{"report_id":"25098d9c-0059-4e10-a9ec-1a8bfc230dcb","version":0,"status":"done","tags":[],"date":"2026-08-16T17:57:18Z","url":{"schema":"http","addr":"bitrefiil.info/","fqdn":"bitrefiil.info","domain":"bitrefiil.info","tld":"info"},"ip":{"addr":"46.22.211.33","port":0,"asn":34702,"as":"Aktsiaselts WaveCom","country":"Estonia","country_code":"EE"},"final":{"url":{"schema":"https","addr":"bitrefiil.info/","fqdn":"bitrefiil.info","domain":"bitrefiil.info","tld":"info"},"title":"bitrefiil.info/","dom":{"size":65,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"750fb1042630e31d08a7b911ef7e3032","sha1":"0ec7cb2a5fbb362a1eed446a714f7bfbd282e436","sha256":"c9b9a86fee3e597b1f5ea99a1607fc07ada2c7c5a7d6abdfc81e820de4fa6637","sha512":"875587e13852f402bd47a75276ee763b3f9f582fbb046120600069329398102166195188e31acff778f09487c334bb035b0b7ea78db15463bd88fc86b665116e","ssdeep":"","tlshash":"5aa022fc888280000c3032800cc2320a3ab8038820008a000ec02030a000330cc03088","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2025-11-15T05:06:47.491573Z","last_seen":"2026-08-16T17:57:18.370046Z","times_seen":30,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bitrefiil.info/","fqdn":"bitrefiil.info","domain":"bitrefiil.info","tld":"info"},"ip":{"addr":"46.22.211.33","port":0,"asn":34702,"as":"Aktsiaselts WaveCom","country":"Estonia","country_code":"EE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-20T17:57:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bitrefiil.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bitrefiil.info","ip":{"addr":"46.22.211.33","port":443,"asn":34702,"as":"Aktsiaselts WaveCom","country":"Estonia","country_code":"EE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-16T17:53:59.52656Z","last_seen":"2026-08-16T17:53:59.52656Z","alert_count":2,"request_count":2,"received_data":720,"sent_data":987,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bitrefiil.info/","fqdn":"bitrefiil.info","domain":"bitrefiil.info","tld":"info"},"ip":{"addr":"46.22.211.33","port":443,"asn":34702,"as":"Aktsiaselts WaveCom","country":"Estonia","country_code":"EE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-16T17:56:51.700Z","timestamp":1786903011700,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefiil.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 06:34:52 GMT","end":"Tue, 03 Nov 2026 06:34:51 GMT"},"fingerprint":{"sha1":"1A:DA:B2:53:D4:8D:16:08:3A:83:89:00:C3:E9:7E:BA:02:34:F9:29","sha256":"81:E5:BA:9F:FB:9B:E3:86:AC:C9:13:D6:93:E3:39:3E:88:BA:69:97:DE:5A:0D:C0:8B:11:C9:6C:37:EA:2C:52"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bitrefiil.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 16 Aug 2026 17:56:51 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26,"size_decoded":249,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5e7002807870b107f4892a1152944435","sha1":"0453cf8da1922b5a967c11d9bed518f8f6e68dd4","sha256":"28a8c3eb2936412f8c6a260742cbbfbfd8655b96f46f9ee59ff06b703564f38e","sha512":"779bf93c0455cc0590da73b2dcf88fb51812416b52220e5dc8d9f345b0a72068dc44ba443b1575bde1ef3a960d5d6a9f4a71a57a681dc1132f276c7f7510638d","ssdeep":"","tlshash":"ed8000080e82e2a0008a82222eaab80832b02382828080a08ec0802030002b0ca03020","first_seen":"2023-10-17T21:11:45Z","last_seen":"2026-08-16T17:57:18.372114Z","times_seen":54,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":34,"connect":30,"send":0,"wait":156,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bitrefiil.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitrefiil.info/favicon.ico","fqdn":"bitrefiil.info","domain":"bitrefiil.info","tld":"info"},"ip":{"addr":"46.22.211.33","port":443,"asn":34702,"as":"Aktsiaselts WaveCom","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitrefiil.info/","date":"2026-08-16T17:56:52.337Z","timestamp":1786903012337,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefiil.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 06:34:52 GMT","end":"Tue, 03 Nov 2026 06:34:51 GMT"},"fingerprint":{"sha1":"1A:DA:B2:53:D4:8D:16:08:3A:83:89:00:C3:E9:7E:BA:02:34:F9:29","sha256":"81:E5:BA:9F:FB:9B:E3:86:AC:C9:13:D6:93:E3:39:3E:88:BA:69:97:DE:5A:0D:C0:8B:11:C9:6C:37:EA:2C:52"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bitrefiil.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefiil.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 16 Aug 2026 17:56:52 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":276,"size_decoded":446,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"b62b7408d53b972f3aabb68b1fdd01a1","sha1":"62c8d9ce9e92671636108b47f37a3a86c6855f5b","sha256":"0004164d689bfa03867845f10f5c01f1974b7da15105af5fb976ce1fa02dd668","sha512":"2f91e3ca72d2e1565cde24809703fa9d4d13f08d22b460fb90a8aed2871ca479cc0e36286f08e3392c00eab98c7210f2736e8ae9ca8fb4ecbd6133e2fc21c761","ssdeep":"","tlshash":"bfd02b9f50436287481214a039c216c6364c22faa43a82e86d86d487629857ecedad88","first_seen":"2026-08-16T17:54:03.335392Z","last_seen":"2026-08-16T17:57:18.373476Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bitrefiil.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}