{"report_id":"703b8962-3055-401b-ab63-73dde65cf926","version":6,"status":"done","tags":[],"date":"2026-03-02T14:22:32Z","url":{"schema":"http","addr":"nytares.com","fqdn":"nytares.com","domain":"nytares.com","tld":"com"},"ip":{"addr":"47.236.60.10","port":0,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"nytares.com/","fqdn":"nytares.com","domain":"nytares.com","tld":"com"},"title":"NYTAREX","dom":{"size":3816,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c0e1bf73eca24d3ce9d0b73a26722aee","sha1":"2e6cf1edc808e61844e3ac8f6108f0940953d442","sha256":"6e0e3c55f8e592333dcf48f7527388f1efdd16f1fb18b2de3880de939ab94e16","sha512":"dd7f6d08f953fcea1d67e71b53df26c3650e91e9514b7bc9f68249a9a275b375c54090efd9d29c957f166d91d71392422af6f97da49431f0c0276d8e4bb0e6fa","ssdeep":"","tlshash":"c0712d46e9d2002cf1039b381fda7a116b67c513ea07ccb53e9e6219df82d9905f239c","dom_hash":"domhashae7683c4c4c7ac857b93fd7eaec14466","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nytares.com","fqdn":"nytares.com","domain":"nytares.com","tld":"com"},"ip":{"addr":"47.236.60.10","port":0,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-06T14:22:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"nytares.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"nytares.com","ip":{"addr":"47.236.60.10","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":314883,"sent_data":913,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nytares.com/","fqdn":"nytares.com","domain":"nytares.com","tld":"com"},"ip":{"addr":"47.236.60.10","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"012517a24d22fa1fd6c1409abb0a8c5b","sha1":"b7e317f8fa48793e8c3239ba5868d91135b3ec46","sha256":"22f762b724b6bf08a70ccc138e76910efe02ae4a428db5193533d3f1adf4804c","sha512":"a8f073b17eacb3d9076d55a0b913b034d3ca8163f1adbc294d783a98c0db3a854af7005424b50c820c7400f93697962348aa81d14086a6deb6152b2318962fe8","ssdeep":"","tlshash":"71c08c1e5304aa9740e217e82f4b28385833aaf7b85bd059313f03852f25f0c02e768f","size":169,"data":"","first_seen":"2025-09-07T17:41:22.145329Z","last_seen":"2026-04-15T18:25:34.176206Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nytares.com/","fqdn":"nytares.com","domain":"nytares.com","tld":"com"},"ip":{"addr":"47.236.60.10","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T14:22:10.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nytares.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 11:30:02 GMT","end":"Mon, 25 May 2026 11:30:01 GMT"},"fingerprint":{"sha1":"98:4C:4F:E6:87:A2:7F:EF:91:CF:6C:A5:12:AB:15:FC:71:DE:E1:29","sha256":"69:96:13:B8:AE:38:6E:56:13:AE:CB:45:20:7F:19:42:7B:46:41:DF:7D:DB:72:1A:2E:C5:B2:89:15:06:D6:94"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nytares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 14:22:11 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 26 Feb 2026 01:04:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699f9c28-efe\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3838,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"e9885571c00e6cda39c3afe2d2f35483","sha1":"43f14ee5361b225b77cb6d1fc78614c9576d29e8","sha256":"8f38caa46ee62362afa77e9448e0c4cebe863c25cdc0713fae9616144dadd220","sha512":"907aa6c7c364c4d869411cb080882b9f8a67f4de0c38a00a556d671a18ccc4bbd60da1ac6dd066dc4b1d9d2a2fb6982d8f8abb68d6a8d9f7c2994e4494e29674","ssdeep":"","tlshash":"19812e46e5d2402cf1138b381fda7a116a67c513ea07cdb83e9e6219df82d9805f339c","first_seen":"2026-03-02T14:09:38.394921Z","last_seen":"2026-03-02T14:22:51.447256Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1305,"timings":{"blocked":522,"dns":1,"connect":260,"send":0,"wait":260,"receive":0,"ssl":259},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"nytares.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nytares.com/assets/index-BQScN2AI.css","fqdn":"nytares.com","domain":"nytares.com","tld":"com"},"ip":{"addr":"47.236.60.10","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nytares.com/","date":"2026-03-02T14:22:11.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nytares.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 11:30:02 GMT","end":"Mon, 25 May 2026 11:30:01 GMT"},"fingerprint":{"sha1":"98:4C:4F:E6:87:A2:7F:EF:91:CF:6C:A5:12:AB:15:FC:71:DE:E1:29","sha256":"69:96:13:B8:AE:38:6E:56:13:AE:CB:45:20:7F:19:42:7B:46:41:DF:7D:DB:72:1A:2E:C5:B2:89:15:06:D6:94"}}},"request":{"raw":"GET /assets/index-BQScN2AI.css HTTP/1.1\r\nHost: nytares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nytares.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 14:22:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 01:04:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699f9c28-4bb46\"\r\nexpires: Tue, 03 Mar 2026 02:22:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":310086,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c3dd54bb11899a0b10a1151d2ec92e9e","sha1":"8dd7bd533d33300c9a8fb29ced588338a4a25f1b","sha256":"1173bdb2c79abc907aa6592632a1c14af993d4b656c0f486ee46e796bb843115","sha512":"998fd383dec1b3491abe084c2d5f136f23a1ad142ad599dd65e957b3a97d989bc57ae795ffb542faa64bc2321ece090b2159e703aac5cea2c09ca7d8c271f0c5","ssdeep":"3072:H8xjioXKS5TD4vNeClDsIxuVSFAKyzm/9DGQ:H85iAD4vHsaFAKy0GQ","tlshash":"2264f898aa90147cbf27b176d7c796dcb13cf671ee02dae5f14061194ac37fa0223629","first_seen":"2026-03-02T14:22:51.448961Z","last_seen":"2026-03-02T14:22:51.448961Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2598,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"nytares.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}