{"report_id":"19728136-f362-4a82-82c1-8fc62578ce76","version":0,"status":"done","tags":[],"date":"2026-08-26T10:06:21Z","url":{"schema":"http","addr":"base.qozs.xyz/","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"38.147.164.51","port":0,"asn":932,"as":"XNNET","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"base.qozs.xyz/home","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"title":"Base","dom":{"size":8334,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2420)","md5":"ca69c01dcd7feff52518edb003abdcb3","sha1":"34c61cad18f513b3eaa955921eb4280d304c1fea","sha256":"e5cb841ad57b0349e6ca6b7548e866241abbf89d7fcf310182762901eeb38732","sha512":"ac64e36bae61d60f65060e40a9ff641c1557bad22465578ec30fcde1becabed7bc9a2eecbfdbc08fc24e5cf229ec14f134f4f843629b9f6f654aee40086bef90","ssdeep":"192:hSlnQuxOHtd2mqycuuDIvFD5hmNM1sg8Q2cCoD2:hSlnQuxONHuDIvu","tlshash":"ab0266506299013d512387e8963abf743156e207430c913039dd2976afd7f2db8f7ab8","dom_hash":"domhashf08831d8909d0bfd3a875474a2538f9d","first_seen":"2026-08-26T10:06:24.38811Z","last_seen":"2026-08-26T10:06:24.38811Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"base.qozs.xyz/","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"38.147.164.51","port":0,"asn":932,"as":"XNNET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-30T10:06:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"base.qozs.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"base.qozs.xyz","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-05-06","domain_rank":0,"first_seen":"2026-08-19T11:06:20.196775Z","last_seen":"2026-08-19T11:06:20.196775Z","alert_count":9,"request_count":9,"received_data":1301221,"sent_data":4114,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"base.qozs.xyz/home","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6ac9071d9932331d6f13c28662df3eaa","sha1":"f6eb1baa0bd1ae6f59ae6aceb867f897511aeee1","sha256":"b4c3e0db43ddfac91e82f4f458144da6e4066d57aa41fed04d86cd9b3c0e368d","sha512":"cefe8e65fa5d8690b53f96ad56320e72dba887c3ccd4df0d4eb9000a5bc903b77d1b7ae8b1ad7ec25ec0443e8fd41327e3deb9238f38884b08549579c918e3ca","ssdeep":"","tlshash":"25c08cc4a0c22d201606682014af24e490244026704c2b028dd4d8492ea34b48233e98","size":140,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-26T10:52:23.886487Z","times_seen":425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"base.qozs.xyz/home","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a15c447f08875de3100ed8997d5994ea","sha1":"b77d1c8bbbbcc5d0ac532e1362d796508029192f","sha256":"edd33609ab9f781e02fcf2c8e5ecd9f1e9b7bfdcbb576f01e9b2e78747b47e47","sha512":"55050de7b026795f86b16a8f6a67428555e9d05c394d87abf47b1bde43968be03e16569d97d1f38f6d37a1cc8b9bb5349cabe354e3def7dcbd5187640e3ac7ce","ssdeep":"","tlshash":"b8c02bc8b0c33d002602645010bf39e490344027718c1b43ccd4ec883e230f09233edc","size":139,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-26T11:33:42.433078Z","times_seen":942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"base.qozs.xyz/home","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5eb3c381edc04bce0968b17c7c09c06e","sha1":"29d4a11296baf24dd66dca6253a0e2537173faf8","sha256":"476300397d86a9a7039e4605f565db435224587c0d0d8f35f82b07e6ed0165c9","sha512":"58bbf2381e7167b996684ab5231151d679ab02bffec420c85798937d6e00e0ddcbd2edc532656d86c98d2ffcb4e3f62947187585da0510348deb3a9853d6a31c","ssdeep":"","tlshash":"e4c08cc4a0c67d101602641011af34e8a0344026704c1b428cd4d8582e230f18233e9c","size":138,"data":"","first_seen":"2025-10-30T20:29:11.910821Z","last_seen":"2026-08-26T10:06:24.403749Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"base.qozs.xyz/home","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"926ad28c98be26c2ab7d8f231631853c","sha1":"c1c7788df347ea5ab2369ae95456a8a1f7d9f150","sha256":"ec5e8816f60cbbf34b660d2d1455234d92295ab1a210868d6bbfeab7359e438a","sha512":"6f8eb48bc8638821747a26fc6370ee240e58d47699acbe5a1fb2bff1b25d62c6918f6df77dd78da3bc1b3e3d14eb849ccd4e0d1e01593294187bfd509be2ebdb","ssdeep":"","tlshash":"a5c08cc4a0c22d001a02641410af24e49024402ab44c1b029dd4d8482e220f08237ed8","size":138,"data":"","first_seen":"2023-12-01T02:41:08Z","last_seen":"2026-08-26T11:33:42.424112Z","times_seen":432,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"base.qozs.xyz/","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3cf3d060de7de997d37e1a51f7845d77","sha1":"c8ca054ecbe53ad8c2bc89d1b30f3162b2fd629e","sha256":"16f1391242ab8f7ed61ed69897b8263879b81850034f5409f1f13bb02ac1ce78","sha512":"111e7a5e0ba49ce655bed09bf636b292f99df30dd7f6dc304c127f513a9a601800570c6208bd298bbc39abcd1f21213d7ade20e2143c865603232b87a361600a","ssdeep":"","tlshash":"60017bf2137910b468918a655daf7a612a01452b5d46b8787dcc0c4c6f8f30e64f2ff9","size":759,"data":"","first_seen":"2026-08-19T11:06:24.657632Z","last_seen":"2026-08-26T10:06:24.407953Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"base.qozs.xyz/","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d22fe73b7b4e280ee5ae2d1f068e8b2f","sha1":"faf30def6ea1f83e25282bea37387c86cec2792b","sha256":"e680654bccda827a8a331fcb92b32f243a46882dda21bd4ba2957d882c52965f","sha512":"5d82db1844e8de463c0f9bba9da6d2164ec28366f1ebf2224f4b6f5b330da8e517738b743e9953d253bf0845c0f7b7233ca210e77a5141caf39adcb6025bf297","ssdeep":"","tlshash":"a941e06857e307722633613c2b8f66a47968941b0109cdd17d8c5390dfd1e2acd977ee","size":2419,"data":"","first_seen":"2026-08-19T11:06:24.658763Z","last_seen":"2026-08-26T10:06:24.409038Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"base.qozs.xyz/home","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"17f96ed927f81fd447360eaa6890f61e","sha1":"85f9a4aa7d6e2b30e6cef770d284cb8ed95cd79d","sha256":"e05e7e20ebb29ae25d78362f712d4c5eddc1417922b39aa0c0cd8dcc41947676","sha512":"3f3d3c16b155a828fd0c3509d5f1395da633219ae3416265703a3b9841dde44e02edaf0a14c601352cce2f97dfb02a3b527b2551a7a877a9fac787657eb6a791","ssdeep":"","tlshash":"89c08cc4a0c22e10a602651410bf38f49034483675481b528cd4d8582e234f08233edc","size":147,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-08-26T10:06:24.410271Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"base.qozs.xyz/home","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4cd78d77d8b15c06b4236b2bf44e1ce1","sha1":"a5840f114c3b874d35baa0df8ea8028ac62ed117","sha256":"6081eed2228b6ed409fcdff7ed1a56c7b64a5de6d8e758f44137c024cc87f244","sha512":"250f76128376415973aa6db5b0ac53ad0f2d6a8e5f68dfedb8f5f3d1fa7185e9d386cfcc14cd44e3585e135d547243a2e507f2789883f4c7698906771fae85b4","ssdeep":"","tlshash":"0ed022c870d3bd0466167a4004bf31f09024882a23889a8a8d98d8482f220f44533eac","size":196,"data":"","first_seen":"2025-12-22T03:14:30.912487Z","last_seen":"2026-08-26T10:06:24.413252Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"base.qozs.xyz/home","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3e352e40da965a477c73b85f45fcbcfe","sha1":"3e723988fae01e9002cd221d32d0b80fc932dc85","sha256":"5437083c1c0938d596758b071b379432c6722f887cbe2dca49cc5dd12e4f48bc","sha512":"36bd9ae9981675720b34b16739e5bd73967018d36cffaf325c4415dede978a5c8950cd9ee99567264cef03b5020fc26def12f1274befcfba2f680291e9f34580","ssdeep":"","tlshash":"e2c08cc4b0c22d003a02a41024bf34e89024402670481b028cd4e8582e230b08233e98","size":140,"data":"","first_seen":"2023-05-19T17:54:23Z","last_seen":"2026-08-26T10:48:02.756023Z","times_seen":828,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"base.qozs.xyz/home","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1a336cd95b5d65077986d137d575b09d","sha1":"78e535203f31fe022a8bd6e2ae34060adabfa508","sha256":"b2643459deea445b088cddf23cfe26f71681d66016da45caa366d1936249a67b","sha512":"a20f70cb6008808b47c73285ba350d7f6a629f4602952dd120cb6ff29d5bf28a8d26b09312367219a20c1b1b4e9341ecb6b99c877b92eaf6df4a5126511bf704","ssdeep":"","tlshash":"59c08cc4b0c22d006a22a41024af34e490244026704c1b028c94e8482e230b88233ea8","size":141,"data":"","first_seen":"2025-12-01T23:19:22.066476Z","last_seen":"2026-08-26T10:06:24.415264Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"base.qozs.xyz/home","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bdc665a91ce354b6b29e1440c087da1b","sha1":"e2a5463d1f014bc22029584c8aeb0e264b8d3d97","sha256":"4be21bc4b7d50194efc45e563be8018f241e8948620b38a2c86d596e205aebde","sha512":"512afe3cce7434e775517b216f6cd9bada0c4042df8187442824db9fc27105294161070a39f550c6ca7af711269f882ed2bd40488e243b6ed1d928f6e0efbfe2","ssdeep":"","tlshash":"02c08cc4a0c27e101602641020bf28e89024403674481b029d94dc482e720b08237e98","size":139,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-08-26T10:52:23.911173Z","times_seen":329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"base.qozs.xyz/js/chunk-vendors.9fd5df5a.js","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e6f276ba249f56841a0fc4595591422","sha1":"324acafd5d37b643b767732b9592fa7320f2bff3","sha256":"6b716b7c4461912661ee012bdb94cb472c963397c7cb225f176a4349161a094f","sha512":"827bd99e6ba0e8b4dbb62967460f5e8d77a8f7a3632de49f82c77a66fb5e5f45dfadb2d5706500107cee00d1f1c8a2bd144931dccf378bbeee216c098f274dbe","ssdeep":"12288:LwMEi1W1AJwXvB9JoCY397X5s/zr+q7Fjyqf6JlCmIvICMSk1:LXW1AJw59JtY397X5s/P57Fjyqf6JlCc","tlshash":"5e94d69572d2b06213f645e6007b0106f33a6989340b849cf2adedd73c7a95e61bbf78","size":416373,"data":"","first_seen":"2025-12-22T03:14:30.892986Z","last_seen":"2026-08-26T10:06:24.398818Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"base.qozs.xyz/js/app.e0168ab1.js","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"27acd72687db6c5cf226154ba2b6e779","sha1":"820387ee6d02324addacbda97b265818d9e24d01","sha256":"2f8220aa5f3347e819961a7e8c8e27d576d23c0ed4ba57c8b8e10021ca6e8b09","sha512":"f464e30a92360f0a645743b305857fd29f74720997e25b570a027e9195c1ed9d5b111e86061876201d5a9bc621a943a08b55327a9633159a741cf14b94e74831","ssdeep":"12288:0KU+fbI57AgOXuRMnCgXh/8SarBKVKKiKDKRxVefcQSNweHuz4QGGEBS09qlnA0D:s+jIlAPuCndXh/8SJc8","tlshash":"32e49e2a925940ad3ee28294764f311075dc1d86d94ec0e87bfc0cf527ead05f26afb6","size":704654,"data":"","first_seen":"2026-08-19T11:06:24.643982Z","last_seen":"2026-08-26T10:06:24.392432Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"base.qozs.xyz/home","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d03323da674486e224b1b0cf32504f99","sha1":"99c89aaf44fd029a018c10708209d17d749f8d8b","sha256":"1113a1ea113140aa425eb29f0b0aa8bd4fd054e9423fc647c35ddf667549706a","sha512":"106494a8ac3d90ae3bcdb28a3bf749aef92f5dec447f26516c987805f51e626fff0406c50326671a7d1680dea1cd3ced6c528cedf55913259ad3a1fcffeb5fb1","ssdeep":"","tlshash":"92c08cc9a0c62d102603a41110af38e490244426704c1b068c94d8882e220f08233e98","size":139,"data":"","first_seen":"2023-12-17T01:10:19Z","last_seen":"2026-08-26T10:06:24.416986Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"base.qozs.xyz/","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-26T10:05:50.002Z","timestamp":1787738750002,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: base.qozs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T12:40:41.034598Z","times_seen":18113292,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"base.qozs.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"base.qozs.xyz/js/app.e0168ab1.js","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"38.147.164.51","port":80,"asn":932,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://base.qozs.xyz/","date":"2026-08-26T10:05:53.607Z","timestamp":1787738753607,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/app.e0168ab1.js HTTP/1.1\r\nHost: base.qozs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://base.qozs.xyz/\r\nCookie: server_name_session=4c80cfd3390b0a6379b5eb0e7290f40b\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 26 Aug 2026 10:05:53 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 10 May 2026 09:38:29 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a005215-ac08e\"\r\nExpires: Wed, 26 Aug 2026 22:05:53 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":704654,"size_decoded":252593,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"27acd72687db6c5cf226154ba2b6e779","sha1":"820387ee6d02324addacbda97b265818d9e24d01","sha256":"2f8220aa5f3347e819961a7e8c8e27d576d23c0ed4ba57c8b8e10021ca6e8b09","sha512":"f464e30a92360f0a645743b305857fd29f74720997e25b570a027e9195c1ed9d5b111e86061876201d5a9bc621a943a08b55327a9633159a741cf14b94e74831","ssdeep":"12288:0KU+fbI57AgOXuRMnCgXh/8SarBKVKKiKDKRxVefcQSNweHuz4QGGEBS09qlnA0D:s+jIlAPuCndXh/8SJc8","tlshash":"32e49e2a925940ad3ee28294764f311075dc1d86d94ec0e87bfc0cf527ead05f26afb6","first_seen":"2026-08-19T11:06:24.643982Z","last_seen":"2026-08-26T10:06:24.392432Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1416,"timings":{"blocked":-1,"dns":0,"connect":214,"send":0,"wait":217,"receive":985,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"base.qozs.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.qozs.xyz/api/user/info.html","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://base.qozs.xyz/","date":"2026-08-26T10:05:55.130Z","timestamp":1787738755130,"http_version":"","security_state":"","security_info":null,"request":{"raw":"OPTIONS /api/user/info.html HTTP/1.1\r\nHost: base.qozs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: http://base.qozs.xyz/\r\nOrigin: http://base.qozs.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T12:40:41.034598Z","times_seen":18113292,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"base.qozs.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"base.qozs.xyz/logo.png?1","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"38.147.164.51","port":80,"asn":932,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://base.qozs.xyz/","date":"2026-08-26T10:05:55.132Z","timestamp":1787738755132,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo.png?1 HTTP/1.1\r\nHost: base.qozs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://base.qozs.xyz/home\r\nCookie: server_name_session=4c80cfd3390b0a6379b5eb0e7290f40b\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 26 Aug 2026 10:05:55 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 23 Mar 2026 12:22:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c13068-7238\"\r\nExpires: Fri, 25 Sep 2026 10:05:55 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29240,"size_decoded":29573,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a966f4c7e12d5647fb2135ca3ed1f131","sha1":"7ba7dc19442b19f9a3edc62c070d7c700b5df6cf","sha256":"7b93884c37d51834d1312a8c8041e92f0caf360106c2bbae36fa3aef3918789b","sha512":"1f7955f56324f3397cc3f366e5a73d6765b1b974618b3cefa3e3bc794ec8caf8148b1dfbaf97f5fcbeb11e9b943c38e08f4683e48d73d6cda7019eac8284eee9","ssdeep":"768:QfvR3aquOTTXMLtpmZ2p2sw0LIpPtj3YdAVV:u0quOTTXMDn6lQS","tlshash":"56d2f1bab1ef6e3d5a3eca8c207ccdd73ad050e25db651bcf94aa7055402124f6532a4","first_seen":"2026-08-19T11:06:24.636394Z","last_seen":"2026-08-26T10:06:24.393523Z","times_seen":3,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"base.qozs.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"base.qozs.xyz/logo.png?1","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"38.147.164.51","port":80,"asn":932,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://base.qozs.xyz/","date":"2026-08-26T10:05:55.345Z","timestamp":1787738755345,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo.png?1 HTTP/1.1\r\nHost: base.qozs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://base.qozs.xyz/\r\nCookie: server_name_session=4c80cfd3390b0a6379b5eb0e7290f40b\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 26 Aug 2026 10:05:55 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 23 Mar 2026 12:22:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c13068-7238\"\r\nExpires: Fri, 25 Sep 2026 10:05:55 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29240,"size_decoded":29573,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a966f4c7e12d5647fb2135ca3ed1f131","sha1":"7ba7dc19442b19f9a3edc62c070d7c700b5df6cf","sha256":"7b93884c37d51834d1312a8c8041e92f0caf360106c2bbae36fa3aef3918789b","sha512":"1f7955f56324f3397cc3f366e5a73d6765b1b974618b3cefa3e3bc794ec8caf8148b1dfbaf97f5fcbeb11e9b943c38e08f4683e48d73d6cda7019eac8284eee9","ssdeep":"768:QfvR3aquOTTXMLtpmZ2p2sw0LIpPtj3YdAVV:u0quOTTXMDn6lQS","tlshash":"56d2f1bab1ef6e3d5a3eca8c207ccdd73ad050e25db651bcf94aa7055402124f6532a4","first_seen":"2026-08-19T11:06:24.636394Z","last_seen":"2026-08-26T10:06:24.393523Z","times_seen":3,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"base.qozs.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"base.qozs.xyz/","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"38.147.164.51","port":80,"asn":932,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-26T10:05:53.091Z","timestamp":1787738753091,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: base.qozs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 26 Aug 2026 10:05:53 GMT\r\nContent-Type: text/html\r\nLast-Modified: Fri, 22 May 2026 14:21:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a10667a-1114\"\r\nSet-Cookie: server_name_session=4c80cfd3390b0a6379b5eb0e7290f40b; Max-Age=86400; httponly; path=/\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"server_name_session","value":"4c80cfd3390b0a6379b5eb0e7290f40b","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"server_name_session=4c80cfd3390b0a6379b5eb0e7290f40b; Max-Age=86400; httponly; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4372,"size_decoded":2219,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"190b5f09eab916a4d7c22778379d6b0f","sha1":"192faae302b88165c438ac12e235b0090869e2cb","sha256":"9c80f579486af029ee3c8ebf9d713aebd216d33066a61241d650937933d3c521","sha512":"6cb71e29a7d5c9ddd73aef5ac87d8c1273a3d032344743b1af5dcf31e49d05c192fd96693b3e2cff5c4bf9c0484a7e52ce821a124caa823e402a4660debf5e93","ssdeep":"96:RSlnQuduSl6DHtY16feRK1VqyckQDAuDIvC+D5s6mexgdalSM:RSlnQuxOHtd2mqycuuDIvFD5hmN8SM","tlshash":"4091839587a302716622523c2f9fb6a86954d41b450adca03dcc4258cfc6b1e8cf3bfd","first_seen":"2026-08-19T11:06:24.630666Z","last_seen":"2026-08-26T10:06:24.397538Z","times_seen":3,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":5,"connect":216,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"base.qozs.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"base.qozs.xyz/js/chunk-vendors.9fd5df5a.js","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"38.147.164.51","port":80,"asn":932,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://base.qozs.xyz/","date":"2026-08-26T10:05:53.605Z","timestamp":1787738753605,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/chunk-vendors.9fd5df5a.js HTTP/1.1\r\nHost: base.qozs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://base.qozs.xyz/\r\nCookie: server_name_session=4c80cfd3390b0a6379b5eb0e7290f40b\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 26 Aug 2026 10:05:53 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 10 May 2026 09:38:29 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a005215-65a75\"\r\nExpires: Wed, 26 Aug 2026 22:05:53 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":416373,"size_decoded":141970,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35364)","md5":"9e6f276ba249f56841a0fc4595591422","sha1":"324acafd5d37b643b767732b9592fa7320f2bff3","sha256":"6b716b7c4461912661ee012bdb94cb472c963397c7cb225f176a4349161a094f","sha512":"827bd99e6ba0e8b4dbb62967460f5e8d77a8f7a3632de49f82c77a66fb5e5f45dfadb2d5706500107cee00d1f1c8a2bd144931dccf378bbeee216c098f274dbe","ssdeep":"12288:LwMEi1W1AJwXvB9JoCY397X5s/zr+q7Fjyqf6JlCmIvICMSk1:LXW1AJw59JtY397X5s/P57Fjyqf6JlCc","tlshash":"5e94d69572d2b06213f645e6007b0106f33a6989340b849cf2adedd73c7a95e61bbf78","first_seen":"2025-12-22T03:14:30.892986Z","last_seen":"2026-08-26T10:06:24.398818Z","times_seen":10,"resource_available":true,"data":null}},"time_used":958,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":738,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"base.qozs.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"base.qozs.xyz/css/app.a2a6c31c.css","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"38.147.164.51","port":80,"asn":932,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://base.qozs.xyz/","date":"2026-08-26T10:05:53.608Z","timestamp":1787738753608,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /css/app.a2a6c31c.css HTTP/1.1\r\nHost: base.qozs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://base.qozs.xyz/\r\nCookie: server_name_session=4c80cfd3390b0a6379b5eb0e7290f40b\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 26 Aug 2026 10:05:53 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sun, 10 May 2026 09:38:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a00520c-14eb7\"\r\nExpires: Wed, 26 Aug 2026 22:05:53 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85687,"size_decoded":13935,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b48152e79ce27fea617e8bc3223749b4","sha1":"46fcac90a5eb258ba81ecfce6fed255ac09a545c","sha256":"9a39d4080b448e19120f0021c38c3975816c970cc8fade206f151d095fe9ec51","sha512":"8e309bc7a7aee2fe447a3ba7621d154618db8eaf16d026901fde599f5bcd179d1abbab8c38bbe88cec61560b5332bcc995b75a96fddaf1a92eaf4a974eb925b7","ssdeep":"768:A4d0r+U/Qt7KxI5QuMz7uiDpB+MCFemSX:ARn+5QuMP+pU","tlshash":"5e838422b64c202ef43fd1a1b8e05ada2904b357d1164b5de6e73532cdc76e33972b89","first_seen":"2026-08-19T11:06:24.63399Z","last_seen":"2026-08-26T10:06:24.400137Z","times_seen":3,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":216,"send":0,"wait":218,"receive":217,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"base.qozs.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"base.qozs.xyz/logo.png?1","fqdn":"base.qozs.xyz","domain":"qozs.xyz","tld":"xyz"},"ip":{"addr":"38.147.164.51","port":80,"asn":932,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://base.qozs.xyz/","date":"2026-08-26T10:05:55.347Z","timestamp":1787738755347,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo.png?1 HTTP/1.1\r\nHost: base.qozs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://base.qozs.xyz/\r\nCookie: server_name_session=4c80cfd3390b0a6379b5eb0e7290f40b\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 26 Aug 2026 10:05:55 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 23 Mar 2026 12:22:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c13068-7238\"\r\nExpires: Fri, 25 Sep 2026 10:05:55 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29240,"size_decoded":29573,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a966f4c7e12d5647fb2135ca3ed1f131","sha1":"7ba7dc19442b19f9a3edc62c070d7c700b5df6cf","sha256":"7b93884c37d51834d1312a8c8041e92f0caf360106c2bbae36fa3aef3918789b","sha512":"1f7955f56324f3397cc3f366e5a73d6765b1b974618b3cefa3e3bc794ec8caf8148b1dfbaf97f5fcbeb11e9b943c38e08f4683e48d73d6cda7019eac8284eee9","ssdeep":"768:QfvR3aquOTTXMLtpmZ2p2sw0LIpPtj3YdAVV:u0quOTTXMDn6lQS","tlshash":"56d2f1bab1ef6e3d5a3eca8c207ccdd73ad050e25db651bcf94aa7055402124f6532a4","first_seen":"2026-08-19T11:06:24.636394Z","last_seen":"2026-08-26T10:06:24.393523Z","times_seen":3,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":217,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"base.qozs.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}