{"report_id":"3256bb3d-66aa-4308-8b55-ccc4e508024f","version":6,"status":"done","tags":[],"date":"2026-05-27T01:15:56Z","url":{"schema":"https","addr":"slon4.cc","fqdn":"slon4.cc","domain":"slon4.cc","tld":"cc"},"ip":{"addr":"64.190.63.222","port":0,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"slon4.cc/","fqdn":"slon4.cc","domain":"slon4.cc","tld":"cc"},"title":"slon4.cc","dom":{"size":1159,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"1773dc3161c93021345cabac54eb00f2","sha1":"2aa7391329bd9e40378f0f090158025157007c1c","sha256":"1d1cbc4d64187cd86c3379930bf1fae8d7997a8d55f5621ccf32202f76969ab0","sha512":"85fccc19765095ae6c4e2e14ef933e26904339292ae94e83d71d8bc55aac6294da4e17e5fba8eae8cb8d346cb95d3db731dee91dacfea945d7ddc265f400c7c9","ssdeep":"","tlshash":"6821e15268d344943258c6641af5fe6c1f49a907b103dca47beda5984fc9349cdd31dc","dom_hash":"domhashe96f4de70d144f7da75b9e764a7ea638","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"slon4.cc","fqdn":"slon4.cc","domain":"slon4.cc","tld":"cc"},"ip":{"addr":"64.190.63.222","port":0,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-01T01:15:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"slon4.cc","ip":{"addr":"64.190.63.222","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2026-02-11","domain_rank":0,"first_seen":"2026-03-23T08:41:51.243403Z","last_seen":"2026-05-26T18:21:45.08608Z","alert_count":0,"request_count":2,"received_data":1552,"sent_data":900,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sedoparking.com","ip":{"addr":"64.190.63.136","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2001-09-18","domain_rank":11712,"first_seen":"2012-06-01T05:52:33Z","last_seen":"2026-05-22T17:38:24.658525Z","alert_count":0,"request_count":1,"received_data":1513,"sent_data":430,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"slon4.cc/","fqdn":"slon4.cc","domain":"slon4.cc","tld":"cc"},"ip":{"addr":"64.190.63.222","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc1b831328326a0a64733989a3ac827a","sha1":"6273bce53262f1e0ddca1f06f53ca80aa425799e","sha256":"2319c7701be8d5d2380ef810ec8648c701da1df8cd2ce572c9ea67d42d1fa09e","sha512":"65ce7386e53d17aed5e3cf38e04cd5bdfe6a5f8a65fa8e1c44d99cdafbfa74b913cde190048aee4ca8b665145c877a6fcbc892b8c63d698e0ec704b1b62addac","ssdeep":"","tlshash":"95c092142a4765a02aa916872424ddfd1a987a1bb462a98d75ee0a001bc828e46524f0","size":130,"data":"","first_seen":"2026-03-28T04:27:37.1411Z","last_seen":"2026-05-27T01:15:56.939974Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sedoparking.com/frmpark/slon4.cc/sedopark/park.js","fqdn":"sedoparking.com","domain":"sedoparking.com","tld":"com"},"ip":{"addr":"64.190.63.136","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6577f93449a50702222540cc5a0fe92","sha1":"c058424d03f0bbcdcb4b6363c92318c24144d96c","sha256":"d16232a78ead54aba38f7ed8a45f535f72db65b059419d8b85d026e7230978e6","sha512":"2fd730b99b8a80d537f12ea799f4fa806818a5de5be396519516402d59dc65eb77c6a829b5b74b9d68177f7d8927dc3d02f95d9a28478584791cda25e75db13d","ssdeep":"","tlshash":"6a21e07e7d52ac33c6cac59e1c7b7a58ac6261033725dcd0965cccac19c5f4414b3396","size":1273,"data":"","first_seen":"2026-03-28T04:27:37.138723Z","last_seen":"2026-05-27T01:15:56.938631Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3bba0f4f7ab24f8917b492c236fdf49f","sha1":"632b336bebb90e6668fdd57ec1b5d883c5085604","sha256":"4eaa362780712c8c53d87b82be1a9634f32fd7bbab45bab01b1b3937c9ff191b","sha512":"f29e639e89f62221a3886d56d6e4869c96fe32e59c082601534a3bf5410800f89e0568b7c55086d8802db797eb221b65f2d4296c5315e1b643fb8dcfb481fbfc","ssdeep":"","tlshash":"1ea002095f0784e53ac82bca50389cfd07447b47f0b1e9e945f58510a79c2de58a25e0","size":75,"data":"","first_seen":"2026-03-28T04:27:37.142685Z","last_seen":"2026-05-27T01:15:56.940907Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"slon4.cc/","fqdn":"slon4.cc","domain":"slon4.cc","tld":"cc"},"ip":{"addr":"64.190.63.222","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-27T01:15:35.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon4.cc","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 01 May 2026 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:0C:DD:A6:98:58:02:B3:A6:12:0E:DF:ED:62:3B:3D:7E:F6:7D:2D","sha256":"BA:2A:A1:39:D4:D8:A3:6F:90:F9:8E:EF:C7:37:49:62:A0:F7:1B:EB:6B:99:0F:A5:63:00:42:48:C3:FB:2B:16"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: slon4.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Wed, 27 May 2026 01:15:35 GMT\r\nexpires: Mon, 26 Jul 1997 05:00:00 GMT\r\nlast-modified: Wed, 27 May 2026 01:15:35 GMT\r\npragma: no-cache\r\nserver: Parking/1.0\r\nvary: Accept-Encoding\r\nx-cache-miss-from: parking-644fc87d87-pbrfc\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1014,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"64390589f62658c86b7dd95ce6995e9e","sha1":"94ab92055e591d52dd509946f009ad2ae8acb775","sha256":"3f5716b096f4810ecd0c9fa647a3633f0bb699b91db7567a42e0a7503950ea66","sha512":"027e05ecbf0aaa997f861521134697cb02866796fa0137a9dd6c84b36b765412535defc28f1c9c6e9d643e56f008f68415293659212035fea926a9d74618d542","ssdeep":"","tlshash":"d511af1214e304543119c6242af5fa582f4a6917b147d8247eeea2984fc6705ced71dc","first_seen":"2026-03-28T04:27:37.137112Z","last_seen":"2026-05-27T01:15:56.938069Z","times_seen":6,"resource_available":false,"data":null}},"time_used":888,"timings":{"blocked":406,"dns":1,"connect":63,"send":0,"wait":73,"receive":0,"ssl":342},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sedoparking.com/frmpark/slon4.cc/sedopark/park.js","fqdn":"sedoparking.com","domain":"sedoparking.com","tld":"com"},"ip":{"addr":"64.190.63.136","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon4.cc/","date":"2026-05-27T01:15:36.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedoparking.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 May 2026 00:00:00 GMT","end":"Sat, 08 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A5:9F:BA:9C:14:78:0E:02:45:62:E1:63:1A:48:6B:45:A3:9B:04:26","sha256":"3B:FE:EA:D9:08:DA:3D:AE:D7:23:09:7E:85:80:7A:E5:D3:59:93:D7:69:26:F8:51:1F:0F:9A:33:5E:2C:FE:BC"}}},"request":{"raw":"GET /frmpark/slon4.cc/sedopark/park.js HTTP/1.1\r\nHost: sedoparking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon4.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 27 May 2026 01:15:36 GMT\r\nserver: Parking/1.0\r\nvary: Accept-Encoding\r\nx-cache-miss-from: parking-644fc87d87-l5mvg\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1273,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (987)","md5":"d6577f93449a50702222540cc5a0fe92","sha1":"c058424d03f0bbcdcb4b6363c92318c24144d96c","sha256":"d16232a78ead54aba38f7ed8a45f535f72db65b059419d8b85d026e7230978e6","sha512":"2fd730b99b8a80d537f12ea799f4fa806818a5de5be396519516402d59dc65eb77c6a829b5b74b9d68177f7d8927dc3d02f95d9a28478584791cda25e75db13d","ssdeep":"","tlshash":"6a21e07e7d52ac33c6cac59e1c7b7a58ac6261033725dcd0965cccac19c5f4414b3396","first_seen":"2026-03-28T04:27:37.138723Z","last_seen":"2026-05-27T01:15:56.938631Z","times_seen":5,"resource_available":true,"data":null}},"time_used":509,"timings":{"blocked":215,"dns":1,"connect":69,"send":0,"wait":78,"receive":0,"ssl":144},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon4.cc/favicon.ico","fqdn":"slon4.cc","domain":"slon4.cc","tld":"cc"},"ip":{"addr":"64.190.63.222","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon4.cc/","date":"2026-05-27T01:15:36.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon4.cc","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 01 May 2026 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:0C:DD:A6:98:58:02:B3:A6:12:0E:DF:ED:62:3B:3D:7E:F6:7D:2D","sha256":"BA:2A:A1:39:D4:D8:A3:6F:90:F9:8E:EF:C7:37:49:62:A0:F7:1B:EB:6B:99:0F:A5:63:00:42:48:C3:FB:2B:16"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: slon4.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon4.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 441 No Reason Phrase\r\ndate: Wed, 27 May 2026 01:15:36 GMT\r\nserver: Parking/1.0\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"441","status_text":"No Reason Phrase","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T17:51:01.341379Z","times_seen":17481265,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}