{"report_id":"7d3bf1c0-fe8f-42de-99a3-dd6e94ff671b","version":6,"status":"done","tags":[],"date":"2026-02-26T14:59:55Z","url":{"schema":"http","addr":"flirtmailers.com","fqdn":"flirtmailers.com","domain":"flirtmailers.com","tld":"com"},"ip":{"addr":"35.214.207.252","port":0,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"flirtmailers.com/","fqdn":"flirtmailers.com","domain":"flirtmailers.com","tld":"com"},"title":"Match Notifier","dom":{"size":180,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a78fbc22699ad455839a38da3ce663e0","sha1":"992b27f9ba6451a6195af7e8ef915859e149796d","sha256":"74c0ea780270033be41fcf1a0bef4ef46e3ecad99097585308f9a9e5563aaea9","sha512":"d94ba2a7331b3dc13efac74d3936d58a874f50decb1968974e97146e3b4f632223ba015d2d64758af0cfc84c3accc6de251b2ae6cae1414df6513c263e183432","ssdeep":"","tlshash":"b2c0805ba041444d89b5c3361cc371ec19d6bc5c6752dc407ec5f09e1cdd751c4970d8","dom_hash":"domhash8c2e87ac90d2b77a4d92dfea1f50d3d7","first_seen":"2025-11-27T03:09:58.328968Z","last_seen":"2026-05-24T17:51:28.2587Z","times_seen":8,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"flirtmailers.com","fqdn":"flirtmailers.com","domain":"flirtmailers.com","tld":"com"},"ip":{"addr":"35.214.207.252","port":0,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-02T14:59:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"flirtmailers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"flirtmailers.com","ip":{"addr":"35.214.207.252","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"domain_registered":"2022-03-17","domain_rank":0,"first_seen":"2025-08-21T01:20:42.771886Z","last_seen":"2025-12-30T19:42:25.400503Z","alert_count":2,"request_count":2,"received_data":84550,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"flirtmailers.com/","fqdn":"flirtmailers.com","domain":"flirtmailers.com","tld":"com"},"ip":{"addr":"35.214.207.252","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-26T14:59:34.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flirtmailers.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:17:05 GMT","end":"Fri, 03 Apr 2026 23:17:04 GMT"},"fingerprint":{"sha1":"25:53:96:8C:6E:60:04:4D:61:E2:50:E6:AA:BA:45:5C:CE:3E:A9:91","sha256":"D5:80:9C:44:A8:F5:06:10:87:E4:A1:F9:66:E5:BF:23:95:63:3B:21:88:89:F1:ED:AF:1F:B3:E0:DB:E3:8A:D9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: flirtmailers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 26 Feb 2026 14:59:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":197,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"bad1a013fd5c747c85870eae53181c64","sha1":"4c4b57fc6b8e47f271a1fc7b21cc6c91bb3ee735","sha256":"d2c02d56be2cd4c4113a334b43b08cb2da08e6bb12465a0500ee8b3d0c8e281b","sha512":"8827842d11e41fa62cd0f6e9bb596384aa4636fd7ade1ded3435caa76bf161ea1786a70c3516f34270acb760fea6bdfafece766a48d7c6fee7ad9c277161667a","ssdeep":"","tlshash":"53d0229b6041000845b082221dc2619c14877e9c778298803ec2f09b2cc9b10c4ab0c8","first_seen":"2025-09-23T09:02:06.883619Z","last_seen":"2026-05-24T17:51:28.259398Z","times_seen":9,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":110,"dns":27,"connect":20,"send":0,"wait":20,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"flirtmailers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flirtmailers.com/favicon.ico","fqdn":"flirtmailers.com","domain":"flirtmailers.com","tld":"com"},"ip":{"addr":"35.214.207.252","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flirtmailers.com/","date":"2026-02-26T14:59:34.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flirtmailers.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:17:05 GMT","end":"Fri, 03 Apr 2026 23:17:04 GMT"},"fingerprint":{"sha1":"25:53:96:8C:6E:60:04:4D:61:E2:50:E6:AA:BA:45:5C:CE:3E:A9:91","sha256":"D5:80:9C:44:A8:F5:06:10:87:E4:A1:F9:66:E5:BF:23:95:63:3B:21:88:89:F1:ED:AF:1F:B3:E0:DB:E3:8A:D9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: flirtmailers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flirtmailers.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Thu, 26 Feb 2026 14:59:34 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-httpd-modphp: 1\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: EXPIRED\r\nx-proxy-cache-info: 0 NC:000000 UP:\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]}],"data":{"size":83800,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (55220)","md5":"3282565ce91f318e21c86df715d1bc6d","sha1":"e082e007cde9080f12f9fd3927b7f4a61228b1bd","sha256":"b39bdadd90378180927c19f1343682602e430b54f3fc7523c5ac4f46ffd67bc7","sha512":"465c18ce197c8c5262f5bb28e368a0341dad21af19dd77b701f9a5afd3fe88cfea024e8491f7ad0b5decfedd96989f9012d0202ad4e52f74629e98b8506cbbf7","ssdeep":"768:kTAEYPP+UIJz+Fi9/Ltk5YzRubj4he6e9ROg2Geir42nEiERZ6JE0Vo:kTAnmPztk5YzzgK6u","tlshash":"7083efed27601cd9cc9182f237a8204534a7e8eef6504558f25d0ba5bf8759fcab068f","first_seen":"2023-04-06T08:07:41Z","last_seen":"2026-08-10T04:36:43.129011Z","times_seen":1795,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"flirtmailers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}