{"report_id":"6ac0d528-f50b-4b69-948a-53a9117a0203","version":0,"status":"done","tags":[],"date":"2026-09-15T22:19:58Z","url":{"schema":"https","addr":"nodeanalysis.tech/","fqdn":"nodeanalysis.tech","domain":"nodeanalysis.tech","tld":"tech"},"ip":{"addr":"163.61.188.2","port":0,"asn":153568,"as":"NEW DHAKA HARDWARE","country":"Bangladesh","country_code":"BD"},"final":{"url":{"schema":"https","addr":"nodeanalysis.tech/","fqdn":"nodeanalysis.tech","domain":"nodeanalysis.tech","tld":"tech"},"title":"NodeAnalysis – Recover Your Stolen Crypto","dom":{"size":14214,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (413)","md5":"3a46b1271773f1f753479ec30594a059","sha1":"6de420e147dedc231e7a9f94617bba2784131add","sha256":"13050dad7bbcc17b273f7216991bb8452b3bbbc9c8448f76a64a3bf2212d4a27","sha512":"001497f2e2ac2dd035bfb25eaa7083f89fec489efa7e0737643642d95cf3f4f4e9af70ba371d7d3f5115b3174b72a3ae01293ce40f8fb98d5682fbb0cbf31dbf","ssdeep":"192:oGqBMecC919/FusP7QK077RDf3VF64syJj+zt2fplOt45bgyF14Xl6g:5LZDhBly4f0l6g","tlshash":"9252b61a61f71057698394b07bbb4bc66790d00bcc0ace287bdd5384cf89aa5f9a374c","dom_hash":"domhash8c414cbd4b82ff7fc489cf9a626daad5","first_seen":"2026-09-15T22:18:51.88829Z","last_seen":"2026-09-15T22:19:58.737873Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"nodeanalysis.tech/","fqdn":"nodeanalysis.tech","domain":"nodeanalysis.tech","tld":"tech"},"ip":{"addr":"163.61.188.2","port":0,"asn":153568,"as":"NEW DHAKA HARDWARE","country":"Bangladesh","country_code":"BD"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-20T22:19:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"nodeanalysis.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"nodeanalysis.tech","ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-03-05","domain_rank":0,"first_seen":"2026-09-15T22:18:48.72878Z","last_seen":"2026-09-15T22:18:48.72878Z","alert_count":3,"request_count":3,"received_data":113400,"sent_data":1519,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nodeanalysis.tech/","fqdn":"nodeanalysis.tech","domain":"nodeanalysis.tech","tld":"tech"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-15T22:19:29.310Z","timestamp":1789510769310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nodeanalysis.tech","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 05:45:51 GMT","end":"Thu, 03 Dec 2026 05:45:50 GMT"},"fingerprint":{"sha1":"96:AD:D6:53:97:B5:F7:99:75:EE:6B:6B:CE:66:2B:14:C9:49:24:F4","sha256":"65:90:B8:DD:69:E0:10:38:0A:DA:BF:C8:A6:2A:18:61:09:34:A3:0D:07:35:8E:D4:B2:4E:FA:0C:1C:BD:66:65"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nodeanalysis.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Thu, 05 Mar 2026 05:08:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3143\r\ndate: Tue, 15 Sep 2026 22:19:29 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14189,"size_decoded":3572,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (413)","md5":"dd49d81896c38709d41ec09faaaf0dfb","sha1":"c361ff9e1c817a5488cb26cba944cb683b36958c","sha256":"7dcf354cea205a2f39870db8ec4212f27cff99ac30d68e91b51c371390657327","sha512":"08084a19fa71ce3df096bb481b4337dbb0b60da108c9e578729a1899037f260129b0ab0583a9a72a361ae00efd38c0c9200b4dab4d31576ca0c62b274d0a5a0d","ssdeep":"192:GwUqBMecC919/FusP7QK077RDf3VF64syJs+VtWDplOt4KbgyF14Xl6+:oLZD61ly4Y0l6+","tlshash":"3c52b61a61f71057698394707bbb4bc76790d00bcc0ace287bdd5284cf89aa4f99378c","first_seen":"2026-09-15T22:18:51.890939Z","last_seen":"2026-09-15T22:19:58.741325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":112,"connect":92,"send":0,"wait":96,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"nodeanalysis.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nodeanalysis.tech/nodeanalysis.jpg","fqdn":"nodeanalysis.tech","domain":"nodeanalysis.tech","tld":"tech"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nodeanalysis.tech/","date":"2026-09-15T22:19:29.867Z","timestamp":1789510769867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nodeanalysis.tech","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 05:45:51 GMT","end":"Thu, 03 Dec 2026 05:45:50 GMT"},"fingerprint":{"sha1":"96:AD:D6:53:97:B5:F7:99:75:EE:6B:6B:CE:66:2B:14:C9:49:24:F4","sha256":"65:90:B8:DD:69:E0:10:38:0A:DA:BF:C8:A6:2A:18:61:09:34:A3:0D:07:35:8E:D4:B2:4E:FA:0C:1C:BD:66:65"}}},"request":{"raw":"GET /nodeanalysis.jpg HTTP/1.1\r\nHost: nodeanalysis.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nodeanalysis.tech/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 22 Sep 2026 22:19:29 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 05 Mar 2026 05:02:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49035\r\ndate: Tue, 15 Sep 2026 22:19:29 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49035,"size_decoded":49480,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"fce43b9439669cf70a53467187a8616a","sha1":"9b11927e6b9d972f5f9190619001f665f5d0c39f","sha256":"0ac93be45c745b98f355c33df933b7c9887c975f1bba0503deb12c2ec61f688b","sha512":"aeed49feba2d44eff5611577e88a593589899885dceeb792620ef2b0b5f3e5cc08b9f765ed4208c6e612c92b5abf410d94ad8d30ec46d8479ef884c2fc5fc5bc","ssdeep":"768:J3VHKPvXTx242TnhqtpcYAUmR6DRiKKkjvHDX9NLTdrrzprne:JcnB2jAhRiKpjvHDX95TBzxe","tlshash":"6d23e048e769bfd9db8b53b98d9a29a65b4c4f91300fe5b7f42356600b8df302ac41d0","first_seen":"2026-09-15T22:18:51.889805Z","last_seen":"2026-09-15T22:19:58.743447Z","times_seen":2,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"nodeanalysis.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nodeanalysis.tech/nodeanalysis.jpg","fqdn":"nodeanalysis.tech","domain":"nodeanalysis.tech","tld":"tech"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nodeanalysis.tech/","date":"2026-09-15T22:19:29.977Z","timestamp":1789510769977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nodeanalysis.tech","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 05:45:51 GMT","end":"Thu, 03 Dec 2026 05:45:50 GMT"},"fingerprint":{"sha1":"96:AD:D6:53:97:B5:F7:99:75:EE:6B:6B:CE:66:2B:14:C9:49:24:F4","sha256":"65:90:B8:DD:69:E0:10:38:0A:DA:BF:C8:A6:2A:18:61:09:34:A3:0D:07:35:8E:D4:B2:4E:FA:0C:1C:BD:66:65"}}},"request":{"raw":"GET /nodeanalysis.jpg HTTP/1.1\r\nHost: nodeanalysis.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nodeanalysis.tech/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 22 Sep 2026 22:19:30 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 05 Mar 2026 05:02:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49035\r\ndate: Tue, 15 Sep 2026 22:19:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49035,"size_decoded":49302,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"fce43b9439669cf70a53467187a8616a","sha1":"9b11927e6b9d972f5f9190619001f665f5d0c39f","sha256":"0ac93be45c745b98f355c33df933b7c9887c975f1bba0503deb12c2ec61f688b","sha512":"aeed49feba2d44eff5611577e88a593589899885dceeb792620ef2b0b5f3e5cc08b9f765ed4208c6e612c92b5abf410d94ad8d30ec46d8479ef884c2fc5fc5bc","ssdeep":"768:J3VHKPvXTx242TnhqtpcYAUmR6DRiKKkjvHDX9NLTdrrzprne:JcnB2jAhRiKpjvHDX95TBzxe","tlshash":"6d23e048e769bfd9db8b53b98d9a29a65b4c4f91300fe5b7f42356600b8df302ac41d0","first_seen":"2026-09-15T22:18:51.889805Z","last_seen":"2026-09-15T22:19:58.743447Z","times_seen":2,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"nodeanalysis.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}