{"report_id":"52f0ef74-b937-4f6f-b3a2-3ef4dd31cc40","version":0,"status":"done","tags":[],"date":"2026-07-10T17:18:56Z","url":{"schema":"http","addr":"4849999.com/","fqdn":"4849999.com","domain":"4849999.com","tld":"com"},"ip":{"addr":"216.118.239.22","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"4849999.com/","fqdn":"4849999.com","domain":"4849999.com","tld":"com"},"title":"欢迎光临","dom":{"size":2975,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"5d79a93afe9ca3c02a4da7e49f591109","sha1":"f71533cf9851914784fa93bf827eae4287ebc105","sha256":"f7bdcb458ae6ff98f83d3c20341d850f03c29032ccc1ecc40a21b48a65f5ba1d","sha512":"579dcad92b41f36e3538c04c14ed16b4e520918198ce4a7296c9599a06980a7240f0ea7b19e1171a7e83742425add45eb6ec141a15ce8a18cb3e08fed64a1f66","ssdeep":"","tlshash":"13514252e6e31487242391382bf677852365c50bc30ddea53ecd63e0cf893899cb2398","dom_hash":"domhash8ee04aafbe798b8439ca5855d323ffef","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"4849999.com/","fqdn":"4849999.com","domain":"4849999.com","tld":"com"},"ip":{"addr":"216.118.239.22","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-14T17:18:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-10","alert":"Sinkholed","trigger":"4849999.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"4849999.com","ip":{"addr":"216.118.239.22","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":4761,"sent_data":978,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"4849999.com/","fqdn":"4849999.com","domain":"4849999.com","tld":"com"},"ip":{"addr":"216.118.239.22","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-10T17:18:25.760Z","timestamp":1783703905760,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"595000.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 09:59:14 GMT","end":"Wed, 29 Jul 2026 09:59:13 GMT"},"fingerprint":{"sha1":"72:74:AE:78:1A:61:75:2D:E7:1D:CB:52:5B:A7:1C:98:B7:97:02:27","sha256":"25:E7:44:05:C9:CF:C4:19:BF:3C:22:5B:DE:6D:2C:E6:12:A7:F2:C8:CA:52:60:8D:ED:3B:76:05:45:42:5C:CC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4849999.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 10 Jul 2026 17:18:26 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Wed, 08 Jul 2026 09:00:13 GMT\r\nETag: W/\"a2aa4530b8edd1:0\"\r\nX-Powered-By: ASP.NET\r\nServer: cdn\r\nX-Cache-Status: HIT from L1:755\r\nVia: L1:755\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":2992,"size_decoded":1603,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"081c302dc0b059071c1e7f54e0a499c7","sha1":"e3f5809fd38ebd5f11842069c9be28638f048dad","sha256":"8c0c66e23cc90a5dc76b6c04628c0f3aa8db379de1163ac451500522aebb8d33","sha512":"25524ff6f23c5ebb73d345e3af05014845b2f1d113a44cd118a6607fac08ad250d22c81a473ac525fc5b223891a949465f3696fa147209dc0a0c8d3b41c0906c","ssdeep":"","tlshash":"78512056eae315872023a1382bf677852365c50bc34ddea53ecd63e0cf893895ca2398","first_seen":"2026-07-10T17:19:00.118198Z","last_seen":"2026-07-10T17:19:00.118198Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1087,"timings":{"blocked":0,"dns":354,"connect":178,"send":0,"wait":192,"receive":0,"ssl":364},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-10","alert":"Sinkholed","trigger":"4849999.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4849999.com/favicon.ico","fqdn":"4849999.com","domain":"4849999.com","tld":"com"},"ip":{"addr":"216.118.239.22","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4849999.com/","date":"2026-07-10T17:18:27.100Z","timestamp":1783703907100,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"595000.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 09:59:14 GMT","end":"Wed, 29 Jul 2026 09:59:13 GMT"},"fingerprint":{"sha1":"72:74:AE:78:1A:61:75:2D:E7:1D:CB:52:5B:A7:1C:98:B7:97:02:27","sha256":"25:E7:44:05:C9:CF:C4:19:BF:3C:22:5B:DE:6D:2C:E6:12:A7:F2:C8:CA:52:60:8D:ED:3B:76:05:45:42:5C:CC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 4849999.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://4849999.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 10 Jul 2026 17:18:27 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: ASP.NET\r\nServer: cdn\r\nX-Cache-Status: MISS from L1:755\r\nVia: L1:755\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1163,"size_decoded":974,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"b95f02d7712377499e60763a74069631","sha1":"2a6ea7a8c7353bddd6bd7b487842da1feaa525cf","sha256":"5da10042a026a0612186de79cd45da85dfb2e2d71e5749f92f10ae9f91871f68","sha512":"03e939b8cb16223055781ed96668e3426b9eec6c747da9d4071cd0144c218a9e5f725a5bc2fe6e9ba8da1795386ff08434050aa69bb67bc85029ab09ab394ba2","ssdeep":"","tlshash":"f621201992b05d50e65684a070f2b3ea3a4b8646f48b0b99e422722fd8c256290df384","first_seen":"2025-04-07T01:16:36.738328Z","last_seen":"2026-07-10T17:19:00.119361Z","times_seen":5795,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-10","alert":"Sinkholed","trigger":"4849999.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}