{"report_id":"5f5c6942-b6e5-4f42-8794-e5debd56f63f","version":6,"status":"done","tags":[],"date":"2026-02-24T13:54:00Z","url":{"schema":"http","addr":"globeridgeintl.com","fqdn":"globeridgeintl.com","domain":"globeridgeintl.com","tld":"com"},"ip":{"addr":"103.118.16.173","port":0,"asn":56110,"as":"Everdata Technologies Pvt Ltd","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"globeridgeintl.com/","fqdn":"globeridgeintl.com","domain":"globeridgeintl.com","tld":"com"},"title":"Coming Soon","dom":{"size":1084,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"427a5e4217689de30abd555cf0368e9a","sha1":"7fdca82032440754ec92aa9b4a6e84bc4fbd0759","sha256":"038e6cb0948f014801b20a0568a89f7008f6ce43b65f9e6a960b005f3e22c4ae","sha512":"a6bb92da4fb643e1f8c3117e634b3381b000f5ac9d97ccd3b680b92328f94f80f0c888841a420b6bac7e423a56270e52a9650fdfc680eab893252f7162051744","ssdeep":"","tlshash":"af11c40856e34107759bac521fa5b61425f3d413448efd1336cdb784cf8d26585e7b5c","dom_hash":"domhash029390b9a5aba26c7071d27b7c824792","first_seen":"2026-02-24T13:54:00.737028Z","last_seen":"2026-02-24T13:54:00.737028Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"globeridgeintl.com","fqdn":"globeridgeintl.com","domain":"globeridgeintl.com","tld":"com"},"ip":{"addr":"103.118.16.173","port":0,"asn":56110,"as":"Everdata Technologies Pvt Ltd","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-31T13:54:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"globeridgeintl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"globeridgeintl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"globeridgeintl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"globeridgeintl.com","ip":{"addr":"103.118.16.173","port":443,"asn":56110,"as":"Everdata Technologies Pvt Ltd","country":"United Kingdom","country_code":"GB"},"domain_registered":"2024-12-03","domain_rank":0,"first_seen":"2026-02-24T11:54:17.416315Z","last_seen":"2026-02-24T11:54:17.416315Z","alert_count":6,"request_count":2,"received_data":2598,"sent_data":930,"comment":"","tags":null,"fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"PHP:8.0.0","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"globeridgeintl.com/","fqdn":"globeridgeintl.com","domain":"globeridgeintl.com","tld":"com"},"ip":{"addr":"103.118.16.173","port":443,"asn":56110,"as":"Everdata Technologies Pvt Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"cdb53b3e3cc4b14b756652babdcc9948","sha1":"bac88bbbd4765a035accd0f2d28e77de65c5fc97","sha256":"ddd6c45bcd94fb14bded94f1958ae6923f759ac9f5b3f8143c14f662cb600506","sha512":"9aec71270b6d89266b5bda12dbca19cd1de7cc87cfe17802eff0f42f6ce7115790c35104437e8b788d9bf57106ce473c3a67f68a708fe4f64d209dd06af9c699","ssdeep":"","tlshash":"a9e0204c57a7941326df74535e0eb61411b3406714d57e03366caf8c4f9d35a41bbd45","size":371,"data":"","first_seen":"2026-02-24T13:54:00.746027Z","last_seen":"2026-02-24T13:54:00.746027Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"globeridgeintl.com/","fqdn":"globeridgeintl.com","domain":"globeridgeintl.com","tld":"com"},"ip":{"addr":"103.118.16.173","port":443,"asn":56110,"as":"Everdata Technologies Pvt Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-24T13:53:38.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"globeridgeintl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 04:26:17 GMT","end":"Mon, 27 Apr 2026 04:26:16 GMT"},"fingerprint":{"sha1":"7B:C8:5B:B6:4C:87:06:11:BA:4F:DB:6D:E9:5F:4C:7E:4D:EA:28:AB","sha256":"62:9B:F0:01:8A:57:0C:51:33:81:59:63:20:88:5D:69:7C:AE:97:22:B1:EA:0F:0F:00:26:85:41:3B:CB:F7:69"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: globeridgeintl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: PHP/8.0.0, ASP.NET\r\ndate: Tue, 24 Feb 2026 13:53:38 GMT\r\ncontent-length: 1101\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"PHP:8.0.0","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1101,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"5f27b998ba7fe0662398b49a7ebdcf50","sha1":"a61e1618aca82eed3c1f0db501799f73e2b99a24","sha256":"5d97c7ef378e3ab63d97069f3871bf3639adcda545a11844df89109b4ef072ce","sha512":"f7c8bb81cb79902a7434448cd7e09b091cd7648e5bf16c8b91eadd5a8ccbf527e147fd70e091b45ef50be66a64257e1ff294ffa2872160ba46febd5855884442","ssdeep":"","tlshash":"5711d04856e34107658ba8122fa5b61425e39453448afe1336cdb784cf8926985ebb4c","first_seen":"2026-02-24T13:54:00.74282Z","last_seen":"2026-02-24T13:54:00.74282Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1127,"timings":{"blocked":484,"dns":1,"connect":157,"send":0,"wait":159,"receive":0,"ssl":323},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"globeridgeintl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"globeridgeintl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"globeridgeintl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globeridgeintl.com/favicon.ico","fqdn":"globeridgeintl.com","domain":"globeridgeintl.com","tld":"com"},"ip":{"addr":"103.118.16.173","port":443,"asn":56110,"as":"Everdata Technologies Pvt Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globeridgeintl.com/","date":"2026-02-24T13:53:39.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"globeridgeintl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 04:26:17 GMT","end":"Mon, 27 Apr 2026 04:26:16 GMT"},"fingerprint":{"sha1":"7B:C8:5B:B6:4C:87:06:11:BA:4F:DB:6D:E9:5F:4C:7E:4D:EA:28:AB","sha256":"62:9B:F0:01:8A:57:0C:51:33:81:59:63:20:88:5D:69:7C:AE:97:22:B1:EA:0F:0F:00:26:85:41:3B:CB:F7:69"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: globeridgeintl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globeridgeintl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: PHP/8.0.0, ASP.NET\r\ndate: Tue, 24 Feb 2026 13:53:38 GMT\r\ncontent-length: 1101\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"PHP:8.0.0","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1101,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"5f27b998ba7fe0662398b49a7ebdcf50","sha1":"a61e1618aca82eed3c1f0db501799f73e2b99a24","sha256":"5d97c7ef378e3ab63d97069f3871bf3639adcda545a11844df89109b4ef072ce","sha512":"f7c8bb81cb79902a7434448cd7e09b091cd7648e5bf16c8b91eadd5a8ccbf527e147fd70e091b45ef50be66a64257e1ff294ffa2872160ba46febd5855884442","ssdeep":"","tlshash":"5711d04856e34107658ba8122fa5b61425e39453448afe1336cdb784cf8926985ebb4c","first_seen":"2026-02-24T13:54:00.74282Z","last_seen":"2026-02-24T13:54:00.74282Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"globeridgeintl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"globeridgeintl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"globeridgeintl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}