{"report_id":"8d1ea0ae-c1cc-4bd9-8ad7-d80a1993d267","version":6,"status":"done","tags":[],"date":"2026-05-01T12:13:55Z","url":{"schema":"http","addr":"joystay.in","fqdn":"joystay.in","domain":"joystay.in","tld":"in"},"ip":{"addr":"192.185.129.195","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"joystay.in/404","fqdn":"joystay.in","domain":"joystay.in","tld":"in"},"title":"DPD","dom":{"size":878,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (413)","md5":"b69798b862eed3d16566fd68fec973fd","sha1":"d544e433fd18930c62680a00d572259e919d0865","sha256":"2bac524229a72d06c922e8eb9c06d76687472bb677486e4232735893e9a4fd27","sha512":"80f4d09a973040583a9b6f4f0b326f9c9327c6e42797d7fe20c392a2536faf73c438fd50c4a53934de383934e2693da4fbfd23273409568a7839afe944452a36","ssdeep":"","tlshash":"7c11160240a1492b236306a1bcd1fb1575c5f70ed916ed11f2fa92991be5d82ccc747c","dom_hash":"domhash7c2793f7804835a0a9db4c8495cf0124","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"joystay.in","fqdn":"joystay.in","domain":"joystay.in","tld":"in"},"ip":{"addr":"192.185.129.195","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-05T12:13:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-01","alert":"Phishing Block","trigger":"joystay.in","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"joystay.in","ip":{"addr":"192.185.129.195","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2025-05-25","domain_rank":0,"first_seen":"2025-10-30T02:24:23.292214Z","last_seen":"2026-05-01T08:09:18.480081Z","alert_count":35,"request_count":7,"received_data":1943059,"sent_data":3088,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"joystay.in/assets/index-Ca_tfik1.js","fqdn":"joystay.in","domain":"joystay.in","tld":"in"},"ip":{"addr":"192.185.129.195","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0327d96a2c2f85b455e19341019a4820","sha1":"abee1efcdb7ddbac92fb6533fd65a49fdb90ebae","sha256":"35969636362a9cebd8224b0a8b49000ff794db4f01271bafa258ac6b9b49787a","sha512":"ed3d757ea8a267ae3e9a40f639668da18cae2c643fa1da4c906324a63faf7ae795cb34c319cbf086be3374e4bcea1e5af04539777994a12a9e9b346715a50ecd","ssdeep":"49152:tM+Cy40O8iQq6vRWbY6jQsm+2H4fBODJ7duM4yfIlT/5oeQquqr://E1","tlshash":"4395beb87281b4219ba705d5a4af0019bf392923780dc8a4f07cd99f79f5905a27bf7c","size":1922034,"data":"","first_seen":"2025-08-31T21:04:58.730709Z","last_seen":"2026-05-01T14:07:21.52735Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"joystay.in/","fqdn":"joystay.in","domain":"joystay.in","tld":"in"},"ip":{"addr":"192.185.129.195","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-01T12:13:21.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.joystay.in","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:24:30 GMT","end":"Fri, 12 Jun 2026 08:24:29 GMT"},"fingerprint":{"sha1":"AE:37:78:88:36:C9:1D:DA:7C:6F:D7:F6:C3:C8:7F:0B:B0:19:EE:E5","sha256":"F9:31:12:08:20:AD:0B:9D:48:38:D6:18:66:BC:76:F7:33:E4:E3:D0:73:48:1A:05:06:85:79:31:7F:BA:15:52"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: joystay.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sat, 30 Aug 2025 20:39:28 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 311\r\ncontent-type: text/html\r\ndate: Fri, 01 May 2026 12:13:22 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":513,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"3a0e8ca123f03fe7b4431b5c368d454e","sha1":"0142df046f3c07bb5933708b0074b25a9fcfb14e","sha256":"1030dabf7b195c4356ccdd4b559e1d61c9d4ba4e7a20bab24adc589fcf192022","sha512":"04c9fbd66a72ced7c2525b0a83dbc6d6a996363f0d3d7623178ee3f5d04d21a3d4496d7748990ebd0f482a20f4304ee52963b213cdeb23084af682d3accbcc2f","ssdeep":"","tlshash":"a2f09e1214c08d1813309664aec2f518d957eb4347496e0572da317f1fe1781cdcf464","first_seen":"2025-08-31T21:04:58.724417Z","last_seen":"2026-05-01T14:07:21.523432Z","times_seen":15,"resource_available":true,"data":null}},"time_used":1413,"timings":{"blocked":600,"dns":299,"connect":139,"send":0,"wait":213,"receive":0,"ssl":158},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-01","alert":"Phishing Block","trigger":"joystay.in","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"joystay.in/assets/index-CQXkNJXR.css","fqdn":"joystay.in","domain":"joystay.in","tld":"in"},"ip":{"addr":"192.185.129.195","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://joystay.in/","date":"2026-05-01T12:13:22.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.joystay.in","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:24:30 GMT","end":"Fri, 12 Jun 2026 08:24:29 GMT"},"fingerprint":{"sha1":"AE:37:78:88:36:C9:1D:DA:7C:6F:D7:F6:C3:C8:7F:0B:B0:19:EE:E5","sha256":"F9:31:12:08:20:AD:0B:9D:48:38:D6:18:66:BC:76:F7:33:E4:E3:D0:73:48:1A:05:06:85:79:31:7F:BA:15:52"}}},"request":{"raw":"GET /assets/index-CQXkNJXR.css HTTP/1.1\r\nHost: joystay.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joystay.in/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sat, 30 Aug 2025 20:39:28 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 5211\r\ncontent-type: text/css\r\ndate: Fri, 01 May 2026 12:13:22 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":17045,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (17044)","md5":"fa8d320ab86e6df4dd2b6365efe9615c","sha1":"86a754a9382e1924db3b985b4d3580fe6415e316","sha256":"5dbf1fa8fb7fdd3be478b621699d84e390d690ac21b3223a030ccdbf371c0c94","sha512":"a14d7052675232a6551853a4fc7c4d08a33307ffb71dbd7a938f4ffce1130fd5147148b687f2c6c945d8bb4d5aba3b98449b9f7177bfa40fc6d4141d0467d88a","ssdeep":"192:L6vRs86l3DnixwOW9JyW9Jy96F36W1TQtn2thNUdHZNmH7A7:WR1wdFKUst2cZNmHa","tlshash":"be72541d6704143a7c5780faf4a4fe89b21bb5d1df2bd7eab8536610d7c23a21da2308","first_seen":"2025-08-31T21:04:58.726593Z","last_seen":"2026-05-01T14:07:21.524061Z","times_seen":13,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-01","alert":"Phishing Block","trigger":"joystay.in","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"joystay.in/assets/index-Ca_tfik1.js","fqdn":"joystay.in","domain":"joystay.in","tld":"in"},"ip":{"addr":"192.185.129.195","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://joystay.in/","date":"2026-05-01T12:13:22.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.joystay.in","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:24:30 GMT","end":"Fri, 12 Jun 2026 08:24:29 GMT"},"fingerprint":{"sha1":"AE:37:78:88:36:C9:1D:DA:7C:6F:D7:F6:C3:C8:7F:0B:B0:19:EE:E5","sha256":"F9:31:12:08:20:AD:0B:9D:48:38:D6:18:66:BC:76:F7:33:E4:E3:D0:73:48:1A:05:06:85:79:31:7F:BA:15:52"}}},"request":{"raw":"GET /assets/index-Ca_tfik1.js HTTP/1.1\r\nHost: joystay.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joystay.in/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sat, 30 Aug 2025 20:39:28 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 01 May 2026 12:13:22 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1922034,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37550)","md5":"d3072f95a1d0fb45f542b6727d02e816","sha1":"ba9cb7950bf6155a775128b0150d8dfe3b4d5c21","sha256":"d0ae5d4d381790559e54b3751ad836b3ceda0a5a732dd35010d3c1d923cab3bc","sha512":"2b4002e01cac3ae077df1c035bfcb6371d03f9e61fd3ed8b4bccd527d145d50f09a8849f5835d54aa58d5f2e3611825e58fd61eeb282b0f5bbe36968c390e8de","ssdeep":"24576:tMwVCy40O8EjQgT6v4kWbY6V5p6sm+2H4fBOD4:tM+Cy40O8iQq6vRWbY6jQsm+2H4fBOD4","tlshash":"24258df87241b42297a346e540bf040aff392917780d84a8f168ddde39b9549a17bfbc","first_seen":"2025-08-31T21:04:58.725507Z","last_seen":"2026-05-01T14:07:21.524528Z","times_seen":13,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-01","alert":"Phishing Block","trigger":"joystay.in","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"joystay.in/dp.svg","fqdn":"joystay.in","domain":"joystay.in","tld":"in"},"ip":{"addr":"192.185.129.195","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joystay.in/","date":"2026-05-01T12:13:24.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.joystay.in","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:24:30 GMT","end":"Fri, 12 Jun 2026 08:24:29 GMT"},"fingerprint":{"sha1":"AE:37:78:88:36:C9:1D:DA:7C:6F:D7:F6:C3:C8:7F:0B:B0:19:EE:E5","sha256":"F9:31:12:08:20:AD:0B:9D:48:38:D6:18:66:BC:76:F7:33:E4:E3:D0:73:48:1A:05:06:85:79:31:7F:BA:15:52"}}},"request":{"raw":"GET /dp.svg HTTP/1.1\r\nHost: joystay.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joystay.in/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sat, 30 Aug 2025 20:39:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1569\r\ncontent-type: image/svg+xml\r\ndate: Fri, 01 May 2026 12:13:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1569,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d159f7df956a2c9bf33400f556689ba2","sha1":"6a2383d56ce4115ba67bdb9fb36ad0f86d395061","sha256":"de847025d79184353e6920162729ce6cf67580f841a5631a754ffe633c322bda","sha512":"1b871cdb14fbb8234008e0c679b67560ad25da23663b36e7fc4f5d9b765339bb72cb4b4509c44760b86e500caa23f329075558aaa691c29a5ea2d986f56ce354","ssdeep":"","tlshash":"6331d039c3598a3fdd0f8214daa4495b62b1c197a590d2c4f76a662cfd148d3180f7ec","first_seen":"2025-08-31T21:04:58.727634Z","last_seen":"2026-05-01T14:07:21.525243Z","times_seen":10,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-01","alert":"Phishing Block","trigger":"joystay.in","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"joystay.in/api/config","fqdn":"joystay.in","domain":"joystay.in","tld":"in"},"ip":{"addr":"192.185.129.195","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://joystay.in/","date":"2026-05-01T12:13:24.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.joystay.in","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:24:30 GMT","end":"Fri, 12 Jun 2026 08:24:29 GMT"},"fingerprint":{"sha1":"AE:37:78:88:36:C9:1D:DA:7C:6F:D7:F6:C3:C8:7F:0B:B0:19:EE:E5","sha256":"F9:31:12:08:20:AD:0B:9D:48:38:D6:18:66:BC:76:F7:33:E4:E3:D0:73:48:1A:05:06:85:79:31:7F:BA:15:52"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: joystay.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joystay.in/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 133\r\ncontent-type: application/json\r\ndate: Fri, 01 May 2026 12:13:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":153,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"00b7b6b5fc7a1ca0be2ab0b24dc017c2","sha1":"f8d63488248535782c6b3ed48c71d80f3b0b58c5","sha256":"721a80a4750d1a94b52ee9db03a68b70827c62dfc9e766c4b2d35f298e974185","sha512":"14c189bdcc0c8b2aa8654efd6520510ae02718852f146421803e9fdc77803e27e55b838918ec2825f955a91e5699c97822b82d4c3449215a16c53ebb9a6b98c2","ssdeep":"","tlshash":"d3c02b0f0c070fb0c4485400d133ff02451e102330126098f17c72b570b9e8f013046f","first_seen":"2026-05-01T12:14:00.079548Z","last_seen":"2026-05-01T14:07:21.522407Z","times_seen":5,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-01","alert":"Phishing Block","trigger":"joystay.in","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"joystay.in/api/check","fqdn":"joystay.in","domain":"joystay.in","tld":"in"},"ip":{"addr":"192.185.129.195","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://joystay.in/","date":"2026-05-01T12:13:24.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.joystay.in","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:24:30 GMT","end":"Fri, 12 Jun 2026 08:24:29 GMT"},"fingerprint":{"sha1":"AE:37:78:88:36:C9:1D:DA:7C:6F:D7:F6:C3:C8:7F:0B:B0:19:EE:E5","sha256":"F9:31:12:08:20:AD:0B:9D:48:38:D6:18:66:BC:76:F7:33:E4:E3:D0:73:48:1A:05:06:85:79:31:7F:BA:15:52"}}},"request":{"raw":"GET /api/check HTTP/1.1\r\nHost: joystay.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joystay.in/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 60\r\ncontent-type: application/json\r\ndate: Fri, 01 May 2026 12:13:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":50,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"eeba55746c1ac85b715b1f5a6d761de9","sha1":"a8b9659c3f72062732078ddddafcacfaa2bab627","sha256":"90202b1d54ecf91fd1df30cd53bedc9e1f30cf7a889b0c15d444d297e6b2f310","sha512":"1bdb318529d8c652d1abc52e1969f16907832b8bb06e70b34a410653ca940627470df8ccdfe9cb2da76fa5781f5f9c21131533e9d4b5a6a1d995f0f073d3c550","ssdeep":"","tlshash":"cb90020c13840009036b07010f93055810501270e9102b016ef4106804024464423051","first_seen":"2025-01-04T14:09:57.907294Z","last_seen":"2026-05-01T14:07:21.52291Z","times_seen":88,"resource_available":false,"data":null}},"time_used":1149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-01","alert":"Phishing Block","trigger":"joystay.in","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"joystay.in/api/bot","fqdn":"joystay.in","domain":"joystay.in","tld":"in"},"ip":{"addr":"192.185.129.195","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://joystay.in/","date":"2026-05-01T12:13:25.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.joystay.in","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:24:30 GMT","end":"Fri, 12 Jun 2026 08:24:29 GMT"},"fingerprint":{"sha1":"AE:37:78:88:36:C9:1D:DA:7C:6F:D7:F6:C3:C8:7F:0B:B0:19:EE:E5","sha256":"F9:31:12:08:20:AD:0B:9D:48:38:D6:18:66:BC:76:F7:33:E4:E3:D0:73:48:1A:05:06:85:79:31:7F:BA:15:52"}}},"request":{"raw":"POST /api/bot HTTP/1.1\r\nHost: joystay.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joystay.in\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joystay.in/404\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://joystay.in\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\naccess-control-expose-headers: Authorization\r\ncontent-encoding: gzip\r\ncontent-length: 44\r\ncontent-type: application/json\r\ndate: Fri, 01 May 2026 12:13:25 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"936879557ac2f2020b31ec4ac574180b","sha1":"cc21a239a20f61c5dca6d84b4ee5734369a0e9a9","sha256":"2a4b7ac210a142c078d9a49b11222d95f6e092b0e544a7bb70b3096934a55dea","sha512":"cc051d9bd73e5d954220dde3d6cea9564c877dece197eba019746956ff4d991dcc647be2b9cb08093eaceec30eaeb6916cd16a0411a3cdaa94e778afdf561567","ssdeep":"","tlshash":"49700022220a8ece2000228280280c0020e800b080008808c03c00088e000a030a2008","first_seen":"2025-04-08T11:37:44.740552Z","last_seen":"2026-05-01T14:07:21.525751Z","times_seen":104,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":460,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-01","alert":"Phishing Block","trigger":"joystay.in","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"joystay.in","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}