{"report_id":"28a28921-e25b-42b1-9d90-d77886568090","version":6,"status":"done","tags":[],"date":"2026-04-08T14:45:47Z","url":{"schema":"https","addr":"jupiteragg.co.com","fqdn":"jupiteragg.co.com","domain":"jupiteragg.co.com","tld":"co.com"},"ip":{"addr":"23.172.217.229","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"jupiteragg.co.com/","fqdn":"jupiteragg.co.com","domain":"jupiteragg.co.com","tld":"co.com"},"title":"404 Not Found","dom":{"size":144,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"636791fe8b8698053ac2ba31d8ea6d32","sha1":"8a5c6e53aafd4f58a41a8cc4ea7f23070c1d710f","sha256":"0828655d573976c0b01f9761fef2d089899540fbc32ea4fe23a3aed6994f8274","sha512":"10fa0fdb8de590d5c49ab5c4cd4b4518cbc1c17f0a5634747389547f7f5875d9aa7b0650e41bad7747730cff09e630776324069930d4303bc506a3efdd2e9cd7","ssdeep":"","tlshash":"66c02b0df4636148dd03117017c33240c188c33fe85ac0100802c483b0cf2bac4c23a5","dom_hash":"domhash18da208b3b39949e9ba09528a720f5c0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"jupiteragg.co.com","fqdn":"jupiteragg.co.com","domain":"jupiteragg.co.com","tld":"co.com"},"ip":{"addr":"23.172.217.229","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-13T14:45:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0","referer":"www.bing.com","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-08","alert":"Phishing Block","trigger":"jupiteragg.co.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"jupiteragg.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"jupiteragg.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"jupiteragg.co.com","ip":{"addr":"23.172.217.229","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-25T02:36:03.913451Z","last_seen":"2026-03-25T02:36:03.913451Z","alert_count":6,"request_count":2,"received_data":17396,"sent_data":1017,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"jupiteragg.co.com/","fqdn":"jupiteragg.co.com","domain":"jupiteragg.co.com","tld":"co.com"},"ip":{"addr":"23.172.217.229","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-08T14:45:25.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupiteragg.co.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 17:08:03 GMT","end":"Sun, 21 Jun 2026 17:08:02 GMT"},"fingerprint":{"sha1":"27:32:82:F6:96:FA:F4:C6:00:E1:87:5C:64:6C:95:24:21:72:72:50","sha256":"A9:08:1B:63:BA:3C:B7:72:66:28:DD:92:45:BB:C9:FF:FA:2F:6A:A5:8C:B2:27:DD:1F:B0:F8:A0:C4:C9:BF:83"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: jupiteragg.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 08 Apr 2026 14:45:26 GMT\r\ncontent-type: text/html\r\ncontent-length: 548\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":548,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"370e16c3b7dba286cff055f93b9a94d8","sha1":"65f3537c3c798f7da146c55aef536f7b5d0cb943","sha256":"d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090","sha512":"75cd6a0ac7d6081d35140abbea018d1a2608dd936e2e21f61bf69e063f6fa16dd31c62392f5703d7a7c828ee3d4ecc838e73bff029a98ced8986acb5c8364966","ssdeep":"","tlshash":"02f0909f5f12287f2e238571f4c35169cf680a57fb9925e28748011f7aca04549f1fad","first_seen":"2023-03-08T16:42:13Z","last_seen":"2026-07-27T07:02:38.947831Z","times_seen":20499,"resource_available":true,"data":null}},"time_used":2414,"timings":{"blocked":1012,"dns":356,"connect":147,"send":0,"wait":387,"receive":0,"ssl":508},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-08","alert":"Phishing Block","trigger":"jupiteragg.co.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"jupiteragg.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"jupiteragg.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jupiteragg.co.com/favicon.ico","fqdn":"jupiteragg.co.com","domain":"jupiteragg.co.com","tld":"co.com"},"ip":{"addr":"23.172.217.229","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jupiteragg.co.com/","date":"2026-04-08T14:45:26.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupiteragg.co.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 17:08:03 GMT","end":"Sun, 21 Jun 2026 17:08:02 GMT"},"fingerprint":{"sha1":"27:32:82:F6:96:FA:F4:C6:00:E1:87:5C:64:6C:95:24:21:72:72:50","sha256":"A9:08:1B:63:BA:3C:B7:72:66:28:DD:92:45:BB:C9:FF:FA:2F:6A:A5:8C:B2:27:DD:1F:B0:F8:A0:C4:C9:BF:83"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: jupiteragg.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jupiteragg.co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Apr 2026 14:45:26 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 16430\r\nlast-modified: Mon, 23 Mar 2026 17:56:36 GMT\r\netag: \"69c17ed4-402e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x62, 32 bits/pixel","md5":"f5e9216b6f9d6e398db95a06722e6e7d","sha1":"8ddf59e9ec768c714357c1693695812edd436549","sha256":"06b6bf2d861f34d05d0ae80b2435d6ce9eef5a9e0647ea245e25fdbbd8badad4","sha512":"0ce3b00d27eeac9edc05514b819e319b828bff366e7777ae308e53bb35a9f9cc9ea011e4885271e89e589beb09d84a69c6567f96ef8027a6fb45d9719bfe2c8f","ssdeep":"96:1OIkLQ+53jLKTn7HInEQHVQMtgF5EUnalQ/k75zYFl+O7H73uS5U4ONu3+KodBcp:495imoQlNVzmjGS6g3b6Bcp0f2IRkGu","tlshash":"fb7251c3624013e4e5888b34352b4c6e5b57beb6be79f92b1d48f7215bf35e2001b61a","first_seen":"2026-03-28T14:28:01.832037Z","last_seen":"2026-04-08T14:45:48.074155Z","times_seen":2,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"jupiteragg.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"jupiteragg.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-08","alert":"Phishing Block","trigger":"jupiteragg.co.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}