{"report_id":"766c9083-a8b4-4d5d-803f-d3efc6aa3f63","version":0,"status":"done","tags":[],"date":"2026-08-06T22:52:18Z","url":{"schema":"http","addr":"diagnostics-check.sbs/","fqdn":"diagnostics-check.sbs","domain":"diagnostics-check.sbs","tld":"sbs"},"ip":{"addr":"193.233.253.208","port":0,"asn":215590,"as":"DpkgSoft International Limited","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"diagnostics-check.sbs/","fqdn":"diagnostics-check.sbs","domain":"diagnostics-check.sbs","tld":"sbs"},"title":"Support | Trezor","dom":{"size":404360,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"efcd36e025a3bbe155b75ea493a4bd1d","sha1":"586670e2b4098a860a08cde7a5e2826a3ba6bee6","sha256":"0c6c5fe739f29e69b48aa714143d5c72a2f07efc58549931a561048de24f0de4","sha512":"955dbbb7c395ed8eb227774f2f907fb27a8ead4bb30c7f23628d24bcb4165052ab5a489e8854e94f90d9357794a91294a7d3ccba8bb961ba5958e1774e1bbd8c","ssdeep":"6144:3YBplbfJt4uooa/FB151vFNH1eJihiNfAFu40HTAezWz:2plbR6uooal9RMJiYNfAFu4eTjzi","tlshash":"98847c386300e23f3903856d9165bab6df8e6c57c61f99a6c7bd71878bcade1c107a10","dom_hash":"domhash2d1309fb757c6d0336a9b6ae38d92bf0","first_seen":"2026-08-06T22:52:22.520735Z","last_seen":"2026-08-07T13:55:02.459693Z","times_seen":12,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"diagnostics-check.sbs/","fqdn":"diagnostics-check.sbs","domain":"diagnostics-check.sbs","tld":"sbs"},"ip":{"addr":"193.233.253.208","port":0,"asn":215590,"as":"DpkgSoft International Limited","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-10T22:52:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"diagnostics-check.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"diagnostics-check.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"diagnostics-check.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"diagnostics-check.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"diagnostics-check.sbs","ip":{"addr":"193.233.253.208","port":443,"asn":215590,"as":"DpkgSoft International Limited","country":"Russia","country_code":"RU"},"domain_registered":"2026-08-05","domain_rank":0,"first_seen":"2026-08-06T22:52:19.196081Z","last_seen":"2026-08-06T22:52:19.196081Z","alert_count":4,"request_count":1,"received_data":405111,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"diagnostics-check.sbs/","fqdn":"diagnostics-check.sbs","domain":"diagnostics-check.sbs","tld":"sbs"},"ip":{"addr":"193.233.253.208","port":443,"asn":215590,"as":"DpkgSoft International Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"f4c7272bed71db2cec09d30745351250","sha1":"12ca15f5aa4a3e418099848e41eb6dd5b6fe1edb","sha256":"fce56a39d8a3b95896a7fe18fa487dd36391bc2ce89748589193d8c287a56f32","sha512":"44659b3b9e6af14d2c2063f2dcf05ce3369f10f5da8e710b4deb5fcd9789b12fe6d61378e12d6661f236527dbec4e61fd9217c22011001c69f276dd9b3ce47d2","ssdeep":"","tlshash":"564165a0f364242e5d2a172f72492f8439735c173122a9c9602de7d719f0ffa922b204","size":2056,"data":"","first_seen":"2026-08-06T22:52:22.523443Z","last_seen":"2026-08-07T13:55:02.465877Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"diagnostics-check.sbs/","fqdn":"diagnostics-check.sbs","domain":"diagnostics-check.sbs","tld":"sbs"},"ip":{"addr":"193.233.253.208","port":443,"asn":215590,"as":"DpkgSoft International Limited","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-06T22:51:51.499Z","timestamp":1786056711499,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diagnostics-check.sbs","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 19:28:21 GMT","end":"Tue, 03 Nov 2026 19:28:20 GMT"},"fingerprint":{"sha1":"D0:AF:DC:EE:45:27:66:0D:F4:E7:9F:D0:4D:3D:62:90:C7:94:81:40","sha256":"5B:96:64:35:98:7F:4E:B2:ED:9F:16:F4:4B:15:53:4F:49:12:E4:FE:B8:E0:0D:D3:40:2A:B3:6C:61:D7:C9:72"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: diagnostics-check.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 06 Aug 2026 22:51:51 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 23 Feb 2026 22:09:51 GMT\r\netag: W/\"699cd02f-62d91\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":404881,"size_decoded":167644,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65437)","md5":"f10f6187b1a01248c4528a779dd35220","sha1":"19c3e57ac657ef4bad4654c206e3e8a4fbc18100","sha256":"f2284f868482f0647f7a1be02a86f1568641efda73589b8bf51cc3ae3ec88a9e","sha512":"f9588bc0c2806c5cbcb65e933c26b131c3a4e03027af66793758a06e371661be548dd3bc0e5db12f8bf2aa058e8a94b61e3a4c130c412996dcecca7fb5020e5e","ssdeep":"6144:9BplbfJt4uooa/FB151vFNH1eJihiNfAFu40HTAeVw9:zplbR6uooal9RMJiYNfAFu4eTjVm","tlshash":"e4846b386300e13f3913856d9165bab6df8e6c57ca1f99a6c6fd71878bcade1c107a00","first_seen":"2026-08-06T22:52:22.522442Z","last_seen":"2026-08-07T13:55:02.463826Z","times_seen":12,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":80,"connect":13,"send":0,"wait":47,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"diagnostics-check.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"diagnostics-check.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"diagnostics-check.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"diagnostics-check.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}