{"report_id":"3f50cbdf-60cd-4be1-b8e5-ced9997a88c9","version":6,"status":"done","tags":[],"date":"2025-08-28T06:50:51Z","url":{"schema":"http","addr":"boutiquesecondhand.vip","fqdn":"boutiquesecondhand.vip","domain":"boutiquesecondhand.vip","tld":"vip"},"ip":{"addr":"104.18.213.228","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"boutiquesecondhand.vip/","fqdn":"boutiquesecondhand.vip","domain":"boutiquesecondhand.vip","tld":"vip"},"title":"500 Internal Server Error"},"submit":{"url":{"schema":"http","addr":"boutiquesecondhand.vip","fqdn":"boutiquesecondhand.vip","domain":"boutiquesecondhand.vip","tld":"vip"},"ip":{"addr":"104.18.213.228","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-02T06:50:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-28","alert":"Sinkholed","trigger":"boutiquesecondhand.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"boutiquesecondhand.vip","ip":{"addr":"104.18.213.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-23","domain_rank":0,"first_seen":"2025-08-28T06:50:51.916835Z","last_seen":"2025-08-28T06:50:51.916835Z","alert_count":2,"request_count":2,"received_data":1645,"sent_data":1197,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"boutiquesecondhand.vip/","fqdn":"boutiquesecondhand.vip","domain":"boutiquesecondhand.vip","tld":"vip"},"ip":{"addr":"104.18.213.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"409a6e0864916100d8e2df0135fdd09d","sha1":"e26236cc3e7791b8f28ef19f79d7417fd9aab113","sha256":"9837ba6d303a929f10e21ec653fd10a3728bb9e04cce72900d488cc280428445","sha512":"841319050162c10e4ff74463190c25f25466e7b2bbedbeb9dac0d41f4e49e5efbc6bac7e76ef6d100299665830797097a7dd60d0fca9b88652791dcf1ef5085e","ssdeep":"","tlshash":"d98004305531d13753c73404047011d10f5303455f04c540fd00c10c1044375c3073d7","size":36,"data":"","first_seen":"2025-08-28T06:50:53.249056Z","last_seen":"2025-08-28T06:50:53.249056Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"boutiquesecondhand.vip/","fqdn":"boutiquesecondhand.vip","domain":"boutiquesecondhand.vip","tld":"vip"},"ip":{"addr":"104.18.213.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-28T06:50:29.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boutiquesecondhand.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:41:05 GMT","end":"Fri, 21 Nov 2025 18:41:01 GMT"},"fingerprint":{"sha1":"1A:46:F4:33:3B:F1:A7:BF:4D:90:E4:FD:CE:BF:7F:BA:57:11:81:18","sha256":"4C:91:F1:0E:98:72:84:88:CC:44:D7:0B:98:44:23:39:75:D6:3C:BB:71:B0:77:86:5F:50:1A:59:A0:10:38:8C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: boutiquesecondhand.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 28 Aug 2025 06:50:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-trace-id: A8CC8E89-107C-A5AC-7DC0-1AF956BFE9F4\r\nexecution-time: 0.0269920826\r\ntrace_id: A8CC8E89-107C-A5AC-7DC0-1AF956BFE9F4\r\nset-cookie: shop_global_visit_id=EA2A34EC-BEE6-9EC8-29A3-116BDDAD6505; expires=Sun, 26-Aug-2035 06:50:30 GMT; Max-Age=315360000; path=/\nshop_checkout_visit_id=D9F42D47-3895-3CFC-420F-C1AF46B33AE0; expires=Sun, 26-Aug-2035 06:50:30 GMT; Max-Age=315360000; path=/\nshop_global_visit_session=D1CB4013-34BC-6614-F427-476B095605B1; expires=Fri, 29-Aug-2025 06:50:30 GMT; Max-Age=86400; path=/\ncurrency_code=NOK; path=/\nPHPSESSID=0f5935a4239158b74c9a82030fc94100; path=/\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9761dff1cd1056c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":295,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"364e6649a2344ffe2c4089353c1de4e9","sha1":"9c9cc4a618b4ec92ddb23ff538c481bf352fa3be","sha256":"07fef12be08b0a91abba862d6a2d39b27d236f02b60f7d3e16beea82b0a14f23","sha512":"4bdb95d39986589ca076a546b55083ebae2268b3a89bef5d6f1fc5790cbb9d22a2c429bd39bf4dfb74e1b253a49a0b4f501ebe9960200030874bd6b2375d7e59","ssdeep":"","tlshash":"cee0eb276d13a224a46b2400818337c8db89801318dac480c2c2c797e0c73c7cb4b3e8","first_seen":"2025-08-28T06:50:53.247246Z","last_seen":"2025-08-28T06:50:53.247246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1076,"timings":{"blocked":432,"dns":413,"connect":1,"send":0,"wait":213,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-28","alert":"Sinkholed","trigger":"boutiquesecondhand.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boutiquesecondhand.vip/favicon.ico","fqdn":"boutiquesecondhand.vip","domain":"boutiquesecondhand.vip","tld":"vip"},"ip":{"addr":"104.18.213.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boutiquesecondhand.vip/","date":"2025-08-28T06:50:30.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boutiquesecondhand.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:41:05 GMT","end":"Fri, 21 Nov 2025 18:41:01 GMT"},"fingerprint":{"sha1":"1A:46:F4:33:3B:F1:A7:BF:4D:90:E4:FD:CE:BF:7F:BA:57:11:81:18","sha256":"4C:91:F1:0E:98:72:84:88:CC:44:D7:0B:98:44:23:39:75:D6:3C:BB:71:B0:77:86:5F:50:1A:59:A0:10:38:8C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: boutiquesecondhand.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://boutiquesecondhand.vip/\r\nCookie: shop_global_visit_id=EA2A34EC-BEE6-9EC8-29A3-116BDDAD6505; shop_checkout_visit_id=D9F42D47-3895-3CFC-420F-C1AF46B33AE0; shop_global_visit_session=D1CB4013-34BC-6614-F427-476B095605B1; currency_code=NOK; PHPSESSID=0f5935a4239158b74c9a82030fc94100\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 28 Aug 2025 06:50:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-encoding: br\r\nlast-modified: Tue, 18 Jun 2024 08:33:11 GMT\r\netag: W/\"66714647-46\"\r\ncf-cache-status: MISS\r\nexpires: Thu, 28 Aug 2025 10:50:30 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9761dff42cbf56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 1x1, 32 bits/pixel","md5":"735ddbd8a50494b34bbed5fe68727c42","sha1":"ab6c96f55f6f9383c8c73f2838d07398529a4b8f","sha256":"23d7bcc5e68b94d6e03382ac1d9a14ab2d0134772682ae0dd1b2e8b4c85afc51","sha512":"b3a7773c84719a1864c911422a7e6f37efecc6952dbe85bfcdb095fd0434487fbb44d0d810890d96a50f4bf3ef8a3c32a47de5115f8e0cefab7431f10eee9928","ssdeep":"","tlshash":"51a00082b300008ec0000f3000f30b0b2a2cc0028a3a230302200308aca32c8080a3c2","first_seen":"2023-05-07T20:28:17Z","last_seen":"2026-03-15T12:18:02.76276Z","times_seen":4706,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-28","alert":"Sinkholed","trigger":"boutiquesecondhand.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}