{"report_id":"5c5027fc-4343-4e90-ac3b-dca8e9c26e9a","version":6,"status":"done","tags":[],"date":"2026-02-12T05:35:46Z","url":{"schema":"https","addr":"nibberly.com/in.html","fqdn":"nibberly.com","domain":"nibberly.com","tld":"com"},"ip":{"addr":"62.60.226.86","port":0,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"nibberly.com/in.html","fqdn":"nibberly.com","domain":"nibberly.com","tld":"com"},"title":"VID EDS - Elektroniskās deklarēšanas sistēma","dom":{"size":224,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"7d4db7cfd901246591819d69a5e59c26","sha1":"aa3c5b782b42d8392e7fa29a3618a978bba5b9e6","sha256":"23e98451063f6993f86ec10a4ca72a6f05375488f0b30c1c3a64cc0c2181d0cf","sha512":"5579b132332cf1fb87f13bb74d00b5efa38a7d10dcf69c4e1653b17156c21d4639ed79f516a17109e0201cf61e7d6c67ca21918adea8326108c6458898d770ba","ssdeep":"","tlshash":"0ed0a7af5052534f4910157079c439812bcd23e97036c7645dc6c08b515c52acda2ec5","dom_hash":"domhash6047034c37a0e90cd4b650026e316c39","first_seen":"2026-02-12T05:35:50.035724Z","last_seen":"2026-02-12T05:35:50.035724Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"nibberly.com/in.html","fqdn":"nibberly.com","domain":"nibberly.com","tld":"com"},"ip":{"addr":"62.60.226.86","port":0,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-19T05:35:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":6}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-12T05:35:23Z","timestamp":1770874523,"ip_dst":{"addr":"Client IP","port":38230,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"62.60.226.86","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 8","source":"{\"timestamp\":\"2026-02-12T05:35:23.249643+0000\",\"flow_id\":1785484050905927,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"62.60.226.86\",\"src_port\":443,\"dest_ip\":\"172.18.0.23\",\"dest_port\":38230,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400007,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 8\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2026-02-12T05:35:23.146247+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"nibberly.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"nibberly.com","ip":{"addr":"62.60.226.86","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"domain_registered":"2025-06-09","domain_rank":0,"first_seen":"2026-02-12T05:35:46.206706Z","last_seen":"2026-02-12T05:35:46.206706Z","alert_count":72,"request_count":12,"received_data":312665,"sent_data":5524,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nibberly.com/in.html","fqdn":"nibberly.com","domain":"nibberly.com","tld":"com"},"ip":{"addr":"62.60.226.86","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-12T05:35:23.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nibberly.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 23:39:29 GMT","end":"Mon, 27 Apr 2026 23:39:28 GMT"},"fingerprint":{"sha1":"D4:B6:EF:B0:4E:EC:02:A4:6B:B7:58:32:3B:03:D3:1D:E0:A0:DE:F7","sha256":"73:46:F8:DF:A8:45:6B:4A:00:60:94:4A:68:8A:AA:54:6E:9D:C0:54:C7:DA:CB:99:62:38:BC:1E:B0:06:DE:59"}}},"request":{"raw":"GET /in.html HTTP/1.1\r\nHost: nibberly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Thu, 12 Feb 2026 05:35:23 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6531\r\nConnection: keep-alive\r\nLast-Modified: Wed, 01 Oct 2025 14:33:28 GMT\r\nETag: \"4c9b-64019c07c5e00-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19611,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7575)","md5":"1b4c9392db9877e6b49b73c39b0d9255","sha1":"ef944ef97d0344a4150c9957e4b591e621386d94","sha256":"ed2bcc9b994be2af4704b9c5b531245c885279ca03ec40e7db987c028e0ae449","sha512":"7a6506b5c69a3e887d2847d4f9c37f82ad39c6c8e5cdf57b4c9a36e495f6231ea102e8d41bd46cb6ac16a0bfe3c3c1ed09e10a8a036ec08450641df30c96666e","ssdeep":"384:bk8ioC5dLpZiodfCkNZIUX2JJoBccROEXUac7T/125qc:WoC3pZio3P9X2Jf21XUb73c","tlshash":"8b92a535c5d9073b068781c2b5b2ab1b7ccac68bdb1b5ac0bbec57915fcbe518872084","first_seen":"2026-02-12T05:35:50.039709Z","last_seen":"2026-02-12T05:35:50.039709Z","times_seen":1,"resource_available":false,"data":null}},"time_used":653,"timings":{"blocked":266,"dns":56,"connect":104,"send":0,"wait":114,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"nibberly.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nibberly.com/login_0B7BCEADEE1EDCC94F1A3911D87915CE.css","fqdn":"nibberly.com","domain":"nibberly.com","tld":"com"},"ip":{"addr":"62.60.226.86","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nibberly.com/in.html","date":"2026-02-12T05:35:23.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nibberly.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 23:39:29 GMT","end":"Mon, 27 Apr 2026 23:39:28 GMT"},"fingerprint":{"sha1":"D4:B6:EF:B0:4E:EC:02:A4:6B:B7:58:32:3B:03:D3:1D:E0:A0:DE:F7","sha256":"73:46:F8:DF:A8:45:6B:4A:00:60:94:4A:68:8A:AA:54:6E:9D:C0:54:C7:DA:CB:99:62:38:BC:1E:B0:06:DE:59"}}},"request":{"raw":"GET /login_0B7BCEADEE1EDCC94F1A3911D87915CE.css HTTP/1.1\r\nHost: nibberly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nibberly.com/in.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Thu, 12 Feb 2026 05:35:23 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 01 Oct 2025 17:21:54 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68dd6332-12f5\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4853,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (4851), with no line terminators","md5":"0b7bceadee1edcc94f1a3911d87915ce","sha1":"c2da74d193758814e29347f6cb72e6e4bfbd12d6","sha256":"19af68fa7de6928a039c755b04b68af7834c8807a48c70d2ef0d1c5e81258f6c","sha512":"13304ae1a38d6552de7f9c7188f3bc24ddef2204484a1dce380a3366aebf2b8d66fc5ff8c76c5576f12e5ac2359197ddefd11759e69dce5da76ca1dc40608cad","ssdeep":"96:yt1smk+j+RcDBF8rFfJerKLixRXleekMPvCgO:yt+mks+RcDBF8B/LixRXAekMPvCgO","tlshash":"8ba1efa63a0a1a5c7697900fa252026c5a3cf9f0e71bdfffed7655044d87386123e898","first_seen":"2025-09-09T15:59:24.323657Z","last_seen":"2026-02-12T05:35:50.04246Z","times_seen":11,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":50,"dns":0,"connect":25,"send":0,"wait":25,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"nibberly.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nibberly.com/m=el_main_css.css","fqdn":"nibberly.com","domain":"nibberly.com","tld":"com"},"ip":{"addr":"62.60.226.86","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nibberly.com/in.html","date":"2026-02-12T05:35:23.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nibberly.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 23:39:29 GMT","end":"Mon, 27 Apr 2026 23:39:28 GMT"},"fingerprint":{"sha1":"D4:B6:EF:B0:4E:EC:02:A4:6B:B7:58:32:3B:03:D3:1D:E0:A0:DE:F7","sha256":"73:46:F8:DF:A8:45:6B:4A:00:60:94:4A:68:8A:AA:54:6E:9D:C0:54:C7:DA:CB:99:62:38:BC:1E:B0:06:DE:59"}}},"request":{"raw":"GET /m=el_main_css.css HTTP/1.1\r\nHost: nibberly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nibberly.com/in.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Thu, 12 Feb 2026 05:35:23 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 01 Oct 2025 17:21:54 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68dd6332-56d4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22228,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22228), with no line terminators","md5":"9836c52f09865914be467241e3c27647","sha1":"e4d30c0f1967a375b9ed827480d4f5049ea95876","sha256":"434ae5ab5079442519d435f5bc1fe257f839e01ee08c5d9494d878c6a584268d","sha512":"093cc0129d3a3c3b7e6bd9d1e19b2fad3d9467b24c5aeedaf06b847c7fc3123130a6ee2205cadacb469665ceaa19645f0576ae5baaf013099dd3c5406958de00","ssdeep":"384:gM78SnevMsWhFzou+FqWBZpTpdHjPtcBG:p7jevMHiHjPCG","tlshash":"e1a2ab2113aed019a3afa85354d36dff71d488db50113eeaef5a7352ce822f231da215","first_seen":"2025-07-15T13:28:40.472809Z","last_seen":"2026-07-30T18:02:31.061158Z","times_seen":80,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":50,"dns":1,"connect":28,"send":0,"wait":25,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"nibberly.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nibberly.com/help_D1C375E5C3272C0D35BEFDAEE86203FA.css","fqdn":"nibberly.com","domain":"nibberly.com","tld":"com"},"ip":{"addr":"62.60.226.86","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nibberly.com/in.html","date":"2026-02-12T05:35:23.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nibberly.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 23:39:29 GMT","end":"Mon, 27 Apr 2026 23:39:28 GMT"},"fingerprint":{"sha1":"D4:B6:EF:B0:4E:EC:02:A4:6B:B7:58:32:3B:03:D3:1D:E0:A0:DE:F7","sha256":"73:46:F8:DF:A8:45:6B:4A:00:60:94:4A:68:8A:AA:54:6E:9D:C0:54:C7:DA:CB:99:62:38:BC:1E:B0:06:DE:59"}}},"request":{"raw":"GET /help_D1C375E5C3272C0D35BEFDAEE86203FA.css HTTP/1.1\r\nHost: nibberly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nibberly.com/in.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Thu, 12 Feb 2026 05:35:23 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 01 Oct 2025 17:21:54 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68dd6332-358f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13711,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13709), with no line terminators","md5":"31bf05404804ae2f12955500f80936fb","sha1":"65f9b96605ebc46a59efe896e18848a7cd3efa3a","sha256":"fe4639cb6d5d430fd40b17478d0a106b62a5d2bfaed383959b58bb2f9d6fa694","sha512":"ea1f148f4186df0803061eb88e13d8ff0e8e70a4275b0c8a07f436f3eede0da5db6b5d19fbe4465d3b208468fbf9e10c7ec61384b32f237615a79d1e316185c9","ssdeep":"192:eEUQYQc6WzjcW5qMRQUD4+lPTB8uxbYGhiGJDH2N+:GQejnCuVYGMGt2N+","tlshash":"e752407aa90913087233c9fb3991aec4a4bf9492df3336d5a9a0ec81cbc75f545131ca","first_seen":"2025-09-09T15:59:24.317553Z","last_seen":"2026-02-12T05:35:50.049414Z","times_seen":11,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":42,"dns":1,"connect":29,"send":0,"wait":25,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"nibberly.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nibberly.com/24px.svg","fqdn":"nibberly.com","domain":"nibberly.com","tld":"com"},"ip":{"addr":"62.60.226.86","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nibberly.com/in.html","date":"2026-02-12T05:35:23.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nibberly.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 23:39:29 GMT","end":"Mon, 27 Apr 2026 23:39:28 GMT"},"fingerprint":{"sha1":"D4:B6:EF:B0:4E:EC:02:A4:6B:B7:58:32:3B:03:D3:1D:E0:A0:DE:F7","sha256":"73:46:F8:DF:A8:45:6B:4A:00:60:94:4A:68:8A:AA:54:6E:9D:C0:54:C7:DA:CB:99:62:38:BC:1E:B0:06:DE:59"}}},"request":{"raw":"GET /24px.svg HTTP/1.1\r\nHost: nibberly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nibberly.com/in.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Thu, 12 Feb 2026 05:35:23 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":275,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"d42903cb1ff6251c7419fee642927891","sha1":"adbcbc8171c500e4b1e6660b18902af944a61ce3","sha256":"94ba5c90cca91758db247a5280b4b793c732d43346d3140f251f016740cc3767","sha512":"a131f9173d15700221df7106310c41011a98e585c5be39047dd199eabd7ed7c4e2c2c446d88c1f2a47ef1c377aabbda4e6230c04433651415d3021021931d797","ssdeep":"","tlshash":"60d02baf9053638b481115a039c125c2268d23eab47a86e82dc6d487529863ece9ae9d","first_seen":"2026-02-12T05:35:50.05213Z","last_seen":"2026-02-12T05:35:50.05213Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":187,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"nibberly.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nibberly.com/favicon.ico","fqdn":"nibberly.com","domain":"nibberly.com","tld":"com"},"ip":{"addr":"62.60.226.86","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nibberly.com/in.html","date":"2026-02-12T05:35:23.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nibberly.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 23:39:29 GMT","end":"Mon, 27 Apr 2026 23:39:28 GMT"},"fingerprint":{"sha1":"D4:B6:EF:B0:4E:EC:02:A4:6B:B7:58:32:3B:03:D3:1D:E0:A0:DE:F7","sha256":"73:46:F8:DF:A8:45:6B:4A:00:60:94:4A:68:8A:AA:54:6E:9D:C0:54:C7:DA:CB:99:62:38:BC:1E:B0:06:DE:59"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: nibberly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nibberly.com/in.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Thu, 12 Feb 2026 05:35:24 GMT\r\nContent-Type: image/x-icon\r\nLast-Modified: Wed, 01 Oct 2025 17:21:54 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68dd6332-1729\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5929,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 32 x 32, 16-bit/color RGBA, non-interlaced","md5":"999fab8e58d2d3c699d71a87e40bb06b","sha1":"819ea16dd00af8d632af481c924d30f412defbb4","sha256":"ddf2e34200d7fc6b9a3534a9af4093ecaa3d1725ed5d106fefe2584c2407e14e","sha512":"c797c41b8dcbaa59ab986a30ff7bd7bad6e1be84409e7904378f9fe2adbfa3678262d2b288dbf2d4d7636e2b51f9c889de034d9b40f36e6f385c537497b96c06","ssdeep":"96:mjrgSPrzWi9t+7ZCJVUR/KBmmegMMcwhQySWkD6lwmu9TCfzCo3TOnSgjxf3qjp7:mjMwrE1CJQ/KBmmevVwhQyS56lEtCfQS","tlshash":"e9c18e485e94d589ffe2e621005ba8ace7f26e1d95079dc6013a7b00ad45eed1c23bc9","first_seen":"2023-06-18T03:30:30Z","last_seen":"2026-05-01T05:00:55.828926Z","times_seen":51,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"nibberly.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nibberly.com/mvc_DE510A2A2AD79F2F72BBB2843DF8A036.css","fqdn":"nibberly.com","domain":"nibberly.com","tld":"com"},"ip":{"addr":"62.60.226.86","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nibberly.com/in.html","date":"2026-02-12T05:35:23.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nibberly.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 23:39:29 GMT","end":"Mon, 27 Apr 2026 23:39:28 GMT"},"fingerprint":{"sha1":"D4:B6:EF:B0:4E:EC:02:A4:6B:B7:58:32:3B:03:D3:1D:E0:A0:DE:F7","sha256":"73:46:F8:DF:A8:45:6B:4A:00:60:94:4A:68:8A:AA:54:6E:9D:C0:54:C7:DA:CB:99:62:38:BC:1E:B0:06:DE:59"}}},"request":{"raw":"GET /mvc_DE510A2A2AD79F2F72BBB2843DF8A036.css HTTP/1.1\r\nHost: nibberly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nibberly.com/in.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Thu, 12 Feb 2026 05:35:23 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 01 Oct 2025 17:21:54 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68dd6332-23df1\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146929,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (49868), with CR line terminators","md5":"72bbf58faebb9fc34491f1230cdb5df5","sha1":"291c1b826404484f76e5a1a913fd13997d70bc1f","sha256":"415b617d061628ded12073f4374475e53bb2ba1590598a1ecd7dee8e2fd34b08","sha512":"60200753bd65eb50871fdfef987d1c92e88bd3b8ad3f6287e4dc00bc9db9fa6dd1a92b3f89dc65bf0362c1c561ea96035793dcc044033ca095259a2aab78bdfa","ssdeep":"1536:yzoqOBr6U87p8H6RAzpa2Bh5RqSQ4q4/r5Gw/mS1nG:IoqOBr6U8F8aKzp84qSr5Gn","tlshash":"12e31bb0e54810e8b736cc1fd79077b82239f761d9521ea9f45fe94c8bc629401aaf39","first_seen":"2026-02-12T05:35:50.05775Z","last_seen":"2026-02-12T05:35:50.05775Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"nibberly.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nibberly.com/logo.png","fqdn":"nibberly.com","domain":"nibberly.com","tld":"com"},"ip":{"addr":"62.60.226.86","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nibberly.com/in.html","date":"2026-02-12T05:35:23.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nibberly.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 23:39:29 GMT","end":"Mon, 27 Apr 2026 23:39:28 GMT"},"fingerprint":{"sha1":"D4:B6:EF:B0:4E:EC:02:A4:6B:B7:58:32:3B:03:D3:1D:E0:A0:DE:F7","sha256":"73:46:F8:DF:A8:45:6B:4A:00:60:94:4A:68:8A:AA:54:6E:9D:C0:54:C7:DA:CB:99:62:38:BC:1E:B0:06:DE:59"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: nibberly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nibberly.com/in.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Thu, 12 Feb 2026 05:35:23 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":275,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"d42903cb1ff6251c7419fee642927891","sha1":"adbcbc8171c500e4b1e6660b18902af944a61ce3","sha256":"94ba5c90cca91758db247a5280b4b793c732d43346d3140f251f016740cc3767","sha512":"a131f9173d15700221df7106310c41011a98e585c5be39047dd199eabd7ed7c4e2c2c446d88c1f2a47ef1c377aabbda4e6230c04433651415d3021021931d797","ssdeep":"","tlshash":"60d02baf9053638b481115a039c125c2268d23eab47a86e82dc6d487529863ece9ae9d","first_seen":"2026-02-12T05:35:50.05213Z","last_seen":"2026-02-12T05:35:50.05213Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":196,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"nibberly.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nibberly.com/eidas.png","fqdn":"nibberly.com","domain":"nibberly.com","tld":"com"},"ip":{"addr":"62.60.226.86","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nibberly.com/in.html","date":"2026-02-12T05:35:23.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nibberly.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 23:39:29 GMT","end":"Mon, 27 Apr 2026 23:39:28 GMT"},"fingerprint":{"sha1":"D4:B6:EF:B0:4E:EC:02:A4:6B:B7:58:32:3B:03:D3:1D:E0:A0:DE:F7","sha256":"73:46:F8:DF:A8:45:6B:4A:00:60:94:4A:68:8A:AA:54:6E:9D:C0:54:C7:DA:CB:99:62:38:BC:1E:B0:06:DE:59"}}},"request":{"raw":"GET /eidas.png HTTP/1.1\r\nHost: nibberly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nibberly.com/in.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Thu, 12 Feb 2026 05:35:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 1931\r\nLast-Modified: Wed, 01 Oct 2025 17:21:54 GMT\r\nConnection: keep-alive\r\nETag: \"68dd6332-78b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1931,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 122 x 37, 8-bit/color RGB, non-interlaced","md5":"53f4e35fe1f30b9c10507c3f181b9336","sha1":"f10ea37f471a2198a42d76333b03d208b1cabd56","sha256":"c94eaf3196c7f3fdda012bd487852115d60784513b930e6f9e990a6bf6181e48","sha512":"1e133e480e3bd3878b084e1494572f8ae1d94fe8d229e5130c0efc15042b8f47f0d64338d10c85a91cd05a67a2652eae0469eee4b793893150d2809d6ef64efa","ssdeep":"","tlshash":"8c410a6bde238a9fddb30b13eb505588d063aeb9e618c14d9d671347449ae6cb820053","first_seen":"2026-02-12T05:35:50.060055Z","last_seen":"2026-02-12T05:35:50.060055Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":194,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"nibberly.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nibberly.com/eraf.png","fqdn":"nibberly.com","domain":"nibberly.com","tld":"com"},"ip":{"addr":"62.60.226.86","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nibberly.com/in.html","date":"2026-02-12T05:35:23.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nibberly.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 23:39:29 GMT","end":"Mon, 27 Apr 2026 23:39:28 GMT"},"fingerprint":{"sha1":"D4:B6:EF:B0:4E:EC:02:A4:6B:B7:58:32:3B:03:D3:1D:E0:A0:DE:F7","sha256":"73:46:F8:DF:A8:45:6B:4A:00:60:94:4A:68:8A:AA:54:6E:9D:C0:54:C7:DA:CB:99:62:38:BC:1E:B0:06:DE:59"}}},"request":{"raw":"GET /eraf.png HTTP/1.1\r\nHost: nibberly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nibberly.com/in.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Thu, 12 Feb 2026 05:35:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 18305\r\nLast-Modified: Wed, 01 Oct 2025 17:21:54 GMT\r\nConnection: keep-alive\r\nETag: \"68dd6332-4781\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18305,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 298 x 72, 8-bit/color RGBA, non-interlaced","md5":"ab17214bdf4b27a3de0917e44642b8fb","sha1":"f93dcce34bcbd957cc3197c383f91a70858f94c1","sha256":"6a936e2325238ee3a101a0c66a6383bb222e66afbde6bd1edf7034dc90f17204","sha512":"1da4ad625ae5aa987c0b74408ad48f4f10b1e58c53fdf416b970d2a7c1d00cd762ebb0f40133b36854a8abc0a1b3caa617e1f28ead086132f886a8b2114260ae","ssdeep":"384:XcyguHA7YaT6dEdOvoIwrA0r52AvoXphPJX7:hATmGdOvIk5AIphPN7","tlshash":"be82e0c69766729c56cd1f3f2229fd00aa7130a5f4a6a2ab7731e27f6d8004d80b9770","first_seen":"2024-02-23T13:57:48Z","last_seen":"2026-05-01T05:00:55.813232Z","times_seen":31,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":193,"dns":0,"connect":0,"send":0,"wait":50,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"nibberly.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nibberly.com/index_1.html","fqdn":"nibberly.com","domain":"nibberly.com","tld":"com"},"ip":{"addr":"62.60.226.86","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://nibberly.com/in.html","date":"2026-02-12T05:35:23.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nibberly.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 23:39:29 GMT","end":"Mon, 27 Apr 2026 23:39:28 GMT"},"fingerprint":{"sha1":"D4:B6:EF:B0:4E:EC:02:A4:6B:B7:58:32:3B:03:D3:1D:E0:A0:DE:F7","sha256":"73:46:F8:DF:A8:45:6B:4A:00:60:94:4A:68:8A:AA:54:6E:9D:C0:54:C7:DA:CB:99:62:38:BC:1E:B0:06:DE:59"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: nibberly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nibberly.com/in.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Thu, 12 Feb 2026 05:35:23 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":275,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"d42903cb1ff6251c7419fee642927891","sha1":"adbcbc8171c500e4b1e6660b18902af944a61ce3","sha256":"94ba5c90cca91758db247a5280b4b793c732d43346d3140f251f016740cc3767","sha512":"a131f9173d15700221df7106310c41011a98e585c5be39047dd199eabd7ed7c4e2c2c446d88c1f2a47ef1c377aabbda4e6230c04433651415d3021021931d797","ssdeep":"","tlshash":"60d02baf9053638b481115a039c125c2268d23eab47a86e82dc6d487529863ece9ae9d","first_seen":"2026-02-12T05:35:50.05213Z","last_seen":"2026-02-12T05:35:50.05213Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":46,"dns":0,"connect":28,"send":0,"wait":29,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"nibberly.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nibberly.com/fa-solid-900.woff2","fqdn":"nibberly.com","domain":"nibberly.com","tld":"com"},"ip":{"addr":"62.60.226.86","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nibberly.com/in.html","date":"2026-02-12T05:35:23.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nibberly.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 23:39:29 GMT","end":"Mon, 27 Apr 2026 23:39:28 GMT"},"fingerprint":{"sha1":"D4:B6:EF:B0:4E:EC:02:A4:6B:B7:58:32:3B:03:D3:1D:E0:A0:DE:F7","sha256":"73:46:F8:DF:A8:45:6B:4A:00:60:94:4A:68:8A:AA:54:6E:9D:C0:54:C7:DA:CB:99:62:38:BC:1E:B0:06:DE:59"}}},"request":{"raw":"GET /fa-solid-900.woff2 HTTP/1.1\r\nHost: nibberly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nibberly.com/mvc_DE510A2A2AD79F2F72BBB2843DF8A036.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Thu, 12 Feb 2026 05:35:24 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 75440\r\nLast-Modified: Wed, 01 Oct 2025 17:21:56 GMT\r\nConnection: keep-alive\r\nETag: \"68dd6334-126b0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75440,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 75440, version 329.-1049","md5":"b5cf8ae26748570d8fb95a47f46b69e1","sha1":"07bed153d47f9129a944ee54dd72952deed074c8","sha256":"cd398be1a91817126cef10224738e624358edf6f08043abad7e60c1aaeccc8d0","sha512":"f08b9289695cf530094f076b2df4d2b0e1a1daedd00190d123b4179b2c1a1b5e8b2bb988d86fc6dc9eee117d88a58dd5b6dfe7689586c17068f5d2da01904d76","ssdeep":"1536:1Zq/f5ldhNurIqp+jqNT5Fm653lqWppat1Wa4W8TeodjxNrqM:1kvdS7ppFm6JhpgkrW6bGM","tlshash":"6f73028e1719f192f5d6cd177edc20be38f1a7121008f839e2eda6dd5085ab639a3825","first_seen":"2023-04-05T08:48:24Z","last_seen":"2026-08-05T08:04:48.520724Z","times_seen":22882,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"nibberly.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"nibberly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}