{"report_id":"80bf6400-0013-4334-ac21-d032bf850c24","version":0,"status":"done","tags":[],"date":"2026-06-22T10:35:51Z","url":{"schema":"http","addr":"fn.unshutcaitiff.com/rDuUioaVziwL3C/128440","fqdn":"fn.unshutcaitiff.com","domain":"unshutcaitiff.com","tld":"com"},"ip":{"addr":"172.241.53.29","port":0,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"fn.unshutcaitiff.com/rDuUioaVziwL3C/128440","fqdn":"fn.unshutcaitiff.com","domain":"unshutcaitiff.com","tld":"com"},"title":"fn.unshutcaitiff.com/rDuUioaVziwL3C/128440","dom":{"size":15417,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (15417), with no line terminators","md5":"85596423b3a9a47f1a3726e3c6a0c41b","sha1":"dc5980aa33c94045befda508f263ba7edbca17f6","sha256":"9691eb600bea00aa965ed0635eb7559c7c5cbcb54c3dfd348dd8a3b98f8dafa1","sha512":"81a73ea2c8bfae620754bed943db8d94b6926da7cfdae669764244ed0cd51c3459a8d8311eaee8b71b8532f4ab378b0cbfeb49958ec2434e0d3cc2f486d76268","ssdeep":"384:nNAxyCbFlp7BvHtWjwGPTj7fYigMhT5Wfs2hhkdtB60z9OTWHX+NZkYx6BvU4o0m:nSfbrV5HtWjwGTj7fxhT5WU2T+6KCWHK","tlshash":"8662f9742256f1f70b9014aa1139b7f5fa350516b407e190f1bd0f823a52dc7a4abafe","dom_hash":"domhashc1fec9cafeadbac0b33c1409ff211c3f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fn.unshutcaitiff.com/rDuUioaVziwL3C/128440","fqdn":"fn.unshutcaitiff.com","domain":"unshutcaitiff.com","tld":"com"},"ip":{"addr":"172.241.53.29","port":0,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-27T10:35:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fn.unshutcaitiff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"fn.unshutcaitiff.com","ip":{"addr":"172.241.53.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":17405,"sent_data":1624,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fn.unshutcaitiff.com/rDuUioaVziwL3C/128440","fqdn":"fn.unshutcaitiff.com","domain":"unshutcaitiff.com","tld":"com"},"ip":{"addr":"172.241.53.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-22T10:35:29.308Z","timestamp":1782124529308,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fn.unshutcaitiff.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 11:12:15 GMT","end":"Sat, 22 Aug 2026 11:12:14 GMT"},"fingerprint":{"sha1":"A2:24:99:A3:57:7A:28:F2:D7:91:1F:18:2E:9A:12:66:ED:17:F7:9B","sha256":"D8:02:67:30:7F:17:4B:EC:A0:0A:84:47:F6:2F:D1:E3:0D:07:76:88:CE:93:D0:7F:6D:A8:2E:10:23:64:D2:BB"}}},"request":{"raw":"GET /rDuUioaVziwL3C/128440 HTTP/1.1\r\nHost: fn.unshutcaitiff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:35:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Tue, 23-Jun-2026 10:35:29 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwNx0sOwUAcB%2BDOPwySBr%2BkC0s2lqX1CLt6LKlFDyCjhEbTaWZaj7iUOIiFo7gAXXyLzzAMshqgKEXdmY7s8dB2nIntjFywI8jfgMIE3JfqKu5gCtR3QSpBdXY%2BKH3KNViI8lrkSoBFqM%2Fj6NYOZJxnkUw0qFBbiF186C2DFVjKGSiTnEB6bxlgF94CxcL0%2FM67spWfItL0us3n9%2FH6gVKNktsfuH9DcSjB; expires=Tue, 23-Jun-2026 10:35:29 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14261,"size_decoded":7571,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14261), with no line terminators","md5":"3f39ea1bc6a100b2a58b33dfc2eed116","sha1":"69d962cbc880c8d1b886dbbe379bc6a1b1c74471","sha256":"8cc073eace986f8614f1b276a64d420ce446d4fd281c8411d66da79b12b82a37","sha512":"607d90ca46d75b146796050fb228d934e0d7a57566ec0c7d2f60ca22b4a2c9a8ca523009cc2106cfdb0411890a1c5a00f154c81fed05bd991b1f7c84ef9eb97a","ssdeep":"384:TPe9TTV7vf6UFN0+YTzj7RU5PFnRW502dhYEF607kWp+NXGeq6BqUS2YQTJ8d:TyTTVrSUFN0+Azj7RgPFnRW22P764kWN","tlshash":"175207f123a5a07607a558eb517ad378f23506213807c0c0f1bd5d527a12ac7a1fbfaa","first_seen":"2026-06-22T10:35:55.841237Z","last_seen":"2026-06-22T10:35:55.841237Z","times_seen":1,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":126,"connect":18,"send":0,"wait":23,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fn.unshutcaitiff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fn.unshutcaitiff.com/favicon.ico","fqdn":"fn.unshutcaitiff.com","domain":"unshutcaitiff.com","tld":"com"},"ip":{"addr":"172.241.53.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fn.unshutcaitiff.com/rDuUioaVziwL3C/128440","date":"2026-06-22T10:35:29.777Z","timestamp":1782124529777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fn.unshutcaitiff.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 11:12:15 GMT","end":"Sat, 22 Aug 2026 11:12:14 GMT"},"fingerprint":{"sha1":"A2:24:99:A3:57:7A:28:F2:D7:91:1F:18:2E:9A:12:66:ED:17:F7:9B","sha256":"D8:02:67:30:7F:17:4B:EC:A0:0A:84:47:F6:2F:D1:E3:0D:07:76:88:CE:93:D0:7F:6D:A8:2E:10:23:64:D2:BB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: fn.unshutcaitiff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fn.unshutcaitiff.com/rDuUioaVziwL3C/128440\r\nCookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; GL_GI10=eJwNx0sOwUAcB%2BDOPwySBr%2BkC0s2lqX1CLt6LKlFDyCjhEbTaWZaj7iUOIiFo7gAXXyLzzAMshqgKEXdmY7s8dB2nIntjFywI8jfgMIE3JfqKu5gCtR3QSpBdXY%2BKH3KNViI8lrkSoBFqM%2Fj6NYOZJxnkUw0qFBbiF186C2DFVjKGSiTnEB6bxlgF94CxcL0%2FM67spWfItL0us3n9%2FH6gVKNktsfuH9DcSjB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:35:29 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1406\r\nlast-modified: Mon, 22 Jun 2026 09:52:35 GMT\r\netag: \"6a3905e3-57e\"\r\nexpires: Tue, 23 Jun 2026 10:35:29 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1406,"size_decoded":1786,"mime_type":"application/octet-stream","magic":"MS Windows icon resource - 1 icon, 16x16","md5":"011201ab56695ce86ea2f190bce2670b","sha1":"bb8fad6accf293e619360935047c23f00da3c769","sha256":"a9bc1ab7f7c0c6bc5d097050968993474e32346cffa537be1e0335a19645f12e","sha512":"56d53a1219e58ad045c96dc81d71c63c0cf5a9766add778d34895fdaa7fda8dead44161ec291f0ed3d10a405322b7973b56c6b211d68a8d82a8510b5b7c0456c","ssdeep":"","tlshash":"71210082bb20c02cc82c0b300802eba82388f00ac8e8330b30c80b8e0c0008c8ef8ae0","first_seen":"2023-04-05T07:23:52Z","last_seen":"2026-07-11T10:04:46.338208Z","times_seen":21961,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fn.unshutcaitiff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}