{"report_id":"50e48284-f2b9-456b-9790-3695dd8e2459","version":0,"status":"done","tags":[],"date":"2026-08-17T20:08:58Z","url":{"schema":"http","addr":"kapadokyabonus.com/","fqdn":"kapadokyabonus.com","domain":"kapadokyabonus.com","tld":"com"},"ip":{"addr":"95.133.166.234","port":0,"asn":6849,"as":"JSC Ukrtelecom","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"kapadokyabonus.com/","fqdn":"kapadokyabonus.com","domain":"kapadokyabonus.com","tld":"com"},"title":"Domain Reserved","dom":{"size":924,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (907)","md5":"11d314c19adcd8c1b034b30dab6243f8","sha1":"2975dd14d1cf3d3d40003dc405f5a6a8a7e15694","sha256":"e542caeac176ebd061f8009f5ea10514b7c50eaaf90551ab368cb2982d35aeba","sha512":"e1f1b9a3b06c5b2534f0476350d23365a50a613e60796bd19e49ad012d502fd9b6da8cb23f2cd98aa62684c3d761b7ce8dad206e6d76b9d8e896f723e2fb03af","ssdeep":"","tlshash":"38115433c282602efa33e1a57970234670c8c84691775e98d987336fc0ca15745b334c","dom_hash":"domhashb4b5de13a6717e0ef8557beb382b3c09","first_seen":"2026-08-17T19:50:20.900295Z","last_seen":"2026-08-17T20:08:58.562755Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kapadokyabonus.com/","fqdn":"kapadokyabonus.com","domain":"kapadokyabonus.com","tld":"com"},"ip":{"addr":"95.133.166.234","port":0,"asn":6849,"as":"JSC Ukrtelecom","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-21T20:08:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"kapadokyabonus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"kapadokyabonus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"kapadokyabonus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"kapadokyabonus.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kapadokyabonus.com","ip":{"addr":"95.133.166.234","port":443,"asn":6849,"as":"JSC Ukrtelecom","country":"Ukraine","country_code":"UA"},"domain_registered":"2026-08-14","domain_rank":0,"first_seen":"2026-08-17T19:50:17.384944Z","last_seen":"2026-08-17T19:50:17.384945Z","alert_count":8,"request_count":2,"received_data":2298,"sent_data":999,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kapadokyabonus.com/","fqdn":"kapadokyabonus.com","domain":"kapadokyabonus.com","tld":"com"},"ip":{"addr":"95.133.166.234","port":443,"asn":6849,"as":"JSC Ukrtelecom","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-17T20:08:31.556Z","timestamp":1786997311556,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kapadokyabonus.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 06:38:08 GMT","end":"Sun, 15 Nov 2026 06:38:07 GMT"},"fingerprint":{"sha1":"FD:3E:34:43:C1:FE:76:1C:AC:4A:D0:10:52:53:D4:B2:CD:C9:39:EE","sha256":"B2:4C:C0:34:BD:8D:11:F4:21:E9:0A:FA:84:D4:8B:94:2F:34:51:73:65:47:3C:88:7F:FC:B8:7D:AE:FD:F6:BF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kapadokyabonus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 20:08:31 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 17 Aug 2026 17:47:58 GMT\r\netag: W/\"6a83494e-3af\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":943,"size_decoded":769,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (942)","md5":"671e7e8f5e61fe342eead7e5f2f1ab70","sha1":"aa804504bce8c7936490b01d8895a13041c5fd08","sha256":"10fd81f6494aa84641498d0c72c79ba4496cba190349609a85f8a59f22a0c7b6","sha512":"2a3f0492d8c0eb37b5a551377af9ec870564f9f28e031c005c702810e958de9f0a42c25168e82d029a5181e506e0224c10cc4780265f3561bb10b8abb1038814","ssdeep":"","tlshash":"6f112132c292602efa33e5a56ab1235671c8d447a2675e589a8b377ec0ca11745b334c","first_seen":"2026-08-17T19:50:20.904965Z","last_seen":"2026-08-17T20:08:58.567104Z","times_seen":3,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":20,"connect":53,"send":0,"wait":56,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"kapadokyabonus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"kapadokyabonus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"kapadokyabonus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"kapadokyabonus.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kapadokyabonus.com/favicon.ico","fqdn":"kapadokyabonus.com","domain":"kapadokyabonus.com","tld":"com"},"ip":{"addr":"95.133.166.234","port":443,"asn":6849,"as":"JSC Ukrtelecom","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kapadokyabonus.com/","date":"2026-08-17T20:08:32.008Z","timestamp":1786997312008,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kapadokyabonus.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 06:38:08 GMT","end":"Sun, 15 Nov 2026 06:38:07 GMT"},"fingerprint":{"sha1":"FD:3E:34:43:C1:FE:76:1C:AC:4A:D0:10:52:53:D4:B2:CD:C9:39:EE","sha256":"B2:4C:C0:34:BD:8D:11:F4:21:E9:0A:FA:84:D4:8B:94:2F:34:51:73:65:47:3C:88:7F:FC:B8:7D:AE:FD:F6:BF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kapadokyabonus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kapadokyabonus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 20:08:32 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 17 Aug 2026 17:47:58 GMT\r\netag: W/\"6a83494e-3af\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":943,"size_decoded":769,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (942)","md5":"671e7e8f5e61fe342eead7e5f2f1ab70","sha1":"aa804504bce8c7936490b01d8895a13041c5fd08","sha256":"10fd81f6494aa84641498d0c72c79ba4496cba190349609a85f8a59f22a0c7b6","sha512":"2a3f0492d8c0eb37b5a551377af9ec870564f9f28e031c005c702810e958de9f0a42c25168e82d029a5181e506e0224c10cc4780265f3561bb10b8abb1038814","ssdeep":"","tlshash":"6f112132c292602efa33e5a56ab1235671c8d447a2675e589a8b377ec0ca11745b334c","first_seen":"2026-08-17T19:50:20.904965Z","last_seen":"2026-08-17T20:08:58.567104Z","times_seen":3,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"kapadokyabonus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"kapadokyabonus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"kapadokyabonus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"kapadokyabonus.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}