{"report_id":"3c2ca468-f5b6-4ada-85cd-0041a41c3423","version":0,"status":"done","tags":[],"date":"2026-07-14T13:15:16Z","url":{"schema":"http","addr":"matanga-guru.icu","fqdn":"matanga-guru.icu","domain":"matanga-guru.icu","tld":"icu"},"ip":{"addr":"172.67.185.21","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"matanga-guru.icu/","fqdn":"matanga-guru.icu","domain":"matanga-guru.icu","tld":"icu"},"title":"Current links to the MATANGA Marketplace website","dom":{"size":15500,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (944)","md5":"90d3452852e6ae167c48d06cefa2f849","sha1":"88901d05f4a6ee9fc867442ea12dfbfbccc00c06","sha256":"5a1ca1ef91a3282a8789d7a79226d915687b2f14fa79d13c0cbfa9323431b210","sha512":"b490298f762f8924fe5080fb6a3f8b23a1a9a933aff41a38a41cbf5312d122a2d1167df47883609aec47bef7b3704a7a1e1f3b3e3ab5878ce4c11093e8f10f39","ssdeep":"192:p8NTBVqAVZNAqrfko9KTeqJ0vU2e2xJ5JuyV/f5KrjQwtYWZPL5:kqKZKY7NpVUQD0PL5","tlshash":"6e62e7f3c1e201661622c991937ab72df652400fd8179446f6af47a98fde9d3ea2334c","dom_hash":"domhash10ad213eacf9f4c8decdec7be946367c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"matanga-guru.icu","fqdn":"matanga-guru.icu","domain":"matanga-guru.icu","tld":"icu"},"ip":{"addr":"172.67.185.21","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-18T13:15:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"matanga-guru.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"matanga-guru.icu","ip":{"addr":"104.21.64.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-10","domain_rank":0,"first_seen":"2026-07-13T21:19:28.626658Z","last_seen":"2026-07-13T21:19:28.626658Z","alert_count":2,"request_count":2,"received_data":75164,"sent_data":993,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"matanga-guru.icu/","fqdn":"matanga-guru.icu","domain":"matanga-guru.icu","tld":"icu"},"ip":{"addr":"104.21.64.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-14T13:14:49.931Z","timestamp":1784034889931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matanga-guru.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 08:06:39 GMT","end":"Thu, 08 Oct 2026 09:04:53 GMT"},"fingerprint":{"sha1":"51:7E:7D:E3:E6:A0:97:15:9B:A9:B3:66:5B:63:D9:1C:06:D4:34:A2","sha256":"85:F9:D4:2A:64:0D:D7:43:42:88:B4:04:7F:1A:18:00:7C:75:95:23:A3:4E:74:DC:94:F3:53:73:88:10:F8:5F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: matanga-guru.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 13:14:50 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 12 Jul 2026 03:40:16 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3jusTj8RuA52YS1tn3vm5iCEEG3EC7yC56cG52t1tx%2Fm3MkWnKfBeF2HxEdo%2Bzu7zjhMH4UftOCvEqy%2FMgf9F2Bv73GPxuhC7M47coFC7HWIP%2BPkx52S8odi9yNhvDXryceo\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1b0caee78cd1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15550,"size_decoded":5355,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (944)","md5":"61578c70cf3db17550a329b69cf9bc8c","sha1":"e2b3c09ad7d7c351794fea8f079f87d98033a673","sha256":"62824f8f84b98ec200ab1417c77b2922b3dfbe8777c98c65719ee30aa22e35ac","sha512":"3a5852173455ba385053c780f02240966fe349656416a5db6b7c2baddab355677e10fb097acdd1020098c0aad407401c0c59e38cd55a080f0d5e95590beecff2","ssdeep":"192:v8VTBVqAVZNAqrfko9KTeqJ0vU2e2xJ5JuN/f5KrjQwtYWtPL8:6qKZKY7NWUQDCPL8","tlshash":"4362e9b3c1e202660622c9919776b73df652400fd8179446f6af47a98fde9d3ea2334c","first_seen":"2026-07-13T21:19:30.722772Z","last_seen":"2026-07-14T13:15:17.492262Z","times_seen":3,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":0,"dns":40,"connect":13,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"matanga-guru.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matanga-guru.icu/favicon.ico","fqdn":"matanga-guru.icu","domain":"matanga-guru.icu","tld":"icu"},"ip":{"addr":"104.21.64.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://matanga-guru.icu/","date":"2026-07-14T13:14:50.428Z","timestamp":1784034890428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matanga-guru.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 08:06:39 GMT","end":"Thu, 08 Oct 2026 09:04:53 GMT"},"fingerprint":{"sha1":"51:7E:7D:E3:E6:A0:97:15:9B:A9:B3:66:5B:63:D9:1C:06:D4:34:A2","sha256":"85:F9:D4:2A:64:0D:D7:43:42:88:B4:04:7F:1A:18:00:7C:75:95:23:A3:4E:74:DC:94:F3:53:73:88:10:F8:5F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: matanga-guru.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matanga-guru.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 13:14:50 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mBYMGgToavewli7CWeuh%2FKLHNqjIp6Z6PWExDERTHhWsa9DJbAeSZfm4%2B6feDcFPf7o3NLbj5byZYN3xlmeC9SWx%2Bf4tSKqxt7%2BEnH1%2BuhBp5bSXZbp1tgi2JOXz%2FabWBKG7\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a1b0caf139531a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58296,"size_decoded":44347,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"cbb42513032d6c09e496731ac16c20a9","sha1":"c92f38a701aad58408451d24dd4c47b05f158cf0","sha256":"d189695b2f3bb92369881f2428fa861dca9d9a94c638d9bdc4e2fa747d6f315b","sha512":"3d76f1018afceaba7cbb4083f4a5b5758966ec2aa5d5c6b07d72361782809f7ed4bd34ed9e0c4154d01a2db7192155de8251e5a834dd90b8d9823d916e1b7285","ssdeep":"768:cHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdom2:cmDD6oeFUycwpk06hWp1b99c7VM","tlshash":"8443021803de40a2cd8978d9426f2f3d842a1863da1c94bd1f5b6df4ca0d8a4767f1e9","first_seen":"2024-11-25T13:26:01.204756Z","last_seen":"2026-07-16T03:11:05.722272Z","times_seen":13040,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"matanga-guru.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}