{"report_id":"48eac410-da7b-4c8e-8816-10c23d1071bf","version":0,"status":"done","tags":[],"date":"2026-10-17T03:48:46Z","url":{"schema":"http","addr":"formlyx.net/","fqdn":"formlyx.net","domain":"formlyx.net","tld":"net"},"ip":{"addr":"54.92.60.118","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"Japan","country_code":"JP"},"final":{"url":{"schema":"https","addr":"formlyx.net/","fqdn":"formlyx.net","domain":"formlyx.net","tld":"net"},"title":"リンク計測・配信停止の受付ドメイン / Link tracking and unsubscribe domain","dom":{"size":2132,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9095fba5f24c29013411bacbbbc0a06d","sha1":"7bf1df290080928f96652c91e4059f48749dac13","sha256":"68d61e733b8f21d3198aaf927fee5508b9945b795bc93db0e80674be2f6f9ec2","sha512":"3724728cf4a777c915adcf2af5c9f85f930825895935a1c3a6e2dc8f9a50061c3ab8dce3fd60847d5e7dd3c3adfc73efdbca2d2c80ab3c812f0a59752fdc3a81","ssdeep":"","tlshash":"cd41426f2780303f3521a26578ed7684b445bcdbd372656096cc84c4a68563feb73bb4","dom_hash":"domhash4472a9fc9a35a5ea4e2d039540c7853e","first_seen":"2026-10-17T03:47:22.484886Z","last_seen":"2026-10-17T03:48:47.555093Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"formlyx.net/","fqdn":"formlyx.net","domain":"formlyx.net","tld":"net"},"ip":{"addr":"54.92.60.118","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"Japan","country_code":"JP"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-21T03:48:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"formlyx.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"formlyx.net","ip":{"addr":"54.92.60.118","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2026-10-14","domain_rank":0,"first_seen":"2026-10-17T03:47:17.995061Z","last_seen":"2026-10-17T03:47:17.995061Z","alert_count":2,"request_count":2,"received_data":4117,"sent_data":947,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"formlyx.net/","fqdn":"formlyx.net","domain":"formlyx.net","tld":"net"},"ip":{"addr":"54.92.60.118","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-17T03:48:17.038Z","timestamp":1792208897038,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"formlyx.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 04:03:09 GMT","end":"Tue, 12 Jan 2027 04:03:08 GMT"},"fingerprint":{"sha1":"36:1C:F5:C0:91:8C:A4:8B:E2:C3:E9:93:03:38:5D:9B:B0:F1:5A:1A","sha256":"4D:E4:C3:8A:1F:9F:A4:86:5E:B2:4E:4F:F3:58:97:9F:9E:0A:9E:06:B6:E8:61:75:EF:BD:1D:39:0A:06:EF:E3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: formlyx.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 17 Oct 2026 03:48:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ncontent-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.clarity.ms https://*.clarity.ms https://line-hunter.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;font-src 'self' https://fonts.gstatic.com data:;img-src 'self' data: https:;connect-src 'self' https://api.stripe.com https://r.stripe.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.clarity.ms https://c.bing.com https://www.google.com https://line-hunter.com;frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://checkout.stripe.com;object-src 'none';base-uri 'self';form-action 'self' https://checkout.stripe.com https://app.formly-x.com;frame-ancestors 'none';report-uri /api/csp-report;upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), payment=(self \"https://js.stripe.com\"), interest-cohort=()\r\netag: W/\"863-a00EZKPk7k5KJql7ES0JeTxxUb8\"\r\nx-robots-tag: noindex, nofollow\r\nx-frame-options: DENY, DENY\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: strict-origin-when-cross-origin, no-referrer\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2147,"size_decoded":3074,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"38f195c4f7ce203f642f39b8e3c2f32a","sha1":"6b4d0464a3e4ee4e4a26a97b112d09793c7151bf","sha256":"123db6116202008d7eadeb50db89a38dd4c9ac8b72ce9c3ab79bd5a200acfed0","sha512":"886b8737948f0d3f9f379fc1108ab52638dfb1ae3d54eb8d8672e3ed3e05e3cfdf16fd773f1208509442d495a1d43b8e959e552c12362dafe84e9a248ab816e6","ssdeep":"","tlshash":"4041516f2680303f3520a26168ed7684b845b8dbd372656096cc8494a2c563feb73bb4","first_seen":"2026-10-17T03:47:22.487421Z","last_seen":"2026-10-17T03:48:47.556963Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1093,"timings":{"blocked":-1,"dns":3,"connect":271,"send":0,"wait":273,"receive":0,"ssl":288},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"formlyx.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"formlyx.net/favicon.ico","fqdn":"formlyx.net","domain":"formlyx.net","tld":"net"},"ip":{"addr":"54.92.60.118","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formlyx.net/","date":"2026-10-17T03:48:18.350Z","timestamp":1792208898350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"formlyx.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 04:03:09 GMT","end":"Tue, 12 Jan 2027 04:03:08 GMT"},"fingerprint":{"sha1":"36:1C:F5:C0:91:8C:A4:8B:E2:C3:E9:93:03:38:5D:9B:B0:F1:5A:1A","sha256":"4D:E4:C3:8A:1F:9F:A4:86:5E:B2:4E:4F:F3:58:97:9F:9E:0A:9E:06:B6:E8:61:75:EF:BD:1D:39:0A:06:EF:E3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: formlyx.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 17 Oct 2026 03:48:18 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":9,"size_decoded":159,"mime_type":"image/x-icon","magic":"ASCII text, with no line terminators","md5":"9d1ead73e678fa2f51a70a933b0bf017","sha1":"d205cbd6783332a212c5ae92d73c77178c2d2f28","sha256":"0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5","sha512":"935b3d516e996f6d25948ba8a54c1b7f70f7f0e3f517e36481fdf0196c2c5cfc2841f86e891f3df9517746b7fb605db47cdded1b8ff78d9482ddaa621db43a34","ssdeep":"","tlshash":"a250000c0003c3cc0000003030c0000000000300300000300000c000000000000c000c","first_seen":"2023-03-08T03:03:03Z","last_seen":"2026-10-17T06:35:48.533417Z","times_seen":93441,"resource_available":true,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"formlyx.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}