{"report_id":"857c0613-5942-4139-90c9-d78122059ce6","version":0,"status":"done","tags":[],"date":"2026-08-26T11:25:19Z","url":{"schema":"http","addr":"portal.phantombillstickers.com/","fqdn":"portal.phantombillstickers.com","domain":"phantombillstickers.com","tld":"com"},"ip":{"addr":"35.157.26.135","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"http","addr":"portal.phantombillstickers.com/","fqdn":"portal.phantombillstickers.com","domain":"phantombillstickers.com","tld":"com"},"title":"Site not found","dom":{"size":3212,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2001)","md5":"8fec56ea96f5b27cad34aa87eac00377","sha1":"f0b100504579c0e503ff61330cd1d4a8ba0450b2","sha256":"0723e305d56bdb109a5830ea8a89d647da936ee2ed3255436cf268f5a66fe4bd","sha512":"aa477ecdadc42473265e85f11d4eea7fd1183313924d95f6050c5a2352918a946d46e011abb853c9a660c9983e9b8fb43bb837ad4fc4d8a4af6223e6d7e3c3fa","ssdeep":"","tlshash":"c56162a9c41a203f6d97681f13a4ca4da0297107dc9157d8ffaa53acd2dbaf305c2438","dom_hash":"domhashcb73cfededad984076e524bf6c61df10","first_seen":"2026-08-26T11:25:20.504263Z","last_seen":"2026-08-26T11:25:20.504263Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"portal.phantombillstickers.com/","fqdn":"portal.phantombillstickers.com","domain":"phantombillstickers.com","tld":"com"},"ip":{"addr":"35.157.26.135","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-30T11:25:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"portal.phantombillstickers.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"portal.phantombillstickers.com","ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2022-12-09","domain_rank":0,"first_seen":"2026-08-26T11:12:37.920969Z","last_seen":"2026-08-26T11:12:37.920969Z","alert_count":3,"request_count":3,"received_data":6958,"sent_data":1362,"comment":"","tags":null,"fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"portal.phantombillstickers.com/","fqdn":"portal.phantombillstickers.com","domain":"phantombillstickers.com","tld":"com"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-26T11:24:53.253Z","timestamp":1787743493253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal.phantombillstickers.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 08:36:32 GMT","end":"Tue, 24 Nov 2026 08:36:31 GMT"},"fingerprint":{"sha1":"69:AC:02:36:BA:D5:A3:F4:21:58:BF:7E:B2:47:00:CE:15:5C:B4:18","sha256":"ED:47:6E:75:27:87:BA:26:2F:1F:9D:C8:F6:D7:A1:00:3A:99:1E:F6:F5:0D:BF:FF:D2:AE:40:AC:3E:0C:6A:57"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: portal.phantombillstickers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-type: text/html\r\ndate: Wed, 26 Aug 2026 11:24:53 GMT\r\nserver: Netlify\r\nx-nf-request-id: 01M0YX1QB7EJCYR6E5HS6TJZ28\r\ncontent-length: 3164\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":3164,"size_decoded":3345,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1984)","md5":"b8f13bde165dd6441091e571a424f851","sha1":"87d6c603549aafd04d4e4acfe982da0fa1debad3","sha256":"efe6ec3c721bc303451da21436f0862d3dc22ca951ccef2b01c8e2e501b575f9","sha512":"48ada150c0d053ca6a4545d2695e405489f06377a8e46c670a57b75024fe6871ad9a4959ac9509e5782e1b65e11a82ceed6835d7bc3eb3722aa009a3d1f6b144","ssdeep":"","tlshash":"dd5162a9c41a203f6d97681f23a48a4d60297503dc9147e8ffaa936cd6db6f306d2438","first_seen":"2026-08-26T11:25:20.505487Z","last_seen":"2026-08-26T11:25:20.505487Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":38,"connect":26,"send":0,"wait":25,"receive":0,"ssl":149},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"portal.phantombillstickers.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"portal.phantombillstickers.com/","fqdn":"portal.phantombillstickers.com","domain":"phantombillstickers.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":80,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-26T11:24:53.600Z","timestamp":1787743493600,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: portal.phantombillstickers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nContent-Type: text/html\r\nDate: Wed, 26 Aug 2026 11:24:53 GMT\r\nServer: Netlify\r\nX-Nf-Request-Id: 01M0YX1QGB785BJF9M11K2VEYC\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":3164,"size_decoded":3342,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1984)","md5":"3d90804d3a55153aa342da14c944b2bd","sha1":"018762c00956003a6170a8072bad1a113c2d51b9","sha256":"d1b2e25f9ab993888b412ad789ccb304e8d14204bbe104dd3dfe3bf61c8cab44","sha512":"e6742326655a28df5e6be43ac1c54dd1cb759bc599d51a82742735c34cecf21443116ced6f267becb80bddf7619113b3a62bfd49fee7d62766996ed2e26cef8b","ssdeep":"","tlshash":"c05174add41a203f6d93681f13a48e4d60297503dc9147e8ffaa936cd6db6f305d2438","first_seen":"2026-08-26T11:25:20.506519Z","last_seen":"2026-08-26T11:25:20.506519Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":7,"connect":26,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"portal.phantombillstickers.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"portal.phantombillstickers.com/favicon.ico","fqdn":"portal.phantombillstickers.com","domain":"phantombillstickers.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":80,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://portal.phantombillstickers.com/","date":"2026-08-26T11:24:53.758Z","timestamp":1787743493758,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: portal.phantombillstickers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://portal.phantombillstickers.com/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nCache-Control: private, max-age=0\r\nContent-Type: text/plain; charset=utf-8\r\nDate: Wed, 26 Aug 2026 11:24:53 GMT\r\nServer: Netlify\r\nX-Nf-Request-Id: 01M0YX1QM829AX1JGSWMSJTK3P\r\nContent-Length: 50\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":50,"size_decoded":271,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"a0d90c0a8d7cd9c1a6f770bb44b859e9","sha1":"57ba9e7f4c8ef998f0d61ead7e2a44fea8e98853","sha256":"5fea9a9c27be646ca8adf2fb4ae4f8b0a63691e82521caef39721d9f05a52dce","sha512":"870c464a16557e86128732741d90af3b1b12c594441fdd73327fd9a2d95d85ebe86824de0555cd5c646ae6b95392c3f7ecf4e789eb594acc2cd595873eb0c2d8","ssdeep":"","tlshash":"2b900236d582569c4836c515b99142014018456c755405b78480a18655c15b8904305f","first_seen":"2026-08-26T11:25:20.507543Z","last_seen":"2026-08-26T11:25:20.507543Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"portal.phantombillstickers.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}