{"report_id":"70e118f6-89be-4901-8a21-c903be1871ea","version":0,"status":"done","tags":[],"date":"2026-07-15T01:56:55Z","url":{"schema":"http","addr":"valorantenz.pro","fqdn":"valorantenz.pro","domain":"valorantenz.pro","tld":"pro"},"ip":{"addr":"91.92.243.12","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"valorantenz.pro/.rt/challenge?tier=captcha\u0026return_to=%2F","fqdn":"valorantenz.pro","domain":"valorantenz.pro","tld":"pro"},"title":"Loading","dom":{"size":2533900,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51216)","md5":"316d9bffaef7da64230af15c77b04d0a","sha1":"42064dd0c21ce86bf069fef2cfde822ad01ae417","sha256":"523ec8f3420fe92a4c436b315e415bacecff972c6398b577129b172c915a63bc","sha512":"7737cf3ba74f8ea970ac358494683ef29b4d7e50c05920201fc0e1c1079e37c14b3bc563bc3555d8e4784136c8b9190ac4d79f1d92c1f99b05d968d88abd4018","ssdeep":"12288:vCR5WhyYibwDjjskZc8cny5AsVkZyD64cNCgNF/Yekwb+flhidGVquPWDWC5aPZ5:vCbWo8Dj418AyX","tlshash":"3ec594d635a1b65e00878b31364e56e554bfc905cacba04df9c8adacf0eceb239487c5","dom_hash":"domhashd9fedc4cc384579a446a5266c87bb20c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"valorantenz.pro","fqdn":"valorantenz.pro","domain":"valorantenz.pro","tld":"pro"},"ip":{"addr":"91.92.243.12","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-19T01:56:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"valorantenz.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"valorantenz.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"valorantenz.pro","ip":{"addr":"91.92.243.12","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-15T01:26:57.722073Z","last_seen":"2026-07-15T01:26:57.722074Z","alert_count":6,"request_count":3,"received_data":2322696,"sent_data":2426,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"valorantenz.pro/.rt/challenge?tier=captcha\u0026return_to=%2F","fqdn":"valorantenz.pro","domain":"valorantenz.pro","tld":"pro"},"ip":{"addr":"91.92.243.12","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"3dbd68b546ca87a5edb4ef58d2403913","sha1":"40b95b438be1d577762d6332b170bd45ed2374ed","sha256":"99b6a48e3e89471244bd9174568246a3df7fd555085014aab18ca35dbe48ac2f","sha512":"189a6f967ec9084e985fa3af873c5269ac191f036ec59da1e7412c35fda85c9a2039e7ab8deae6e2bc2497dd395b1911f59d31d772a6445629fc298ccd0de7a4","ssdeep":"12288:pAsVkZyD64cNCgNF/Yekwb+flhidGVquPWDWC5aPZBx481tQ69KNtjb+5RW9nO9s:zG","tlshash":"23a520d635a1b65e00878b31364e56e554bfc905cacba04df9c8adacf0eceb239487c5","size":2218092,"data":"","first_seen":"2026-07-15T01:58:38.640532Z","last_seen":"2026-07-15T01:58:38.640532Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"debug","text":"map[actor:server1.conn0.watcher17.process7//obj20 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://valorantenz.pro/","line_number":746,"column_number":214},{"level":"debug","text":"","filename":"https://valorantenz.pro/","line_number":750,"column_number":57}]},"http":[{"url":{"schema":"https","addr":"valorantenz.pro/","fqdn":"valorantenz.pro","domain":"valorantenz.pro","tld":"pro"},"ip":{"addr":"91.92.243.12","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-15T01:56:24.355Z","timestamp":1784080584355,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valorantenz.pro","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 20:33:34 GMT","end":"Wed, 26 Aug 2026 20:33:33 GMT"},"fingerprint":{"sha1":"5A:03:1E:00:AF:58:26:83:F1:79:70:80:80:1A:84:FD:4B:30:6D:48","sha256":"F6:C5:1A:87:D0:0C:C3:85:EB:91:03:FE:D2:2B:CD:C1:BB:C4:B2:7C:6B:8A:93:AF:D3:C5:0A:DD:7E:B3:6D:17"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: valorantenz.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 23753\r\ncache-control: no-store\r\nx-edge-action: challenge\r\nset-cookie: sil_ses=d92865c07136dedbdf62a36d4c3e5617; Path=/; Domain=valorantenz.pro; Max-Age=86400; HttpOnly; Secure; SameSite=None\n__Host-sil_ses=d92865c07136dedbdf62a36d4c3e5617; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=None; Partitioned\nsil_gate=ASBkOTI4NjVjMDcxMzZkZWRiZGY2MmEzNmQ0YzNlNTYxNwDCrLelDS9TsEgx1AN3.7mP0SAz9IY52smCRV9BWPvFovhH3ktjpigbWX_Cp1ju4kT9wkPWV1nOr0dRZAwmtKozmHJKwCG0yJ_4TH4Y7DQ; Path=/; Domain=valorantenz.pro; Max-Age=600; HttpOnly; Secure; SameSite=None\n__Host-sil_gate=ASBkOTI4NjVjMDcxMzZkZWRiZGY2MmEzNmQ0YzNlNTYxNwDCrLelDS9TsEgx1AN3.7mP0SAz9IY52smCRV9BWPvFovhH3ktjpigbWX_Cp1ju4kT9wkPWV1nOr0dRZAwmtKozmHJKwCG0yJ_4TH4Y7DQ; Path=/; Max-Age=600; HttpOnly; Secure; SameSite=None; Partitioned\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 15 Jul 2026 01:56:25 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":86385,"size_decoded":24725,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12636)","md5":"7173f49ee8848c074ac54f1b771df636","sha1":"e5f5ade2955863d43fb0ca0648c6fab3ebd48080","sha256":"e1b1eb3fa0bd30b4f0a65e9e527160402bfd9467d7447be79e32f452c6421d1a","sha512":"43b371910317de471bea3ce6e56eb39b08985e0f05517f8abb2e045c87bc16b3956d395bae73a812b1e8ad51bc08597f7f94a2339f8e2ac40dbfe47b8f44cbe6","ssdeep":"1536:w2yjCaITVSsRESx/yRkvTk7TspybsUXfRw3:2jCaITVSsOSEmTk7Tspb3","tlshash":"be83e9e32270317d41332b7a3a5f12822d7fc6619d9780ccfe5ee5e867a9e234558788","first_seen":"2026-07-15T01:58:38.634476Z","last_seen":"2026-07-15T01:58:38.634476Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1121,"timings":{"blocked":-1,"dns":52,"connect":58,"send":0,"wait":875,"receive":67,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"valorantenz.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"valorantenz.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"valorantenz.pro/.rt/challenge?tier=captcha\u0026return_to=%2F","fqdn":"valorantenz.pro","domain":"valorantenz.pro","tld":"pro"},"ip":{"addr":"91.92.243.12","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-15T01:56:26.054Z","timestamp":1784080586054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valorantenz.pro","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 20:33:34 GMT","end":"Wed, 26 Aug 2026 20:33:33 GMT"},"fingerprint":{"sha1":"5A:03:1E:00:AF:58:26:83:F1:79:70:80:80:1A:84:FD:4B:30:6D:48","sha256":"F6:C5:1A:87:D0:0C:C3:85:EB:91:03:FE:D2:2B:CD:C1:BB:C4:B2:7C:6B:8A:93:AF:D3:C5:0A:DD:7E:B3:6D:17"}}},"request":{"raw":"GET /.rt/challenge?tier=captcha\u0026return_to=%2F HTTP/1.1\r\nHost: valorantenz.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valorantenz.pro/\r\nCookie: sil_ses=d92865c07136dedbdf62a36d4c3e5617; __Host-sil_ses=d92865c07136dedbdf62a36d4c3e5617; sil_gate=ASBkOTI4NjVjMDcxMzZkZWRiZGY2MmEzNmQ0YzNlNTYxNwDCrLelDS9TsEgx1AN3.7mP0SAz9IY52smCRV9BWPvFovhH3ktjpigbWX_Cp1ju4kT9wkPWV1nOr0dRZAwmtKozmHJKwCG0yJ_4TH4Y7DQ; __Host-sil_gate=ASBkOTI4NjVjMDcxMzZkZWRiZGY2MmEzNmQ0YzNlNTYxNwDCrLelDS9TsEgx1AN3.7mP0SAz9IY52smCRV9BWPvFovhH3ktjpigbWX_Cp1ju4kT9wkPWV1nOr0dRZAwmtKozmHJKwCG0yJ_4TH4Y7DQ\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 659575\r\ncache-control: no-store, no-cache, must-revalidate\r\nset-cookie: sil_ses=d92865c07136dedbdf62a36d4c3e5617; Path=/; Domain=valorantenz.pro; Max-Age=86400; HttpOnly; Secure; SameSite=None\n__Host-sil_ses=d92865c07136dedbdf62a36d4c3e5617; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=None; Partitioned\nsil_gate=ASBkOTI4NjVjMDcxMzZkZWRiZGY2MmEzNmQ0YzNlNTYxNwHErLelDS9TsEgx1AN3.DP-EvKOF0J8SWfIF42km4haPLa3Ag0tGHPJVQW-MxLXugVcqkT4oMOrSAQrCTA4sc587ZTH8UIg1ROvBDqJaAQ; Path=/; Domain=valorantenz.pro; Max-Age=600; HttpOnly; Secure; SameSite=None\n__Host-sil_gate=ASBkOTI4NjVjMDcxMzZkZWRiZGY2MmEzNmQ0YzNlNTYxNwHErLelDS9TsEgx1AN3.DP-EvKOF0J8SWfIF42km4haPLa3Ag0tGHPJVQW-MxLXugVcqkT4oMOrSAQrCTA4sc587ZTH8UIg1ROvBDqJaAQ; Path=/; Max-Age=600; HttpOnly; Secure; SameSite=None; Partitioned\r\nx-edge-action: captcha\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 15 Jul 2026 01:56:26 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2234156,"size_decoded":660573,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (49179)","md5":"199b61230cc1adb6309c367d7af77787","sha1":"0478d677d1013f5c24fd9c0040373991442d9b63","sha256":"3a3ca820adc03ba62e045869fc1dc2d81c7d6b13e0eaad8739a9525c3242b947","sha512":"4494138fa5ea33ef43b1f3fb9c3ab5daad54b2c8fefb177ac750e4da69124d4b5197b48591b4c58133d0518658835320656a6d3163221eda012ce20c2f102f80","ssdeep":"12288:bAsVkZyD64cNCgNF/Yekwb+flhidGVquPWDWC5aPZBx481tQ69KNtjb+5RW9nO9e:O","tlshash":"8f25e0d63591b66e00878b31364e5af554bfc906cacb6149f9c8adacf0dceb239487c1","first_seen":"2026-07-15T01:58:38.637136Z","last_seen":"2026-07-15T01:58:38.637136Z","times_seen":1,"resource_available":true,"data":null}},"time_used":620,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":353,"receive":267,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"valorantenz.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"valorantenz.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"valorantenz.pro/.rt/ce","fqdn":"valorantenz.pro","domain":"valorantenz.pro","tld":"pro"},"ip":{"addr":"91.92.243.12","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://valorantenz.pro/.rt/challenge?tier=captcha\u0026return_to=%2F","date":"2026-07-15T01:56:26.816Z","timestamp":1784080586816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valorantenz.pro","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 20:33:34 GMT","end":"Wed, 26 Aug 2026 20:33:33 GMT"},"fingerprint":{"sha1":"5A:03:1E:00:AF:58:26:83:F1:79:70:80:80:1A:84:FD:4B:30:6D:48","sha256":"F6:C5:1A:87:D0:0C:C3:85:EB:91:03:FE:D2:2B:CD:C1:BB:C4:B2:7C:6B:8A:93:AF:D3:C5:0A:DD:7E:B3:6D:17"}}},"request":{"raw":"POST /.rt/ce HTTP/1.1\r\nHost: valorantenz.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://valorantenz.pro/.rt/challenge?tier=captcha\u0026return_to=%2F\r\nContent-Length: 139\r\nOrigin: https://valorantenz.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: sil_ses=d92865c07136dedbdf62a36d4c3e5617; __Host-sil_ses=d92865c07136dedbdf62a36d4c3e5617; sil_gate=ASBkOTI4NjVjMDcxMzZkZWRiZGY2MmEzNmQ0YzNlNTYxNwHErLelDS9TsEgx1AN3.DP-EvKOF0J8SWfIF42km4haPLa3Ag0tGHPJVQW-MxLXugVcqkT4oMOrSAQrCTA4sc587ZTH8UIg1ROvBDqJaAQ; __Host-sil_gate=ASBkOTI4NjVjMDcxMzZkZWRiZGY2MmEzNmQ0YzNlNTYxNwHErLelDS9TsEgx1AN3.DP-EvKOF0J8SWfIF42km4haPLa3Ag0tGHPJVQW-MxLXugVcqkT4oMOrSAQrCTA4sc587ZTH8UIg1ROvBDqJaAQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":139,"data":"{\"p\":\"init\",\"cid\":\"2a0c8ccb0960935771741a9da8424397362ed84b1c5dae2ff4fceed8dc4b1295\",\"kind\":\"slide_puzzle\",\"subtle\":true,\"t\":1784080586815}"}},"response":{"raw":"HTTP/2 204 \r\ncontent-type: application/json\r\nx-incident-id: nl1::1784080586-fNShre6XGo67K9qiGYWAbtn4VtpTlvmo\r\ndate: Wed, 15 Jul 2026 01:56:26 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":1270,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T06:18:37.640397Z","times_seen":17257697,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"valorantenz.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"valorantenz.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}