{"report_id":"284a4399-7dba-44f5-825c-e9e835ab9e60","version":0,"status":"done","tags":[],"date":"2026-08-31T06:57:39Z","url":{"schema":"http","addr":"mp315.org/","fqdn":"mp315.org","domain":"mp315.org","tld":"org"},"ip":{"addr":"79.98.187.216","port":0,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"mp315.org/","fqdn":"mp315.org","domain":"mp315.org","tld":"org"},"title":"mp315.org/","dom":{"size":139,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"360e1d19c298676e1915fbc6959c4244","sha1":"c7aaa2b1e39b0a9ca16623590917e1b0a7dda989","sha256":"620bce9fc67176433b17eb3197dd673c98a0185a21d8479090a76bbc305c0f48","sha512":"653a629dc6a102ac313e3cbf8cb7aae2ecb0d791c0bb2beb281ab705d26db82b7c5edca389a58d6d3231f5e8b715cbcdaf0d89fb6330d939cb00a65b714cff05","ssdeep":"","tlshash":"d9c02bb75004141bf22cb6c1ec822104b4c09104e0360c25b3800028c2c130cc486d80","dom_hash":"domhashc1fec9cafeadbac0b33c1409ff211c3f","first_seen":"2026-08-31T06:57:39.933339Z","last_seen":"2026-08-31T06:57:39.933339Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mp315.org/","fqdn":"mp315.org","domain":"mp315.org","tld":"org"},"ip":{"addr":"79.98.187.216","port":0,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T06:57:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"mp315.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mp315.org","ip":{"addr":"79.98.187.216","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2016-10-19","domain_rank":0,"first_seen":"2015-07-04T13:02:01Z","last_seen":"2026-07-05T10:21:34.297539Z","alert_count":2,"request_count":2,"received_data":478,"sent_data":972,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mp315.org/","fqdn":"mp315.org","domain":"mp315.org","tld":"org"},"ip":{"addr":"79.98.187.216","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T06:57:11.415Z","timestamp":1788159431415,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp315.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 00:45:42 GMT","end":"Fri, 27 Nov 2026 00:45:41 GMT"},"fingerprint":{"sha1":"70:5B:4D:BF:B2:D8:8E:79:CA:64:37:62:F9:AA:9B:B1:DE:23:8C:7E","sha256":"86:00:E7:63:C4:53:02:8B:DF:87:A2:1E:45:47:F4:06:19:E8:DE:6C:9C:48:21:1F:7F:C7:08:8A:2B:93:50:22"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mp315.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 06:57:11 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15,"size_decoded":102,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"329a61ee4fcee605445fc8d6964d1fb8","sha1":"5d20a53131402f97970287880dec1b0fc51974b2","sha256":"f3ed38e2b72e49e0f42fc8beeaaf9b76558d0d8b35de8c12933d97b78d191bd4","sha512":"6e5a3c287c08832c597f31a49f8330f36869d9365c03e5a41d9eb0b6662fc7870a57247cc42e95df3e5d8f563342481f4befab100b72915ae84aea9591457dc4","ssdeep":"","tlshash":"3460003000000033000cc3003c0c0c00c0c0ccc0ccf0003f00c000003303300c003000","first_seen":"2026-08-31T06:57:39.936627Z","last_seen":"2026-08-31T06:57:39.936627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":257,"connect":56,"send":0,"wait":55,"receive":0,"ssl":117},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"mp315.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mp315.org/favicon.ico","fqdn":"mp315.org","domain":"mp315.org","tld":"org"},"ip":{"addr":"79.98.187.216","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mp315.org/","date":"2026-08-31T06:57:12.112Z","timestamp":1788159432112,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp315.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 00:45:42 GMT","end":"Fri, 27 Nov 2026 00:45:41 GMT"},"fingerprint":{"sha1":"70:5B:4D:BF:B2:D8:8E:79:CA:64:37:62:F9:AA:9B:B1:DE:23:8C:7E","sha256":"86:00:E7:63:C4:53:02:8B:DF:87:A2:1E:45:47:F4:06:19:E8:DE:6C:9C:48:21:1F:7F:C7:08:8A:2B:93:50:22"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mp315.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mp315.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 06:57:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 150\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150,"size_decoded":376,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"84241342d84ac29592a5d9516f8edf7f","sha1":"03c53980e18e17625f439c20e7d438f066202428","sha256":"6e21162bc64073fe9e3d3d6375ca24d04fed1912a5b7716aac0cb0f2d16fae7c","sha512":"7509483335c7a30365f7f403098491ac0b44fffcc68a5cdacb86ec191f02dbda5b16a20a09e924b6a29ac938578d43bacb9a50115db5c5668ea27fe1811bd530","ssdeep":"","tlshash":"34c08c9e140012010b2087042ac1326464973b992de685006a87e027ece8a1ad987288","first_seen":"2023-04-05T13:59:49Z","last_seen":"2026-08-31T11:20:52.048584Z","times_seen":9344,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"mp315.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}