{"report_id":"87ccb1ee-f612-4d34-a6c1-a584226d04bb","version":0,"status":"done","tags":[],"date":"2026-09-05T05:54:44Z","url":{"schema":"http","addr":"www.cityland.com/","fqdn":"www.cityland.com","domain":"cityland.com","tld":"com"},"ip":{"addr":"135.181.209.190","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"final":{"url":{"schema":"https","addr":"www.cityland.com/","fqdn":"www.cityland.com","domain":"cityland.com","tld":"com"},"title":"City Land | Under Maintenance","dom":{"size":1210,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"7c11eb9f400ef3e0229304abffdf79f0","sha1":"138e955f1179162ba23b6873b6f74463192cefce","sha256":"c18a723a12ea68a1e546e44d06d2fb9d83735f89aebabcae7865d026ebf4533c","sha512":"d45cc9125a4d3678b2c9a3d046aaa2e9a49aadf4c45db0e397dec9f28673c80a310f10b032f425b05feba1e0369262a10f87d1092be5228a47bbeaf9a743f612","ssdeep":"","tlshash":"0b21d35f43f340057c83a9a43f6567546954c85b9a9fccb03ecda254cf86255e6d330c","dom_hash":"domhash6275c3f5c0194e0c4d8ffca2c62562f0","first_seen":"2026-09-05T05:54:48.402172Z","last_seen":"2026-09-05T05:54:48.402172Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.cityland.com/","fqdn":"www.cityland.com","domain":"cityland.com","tld":"com"},"ip":{"addr":"135.181.209.190","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-10T05:54:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.cityland.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.cityland.com","ip":{"addr":"135.181.209.190","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":2429,"sent_data":993,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.cityland.com/","fqdn":"www.cityland.com","domain":"cityland.com","tld":"com"},"ip":{"addr":"135.181.209.190","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T05:54:17.128Z","timestamp":1788587657128,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityland.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 08:54:37 GMT","end":"Thu, 19 Nov 2026 08:54:36 GMT"},"fingerprint":{"sha1":"D5:46:EC:92:36:E3:28:CA:72:75:00:B4:D8:F7:10:6D:F8:74:F4:9D","sha256":"FB:F8:DC:D1:D7:BA:C1:47:D4:E3:10:25:BA:B0:7C:E6:09:7B:C9:FF:3A:93:F9:DF:70:DB:5C:8B:FA:E1:A6:15"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.cityland.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 05 Sep 2026 05:54:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.3.33, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1227,"size_decoded":677,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1443ec2103d9b442897c5a5e40216175","sha1":"620645432dfcf55cc59a1cbb079d3b3a6d578b7b","sha256":"0168d525bdf0ba2e0497df9b36270a28d46e0804f143ec6501aac387229f0022","sha512":"9e9970fc7d23c8448db7eb2d3fddf02fa1cb1f8b02e3e25c83dffb054687ee513dc9e6ec6de250790ea8ebebceafc566bad8bad24c4fcaf7a5e7b8d8fe324460","ssdeep":"","tlshash":"8e21d05f52f340057883a9a43f6567646958c85b9a8fccb03eceb258cf86295a6d330c","first_seen":"2026-09-05T05:54:48.404382Z","last_seen":"2026-09-05T05:54:48.404382Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":69,"connect":23,"send":0,"wait":25,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.cityland.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cityland.com/favicon.ico","fqdn":"www.cityland.com","domain":"cityland.com","tld":"com"},"ip":{"addr":"135.181.209.190","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cityland.com/","date":"2026-09-05T05:54:17.494Z","timestamp":1788587657494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityland.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 08:54:37 GMT","end":"Thu, 19 Nov 2026 08:54:36 GMT"},"fingerprint":{"sha1":"D5:46:EC:92:36:E3:28:CA:72:75:00:B4:D8:F7:10:6D:F8:74:F4:9D","sha256":"FB:F8:DC:D1:D7:BA:C1:47:D4:E3:10:25:BA:B0:7C:E6:09:7B:C9:FF:3A:93:F9:DF:70:DB:5C:8B:FA:E1:A6:15"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.cityland.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.cityland.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 05 Sep 2026 05:54:17 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 18 Jul 2025 05:54:40 GMT\r\netag: W/\"328-63a2dc30adff6\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":579,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-09-05T05:54:48.406405Z","times_seen":39067,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.cityland.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}