{"report_id":"4382fe36-6e47-4114-ae86-3db8ccd57eab","version":6,"status":"done","tags":[],"date":"2025-12-06T21:39:52Z","url":{"schema":"https","addr":"ff-exchange.shop/","fqdn":"ff-exchange.shop","domain":"ff-exchange.shop","tld":"shop"},"ip":{"addr":"62.60.226.213","port":0,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"ff-exchange.shop/","fqdn":"ff-exchange.shop","domain":"ff-exchange.shop","tld":"shop"},"title":"ff-exchange.shop | Cryptocurrency Exchanges Without Registration","dom":{"size":3216,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"755445bda1ee55890cfdbcb7280a1009","sha1":"61ba533810f9b0f3b7d40eaab01a1fe4042fb290","sha256":"41a57fb9f64d8b6482e4d3ded2dbd36feb00998cf008dcc70a104f5f77d7e32d","sha512":"7e8be464b598981de4328e770d7c0df9f1d1949503e5bea6e8e149d274fde3f005b41349dd655dca50a1c364e2acb2c72e205d33b784fedc370bad4b8556d7e2","ssdeep":"","tlshash":"bb61751ba5e3342794c3a4652bf357906a959847914eceb83bac634cdf805b086f7b4c","dom_hash":"domhash0cf27d6c3a4f201c7da2a1ffb89a76b7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ff-exchange.shop/","fqdn":"ff-exchange.shop","domain":"ff-exchange.shop","tld":"shop"},"ip":{"addr":"62.60.226.213","port":0,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-10T21:39:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13","referer":"www.bing.com","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ff-exchange.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ff-exchange.shop","ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"domain_registered":"2025-07-06","domain_rank":0,"first_seen":"2025-07-16T11:05:13.714215Z","last_seen":"2025-12-06T20:06:47.762053Z","alert_count":2,"request_count":2,"received_data":4860,"sent_data":1076,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ff-exchange.shop/","fqdn":"ff-exchange.shop","domain":"ff-exchange.shop","tld":"shop"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-06T21:39:31.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-exchange.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 15:45:08 GMT","end":"Sat, 14 Feb 2026 15:45:07 GMT"},"fingerprint":{"sha1":"10:C7:31:BD:59:0C:1A:80:8C:B5:F5:E1:6B:36:47:DB:0E:DA:C6:E2","sha256":"20:68:34:B5:64:DF:74:45:08:97:4E:FE:D2:1C:A5:D9:89:28:40:10:B3:AC:3E:16:A2:CD:C6:F7:F1:8B:7A:85"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ff-exchange.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 06 Dec 2025 21:39:31 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nSet-Cookie: PHPSESSID=kdtt5kb84qvpgi3bcicar99svn; expires=Sat, 06-Dec-2025 22:39:31 GMT; Max-Age=3600; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1244\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":3351,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"cf26546389648e022c86ba2d716fb51e","sha1":"5a37ecca652be5e67745c9931886068c910c04b6","sha256":"b7318922d8a94f9e69c72509d9cc698fc6c98b173d2513d9f7db1e673ce01db5","sha512":"b41673bb3d6c5bf800ca29b060556e7c5630e82c416a12a75a948c626f07579913704a6ffd348eae7b8bad2bbccc705623e1b85825fed69e9c6b9b0369981010","ssdeep":"","tlshash":"9661541ae5807413907351696be39790ff86149782064ab93bfc63479fb0464c3b7f8c","first_seen":"2025-07-16T11:05:17.113651Z","last_seen":"2025-12-06T21:39:52.831994Z","times_seen":5,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":109,"dns":40,"connect":33,"send":0,"wait":34,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ff-exchange.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-exchange.shop/favicon.ico","fqdn":"ff-exchange.shop","domain":"ff-exchange.shop","tld":"shop"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ff-exchange.shop/","date":"2025-12-06T21:39:31.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-exchange.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 15:45:08 GMT","end":"Sat, 14 Feb 2026 15:45:07 GMT"},"fingerprint":{"sha1":"10:C7:31:BD:59:0C:1A:80:8C:B5:F5:E1:6B:36:47:DB:0E:DA:C6:E2","sha256":"20:68:34:B5:64:DF:74:45:08:97:4E:FE:D2:1C:A5:D9:89:28:40:10:B3:AC:3E:16:A2:CD:C6:F7:F1:8B:7A:85"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ff-exchange.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-exchange.shop/\r\nCookie: PHPSESSID=kdtt5kb84qvpgi3bcicar99svn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 06 Dec 2025 21:39:31 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 714\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":714,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"c70f9c5c85d0f51bec13894dee982769","sha1":"7a52f733a5b5b2f3eba7ee3174b097b165b9e9df","sha256":"293d3bf5df1d11654d879b5f7daeb2b4be4a75c9c8125a67e195535370674f03","sha512":"df5dad456122da419b7dc4f95ebdbeecda2c0f30fdfecf149a8ef04559e8eb8e72555db92bd36286f98fccf718c00908c7f57fd3391434409aebc2954821de86","ssdeep":"","tlshash":"f801782a81c2684a61729234a6e2f258df6614a746536b203a8d72939ff460082d76cc","first_seen":"2025-07-16T11:05:17.116646Z","last_seen":"2026-01-03T20:39:54.704228Z","times_seen":110,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ff-exchange.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}