{"report_id":"214c67e2-dee2-4d2e-925e-6b78480bd325","version":0,"status":"done","tags":[],"date":"2026-08-31T19:06:42Z","url":{"schema":"https","addr":"amuletdrop-win.xyz/","fqdn":"amuletdrop-win.xyz","domain":"amuletdrop-win.xyz","tld":"xyz"},"ip":{"addr":"45.74.7.239","port":0,"asn":0,"as":"","country":"Liechtenstein","country_code":"LI"},"final":{"url":{"schema":"https","addr":"amuletdrop-win.xyz/","fqdn":"amuletdrop-win.xyz","domain":"amuletdrop-win.xyz","tld":"xyz"},"title":"Spin \u0026 Win — Amulet Drop","dom":{"size":9997,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (351)","md5":"681808c15dc5652a0d08a492bfa6cfe2","sha1":"61be9c9b475d8898777e3249b22a2406c5eb0d34","sha256":"999a5234a2bb24e5fd3ea841e46c30497c8ad6ac90277ce332ff52ba63e5a3bb","sha512":"7f510fb88e1e858e08d0be2641e3e0e7eea25e3ba9abc904b8b17398244511c513a9fcf86c909ef575dd6e16c2ee55435614e5b5fe524b4973eb653396a4a9d9","ssdeep":"96:nTAqdhsMok+I+oTU/LA6nCwtz0hLB38tGV3gemhgZttqr0OLYKjT2wuos1VmZJtK:TAis/X7WDUVz4LBs0VjTGTVs1kJth4","tlshash":"f5226465f5b4157b806b83d7b2863b2a39a4d24bc98d100072be47b04feacc6f82347d","dom_hash":"domhasha5b240a65c320af17f21cc35b2c85867","first_seen":"2026-08-31T19:06:44.021626Z","last_seen":"2026-08-31T19:06:44.021626Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"amuletdrop-win.xyz/","fqdn":"amuletdrop-win.xyz","domain":"amuletdrop-win.xyz","tld":"xyz"},"ip":{"addr":"45.74.7.239","port":0,"asn":0,"as":"","country":"Liechtenstein","country_code":"LI"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T19:06:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"amuletdrop-win.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"amuletdrop-win.xyz","ip":{"addr":"45.74.7.239","port":443,"asn":0,"as":"","country":"Liechtenstein","country_code":"LI"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-31T18:47:00.82208Z","last_seen":"2026-08-31T18:47:00.82208Z","alert_count":5,"request_count":5,"received_data":66981,"sent_data":2323,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"amuletdrop-win.xyz/js/i18n.js","fqdn":"amuletdrop-win.xyz","domain":"amuletdrop-win.xyz","tld":"xyz"},"ip":{"addr":"45.74.7.239","port":443,"asn":0,"as":"","country":"Liechtenstein","country_code":"LI"},"introduction_type":"scriptElement","is_inline":false,"md5":"768a346556ec21e3badf73e0ea49f67a","sha1":"d078bede38ed0e2b0f5c98f93f32a3d06b299a81","sha256":"1729da457ea936a7220cefc5b37dbb0158a29ef97a4902cae8308f17c4bf9503","sha512":"cb21577b5ee4779e95da4fc672374e0457a6ed8174a1dff2d818048675e8a00445557cf7e2edd5f4ca8b0a029b5725c059c58ab82f83d9c2ea29c997377613cb","ssdeep":"192:t6AwDxHwQag8RSmggqfR9UAY4mKmRK2RKYbs:teDhwdpggq5+AYoEK2wis","tlshash":"e702c529c9a0093301db229734c769976b08018b9e48b04d73add5dc2fde76fb1b296f","size":8795,"data":"","first_seen":"2026-08-31T18:47:05.367129Z","last_seen":"2026-08-31T19:06:44.024638Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amuletdrop-win.xyz/js/app.js","fqdn":"amuletdrop-win.xyz","domain":"amuletdrop-win.xyz","tld":"xyz"},"ip":{"addr":"45.74.7.239","port":443,"asn":0,"as":"","country":"Liechtenstein","country_code":"LI"},"introduction_type":"scriptElement","is_inline":false,"md5":"abd274c25fd863258268a6f6a006c93d","sha1":"741db939b54e20e00510f340af6907290627ff27","sha256":"5d8c32fb1ab2ff285fc78c1ab9b47d707191d6bcc85de1a0ea99cbc35391a345","sha512":"7ecb3bb089ed70ca499a27f81ed516d32b971e447b26645d0f5f8f6fd7dc9184874cd72e48e72ea7e947bfb46527f7d669da8f151d85c1e68a1bfc6348fc0245","ssdeep":"384:N+uMGukzxVMH3bxC9z7MZGdzQbrpThQ71ylaR:N+3GuPoMZvs1sG","tlshash":"b1720a263277023141bb01e7574b12857b259013364aec94756fc2480fdaf2ac1fbafe","size":16030,"data":"","first_seen":"2026-08-31T18:47:05.368507Z","last_seen":"2026-08-31T19:06:44.025638Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"amuletdrop-win.xyz/","fqdn":"amuletdrop-win.xyz","domain":"amuletdrop-win.xyz","tld":"xyz"},"ip":{"addr":"45.74.7.239","port":443,"asn":0,"as":"","country":"Liechtenstein","country_code":"LI"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T19:06:12.330Z","timestamp":1788203172330,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amuletdrop-win.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 14:51:49 GMT","end":"Thu, 26 Nov 2026 14:51:48 GMT"},"fingerprint":{"sha1":"13:48:9B:3A:76:C7:44:BC:91:B3:1C:B3:92:A6:04:EF:A6:E8:F9:F3","sha256":"C5:77:D4:CA:34:6E:3A:A9:1E:2F:23:2E:E7:A7:10:96:4F:36:59:CB:60:C2:05:5D:2C:E1:3D:8E:D2:4F:A2:9C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amuletdrop-win.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 19:06:13 GMT\r\nContent-Type: text/html\r\nLast-Modified: Wed, 12 Aug 2026 19:45:58 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a7ccd76-2642\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":9794,"size_decoded":3701,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (327)","md5":"875e52af3c760537c522f8a823f3345c","sha1":"6a34097f201897875d7db6e5988d9945467854a6","sha256":"eacec42739a1d180e697453e20f16d89d77c1df5ff84262812b5472f03d75daa","sha512":"bbb43c4a74ca041b57f028d131abae9a0c9e805e97acfca1ab24d59bf97b21d1da51da92754d23a7447098902f904d1b7e49c711459a912524281354540a4939","ssdeep":"96:SAZHhsMoo+I+oTU/LA6nbU0hLB3itGV6genXgZttqrUOLYK4T2wuoc1VmZJtpsSV:SArs/b7WDUw4LBKJV2TVTVc1kJtQY","tlshash":"0e126665f5b4147b816782d772963b2b3aa1e24bd98d101072be47b04feacc6f82347d","first_seen":"2026-08-31T18:47:05.370401Z","last_seen":"2026-08-31T19:06:44.023032Z","times_seen":2,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":-1,"dns":572,"connect":25,"send":0,"wait":26,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"amuletdrop-win.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amuletdrop-win.xyz/css/style.css","fqdn":"amuletdrop-win.xyz","domain":"amuletdrop-win.xyz","tld":"xyz"},"ip":{"addr":"45.74.7.239","port":443,"asn":0,"as":"","country":"Liechtenstein","country_code":"LI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amuletdrop-win.xyz/","date":"2026-08-31T19:06:13.177Z","timestamp":1788203173177,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amuletdrop-win.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 14:51:49 GMT","end":"Thu, 26 Nov 2026 14:51:48 GMT"},"fingerprint":{"sha1":"13:48:9B:3A:76:C7:44:BC:91:B3:1C:B3:92:A6:04:EF:A6:E8:F9:F3","sha256":"C5:77:D4:CA:34:6E:3A:A9:1E:2F:23:2E:E7:A7:10:96:4F:36:59:CB:60:C2:05:5D:2C:E1:3D:8E:D2:4F:A2:9C"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: amuletdrop-win.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amuletdrop-win.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 19:06:13 GMT\r\nContent-Type: text/css\r\nContent-Length: 30964\r\nLast-Modified: Wed, 12 Aug 2026 19:45:58 GMT\r\nConnection: keep-alive\r\nETag: \"6a7ccd76-78f4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30964,"size_decoded":31213,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"e8c547f40503390ce26d526aa6236987","sha1":"30afab828b0b40ee816fb709331ad57304d0eb1e","sha256":"5150e24b25ebc973a64a389e59a128de251b6910ff3305f1bb2c79bc95884c3b","sha512":"c03dc378148132f99443f0d75be4fb2b9ce8649644241e32110a8cbf7198bb33751aed549500e07cf7af3bdbd16f1bd34b93b6fb9819aae790f7e5c9a3394f04","ssdeep":"768:c58henZTZBr31VrItKr779jiMpGleTsFoF7wQ1MDLXSnjkjdqeXtlhA:c5prjVIts9unkTs2+Q1MDLXSnjMqeXtc","tlshash":"d5d29596aa110518b52f92a53ad7874e33bdd002e10bdd3cb7e5104cdfc42fd92abb65","first_seen":"2026-08-31T18:47:05.371405Z","last_seen":"2026-08-31T19:06:44.023722Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"amuletdrop-win.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amuletdrop-win.xyz/js/i18n.js","fqdn":"amuletdrop-win.xyz","domain":"amuletdrop-win.xyz","tld":"xyz"},"ip":{"addr":"45.74.7.239","port":443,"asn":0,"as":"","country":"Liechtenstein","country_code":"LI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amuletdrop-win.xyz/","date":"2026-08-31T19:06:13.178Z","timestamp":1788203173178,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amuletdrop-win.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 14:51:49 GMT","end":"Thu, 26 Nov 2026 14:51:48 GMT"},"fingerprint":{"sha1":"13:48:9B:3A:76:C7:44:BC:91:B3:1C:B3:92:A6:04:EF:A6:E8:F9:F3","sha256":"C5:77:D4:CA:34:6E:3A:A9:1E:2F:23:2E:E7:A7:10:96:4F:36:59:CB:60:C2:05:5D:2C:E1:3D:8E:D2:4F:A2:9C"}}},"request":{"raw":"GET /js/i18n.js HTTP/1.1\r\nHost: amuletdrop-win.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amuletdrop-win.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 19:06:13 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 8795\r\nLast-Modified: Thu, 27 Aug 2026 19:06:13 GMT\r\nConnection: keep-alive\r\nETag: \"6a908aa5-225b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8795,"size_decoded":9057,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"768a346556ec21e3badf73e0ea49f67a","sha1":"d078bede38ed0e2b0f5c98f93f32a3d06b299a81","sha256":"1729da457ea936a7220cefc5b37dbb0158a29ef97a4902cae8308f17c4bf9503","sha512":"cb21577b5ee4779e95da4fc672374e0457a6ed8174a1dff2d818048675e8a00445557cf7e2edd5f4ca8b0a029b5725c059c58ab82f83d9c2ea29c997377613cb","ssdeep":"192:t6AwDxHwQag8RSmggqfR9UAY4mKmRK2RKYbs:teDhwdpggq5+AYoEK2wis","tlshash":"e702c529c9a0093301db229734c769976b08018b9e48b04d73add5dc2fde76fb1b296f","first_seen":"2026-08-31T18:47:05.367129Z","last_seen":"2026-08-31T19:06:44.024638Z","times_seen":2,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":34,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"amuletdrop-win.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amuletdrop-win.xyz/js/app.js","fqdn":"amuletdrop-win.xyz","domain":"amuletdrop-win.xyz","tld":"xyz"},"ip":{"addr":"45.74.7.239","port":443,"asn":0,"as":"","country":"Liechtenstein","country_code":"LI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amuletdrop-win.xyz/","date":"2026-08-31T19:06:13.183Z","timestamp":1788203173183,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amuletdrop-win.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 14:51:49 GMT","end":"Thu, 26 Nov 2026 14:51:48 GMT"},"fingerprint":{"sha1":"13:48:9B:3A:76:C7:44:BC:91:B3:1C:B3:92:A6:04:EF:A6:E8:F9:F3","sha256":"C5:77:D4:CA:34:6E:3A:A9:1E:2F:23:2E:E7:A7:10:96:4F:36:59:CB:60:C2:05:5D:2C:E1:3D:8E:D2:4F:A2:9C"}}},"request":{"raw":"GET /js/app.js HTTP/1.1\r\nHost: amuletdrop-win.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amuletdrop-win.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 19:06:13 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 16038\r\nLast-Modified: Thu, 27 Aug 2026 19:07:39 GMT\r\nConnection: keep-alive\r\nETag: \"6a908afb-3ea6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16038,"size_decoded":16301,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"abd274c25fd863258268a6f6a006c93d","sha1":"741db939b54e20e00510f340af6907290627ff27","sha256":"5d8c32fb1ab2ff285fc78c1ab9b47d707191d6bcc85de1a0ea99cbc35391a345","sha512":"7ecb3bb089ed70ca499a27f81ed516d32b971e447b26645d0f5f8f6fd7dc9184874cd72e48e72ea7e947bfb46527f7d669da8f151d85c1e68a1bfc6348fc0245","ssdeep":"384:N+uMGukzxVMH3bxC9z7MZGdzQbrpThQ71ylaR:N+3GuPoMZvs1sG","tlshash":"b1720a263277023141bb01e7574b12857b259013364aec94756fc2480fdaf2ac1fbafe","first_seen":"2026-08-31T18:47:05.368507Z","last_seen":"2026-08-31T19:06:44.025638Z","times_seen":2,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":25,"send":0,"wait":58,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"amuletdrop-win.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amuletdrop-win.xyz/favicon.ico","fqdn":"amuletdrop-win.xyz","domain":"amuletdrop-win.xyz","tld":"xyz"},"ip":{"addr":"45.74.7.239","port":443,"asn":0,"as":"","country":"Liechtenstein","country_code":"LI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amuletdrop-win.xyz/","date":"2026-08-31T19:06:13.323Z","timestamp":1788203173323,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amuletdrop-win.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 14:51:49 GMT","end":"Thu, 26 Nov 2026 14:51:48 GMT"},"fingerprint":{"sha1":"13:48:9B:3A:76:C7:44:BC:91:B3:1C:B3:92:A6:04:EF:A6:E8:F9:F3","sha256":"C5:77:D4:CA:34:6E:3A:A9:1E:2F:23:2E:E7:A7:10:96:4F:36:59:CB:60:C2:05:5D:2C:E1:3D:8E:D2:4F:A2:9C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: amuletdrop-win.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amuletdrop-win.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 19:06:13 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162,"size_decoded":318,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"37d5c3a24983196361e6ce9b1a499464","sha1":"2dd5878df894f3c648e42408879e9a61c112d1b3","sha256":"766c1d6bcb81d3e983fb7adbc19c616d7fc01dafb7893738edc242e2adc59c07","sha512":"cc140d1f61a01ba5f282d682dfeb19229426c7164b147a3031d3b5544c2d7213ce19b075a81d5e00750bdac7b1d9232b8b971e026d838ccae9466523338b09a9","ssdeep":"","tlshash":"eac08c6e2513bd4cc663217432c36490c08b93a7a4ea42228440805331cb2aa8ac7396","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-08-31T21:53:06.982311Z","times_seen":30595,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"amuletdrop-win.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
