{"report_id":"5d5f80c2-78c5-4eeb-a02c-cb24cefe6881","version":0,"status":"done","tags":[],"date":"2026-09-20T16:43:31Z","url":{"schema":"http","addr":"269.2690021.cc/","fqdn":"269.2690021.cc","domain":"2690021.cc","tld":"cc"},"ip":{"addr":"186.240.219.14","port":0,"asn":4907,"as":"BGPNET PTE. LTD.","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"269.2690021.cc/","fqdn":"269.2690021.cc","domain":"2690021.cc","tld":"cc"},"title":"269.2690021.cc/","dom":{"size":223,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"3b7e7e5509e0519233e3f61eba6c00f5","sha1":"7dec767d4c883c4e27843b880fa373d2e56444cf","sha256":"2973a650a02d8af251a4404828314fd13309a6e73a9eb5f98667e6e968f6ca1a","sha512":"00f335bfea2b19bb3d5bc4ac97732534e43ec3da8002873d0e141bdc834842cad0cfa7401c071904325ed70e65b5e71abc52c325f8cce2af9a9b8842c212f6c9","ssdeep":"","tlshash":"37d023f7764042171de011c1cdd0350e9056779f6ca35423f1c1103495d83e60dbe97c","dom_hash":"domhashe7878feada357c83b98d617f7576c066","first_seen":"2026-09-20T16:43:36.599841Z","last_seen":"2026-09-20T16:43:36.599841Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"269.2690021.cc/","fqdn":"269.2690021.cc","domain":"2690021.cc","tld":"cc"},"ip":{"addr":"186.240.219.14","port":0,"asn":4907,"as":"BGPNET PTE. LTD.","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T16:43:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"vz5bxneuycf.269ldy0021.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"269.2690021.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"vz5bxneuycf.269ldy0021.cc","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-09-16","domain_rank":0,"first_seen":"2026-09-20T16:43:31.614934Z","last_seen":"2026-09-20T16:43:31.614934Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":585,"comment":"","tags":null,"fingerprints":null},{"fqdn":"269.2690021.cc","ip":{"addr":"186.240.219.12","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":382,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"269.2690021.cc/","fqdn":"269.2690021.cc","domain":"2690021.cc","tld":"cc"},"ip":{"addr":"186.240.219.12","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"db33abcf2fc2da0cd90a31c73be18054","sha1":"4cb2b392080fb531747f62549c6141408f67c015","sha256":"4f5763e529203dac398fac94dfce21a528e6dac6a5c94df7dacab5cdd81b5257","sha512":"3c90ecd270212200e8595fd365969a27246469e204706a511b97f0a6d1d456d8888f449f6c2786f9b23baa21fde5c3f9c8da5690486eff6242fcc075ced033f8","ssdeep":"","tlshash":"48c012e77240125a16e041d1ced4385da052679b9ca32422e142213461d879615be97d","size":180,"data":"","first_seen":"2026-09-20T16:43:36.602535Z","last_seen":"2026-09-20T16:43:36.602535Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"vz5bxneuycf.269ldy0021.cc/index.html?inviteCode=24670229\u0026agentName=2690021.cc","fqdn":"vz5bxneuycf.269ldy0021.cc","domain":"269ldy0021.cc","tld":"cc"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T16:43:04.519Z","timestamp":1789922584519,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /index.html?inviteCode=24670229\u0026agentName=2690021.cc HTTP/1.1\r\nHost: vz5bxneuycf.269ldy0021.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://269.2690021.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T02:48:35.617381Z","times_seen":18595110,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"vz5bxneuycf.269ldy0021.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"269.2690021.cc/","fqdn":"269.2690021.cc","domain":"2690021.cc","tld":"cc"},"ip":{"addr":"186.240.219.12","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T16:43:03.181Z","timestamp":1789922583181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.2690021.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 04:01:22 GMT","end":"Tue, 15 Dec 2026 04:01:21 GMT"},"fingerprint":{"sha1":"0F:C9:63:C1:87:0F:95:38:17:93:8A:8A:BB:84:6A:55:D7:92:AB:5F","sha256":"30:D3:2D:64:74:EC:56:B5:EC:BD:70:1D:EF:68:DA:58:8F:95:12:AF:8F:78:48:0E:40:C8:63:30:6C:3E:47:9F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 269.2690021.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 20 Sep 2026 07:30:26 GMT\r\netag: \"1789889426\"\r\nlast-modified: Sun, 20 Sep 2026 07:30:26 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\nx-powered-by: PHP/5.4.16\r\ncontent-length: 177\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T02:48:35.617381Z","times_seen":18595110,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"269.2690021.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}