{"report_id":"505fde0a-0ec4-42f2-bc14-3b0a40e7ff9c","version":0,"status":"done","tags":[],"date":"2026-06-03T19:13:59Z","url":{"schema":"http","addr":"www.slokn3.cc/","fqdn":"www.slokn3.cc","domain":"slokn3.cc","tld":"cc"},"ip":{"addr":"139.28.240.127","port":0,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"final":{"url":{"schema":"https","addr":"www.slokn3.cc/","fqdn":"www.slokn3.cc","domain":"slokn3.cc","tld":"cc"},"title":"СтройКаталог - Обзор магазинов стройматериалов России","dom":{"size":75556,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f6dfb5fe4db1416c79dcc1393cfa7788","sha1":"eefc59fa4baab45e879f91fc909ce67ac7fbfdde","sha256":"8ddab6886f77fd2009fcfe37f3b6d7cf14a2db01106ca5454a67d778e67a9f9d","sha512":"f1c7ce7db46a421ea847aaa7ed8741e2019ee71db7cc8d0d34c9d354f3665c1d7d2ca273e82df1f4fd075acda0e232b471d8d752c95d6e8c031372e9e05f2bc5","ssdeep":"768:dc5bFK4hI+fVcrblGkrVYlwJHb/uQvAwqemzjcSwHRf:dc5bEcTfVcrbhVgwR/b/","tlshash":"bc73406950f750b71443a09aab961b4e3ea4d43bce0bcb1137ec1b886fe3c94da17619","dom_hash":"domhash04ecf8dd5e0a9bc53918905b6809ab33","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.slokn3.cc/","fqdn":"www.slokn3.cc","domain":"slokn3.cc","tld":"cc"},"ip":{"addr":"139.28.240.127","port":0,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-08T19:13:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"www.slokn3.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"www.slokn3.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.slokn3.cc","ip":{"addr":"139.28.240.127","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"domain_registered":"2026-02-19","domain_rank":0,"first_seen":"2026-06-03T19:13:59.974848Z","last_seen":"2026-06-03T19:13:59.974848Z","alert_count":4,"request_count":2,"received_data":77845,"sent_data":984,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.slokn3.cc/","fqdn":"www.slokn3.cc","domain":"slokn3.cc","tld":"cc"},"ip":{"addr":"139.28.240.127","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfc636043f3339dc989743852f8b8881","sha1":"36b427d16dee4f734a2ecdbe40b3e1650b20c059","sha256":"b4c931834fe687a6888537b6d55256b7c67e8862d8e40a9b6c5897145208f4be","sha512":"c383ad3d67d311dbb2a66f3c10c2cbbca7c80938da8881b45df1e38e2e52aef75069c34c45c7103050e338da40e9a6230168a437c90512f7a467c3ee7d93098d","ssdeep":"","tlshash":"1e6172a9606340790077a57f8b0b97103b3e105f342bc9563b2c8b592f919386e27cad","size":3176,"data":"","first_seen":"2026-06-03T19:14:01.186352Z","last_seen":"2026-06-03T19:14:01.186352Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.slokn3.cc/favicon.ico","fqdn":"www.slokn3.cc","domain":"slokn3.cc","tld":"cc"},"ip":{"addr":"139.28.240.127","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.slokn3.cc/","date":"2026-06-03T19:13:37.230Z","timestamp":1780514017230,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slokn3.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 06:50:12 GMT","end":"Tue, 11 Aug 2026 06:50:11 GMT"},"fingerprint":{"sha1":"F8:29:59:08:62:C2:4E:A7:12:A2:D2:75:89:1E:DB:FC:3A:DF:9F:68","sha256":"62:30:79:A3:B1:85:3F:71:F7:45:8D:5A:10:DE:9A:32:F2:13:F1:ED:3B:19:B7:03:D2:94:63:76:C6:6F:D5:61"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.slokn3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.slokn3.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 03 Jun 2026 19:13:37 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 1919\r\nConnection: keep-alive\r\nLast-Modified: Wed, 04 Mar 2026 18:50:14 GMT\r\nETag: \"77f-64c374a510580\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1919,"size_decoded":2171,"mime_type":"image/vnd.microsoft.icon","magic":"ASCII text, with very long lines (2562), with no line terminators","md5":"034c0453bc92359295a7829d4aced2fa","sha1":"744f12dadd10cc83089c89c1b726578f99f26431","sha256":"d3617b68681aac55130e085be16fc080a651b1277c98f8d3b6efda92163d1734","sha512":"2039d836b0619cd6865d60129829e4a61e92bd922502d06f829362035ff558436960caaad4c6937cefda5c9110a8a9c5d9269818443308b54d98dc0b12ea9bbc","ssdeep":"","tlshash":"ab514c1aca5ba4bc33c50968d7cb832ece11e61b15fa257cbb593423ef8150f1a0ee04","first_seen":"2026-06-03T19:14:01.184231Z","last_seen":"2026-06-03T19:14:01.184231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"www.slokn3.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"www.slokn3.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.slokn3.cc/","fqdn":"www.slokn3.cc","domain":"slokn3.cc","tld":"cc"},"ip":{"addr":"139.28.240.127","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-03T19:13:36.611Z","timestamp":1780514016611,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slokn3.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 06:50:12 GMT","end":"Tue, 11 Aug 2026 06:50:11 GMT"},"fingerprint":{"sha1":"F8:29:59:08:62:C2:4E:A7:12:A2:D2:75:89:1E:DB:FC:3A:DF:9F:68","sha256":"62:30:79:A3:B1:85:3F:71:F7:45:8D:5A:10:DE:9A:32:F2:13:F1:ED:3B:19:B7:03:D2:94:63:76:C6:6F:D5:61"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.slokn3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 03 Jun 2026 19:13:36 GMT\r\nContent-Type: text/html\r\nContent-Length: 12259\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Mar 2026 12:11:49 GMT\r\nETag: \"12676-64ce6c61934b1-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75382,"size_decoded":12551,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"bef901d5f8f9ffd9feae5cb4a9b5572e","sha1":"30cb0b28949ca062f9c857113f9fd5ce783f4846","sha256":"3f4a59177454178b920d37a5482b66bbfc3db22a7d4624c03cbf4f1a3f70ad05","sha512":"d93cfe685f75fc7392a65a1ae7893cc5dee992cf7c9bc59694f7f90b6f6e700b82c5262b5dcb4ad3ccd92966fc4cab806766e8e658b01004fdfd9a7cf5d5a615","ssdeep":"768:Uc5bFK4hI+fVcrblGkrVYlwJHb/uQvAwqemzjclwGRt:Uc5bEcTfVcrbhVgwR/bt","tlshash":"9d73406950f750b71443a09aaf961b4e3ea4d43bde0bcb1137ec1b886fe3c94da13619","first_seen":"2026-06-03T19:14:01.185264Z","last_seen":"2026-06-03T19:14:01.185264Z","times_seen":1,"resource_available":true,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":39,"connect":24,"send":0,"wait":210,"receive":0,"ssl":241},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"www.slokn3.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"www.slokn3.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}