{"report_id":"35b8329e-8491-4c6d-941d-94991f3a2504","version":6,"status":"done","tags":[],"date":"2026-05-28T12:29:33Z","url":{"schema":"http","addr":"cy8.top/","fqdn":"cy8.top","domain":"cy8.top","tld":"top"},"ip":{"addr":"13.249.8.34","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"cy8.top/","fqdn":"cy8.top","domain":"cy8.top","tld":"top"},"title":"cy8.top/","dom":{"size":7187,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (529)","md5":"beb9752193fd83765aa65bdc1e275fc3","sha1":"12fe9bf50614342bc7e5f85adddc2d6b55b2bb17","sha256":"c6bb1745593f5f222aa550415b11e07192592823764e0d3d31f4133f8015e05b","sha512":"4a2da0129879659dd58f18c4afe2b29beb559befaaa937599178528526cb371bf321c8bc53dda33a92a0d932469bcd7b50e45e6a2a444cd64e151e518c6e7d7f","ssdeep":"192:OtvyHlPr3CWab+MJNdQ+K49OOaZ+6T9mya/qk:ODs9gqk","tlshash":"3ce1d72d6ba30256752790e42bef22db767240abd10fc8447e5ef3904fd161844bba9d","dom_hash":"domhash040ac79f60f83976c76c8511d0ce63a8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cy8.top/","fqdn":"cy8.top","domain":"cy8.top","tld":"top"},"ip":{"addr":"13.249.8.34","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-02T12:29:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"cy8.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"cy8.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cy8.top","ip":{"addr":"13.249.8.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-09-29","domain_rank":0,"first_seen":"2026-05-28T12:29:33.285049Z","last_seen":"2026-05-28T12:29:33.285049Z","alert_count":10,"request_count":5,"received_data":33694,"sent_data":2158,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cy8.top/","fqdn":"cy8.top","domain":"cy8.top","tld":"top"},"ip":{"addr":"13.249.8.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0d9e3dc06f71b97d043db3d42554949","sha1":"403b6ddf2db3e06c59b2cadefda68bec31df386d","sha256":"ecb455825814c7cdb028062299a0c5e68667d2bbece2dff2b9a9ca333e34dadf","sha512":"7f23e5fe463766d8c8e8ce0668dbe5642b965cd175a28d05164b7de58c385bf7560f6cf52c2916611c3a85bb4b6fcae0c62b4c1dabfa664e29018e0da2cd622b","ssdeep":"96:MdQ+wVSoW9OOUNMoe61T4LqNTEoO22BIdaT:MdQ+K49OOaZ+6T9myaT","tlshash":"7791a73d7ba312b5692790a517df2296257250bbc41bc904be1ff7811fd1714206e9cf","size":4420,"data":"","first_seen":"2026-05-28T12:29:36.92866Z","last_seen":"2026-05-28T12:29:36.92866Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cy8.top/","fqdn":"cy8.top","domain":"cy8.top","tld":"top"},"ip":{"addr":"13.249.8.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-28T12:29:10.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cy8.top","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 26 Nov 2025 00:00:00 GMT","end":"Fri, 25 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:6E:DB:C6:5C:20:E5:97:FA:C5:D6:8E:70:D9:6A:9B:3B:78:E7:DD","sha256":"44:A2:56:88:48:4E:CD:02:9A:C5:E6:BE:95:30:C8:83:4A:91:AE:B0:AF:5C:B8:AE:CE:82:87:E2:92:3A:C4:23"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cy8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 12:04:14 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 28 May 2026 11:11:47 GMT\r\netag: W/\"6a1822f3-1a24\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e70b9fa9699195d491ed105585ca129a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: iE-3D8B609-E2dJf9jiOF0FdaUf_QOVcSlCoy9B8B7Ulz46KTN8T0A==\r\nage: 1497\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6692,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"877690bca6bdb73dfaf97f2969a692c2","sha1":"54a6c19a35349541c61d9b8c839053dec691f9f8","sha256":"5f64f335086c16dc66ae23dbfdf0030297ed7895fbbf2666e0037c170dcce289","sha512":"28291d5a0e38a69b8e5a68e36bb1c1b086bfe4e035685e9f61bc71f4fd36eda5ff90a75bd64b12b005004a0c845edadba8651c9b8c2631d82b21730725f1c9f8","ssdeep":"192:CtvyHlPr3CWab+MJNdQ+K49OOaZ+6T9myaRL2:CDs9oL2","tlshash":"65d1d72e7ba30156712790e42bdf629a717250abc04ecc087e5eb3908fd175845bba8e","first_seen":"2026-05-28T12:29:36.919508Z","last_seen":"2026-05-28T12:29:36.919508Z","times_seen":1,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":420,"dns":146,"connect":8,"send":0,"wait":34,"receive":0,"ssl":262},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"cy8.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"cy8.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cy8.top/assets/index-Ccu6oc9r.js","fqdn":"cy8.top","domain":"cy8.top","tld":"top"},"ip":{"addr":"13.249.8.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cy8.top/","date":"2026-05-28T12:29:11.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cy8.top","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 26 Nov 2025 00:00:00 GMT","end":"Fri, 25 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:6E:DB:C6:5C:20:E5:97:FA:C5:D6:8E:70:D9:6A:9B:3B:78:E7:DD","sha256":"44:A2:56:88:48:4E:CD:02:9A:C5:E6:BE:95:30:C8:83:4A:91:AE:B0:AF:5C:B8:AE:CE:82:87:E2:92:3A:C4:23"}}},"request":{"raw":"GET /assets/index-Ccu6oc9r.js HTTP/1.1\r\nHost: cy8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cy8.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 12:25:10 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 28 May 2026 11:11:47 GMT\r\netag: W/\"6a1822f3-1a24\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e70b9fa9699195d491ed105585ca129a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: XOp9AuHgv81jK3emxnjymS-d6_44N6hDAiIKg7fQxXc_kQFH-JzusA==\r\nage: 241\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"cy8.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"cy8.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cy8.top/assets/uni.244911bb.css","fqdn":"cy8.top","domain":"cy8.top","tld":"top"},"ip":{"addr":"13.249.8.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cy8.top/","date":"2026-05-28T12:29:11.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cy8.top","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 26 Nov 2025 00:00:00 GMT","end":"Fri, 25 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:6E:DB:C6:5C:20:E5:97:FA:C5:D6:8E:70:D9:6A:9B:3B:78:E7:DD","sha256":"44:A2:56:88:48:4E:CD:02:9A:C5:E6:BE:95:30:C8:83:4A:91:AE:B0:AF:5C:B8:AE:CE:82:87:E2:92:3A:C4:23"}}},"request":{"raw":"GET /assets/uni.244911bb.css HTTP/1.1\r\nHost: cy8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cy8.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 12:25:10 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 28 May 2026 11:02:17 GMT\r\netag: W/\"6a1820b9-2c53\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e70b9fa9699195d491ed105585ca129a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: EMDZqDGf4v4fqo4GSthKwuXU5GJZ5SDO6x5UQeLF5DUuVVOfGRB43A==\r\nage: 241\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":11347,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11346)","md5":"eaea4edc4c50770a5506c9183243c6b7","sha1":"313d728341974aa6f12c319bf6d3f1c089c1af9d","sha256":"244911bb0f354a3586d4be4f52dc69bd63ae64dde9dfe1d85e8ad94cc459bcab","sha512":"c6bfbba36d865a3d83fec1b1ea06b73809b7942f9496613ea4fb06d353be752c936ea362f8c1e69b77e68c3c71515b253b2a54fedf7679def364a70fcb4cb936","ssdeep":"192:Ujj8LGJ0CQLnWL9MNXVA87eizyXb741OEDyPhN:UXpmLWLL87ei+XHSwN","tlshash":"7a3296319a00163df857cf2a62d1d74f223184b3e9533b1cab753938cead9d5163a789","first_seen":"2025-11-30T16:25:47.849464Z","last_seen":"2026-05-28T12:29:36.925429Z","times_seen":16,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"cy8.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"cy8.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cy8.top/assets/index-mNylEhi1.css","fqdn":"cy8.top","domain":"cy8.top","tld":"top"},"ip":{"addr":"13.249.8.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cy8.top/","date":"2026-05-28T12:29:11.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cy8.top","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 26 Nov 2025 00:00:00 GMT","end":"Fri, 25 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:6E:DB:C6:5C:20:E5:97:FA:C5:D6:8E:70:D9:6A:9B:3B:78:E7:DD","sha256":"44:A2:56:88:48:4E:CD:02:9A:C5:E6:BE:95:30:C8:83:4A:91:AE:B0:AF:5C:B8:AE:CE:82:87:E2:92:3A:C4:23"}}},"request":{"raw":"GET /assets/index-mNylEhi1.css HTTP/1.1\r\nHost: cy8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cy8.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 12:25:10 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 28 May 2026 11:11:47 GMT\r\netag: W/\"6a1822f3-1a24\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e70b9fa9699195d491ed105585ca129a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: l6JLOY-nHFGYdm42_U8-F3FkHO6IGNCJHReuit-nb4DByslAvJz00g==\r\nage: 241\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6692,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"877690bca6bdb73dfaf97f2969a692c2","sha1":"54a6c19a35349541c61d9b8c839053dec691f9f8","sha256":"5f64f335086c16dc66ae23dbfdf0030297ed7895fbbf2666e0037c170dcce289","sha512":"28291d5a0e38a69b8e5a68e36bb1c1b086bfe4e035685e9f61bc71f4fd36eda5ff90a75bd64b12b005004a0c845edadba8651c9b8c2631d82b21730725f1c9f8","ssdeep":"192:CtvyHlPr3CWab+MJNdQ+K49OOaZ+6T9myaRL2:CDs9oL2","tlshash":"65d1d72e7ba30156712790e42bdf629a717250abc04ecc087e5eb3908fd175845bba8e","first_seen":"2026-05-28T12:29:36.919508Z","last_seen":"2026-05-28T12:29:36.919508Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"cy8.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"cy8.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cy8.top/favicon.ico","fqdn":"cy8.top","domain":"cy8.top","tld":"top"},"ip":{"addr":"13.249.8.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cy8.top/","date":"2026-05-28T12:29:11.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cy8.top","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 26 Nov 2025 00:00:00 GMT","end":"Fri, 25 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:6E:DB:C6:5C:20:E5:97:FA:C5:D6:8E:70:D9:6A:9B:3B:78:E7:DD","sha256":"44:A2:56:88:48:4E:CD:02:9A:C5:E6:BE:95:30:C8:83:4A:91:AE:B0:AF:5C:B8:AE:CE:82:87:E2:92:3A:C4:23"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cy8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cy8.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 12:07:17 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 28 May 2026 11:11:47 GMT\r\netag: W/\"6a1822f3-1a24\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e70b9fa9699195d491ed105585ca129a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: XrUTjZBeUE3hWvYlsWa6H7G5VSSGff_da1_mD_6L7G1Zrkuf5ApF1A==\r\nage: 1314\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":6692,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"877690bca6bdb73dfaf97f2969a692c2","sha1":"54a6c19a35349541c61d9b8c839053dec691f9f8","sha256":"5f64f335086c16dc66ae23dbfdf0030297ed7895fbbf2666e0037c170dcce289","sha512":"28291d5a0e38a69b8e5a68e36bb1c1b086bfe4e035685e9f61bc71f4fd36eda5ff90a75bd64b12b005004a0c845edadba8651c9b8c2631d82b21730725f1c9f8","ssdeep":"192:CtvyHlPr3CWab+MJNdQ+K49OOaZ+6T9myaRL2:CDs9oL2","tlshash":"65d1d72e7ba30156712790e42bdf629a717250abc04ecc087e5eb3908fd175845bba8e","first_seen":"2026-05-28T12:29:36.919508Z","last_seen":"2026-05-28T12:29:36.919508Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"cy8.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"cy8.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}