{"report_id":"372fb39b-4e5b-46d7-9e4b-4bbfcd26db26","version":6,"status":"done","tags":[],"date":"2026-04-24T13:39:54Z","url":{"schema":"https","addr":"eduvista.xyz","fqdn":"eduvista.xyz","domain":"eduvista.xyz","tld":"xyz"},"ip":{"addr":"192.185.73.57","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"eduvista.xyz/","fqdn":"eduvista.xyz","domain":"eduvista.xyz","tld":"xyz"},"title":"Eudvista.xyz","dom":{"size":758,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"9c153591a5f8f1dc83821382abe6b1b2","sha1":"b10d3275657b0653affa7d8bb12bb9654aa4f602","sha256":"361cc6a7120028bcc7a477eeba2330571be2b0b9b9e6d99c02d628551ca5e6f1","sha512":"e44f9e272e9703401ee8b851a3263f85ce06aa3ec6f7581e8c055f912b1d6272c529a259e5ef7df1bd384cc9b50c33a0e2cbcf37e7626e5bdc90c4693a235ad0","ssdeep":"","tlshash":"f101d01e241b6507dad28960b5111fdb97c5c483c328a55853b331ffd1c997393d9b48","dom_hash":"domhash8d315e0b99e3240f0d457a0abc6102f1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"eduvista.xyz","fqdn":"eduvista.xyz","domain":"eduvista.xyz","tld":"xyz"},"ip":{"addr":"192.185.73.57","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-29T13:39:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"eduvista.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"eduvista.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"eduvista.xyz","ip":{"addr":"192.185.73.57","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"domain_registered":"2023-02-27","domain_rank":0,"first_seen":"2026-04-24T02:04:16.218032Z","last_seen":"2026-04-24T02:04:16.218032Z","alert_count":6,"request_count":3,"received_data":127564,"sent_data":1354,"comment":"","tags":null,"fingerprints":[{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"eduvista.xyz/favicon.ico","fqdn":"eduvista.xyz","domain":"eduvista.xyz","tld":"xyz"},"ip":{"addr":"192.185.73.57","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eduvista.xyz/","date":"2026-04-24T13:39:33.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eduvista.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 10:01:36 GMT","end":"Tue, 07 Jul 2026 10:01:35 GMT"},"fingerprint":{"sha1":"2F:BD:99:16:F5:44:B7:F3:1F:DE:B3:FA:C1:D7:6E:60:66:7A:62:97","sha256":"8B:6C:61:7B:6E:DC:3C:3C:55:97:4F:13:8C:D5:B6:D0:94:C7:83:6D:06:AA:79:0C:2E:8B:B2:89:17:31:09:6E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: eduvista.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eduvista.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nlast-modified: Fri, 14 Nov 2025 22:08:58 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4677\r\ncontent-type: text/html\r\ndate: Fri, 24 Apr 2026 13:39:33 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":11816,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (358)","md5":"a8063bd37d3c8fb3176a6bf140558a4d","sha1":"e32cf4b407db3d3773ded13ff64b70fdbad7735f","sha256":"bccb23d41c2cc69cf0c7d22c4314ca8181a513c6999b73e45307792830f4e482","sha512":"82d749f6b17b21587fb345ca196a2aa83eca80ad66ed9c1ab88b36709bed14175d53afefe9acc0dafc4fad78ffb8df155193a6829bc857ad6d68b1c84af7b854","ssdeep":"192:bpvXn2H25Zx48DNYGu6C9tdDOxktft1zQOPtaUrzvHlPuPQXGuV27BHplXtAUU/s:FvX2H25v4CYn6etFTBvhtv4IcpRtlU/s","tlshash":"bd32940bab4c063b1312459a7458639a370fc87fe2661bb474bfc06867d16a649f23dc","first_seen":"2023-04-05T03:58:47Z","last_seen":"2026-07-25T03:32:39.483608Z","times_seen":16057,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"eduvista.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"eduvista.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eduvista.xyz/","fqdn":"eduvista.xyz","domain":"eduvista.xyz","tld":"xyz"},"ip":{"addr":"192.185.73.57","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-24T13:39:32.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eduvista.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 10:01:36 GMT","end":"Tue, 07 Jul 2026 10:01:35 GMT"},"fingerprint":{"sha1":"2F:BD:99:16:F5:44:B7:F3:1F:DE:B3:FA:C1:D7:6E:60:66:7A:62:97","sha256":"8B:6C:61:7B:6E:DC:3C:3C:55:97:4F:13:8C:D5:B6:D0:94:C7:83:6D:06:AA:79:0C:2E:8B:B2:89:17:31:09:6E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: eduvista.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 461\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Fri, 24 Apr 2026 13:39:33 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":908,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"29dabab395e345142a91d9719c6a3f0d","sha1":"35636e3ff0935ac3f36513164f3e14aa7f08efcd","sha256":"ee4958422d95cab94bbafc8754321ec35567139da04346f5602a6993a5487c9a","sha512":"b02cd5d0a84cabdfd9944bf5d0c807e8fb6598ea97b44322e55b27041da2f3573fe83744fc296fc4f08486e40d68e126edfbacd453135f0b93c472bc8acf763a","ssdeep":"","tlshash":"68110458181e7c07c2e3cb79f1a1bf92dac584438314024c62733077d5c56b653aebc8","first_seen":"2026-04-24T13:39:55.567702Z","last_seen":"2026-04-24T13:39:55.567702Z","times_seen":1,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":191,"dns":1,"connect":93,"send":0,"wait":116,"receive":1,"ssl":98},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"eduvista.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"eduvista.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eduvista.xyz/under-construction.png","fqdn":"eduvista.xyz","domain":"eduvista.xyz","tld":"xyz"},"ip":{"addr":"192.185.73.57","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eduvista.xyz/","date":"2026-04-24T13:39:33.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eduvista.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 10:01:36 GMT","end":"Tue, 07 Jul 2026 10:01:35 GMT"},"fingerprint":{"sha1":"2F:BD:99:16:F5:44:B7:F3:1F:DE:B3:FA:C1:D7:6E:60:66:7A:62:97","sha256":"8B:6C:61:7B:6E:DC:3C:3C:55:97:4F:13:8C:D5:B6:D0:94:C7:83:6D:06:AA:79:0C:2E:8B:B2:89:17:31:09:6E"}}},"request":{"raw":"GET /under-construction.png HTTP/1.1\r\nHost: eduvista.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eduvista.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 04 Apr 2023 06:04:55 GMT\r\naccept-ranges: bytes\r\ncontent-length: 114176\r\ncontent-type: image/png\r\ndate: Fri, 24 Apr 2026 13:39:33 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":114176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 320, 8-bit/color RGBA, non-interlaced","md5":"53924799fc3fec769e93353442f67376","sha1":"38c0d982f5cfb550fd471204f67ce925a52c00d9","sha256":"712011e422d02a3f5a7cfcf32d7b2f185d3f16d04e687de5f0b3985a983e1ea4","sha512":"ac807050564c7552840a9f68e4d22dc8675bc45a748f87a925985fab23b35e1e3fe4c64ead6a782e59415eee94a84ba9711e1cf0286ec1cb6dee4949ef6fe23d","ssdeep":"3072:XtzV+hwjBs0n+qrSKY3Y86IcPxDbtqf0+CjChGGs:XdVUl0nxrSKY3Y8tcPRtl+ACE","tlshash":"84b302779c171063ee17496682cd883ef60799be391409b92c2d67b4ac5072abebc03d","first_seen":"2026-04-24T13:39:55.56857Z","last_seen":"2026-04-24T13:39:55.56857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"eduvista.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"eduvista.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}