{"report_id":"8de50d66-d5e6-4e79-89e1-2d4bdee497d8","version":0,"status":"done","tags":[],"date":"2026-08-24T02:00:19Z","url":{"schema":"http","addr":"soxy.ae/redirect2601502022","fqdn":"soxy.ae","domain":"soxy.ae","tld":"ae"},"ip":{"addr":"144.76.136.166","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"soxy.ae/redirect2601502022/","fqdn":"soxy.ae","domain":"soxy.ae","tld":"ae"},"title":"Secure Document Review","dom":{"size":1962,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"b25613e91971b5725b33e38dcfc14eb1","sha1":"8d9d43f98583b5ac7543b6b89bfdf9becd95e10d","sha256":"fc83227130a934f8b46ee212115846205372d9a7efb1d12ca6e663484a5e1113","sha512":"c1c932b067ff43116cfe8902e7e63ab899e85229c79f1c073cffd3d7c75f7000a693f6cf0605388139447091a9b52d79185b1a60f9c7f2a0843161d11a700dd2","ssdeep":"","tlshash":"2b41e493459700526543c0a87fb3ab0937954443c64fd6a87f9d76cccfc9ad1996378c","dom_hash":"domhashdea815c345d0c4a39e3a77b463df7a17","first_seen":"2026-08-24T02:00:20.836976Z","last_seen":"2026-08-24T02:00:20.836976Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"soxy.ae/redirect2601502022","fqdn":"soxy.ae","domain":"soxy.ae","tld":"ae"},"ip":{"addr":"144.76.136.166","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-28T02:00:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"soxy.ae","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"na2.docusign.net","ip":{"addr":"20.12.135.153","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1999-06-14","domain_rank":60614,"first_seen":"2013-06-10T15:48:48Z","last_seen":"2026-08-11T01:11:09.023951Z","alert_count":0,"request_count":2,"received_data":5160,"sent_data":1120,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"soxy.ae","ip":{"addr":"144.76.136.166","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-08-19T00:45:06.927429Z","last_seen":"2026-08-21T23:51:30.288949Z","alert_count":3,"request_count":3,"received_data":3764,"sent_data":1498,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"soxy.ae/redirect2601502022/","fqdn":"soxy.ae","domain":"soxy.ae","tld":"ae"},"ip":{"addr":"144.76.136.166","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"86ea7ebfdc4830d5e266975ec44b6c13","sha1":"b216e669d9a75920b181af52320e6f5a7a41b988","sha256":"6ba38b62d8ef18d909b550176c77cbc628b730a98347abe1bfe8547ec18db615","sha512":"38c4d2705c0cda219201735625a563df3120e2d1a5a7b90f73ede491d80a193cbabf7b49268520485595b3256a1e824fcd2b823b3689881abcdf186d7f84e4e5","ssdeep":"","tlshash":"2280000cbefaa08a2303f03000bf0808203e322aa00c0fa83c220a800f220a82202ac8","size":37,"data":"","first_seen":"2026-08-24T02:00:20.843328Z","last_seen":"2026-08-24T02:00:20.843328Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"na2.docusign.net/Signing/Images/email/Email_Logo.png","fqdn":"na2.docusign.net","domain":"docusign.net","tld":"net"},"ip":{"addr":"20.12.135.153","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://soxy.ae/redirect2601502022/","date":"2026-08-24T01:59:49.309Z","timestamp":1787536789309,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"na2.docusign.net","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Fri, 05 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C9:C0:40:6E:17:81:2F:AA:2C:27:C3:96:93:52:44:CF:2D:AA:E5:E9","sha256":"17:B4:70:ED:78:FF:37:FB:58:18:0F:27:3E:EE:ED:D3:94:7E:F4:3F:52:DB:B2:33:A2:F4:51:D8:EE:D2:98:90"}}},"request":{"raw":"GET /Signing/Images/email/Email_Logo.png HTTP/1.1\r\nHost: na2.docusign.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://soxy.ae/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=2592000\r\nContent-Type: image/png\r\nETag: \"5cdb5fe0cf1add1:0\"\r\nX-DocuSign-Node: CUESE2FE15P125\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nDate: Mon, 24 Aug 2026 01:59:59 GMT\r\nContent-Length: 1945\r\nSet-Cookie: BIGipDocuSign_Azure_1=!pWZr+s7DWmhe4QPY1oagCggMZjL2Q49ujsk3WuLSJK1glWxX9KaxT+JO2BZMCuEO3ZXeioVRm2mCSI0=; path=/; Httponly; Secure\r\n\r\n","headers":null,"cookies":[{"name":"BIGipDocuSign_Azure_1","value":"!pWZr+s7DWmhe4QPY1oagCggMZjL2Q49ujsk3WuLSJK1glWxX9KaxT+JO2BZMCuEO3ZXeioVRm2mCSI0=","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"BIGipDocuSign_Azure_1=!pWZr+s7DWmhe4QPY1oagCggMZjL2Q49ujsk3WuLSJK1glWxX9KaxT+JO2BZMCuEO3ZXeioVRm2mCSI0=; path=/; Httponly; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1945,"size_decoded":2389,"mime_type":"image/png","magic":"PNG image data, 172 x 50, 8-bit/color RGBA, non-interlaced","md5":"7d46f290820b751b085dbbe86fddbca0","sha1":"d7b0091c705cc35e53f5a5ee47ba0f866787f3e9","sha256":"a256b1364865039dafdefa33bebee87444684f5d09dafdf53680dcfc8b61ffed","sha512":"edafafeced066b4510b5318831f9deaf3c7da997a830ec25faee4c8a787305cd7759b832c08799e2ccee84c7a85baf4a60c185f0653432d0ac737069af426fe1","ssdeep":"","tlshash":"79413bddbf71d174e53b736f73cea1483e9116044a023c70d8904b2851b05faf09a670","first_seen":"2024-04-11T05:19:09Z","last_seen":"2026-08-24T02:00:20.838676Z","times_seen":80,"resource_available":false,"data":null}},"time_used":20841,"timings":{"blocked":-1,"dns":10245,"connect":10348,"send":0,"wait":124,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"na2.docusign.net/member/Images/email/docComplete-white.png","fqdn":"na2.docusign.net","domain":"docusign.net","tld":"net"},"ip":{"addr":"20.12.135.153","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://soxy.ae/redirect2601502022/","date":"2026-08-24T01:59:49.312Z","timestamp":1787536789312,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"na2.docusign.net","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Fri, 05 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C9:C0:40:6E:17:81:2F:AA:2C:27:C3:96:93:52:44:CF:2D:AA:E5:E9","sha256":"17:B4:70:ED:78:FF:37:FB:58:18:0F:27:3E:EE:ED:D3:94:7E:F4:3F:52:DB:B2:33:A2:F4:51:D8:EE:D2:98:90"}}},"request":{"raw":"GET /member/Images/email/docComplete-white.png HTTP/1.1\r\nHost: na2.docusign.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://soxy.ae/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nETag: \"e18245dfcf1add1:0\"\r\nX-DocuSign-Node: CUESE2FE16P03\r\nDate: Mon, 24 Aug 2026 01:59:59 GMT\r\nContent-Length: 2402\r\nSet-Cookie: BIGipDocuSign_Azure_1=!4DgX+T/vLYPbTobY1oagCggMZjL2Q9MBYZkfWH8p/+H6gOvarBKJUzZGeEU4D++Qgnyo04+GKcCgCg==; path=/; Httponly; Secure\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":[{"name":"BIGipDocuSign_Azure_1","value":"!4DgX+T/vLYPbTobY1oagCggMZjL2Q9MBYZkfWH8p/+H6gOvarBKJUzZGeEU4D++Qgnyo04+GKcCgCg==","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"BIGipDocuSign_Azure_1=!4DgX+T/vLYPbTobY1oagCggMZjL2Q9MBYZkfWH8p/+H6gOvarBKJUzZGeEU4D++Qgnyo04+GKcCgCg==; path=/; Httponly; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2402,"size_decoded":2771,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"8849ee4036c2dcf4950d1d8362ea8472","sha1":"8ee7f3e3421694cc08001b7ecf82a8d042d88eca","sha256":"2908baa07113961678495a0e34dde17fdf5e3899bc49bf38b09195486dc5491d","sha512":"83c4f41aa30a45884b040779c044136afa56615e1486db4a61a589ca8aff301e54cce84e1c2d324fe49190a27792d1b101e9e349031b45b6d39b99f266afbdd4","ssdeep":"","tlshash":"5e413dd19f9c759931952111d0ade708f9526a170f494fef128bc3db126972405aa087","first_seen":"2023-12-19T23:14:05Z","last_seen":"2026-08-24T02:00:20.840041Z","times_seen":79,"resource_available":true,"data":null}},"time_used":20897,"timings":{"blocked":-1,"dns":10249,"connect":10347,"send":0,"wait":176,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"soxy.ae/favicon.ico","fqdn":"soxy.ae","domain":"soxy.ae","tld":"ae"},"ip":{"addr":"144.76.136.166","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://soxy.ae/redirect2601502022/","date":"2026-08-24T01:59:49.514Z","timestamp":1787536789514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"soxy.ae","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 01:47:43 GMT","end":"Fri, 02 Oct 2026 01:47:42 GMT"},"fingerprint":{"sha1":"2D:7F:64:84:A4:28:8C:19:96:DA:D9:F7:4A:2F:2E:64:EA:17:56:79","sha256":"62:31:81:1F:2D:A7:82:92:05:2B:93:33:49:D6:8B:E7:66:F3:B7:8F:8B:A5:AC:3A:96:7D:0F:12:1F:F5:FA:20"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: soxy.ae\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://soxy.ae/redirect2601502022/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Mon, 24 Aug 2026 01:59:49 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":796,"size_decoded":1162,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-08-24T03:10:25.961177Z","times_seen":56546,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"soxy.ae","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"soxy.ae/redirect2601502022","fqdn":"soxy.ae","domain":"soxy.ae","tld":"ae"},"ip":{"addr":"144.76.136.166","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-24T01:59:48.647Z","timestamp":1787536788647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"soxy.ae","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 01:47:43 GMT","end":"Fri, 02 Oct 2026 01:47:42 GMT"},"fingerprint":{"sha1":"2D:7F:64:84:A4:28:8C:19:96:DA:D9:F7:4A:2F:2E:64:EA:17:56:79","sha256":"62:31:81:1F:2D:A7:82:92:05:2B:93:33:49:D6:8B:E7:66:F3:B7:8F:8B:A5:AC:3A:96:7D:0F:12:1F:F5:FA:20"}}},"request":{"raw":"GET /redirect2601502022 HTTP/1.1\r\nHost: soxy.ae\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ncontent-type: text/html\r\ncontent-length: 795\r\ndate: Mon, 24 Aug 2026 01:59:48 GMT\r\nlocation: https://soxy.ae/redirect2601502022/\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-24T04:40:40.690844Z","times_seen":18068124,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":119,"connect":33,"send":0,"wait":33,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"soxy.ae","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"soxy.ae/redirect2601502022/","fqdn":"soxy.ae","domain":"soxy.ae","tld":"ae"},"ip":{"addr":"144.76.136.166","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-24T01:59:48.878Z","timestamp":1787536788878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"soxy.ae","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 01:47:43 GMT","end":"Fri, 02 Oct 2026 01:47:42 GMT"},"fingerprint":{"sha1":"2D:7F:64:84:A4:28:8C:19:96:DA:D9:F7:4A:2F:2E:64:EA:17:56:79","sha256":"62:31:81:1F:2D:A7:82:92:05:2B:93:33:49:D6:8B:E7:66:F3:B7:8F:8B:A5:AC:3A:96:7D:0F:12:1F:F5:FA:20"}}},"request":{"raw":"GET /redirect2601502022/ HTTP/1.1\r\nHost: soxy.ae\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 806\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 24 Aug 2026 01:59:48 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2081,"size_decoded":984,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"21ba78831885ce8cad6e59cd29387e6d","sha1":"b3450f13d9bf1cd6b763f4255117e6199065e71d","sha256":"f9254aa446155272ea3cdf7b72dbe1520a7c654b2815327bfa8082d205163bd0","sha512":"128029b6c59395b1f5c8a5b7b1267b73d688bb75880e96ec360e8f74783f8a2de8406e763d7d0a244736ac806a109afd6c46a016d244e1117dd425c5635dc4e4","ssdeep":"","tlshash":"03410f59c54544036273d1b86b729748fb9140438b4746683bec72c7dffa9a19aa37cc","first_seen":"2026-08-24T02:00:20.841765Z","last_seen":"2026-08-24T02:00:20.841765Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"soxy.ae","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}