{"report_id":"4fa7e56d-b697-465d-ad88-56c5d5700c0c","version":0,"status":"done","tags":[],"date":"2026-09-05T05:53:56Z","url":{"schema":"http","addr":"www.jefferywen.com/","fqdn":"www.jefferywen.com","domain":"jefferywen.com","tld":"com"},"ip":{"addr":"192.249.116.51","port":0,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"www.jefferywen.com/","fqdn":"www.jefferywen.com","domain":"jefferywen.com","tld":"com"},"title":"InMotion Hosting","dom":{"size":536,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"e55c1b8c5bd80610983d743336a5caf0","sha1":"7d96e708784e7ffe8534136bd58476b075399b0c","sha256":"8c06b7ebb9045dfdf7c433e11a1f1dcfde731544703c4d5b217aead6a0051ad5","sha512":"b2ac5320b3cd81182b501b18fdd37a81f94b64f563ca8f4e9cc297682dbcfc46357c3feed51903ce7e582f01e6e3130b069f3d38d143dc618ff0e4cde99611cc","ssdeep":"","tlshash":"e4f0c067391652044f1346c232cb7b6cb4a6860f3881d9c570bb50d114c921d88a37f0","dom_hash":"domhashaf7f00fbfd1cb8dd87a5cd470db174f2","first_seen":"2026-09-05T05:53:59.708442Z","last_seen":"2026-09-05T05:53:59.708442Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.jefferywen.com/","fqdn":"www.jefferywen.com","domain":"jefferywen.com","tld":"com"},"ip":{"addr":"192.249.116.51","port":0,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-10T05:53:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.jefferywen.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.jefferywen.com","ip":{"addr":"192.249.116.51","port":80,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"domain_registered":"2012-02-09","domain_rank":0,"first_seen":"2026-09-05T05:53:56.347022Z","last_seen":"2026-09-05T05:53:56.347022Z","alert_count":3,"request_count":3,"received_data":1244,"sent_data":1314,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"design.inmotionhosting.com","ip":{"addr":"199.250.205.40","port":443,"asn":54641,"as":"IMH-IAD","country":"United States","country_code":"US"},"domain_registered":"2001-02-15","domain_rank":0,"first_seen":"2020-07-21T07:41:33Z","last_seen":"2026-08-28T18:11:52.438678Z","alert_count":0,"request_count":1,"received_data":11051,"sent_data":577,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"www.jefferywen.com/favicon.ico","fqdn":"www.jefferywen.com","domain":"jefferywen.com","tld":"com"},"ip":{"addr":"192.249.116.51","port":80,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.jefferywen.com/","date":"2026-09-05T05:53:29.931Z","timestamp":1788587609931,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.jefferywen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.jefferywen.com/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 05 Sep 2026 05:53:30 GMT\r\nServer: Apache\r\nContent-Length: 236\r\nKeep-Alive: timeout=3, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":236,"size_decoded":436,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text, with no line terminators","md5":"3dea6e4a74ae5c8a6b8dd3bae0de6081","sha1":"0b2672db2629a86272ca21084220113c548195db","sha256":"6c09a3f77e8a1ce36ffdf1bf0cff8aa9bb5c17616ba8f31db31d8b5946245362","sha512":"9b86bd1b8867c44ad5431a94991e517f73a639f03bfca39daf2bc6a9883c5c68e0ca8b69662a2a48e35922960f80b0679eb8e9cb7bacdac6ef93d46c4b10a9d4","ssdeep":"","tlshash":"5dd0a7bff2055219899611605bd523c11d8f4337f1b45522284db07550547fecc832a5","first_seen":"2023-04-05T13:31:58Z","last_seen":"2026-09-05T06:33:06.705688Z","times_seen":5117,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.jefferywen.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.jefferywen.com/","fqdn":"www.jefferywen.com","domain":"jefferywen.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T05:53:28.318Z","timestamp":1788587608318,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.jefferywen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-05T06:58:37.127994Z","times_seen":18288366,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.jefferywen.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.jefferywen.com/","fqdn":"www.jefferywen.com","domain":"jefferywen.com","tld":"com"},"ip":{"addr":"192.249.116.51","port":80,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T05:53:29.202Z","timestamp":1788587609202,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.jefferywen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 05 Sep 2026 05:53:29 GMT\r\nServer: Apache\r\nUpgrade: h2,h2c\r\nConnection: Upgrade, Keep-Alive\r\nLast-Modified: Wed, 03 Sep 2025 23:56:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 485\r\nX-Accel-Expires: 0\r\nCache-Control: no-cache, no-store\r\nKeep-Alive: timeout=3, max=100\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":485,"size_decoded":808,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"462457ebb36998b36329933daddb268d","sha1":"ae88daaef0a71a6d58c2caf0266e0362a03a66d6","sha256":"5aeadc7d6e097c032dd48371c4d79dc2424ab0f178074a79f7c1b2830aff306a","sha512":"f061a59714aa6af27e2d196e8d53a676d7eeb20145469f66b889768b10004a4cdee60dfd2160a60e3fce79f47353d4e20c51231804dd7b600080b2fd3907ca3a","ssdeep":"","tlshash":"35f0dca7280692080e2386c031cb7b6ca097065b74c2cdc5b0f7a0e225cd70dc8b3bf8","first_seen":"2026-09-05T05:53:59.715029Z","last_seen":"2026-09-05T05:53:59.715029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":3,"connect":178,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.jefferywen.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"design.inmotionhosting.com/assets/logos/corporate/logo-imh.svg","fqdn":"design.inmotionhosting.com","domain":"inmotionhosting.com","tld":"com"},"ip":{"addr":"199.250.205.40","port":443,"asn":54641,"as":"IMH-IAD","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.jefferywen.com/","date":"2026-09-05T05:53:29.830Z","timestamp":1788587609830,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.inmotionhosting.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 02 Jun 2026 00:00:00 GMT","end":"Thu, 17 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"90:5F:10:EC:E2:39:3A:6D:5D:6B:82:17:FF:EC:B3:1C:FF:8E:37:63","sha256":"D7:FF:67:AC:E5:93:34:FC:82:3D:F6:AE:8F:5D:09:02:E0:D9:37:6D:46:2D:45:B1:F0:67:EF:38:02:A9:9C:5D"}}},"request":{"raw":"GET /assets/logos/corporate/logo-imh.svg HTTP/1.1\r\nHost: design.inmotionhosting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.jefferywen.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.26.1\r\ndate: Sat, 05 Sep 2026 05:53:30 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 08 Apr 2021 16:13:16 GMT\r\netag: W/\"298d-5bf7853385290\"\r\nexpires: Mon, 06 Sep 2027 05:53:30 GMT\r\naccess-control-allow-origin: *\r\ncache-tag: design-system, design-system\r\ncache-control: max-age=31622400, public, no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10637,"size_decoded":5338,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"02df770488450985c4a7e4d69be201d9","sha1":"671488d5be9af77a864a0fd29b1c9cb6965b2893","sha256":"5e767b3e773f19d68ed52097adbeb74283d2983b7c56b22a93effef0b7df65a4","sha512":"883e31adeb9e6134d8c42ebf8fa4fc6c26acd85bbc8f722285c29ee440f37124e3ef44ef99e87fe39ff166ba1ad884de396e3997c2cf95f35048cac6e9223a67","ssdeep":"192:bCXMBjQUxhA2KyXhDTLVyYQyIGvh/UBqWbjfsh86zJ0DzuH+GjOP:bC8BxgQZPQyIGdibI/O3Gy","tlshash":"3b22878b033cd7d975a93ee85e3535c63bb86ced4970d280a3176c026c82ab6b55ce74","first_seen":"2023-12-28T04:51:24Z","last_seen":"2026-09-05T05:53:59.71732Z","times_seen":249,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":115,"connect":98,"send":0,"wait":98,"receive":0,"ssl":301},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}