{"report_id":"43c61c45-f25d-489e-a867-db520009a7ac","version":0,"status":"done","tags":[],"date":"2026-07-07T13:18:53Z","url":{"schema":"http","addr":"yleak.vip/videos/video9.mp4","fqdn":"yleak.vip","domain":"yleak.vip","tld":"vip"},"ip":{"addr":"192.142.1.213","port":0,"asn":64286,"as":"LOGICWEB","country":"South Africa","country_code":"ZA"},"final":{"url":{"schema":"https","addr":"yleak.vip/videos/video9.mp4","fqdn":"yleak.vip","domain":"yleak.vip","tld":"vip"},"title":"video9.mp4","dom":{"size":358,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (358), with no line terminators","md5":"7030b23bf8434d47aeced99d47a645f3","sha1":"ce82a93cf5630c20b8c2ed4a40ef0bd0d6ef5a38","sha256":"4cb9139dd43641d82be91bfcc0b20f59561f5f07584ddd7a3da5950989d4554f","sha512":"7fd8eaf621fba10b42e91348f8923fb2702582b0a82e0618bc6206ba2f525759028b6f05d4ac950261cff362163af7f7fa37973f57f8d257b6464799391758d5","ssdeep":"","tlshash":"e7e026779942e42c952450dffc90b2083cd9d114d269ae49b3de12e808c8b9c886feca","dom_hash":"domhashffd923f53a59b625f745297f28493d2e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"yleak.vip/videos/video9.mp4","fqdn":"yleak.vip","domain":"yleak.vip","tld":"vip"},"ip":{"addr":"192.142.1.213","port":0,"asn":64286,"as":"LOGICWEB","country":"South Africa","country_code":"ZA"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-11T13:18:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"yleak.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"yleak.vip","ip":{"addr":"192.142.1.213","port":443,"asn":64286,"as":"LOGICWEB","country":"South Africa","country_code":"ZA"},"domain_registered":"2026-06-23","domain_rank":0,"first_seen":"2026-06-28T12:08:05.595554Z","last_seen":"2026-07-06T22:13:27.912679Z","alert_count":2,"request_count":2,"received_data":1691455,"sent_data":1006,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"yleak.vip/videos/video9.mp4","fqdn":"yleak.vip","domain":"yleak.vip","tld":"vip"},"ip":{"addr":"192.142.1.213","port":443,"asn":64286,"as":"LOGICWEB","country":"South Africa","country_code":"ZA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T13:18:27.068Z","timestamp":1783430307068,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yleak.vip","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 14:24:50 GMT","end":"Wed, 30 Sep 2026 14:24:49 GMT"},"fingerprint":{"sha1":"49:21:31:44:60:76:AE:C3:19:82:D5:D1:6B:2A:55:5D:ED:3A:E0:42","sha256":"BD:89:B7:88:1A:0B:F2:C3:FE:B6:A7:FD:D6:26:CB:B7:C2:A1:29:CB:A9:99:06:33:BA:60:80:17:E5:58:FF:39"}}},"request":{"raw":"GET /videos/video9.mp4 HTTP/1.1\r\nHost: yleak.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Tue, 07 Jul 2026 13:18:27 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 1675430\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Sun, 30 Nov 2025 04:03:36 GMT\r\nETag: W/\"1990a6-19ad2ee2dc0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1675430,"size_decoded":1675723,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"ba915dd729539c691f86771b76b04dc1","sha1":"546dce7a89c26df892663118a141196870d524c6","sha256":"62396592b19afedc79a1b53da261314dac26655da809f89602cbc27bd3bfbc8a","sha512":"1560026afeb3d147cd10616eb66e85138ce24d8015cedb0fc36f14778da42ed1f3aac3232e31a34868a93680ecd216e5641ea07a7a6ef478655bd3dcc9898533","ssdeep":"24576:zEttWBQWcxNk1IwO+WZXcSsxzKGfg7yM8M9dxGvm+XeQpw4Sx30ACgRaR:IttWBsk10MSsZNfg78MYmke4dC02M","tlshash":"ea25239abbc75b46c8540b3f0dae0b68b37cf9a4d34de6cb4a0612345cb1794dd642d8","first_seen":"2026-07-07T11:38:10.715741Z","last_seen":"2026-07-07T13:18:54.470456Z","times_seen":2,"resource_available":true,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":374,"connect":28,"send":0,"wait":57,"receive":183,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"yleak.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yleak.vip/favicon.ico","fqdn":"yleak.vip","domain":"yleak.vip","tld":"vip"},"ip":{"addr":"192.142.1.213","port":443,"asn":64286,"as":"LOGICWEB","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yleak.vip/videos/video9.mp4","date":"2026-07-07T13:18:28.568Z","timestamp":1783430308568,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yleak.vip","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 14:24:50 GMT","end":"Wed, 30 Sep 2026 14:24:49 GMT"},"fingerprint":{"sha1":"49:21:31:44:60:76:AE:C3:19:82:D5:D1:6B:2A:55:5D:ED:3A:E0:42","sha256":"BD:89:B7:88:1A:0B:F2:C3:FE:B6:A7:FD:D6:26:CB:B7:C2:A1:29:CB:A9:99:06:33:BA:60:80:17:E5:58:FF:39"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: yleak.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yleak.vip/videos/video9.mp4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Tue, 07 Jul 2026 13:18:28 GMT\r\nContent-Type: image/x-icon\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-nextjs-cache: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":15406,"size_decoded":15732,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"6d3dbf0829c6c3eb1c86d1795732a962","sha1":"f4bdc6ecf582144295e05db6b0224b0c711052a7","sha256":"0adbe05050ae3bcc17e22fb871fdae65638deeb82f447dfd25e7571dbe197d9e","sha512":"b5f9d41b3da74751097ed83c42490473599302af2fcd7d2c6fb712473dd84cc22f423896406f58ccd8805a728dd1f5948c3dcedfaa3d22634cce4f6eaab471fc","ssdeep":"96:3VvLlEaAAkZPP/43OvN1xk0XVYYQYt7czma2ukUGJfzZG:3Vv+Ak1dy0FCYtiJ2ukRJ","tlshash":"6c62b557af49cd2de2a156b680f7d37ba30ecd746863570b12c68e933ea21f00d290e4","first_seen":"2026-01-12T16:12:54.82795Z","last_seen":"2026-07-13T18:46:44.69896Z","times_seen":517,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"yleak.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}