{"report_id":"80754f5f-60df-465c-bedc-eded0cba13bd","version":0,"status":"done","tags":[],"date":"2026-08-10T05:50:43Z","url":{"schema":"https","addr":"jojobet-dogrugirisadresiniz.icu/","fqdn":"jojobet-dogrugirisadresiniz.icu","domain":"jojobet-dogrugirisadresiniz.icu","tld":"icu"},"ip":{"addr":"104.21.22.141","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"jojobet-dogrugirisadresiniz.icu/","fqdn":"jojobet-dogrugirisadresiniz.icu","domain":"jojobet-dogrugirisadresiniz.icu","tld":"icu"},"title":"SRNHOST - Hosting Satış Sayfası","dom":{"size":10745,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"d9c4564c3c5c2374472770d9dcccc309","sha1":"1931f65b98c599b3ea45cfe45bf11d0dfc125822","sha256":"1fba9020199936c6e7dcf06032489975d56c5dd94599dead766560e368779943","sha512":"4344ffa35a8001f53282781d8a091ebd67c396921f371b75d1f6fdd830abe28720184280ee05160e3d4fb6c5ff1ebfec38c32513046d9dc929d2c2d601110c89","ssdeep":"192:CrhDlvO3pu0Fvc2sIVF9kMVDu2ZAA39luu1Oc3BlSKqx6+4At8BjII0:CrmFSiwFf4GI0","tlshash":"0f22fe9ba6f31015bc17a4b567fb5b8636a0d103c10edd683fac5288cf895c9dda270c","dom_hash":"domhasha3628490c34ac25d60158c3db943443a","first_seen":"2026-08-03T13:25:11.843318Z","last_seen":"2026-08-10T05:50:43.780991Z","times_seen":893,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"jojobet-dogrugirisadresiniz.icu/","fqdn":"jojobet-dogrugirisadresiniz.icu","domain":"jojobet-dogrugirisadresiniz.icu","tld":"icu"},"ip":{"addr":"104.21.22.141","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-14T05:50:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"jojobet-dogrugirisadresiniz.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"jojobet-dogrugirisadresiniz.icu","ip":{"addr":"172.67.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-06","domain_rank":0,"first_seen":"2026-08-10T05:22:16.419231Z","last_seen":"2026-08-10T05:22:16.419231Z","alert_count":2,"request_count":2,"received_data":13524,"sent_data":1038,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"jojobet-dogrugirisadresiniz.icu/favicon.ico","fqdn":"jojobet-dogrugirisadresiniz.icu","domain":"jojobet-dogrugirisadresiniz.icu","tld":"icu"},"ip":{"addr":"172.67.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jojobet-dogrugirisadresiniz.icu/","date":"2026-08-10T05:50:17.577Z","timestamp":1786341017577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jojobet-dogrugirisadresiniz.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:22:28 GMT","end":"Wed, 04 Nov 2026 16:21:07 GMT"},"fingerprint":{"sha1":"CC:45:AB:FE:A7:09:7C:D7:B8:B9:D4:BA:02:0F:4C:A5:B4:68:13:2E","sha256":"C2:94:A6:5E:48:89:53:A3:AA:14:CA:3D:46:74:86:CF:AA:3C:F1:DD:6E:A5:9D:58:9B:11:92:A6:1A:CE:23:F8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: jojobet-dogrugirisadresiniz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jojobet-dogrugirisadresiniz.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W97BvbUSgSiC0HvNUEBXQZtIM9LISM8KxTrPYVxBEdLb9ry4HeIxF7KmCYnb8vJw%2FGgfCtyj7%2FgrdkVGjGjo9T1KXMMFY8s4KQpvkR0hzxZ7M%2BWt02iHWgleFPJc93l9EsrkFr0ZUXJ7kZM9pEHMUQAt\"}]}\r\nvary: Accept-Encoding\r\ndate: Mon, 10 Aug 2026 05:50:17 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a28cb8dfdc2d0afa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":903,"size_decoded":1214,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"d15e8ac03c35b32dd665f534f6629b84","sha1":"d7eef7b9f03cceca38330760fc6a7d56f461f4b6","sha256":"291927687e6710db53a47c06f38bee0400a5a28f3b2f02ef4029a83abac1695c","sha512":"ed79b273e419f74d6ede9cf5df38f9ee43172c4dfe48ac31e5f18da395ebd45ecb86b2a4e8020ac71dadf22658edb83526deff74d5936d304dc1c8f85c6f406f","ssdeep":"","tlshash":"6411ce87c1a3000ab53aa4741fa277015186e40b924bcd297f8db2accfc96969ce735c","first_seen":"2026-05-17T14:02:45.878375Z","last_seen":"2026-08-14T15:30:46.054715Z","times_seen":960,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"jojobet-dogrugirisadresiniz.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jojobet-dogrugirisadresiniz.icu/","fqdn":"jojobet-dogrugirisadresiniz.icu","domain":"jojobet-dogrugirisadresiniz.icu","tld":"icu"},"ip":{"addr":"172.67.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-10T05:50:17.118Z","timestamp":1786341017118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jojobet-dogrugirisadresiniz.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:22:28 GMT","end":"Wed, 04 Nov 2026 16:21:07 GMT"},"fingerprint":{"sha1":"CC:45:AB:FE:A7:09:7C:D7:B8:B9:D4:BA:02:0F:4C:A5:B4:68:13:2E","sha256":"C2:94:A6:5E:48:89:53:A3:AA:14:CA:3D:46:74:86:CF:AA:3C:F1:DD:6E:A5:9D:58:9B:11:92:A6:1A:CE:23:F8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: jojobet-dogrugirisadresiniz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6gxWsQsRN7z1NHDfN5qNJ8cwM7Cwa9DalS0SO1lT9QkmxixT9sG%2BbwXjCkY2%2FpqhMAo5W4i27UgJbO4bR7t3zPkVk8PBwDmBgXsfItClQY9fV4AvqLkOYV1BG731DXx%2Ffs7JEN4Abpv5RzEx8rWBA0Au\"}]}\r\nvary: Accept-Encoding\r\ndate: Mon, 10 Aug 2026 05:50:17 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a28cb8dd8c270afa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11285,"size_decoded":3764,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"f43a209235fc523214f61b8f5baca4e5","sha1":"0c45c5b17718f80bb3ab52c9d4169acb1cbcc82b","sha256":"447fe2efb984c707c6d2f44ac1769ae6db8f82e30a35322dc2992e3cc24ac363","sha512":"84e6e6270628508516065d4c4c5f70ad51554be852947712e915b5d48399ed8098e73b4c0be8fcaaca77590bb2c59ee43dfadb9962b78b1199d851958d214877","ssdeep":"192:qNCR9VKYMZ8BMJCfppUw7JnpVL1iBfG4aRkJv4AdbdhOq:t3pl4aRkt40Oq","tlshash":"b4320f1ae6421015a43797b5eb63475afb824163c345c2697ffc63828fb9548c663f8c","first_seen":"2026-08-03T13:25:11.847913Z","last_seen":"2026-08-10T05:50:43.782165Z","times_seen":893,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":66,"connect":16,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"jojobet-dogrugirisadresiniz.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}