{"report_id":"58e4a5b5-5f37-4654-8fb3-897b4512216e","version":6,"status":"done","tags":[],"date":"2026-05-08T08:44:51Z","url":{"schema":"http","addr":"super-secure-tunnel-link.cfd","fqdn":"super-secure-tunnel-link.cfd","domain":"super-secure-tunnel-link.cfd","tld":"cfd"},"ip":{"addr":"47.57.218.1","port":0,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"super-secure-tunnel-link.cfd/","fqdn":"super-secure-tunnel-link.cfd","domain":"super-secure-tunnel-link.cfd","tld":"cfd"},"title":"Hello World","dom":{"size":519,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"60f375af565c686ae56e47712c8ff913","sha1":"af3dfec5e857a9b730e252d0d6ae5c0640c6cf9d","sha256":"c845fa7b8fc12754ff02afd7a1885a496240250e930b9282044ce387da0a4d60","sha512":"aeb9787e1521c15eab406874b088beeec39ebd06d788c30342733cc1624b6cffcf13c233465e4d88d5fe5202160e8afe5f28b93bee2fec5c6d812acf140458b2","ssdeep":"","tlshash":"7ef0554680b3010a2823c4040eeab2404a95d85b839b8e103ece32889f8a24998eb7dc","dom_hash":"domhash2cb833fa389c8595ff47861795e5b41e","first_seen":"2025-11-08T11:47:56.558146Z","last_seen":"2026-07-19T08:55:33.622518Z","times_seen":21,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"super-secure-tunnel-link.cfd","fqdn":"super-secure-tunnel-link.cfd","domain":"super-secure-tunnel-link.cfd","tld":"cfd"},"ip":{"addr":"47.57.218.1","port":0,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-12T08:44:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"super-secure-tunnel-link.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"super-secure-tunnel-link.cfd","ip":{"addr":"47.57.218.1","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":5,"request_count":5,"received_data":2665,"sent_data":2367,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"super-secure-tunnel-link.cfd/favicon.ico","fqdn":"super-secure-tunnel-link.cfd","domain":"super-secure-tunnel-link.cfd","tld":"cfd"},"ip":{"addr":"47.57.218.1","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://super-secure-tunnel-link.cfd/","date":"2026-05-08T08:44:34.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.super-secure-tunnel-link.cfd","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AE:09:96:8F:A2:FB:52:FD:B6:D5:3F:07:1B:61:D7:1A:BB:12:56:C2","sha256":"0B:7A:94:A8:5B:15:DC:60:DB:22:AA:0A:7B:9D:36:B6:38:AA:77:D9:35:51:24:C6:96:F5:B3:01:C1:B5:C2:00"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: super-secure-tunnel-link.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://super-secure-tunnel-link.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: volc-dcdn\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 366\r\nstrict-transport-security: max-age=31536000\r\nx-amz-request-id: ZJ79W6TEZ9ZY7FEG\r\nx-amz-id-2: dYUYwg1gHOUlYfTQGxHSoyR8TuTXPaXV4CuR+ep6JyvjtbSPY9ziKKfFH5x3fC/IPj5MuKQNHCdQEEoQZou/Zzh4/giqyqA+\r\ndate: Fri, 08 May 2026 08:44:34 GMT\r\nvia: n156-059-198-179.bdcdn-cnhk02.ToB\r\nx-request-ip: 101.47.85.25\r\nx-tt-trace-tag: id=5\r\nx-dsa-trace-id: 17782298742e1a3e1474af735e93820c8d92c4d371\r\nx-dsa-origin-status: 404\r\nserver-timing: cdn-cache;desc=MISS, origin;dur=83, edge;dur=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":366,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"40589d8f0c8adf6d27460360e9aa899b","sha1":"91cca279b5963f8fb625ff8ae18f7646ea99184b","sha256":"885f76d117e0c6de40024112d604d8422385bebfc2dfa4e40dcbb07af7cc358f","sha512":"95f9c543830781a5cbd2673536e40b56ddd33b41f697417bdef8394f8d14efe569564fc4f24697d2e69919a258748fb5a7394cc3ff4cd3f99f6a2a8ef2d7b4bb","ssdeep":"","tlshash":"a9e0200f5906d745d51650256cd333c19b9b066dd8b856b25d43c0d3708a5b9dd8328d","first_seen":"2026-05-08T08:44:56.061129Z","last_seen":"2026-05-08T08:44:56.061129Z","times_seen":1,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"super-secure-tunnel-link.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"super-secure-tunnel-link.cfd/","fqdn":"super-secure-tunnel-link.cfd","domain":"super-secure-tunnel-link.cfd","tld":"cfd"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-08T08:44:30.064Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: super-secure-tunnel-link.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T16:51:58.475838Z","times_seen":17873861,"resource_available":true,"data":null}},"time_used":1068,"timings":{"blocked":0,"dns":463,"connect":278,"send":0,"wait":0,"receive":0,"ssl":325},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"super-secure-tunnel-link.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"super-secure-tunnel-link.cfd/","fqdn":"super-secure-tunnel-link.cfd","domain":"super-secure-tunnel-link.cfd","tld":"cfd"},"ip":{"addr":"47.57.218.1","port":80,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-08T08:44:31.140Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: super-secure-tunnel-link.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: volc-dcdn\r\nDate: Fri, 08 May 2026 08:44:31 GMT\r\nContent-Type: text/html\r\nContent-Length: 241\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000\r\nLocation: https://super-secure-tunnel-link.cfd/\r\nvia: n156-059-027-013.bdcdn-jptyo02.ToB\r\nx-request-ip: 101.47.85.25\r\nx-tt-trace-tag: id=5\r\nx-dsa-trace-id: 1778229871a470efd9b7c73fc384c730595d3f4bf9\r\nX-Dsa-Origin-Status: -\r\nserver-timing: cdn-cache;desc=MISS, origin;dur=0, edge;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T16:51:58.475838Z","times_seen":17873861,"resource_available":true,"data":null}},"time_used":935,"timings":{"blocked":279,"dns":1,"connect":279,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"super-secure-tunnel-link.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"super-secure-tunnel-link.cfd/","fqdn":"super-secure-tunnel-link.cfd","domain":"super-secure-tunnel-link.cfd","tld":"cfd"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-08T08:44:31.800Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: super-secure-tunnel-link.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T16:51:58.475838Z","times_seen":17873861,"resource_available":true,"data":null}},"time_used":646,"timings":{"blocked":0,"dns":1,"connect":298,"send":0,"wait":0,"receive":0,"ssl":343},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"super-secure-tunnel-link.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"super-secure-tunnel-link.cfd/","fqdn":"super-secure-tunnel-link.cfd","domain":"super-secure-tunnel-link.cfd","tld":"cfd"},"ip":{"addr":"47.57.218.1","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-08T08:44:33.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.super-secure-tunnel-link.cfd","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AE:09:96:8F:A2:FB:52:FD:B6:D5:3F:07:1B:61:D7:1A:BB:12:56:C2","sha256":"0B:7A:94:A8:5B:15:DC:60:DB:22:AA:0A:7B:9D:36:B6:38:AA:77:D9:35:51:24:C6:96:F5:B3:01:C1:B5:C2:00"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: super-secure-tunnel-link.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: volc-dcdn\r\ncontent-type: text/html\r\ncontent-length: 560\r\nstrict-transport-security: max-age=31536000\r\nx-amz-id-2: ITFYbV6+K+Pfyn2KIgFuyDXEwxxE9Bf5i7J9ioKZDTRiY51tuHIckUf/qdbjWbPAGkjecfKY0WMEgA372Jr844axHfP1tR63\r\nx-amz-request-id: ZJ73VR3YAFA4FE0M\r\ndate: Fri, 08 May 2026 08:44:35 GMT\r\nlast-modified: Sat, 15 Feb 2025 08:03:48 GMT\r\netag: \"adc9cff5fcc9bc85f7001da54035dbd2\"\r\nvia: n156-059-198-179.bdcdn-cnhk02.ToB\r\nx-request-ip: 101.47.85.25\r\nx-tt-trace-tag: id=5\r\nx-dsa-trace-id: 1778229874c9c1d03cbaa983be957137789a4ab7e9\r\nx-dsa-origin-status: 200\r\nserver-timing: cdn-cache;desc=MISS, origin;dur=81, edge;dur=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":560,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"adc9cff5fcc9bc85f7001da54035dbd2","sha1":"5e949ba5fea7bf64471634564a1a1659870e66f7","sha256":"98e80fb82e7800c560d62aaaa622e9199b9dd5c4dd2029b856a3e8fb217d529f","sha512":"4b936b3059c26ea9b25d5846336deafb1cbb847f6741377c2dd66b3e412d42b9471cd552273ee349bdf01ce034b297d533908fecb49a7bec98d07ed6a16bbf1c","ssdeep":"","tlshash":"eaf05c1a81810c0a147392781ee6f190ced798ab43870b1039ce355b2ffa60486d7bc8","first_seen":"2025-04-15T23:59:12.608576Z","last_seen":"2026-07-19T08:55:33.625057Z","times_seen":27,"resource_available":true,"data":null}},"time_used":1568,"timings":{"blocked":598,"dns":1,"connect":290,"send":0,"wait":372,"receive":0,"ssl":303},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"super-secure-tunnel-link.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}