afb8ca316","sha256":"33671490ed32898bc0a1a139fc620a6cd77c02e64ad2ad6ab37c87b58368a7c8","sha512":"2139a625d0961eb41b9515bf40521185cb19dbe0fb31432b6e6973a7d7447cb09fd5aa252a52813dbca3c1a8a26518e9666050151b3133d4b79376c2f08f1e2a","ssdeep":"","tlshash":"9ea012ed6050004108a077492c91368b34899185100815005c42e47089041118c03084","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sutongb.shop/","fqdn":"sutongb.shop","domain":"sutongb.shop","tld":"shop"},"ip":{"addr":"104.21.7.113","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-14T07:11:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"sutongb.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"sutongb.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"sutongb.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"sutongb.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"sutongb.shop","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-10T07:11:09.493794Z","last_seen":"2026-01-10T07:11:09.493794Z","alert_count":8,"request_count":2,"received_data":6694,"sent_data":912,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"sutongb.shop/","fqdn":"sutongb.shop","domain":"sutongb.shop","tld":"shop"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-10T07:10:47.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sutongb.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 15:47:32 GMT","end":"Sun, 05 Apr 2026 16:42:13 GMT"},"fingerprint":{"sha1":"02:D0:1F:88:A3:9D:56:5D:B0:E8:41:D1:AC:99:97:CD:02:B6:F1:76","sha256":"5A:C4:85:F9:E1:57:4F:53:63:4F:A5:22:E8:F6:70:3B:6B:8D:1B:2A:5B:24:75:32:1C:DD:4D:E9:4B:07:70:60"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sutongb.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 07:10:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JnNJYsIEDbUtVL4AR8HNm64b5DPdgMccwCySam2gOjdE9Js312T5Oj9OoTYs3SkmcxY8R6wEohn%2Fzx7YPWSXYDDVzahYi133aEc%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9bba5b49591b56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"64563df4339add36a96ed5e54628bcc5","sha1":"081663f0606b81dfba8f3e5fbd3258e4dc5a83b8","sha256":"a8e9b8233b7f91c87b2f52bc8c48f17e1c76d334235455cf718686e73c48e7f2","sha512":"1191204e14c6cb98efab41d21ce43bcde6be0cc9ab02e2b66b4b634435ccb9edf8a4bf55ceec2b899bd1498821874134cc5a8f28a408709a137b312184798c61","ssdeep":"","tlshash":"7390044d345000c100c1c70f7c313ddf30c5f0c7001c30045c07c4704f054515c53044","first_seen":"2023-10-14T03:06:59Z","last_seen":"2026-03-13T00:32:45.669597Z","times_seen":38,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":21,"dns":0,"connect":1,"send":0,"wait":142,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"sutongb.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"sutongb.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"sutongb.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"sutongb.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sutongb.shop/favicon.ico","fqdn":"sutongb.shop","domain":"sutongb.shop","tld":"shop"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sutongb.shop/","date":"2026-01-10T07:10:47.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sutongb.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 15:47:32 GMT","end":"Sun, 05 Apr 2026 16:42:13 GMT"},"fingerprint":{"sha1":"02:D0:1F:88:A3:9D:56:5D:B0:E8:41:D1:AC:99:97:CD:02:B6:F1:76","sha256":"5A:C4:85:F9:E1:57:4F:53:63:4F:A5:22:E8:F6:70:3B:6B:8D:1B:2A:5B:24:75:32:1C:DD:4D:E9:4B:07:70:60"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sutongb.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sutongb.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 07:10:47 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Jan 2024 13:30:35 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AaASDdxrenDHRLvHVMoNMPrKf8uKB7Ogs9GrB6mX8LLKA4IBSx%2Bmc7Q%2F8%2BLKumJN%2BrsQoo4%2FNj3n1XSasQSimjXzRtw8dPCz4TE%3D\"}]}\r\netag: W/\"65a5337b-1536\"\r\ncontent-encoding: br\r\ncf-ray: 9bba5b4c2df35688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"b0a102991e7332643ae57365023c00c8","sha1":"4ea4c55c982e08bda104d2e8e981594c067cef24","sha256":"1dfc58ffbcb07c761f79eb6b46f50b3789bd21e41a0b4cb1aca82b1dd8020fcc","sha512":"08e1a60f257755ed18478c56e5684627fcd3d3077325648526260bb06526bc07da1a4bd26b3382add493ffb91f6958221c76c0f7f968e32e81c9943a559bbd57","ssdeep":"96:kVHBkspHt4BHWHW7DgdzDHzHiHzHVHHZHBHH7HHHQHbHHH7HHHHHHHGHHHgHHHHo:ZxN","tlshash":"23b104a06de4d470c59876b0b612cbf957f4efe530541a4e16667e2bfc32266b703e08","first_seen":"2023-04-05T03:26:14Z","last_seen":"2026-03-29T05:51:45.564914Z","times_seen":370,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"sutongb.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"sutongb.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"sutongb.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"sutongb.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}