{"report_id":"916d958b-66a7-496c-8880-0e3ec9124259","version":6,"status":"done","tags":[],"date":"2025-12-06T14:05:15Z","url":{"schema":"http","addr":"www.m.bostanciescortq.com/","fqdn":"www.m.bostanciescortq.com","domain":"bostanciescortq.com","tld":"com"},"ip":{"addr":"193.105.134.30","port":0,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"final":{"url":{"schema":"http","addr":"www.m.bostanciescortq.com/","fqdn":"www.m.bostanciescortq.com","domain":"bostanciescortq.com","tld":"com"},"title":"kra46 - платформа CC отзывов для принятия решений","dom":{"size":23516,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15068)","md5":"3abdc2d0f88e6e9459eef876d0afeabd","sha1":"44d226d30d6eddc854cbf65c6d37360ab933cdb7","sha256":"cc8aea170fe5d38f6b9c7b22f3851aa5ee541e89e072b5676680e00bfcf44b57","sha512":"d1cec9a4bf0961be3677c1400285a73784b8aef571cd6efe47dd7d7ef3aebd3c720c8e08278134c43dbfe6d044b6db67f1592ac4b0b6cb3de341e12e3fc8bfdc","ssdeep":"384:91vKhtnTKCmbf9pCJZep+GjkO/KwO4dC+kQCI/jGsZlutcbJyzFFcHE3iRMitvMi:9ohK9pCJEprTKr4WQCqqftIyzhyTtvMi","tlshash":"d6b29e71b9f5100a19c4e05bfa11bf0d7ead047fa60fa66130ac949e7fc2ea08527998","dom_hash":"domhash03350cdd213651e970ee02a42911548c","first_seen":"2025-12-06T14:05:19.647938Z","last_seen":"2025-12-06T14:05:19.647938Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.m.bostanciescortq.com/","fqdn":"www.m.bostanciescortq.com","domain":"bostanciescortq.com","tld":"com"},"ip":{"addr":"193.105.134.30","port":0,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-10T14:05:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.m.bostanciescortq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.m.bostanciescortq.com","ip":{"addr":"193.105.134.30","port":80,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"domain_registered":"2025-05-30","domain_rank":0,"first_seen":"2025-12-06T14:05:15.795018Z","last_seen":"2025-12-06T14:05:15.795018Z","alert_count":9,"request_count":9,"received_data":38539,"sent_data":3500,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"www.m.bostanciescortq.com/","fqdn":"www.m.bostanciescortq.com","domain":"bostanciescortq.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebdb6da2c5b8bbe3f6ba066ba975895b","sha1":"a9b8dfc03f2451b67a35e46705ef80d07d7a120c","sha256":"1c40d9038ba32e18774f2dcb68a01bfb378e89f069d53b8d43fbb579e8f45ed6","sha512":"91d744f19ac9692aedc821a19042a43fdf9a9891afb9c86b2d91a979145e41b7b1446808a7f2cb0d1e384a4ece85120c69ff812282377a1d4b4377c622ee19bb","ssdeep":"","tlshash":"58600033300c0003cc0c0c0300c00c0000c0003c000ccc303000f00c0f0000fc30c3c0","size":15,"data":"","first_seen":"2025-11-07T18:36:06.466308Z","last_seen":"2026-03-19T12:19:34.895414Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.m.bostanciescortq.com/","fqdn":"www.m.bostanciescortq.com","domain":"bostanciescortq.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e56ddbb05a974a6bc5ea44661e509a21","sha1":"448d4cb69f9441e10731b1ff4aa9dc81502589bd","sha256":"1759e8c6c2ce9c987245281cd33bb9260ce82e31b604131a5da486db89369913","sha512":"a3b2b0accbc0f18d13fc0eb6d742a5bf00a9614399e05b97b96ed0963e7d29b5868f73ef541c5f5bf8d125e7f7040d03f39cc853a52ffa2f1e2ebb7a20165242","ssdeep":"","tlshash":"7b700008080000800a002c00e000020080c2000802202008c020a8a0082c088808f800","size":21,"data":"","first_seen":"2023-04-10T22:51:51Z","last_seen":"2026-08-11T17:40:50.000097Z","times_seen":49498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.m.bostanciescortq.com/script.js?v=1765029893593","fqdn":"www.m.bostanciescortq.com","domain":"bostanciescortq.com","tld":"com"},"ip":{"addr":"193.105.134.30","port":80,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"445697371633c79871bf78a0fdf3c370","sha1":"2927e758128fbfe0ffbe898288e8bf700c84f408","sha256":"23cb3e29ca4ecece95eaf4a5e45fc628bf2ce1d21a01da4ef33d71e8d8e4630c","sha512":"587e1db171c52e6ae7bd37ae5d8896a62f39523bd591219088067af64d6e521095bc0add46e0c1397fd112ec316c467c289e25eefaf7858a7b505532a3b471b6","ssdeep":"","tlshash":"74f02e7721347a7405a575bb36c657c8d63b00efb80510013e098d181f746e60372f9d","size":459,"data":"","first_seen":"2025-12-05T14:56:02.67166Z","last_seen":"2025-12-08T00:33:51.961738Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.m.bostanciescortq.com/","fqdn":"www.m.bostanciescortq.com","domain":"bostanciescortq.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7990eff4acbffbec0dbaa15d76d6bf90","sha1":"0d3f0687d29e815900c5577e1e0eddfd960d3d1c","sha256":"79b23fa4b2b7110b9ec423c0c6ff71ed30a03553520b4b6c92d971b350bef733","sha512":"0a1e949e32f7a85a86b2eb97bee1aca307894a018de87f4255356dad447faeb71133321a90fcb80ef9a46a961991418fdd40183a6a707976df3f17d19c3fd36e","ssdeep":"","tlshash":"74c08c100d32c034421708972332c26121a0201aa411e08976ccdd8d2f20fc54c02c18","size":164,"data":"","first_seen":"2025-06-27T14:25:42.770305Z","last_seen":"2026-02-03T08:21:52.163924Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.m.bostanciescortq.com/","fqdn":"www.m.bostanciescortq.com","domain":"bostanciescortq.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e5ea76b1d01222698098ef9ffd3e2fd5","sha1":"b47cbbbbfd6c09e780755b3239ce3122cac99a96","sha256":"fbe31135b7ece0ec9dfb4c197a5575cba067296498a54f4edcd02caeeeb5dcca","sha512":"d4032f16322193bcc121a6173449943a0dfaa0f6282391ede483e884090b1faa71e11bac64d34cc4fdc33ce46082703206ac03d8f60c2c8e664ac1167779c167","ssdeep":"","tlshash":"4311f07971b5022003f6c0baf5ea3e08647a0c5f3b05a2407e6c47461d6bee6a1f6e5e","size":1096,"data":"","first_seen":"2025-11-07T18:36:06.468445Z","last_seen":"2026-02-03T08:21:52.164787Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"www.m.bostanciescortq.com/bell.svg","fqdn":"www.m.bostanciescortq.com","domain":"bostanciescortq.com","tld":"com"},"ip":{"addr":"193.105.134.30","port":80,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.m.bostanciescortq.com/","date":"2025-12-06T14:04:53.611Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /bell.svg HTTP/1.1\r\nHost: www.m.bostanciescortq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.m.bostanciescortq.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 14:04:53 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Thu, 27 Nov 2025 18:07:30 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69289362-7d7\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2007,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"82f8ae5b95d9804d75e342908cbb80b9","sha1":"613a041672a98c0be5c5ef8ad6fca3f9be4fc069","sha256":"16981528917d428ad33dda9d3eb796177afdd0b6667379081c5518927a1a9a03","sha512":"6c060b0efc5aaa5013ea23358b8da1bf41f4506d80b7bc35bfc3f71d89713c71c7a9be75a5845199058ec5c9adcdba36063184245f1860fd890269205d052f49","ssdeep":"","tlshash":"2a4111f5d6c9f1e0a446abd99f2a919a339e30ff3b91dac602449ac0e012038988cc14","first_seen":"2025-11-07T18:36:06.45735Z","last_seen":"2026-02-03T08:21:52.157049Z","times_seen":293,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":26,"dns":1,"connect":8,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.m.bostanciescortq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.m.bostanciescortq.com/favicon.svg","fqdn":"www.m.bostanciescortq.com","domain":"bostanciescortq.com","tld":"com"},"ip":{"addr":"193.105.134.30","port":80,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.m.bostanciescortq.com/","date":"2025-12-06T14:04:53.775Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: www.m.bostanciescortq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.m.bostanciescortq.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 14:04:53 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Thu, 27 Nov 2025 18:07:30 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69289362-2ba\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":698,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2f9102020a99583a4f5c7d977389a4a7","sha1":"61bc9ff7fcfb0ecc53564282530695ed615f10d6","sha256":"c1b9aa8ba7fad00cf2042d64ccddc0a23489efa8d0f706b4ccd4cc2867ee4e97","sha512":"1e75989e2f530c63ea9c0dc33be195030005c194432979d5c62f213699bf6b10a0a4e087ff0fe9c7dae2caebeb444f186ac934d931c320b9052f92d001ffb8c9","ssdeep":"","tlshash":"f801978831a52075e2510b4047b57c84233ef04f49d1384997dc3a668d4deb62bed399","first_seen":"2025-11-13T21:28:43.09227Z","last_seen":"2026-02-03T08:21:52.159043Z","times_seen":243,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.m.bostanciescortq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.m.bostanciescortq.com/logo.svg","fqdn":"www.m.bostanciescortq.com","domain":"bostanciescortq.com","tld":"com"},"ip":{"addr":"193.105.134.30","port":80,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.m.bostanciescortq.com/","date":"2025-12-06T14:04:53.607Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: www.m.bostanciescortq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.m.bostanciescortq.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 14:04:53 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Thu, 27 Nov 2025 18:07:30 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69289362-806\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2054,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"32af2241a3864f4e7369bfb2b2fcfda4","sha1":"1a4aed10196429235c0d0967a31534d8ea90b812","sha256":"b028caf4a97470b1369995fc4e28d618cf3fb4be1699cf5e25abf6674cb2a51e","sha512":"49cbd3f9d1028ba4bc94e541240936b6321ce29d159f472525bdf0eccf0023ba012f3f8f92a5348e0eca2a409e2ac1d38b3de2beaac111c0b11e0b306758cdde","ssdeep":"","tlshash":"094120d94984f534b9818ffe5a29b025f237fce4f202c1e449c3250769810ad2aaddaf","first_seen":"2025-11-07T18:36:06.461068Z","last_seen":"2026-02-03T08:21:52.150038Z","times_seen":293,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":29,"dns":1,"connect":8,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.m.bostanciescortq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.m.bostanciescortq.com/icon.svg","fqdn":"www.m.bostanciescortq.com","domain":"bostanciescortq.com","tld":"com"},"ip":{"addr":"193.105.134.30","port":80,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.m.bostanciescortq.com/","date":"2025-12-06T14:04:53.608Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /icon.svg HTTP/1.1\r\nHost: www.m.bostanciescortq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.m.bostanciescortq.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 14:04:53 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Thu, 27 Nov 2025 18:07:30 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69289362-692\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1682,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8155b5a1de4d4c47da7bba99b03120e3","sha1":"6dfa7536ce273c5b4ce580e7ddf560d0cf8e5e58","sha256":"2ff692ff73df7225162203982e4ba8f86dde13fcdabbfe6a2bb9f24b253d108e","sha512":"e41f72b8d6ed4f4f6d626f257f64e94ab706115c796bb58464f6515c1d73e54eb3bd613adb02f9a01123138e83d03e0dd7720e38fb9e729289d9da47a2564eb2","ssdeep":"","tlshash":"963166f2c5eae5e049057ff4d83780adbd672cfe7f88ca99c1846c54914847ce44d848","first_seen":"2025-11-07T18:36:06.461905Z","last_seen":"2026-02-03T08:21:52.15307Z","times_seen":293,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":28,"dns":0,"connect":8,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.m.bostanciescortq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.m.bostanciescortq.com/mail.svg","fqdn":"www.m.bostanciescortq.com","domain":"bostanciescortq.com","tld":"com"},"ip":{"addr":"193.105.134.30","port":80,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.m.bostanciescortq.com/","date":"2025-12-06T14:04:53.610Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /mail.svg HTTP/1.1\r\nHost: www.m.bostanciescortq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.m.bostanciescortq.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 14:04:53 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Thu, 27 Nov 2025 18:07:30 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69289362-329\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":809,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cd832466ea589ad994e3ae72763ae896","sha1":"b107bd3afce1c7d5f07d35a421c49977dfc147c8","sha256":"b86009a5afd5d7aa26ae67c56006094d56fdd08206dbaa19f69fef614b5abf7c","sha512":"531f89f01b1e9aecb3523a986475a495ac9adf6bd8380727363300cb7ef2a9d6a7448d281a9172afa246dbc552a8593a40525b22497f3a1276d5f6aa00e39d8f","ssdeep":"","tlshash":"b901aff1e7b5b584d30a57b18df0b55f320b29a91d7389c89452ad9cd264dad0714c14","first_seen":"2025-11-07T18:36:06.462669Z","last_seen":"2026-02-03T08:21:52.154426Z","times_seen":293,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":27,"dns":1,"connect":8,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.m.bostanciescortq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.m.bostanciescortq.com/script.js?v=1765029893593","fqdn":"www.m.bostanciescortq.com","domain":"bostanciescortq.com","tld":"com"},"ip":{"addr":"193.105.134.30","port":80,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.m.bostanciescortq.com/","date":"2025-12-06T14:04:53.613Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /script.js?v=1765029893593 HTTP/1.1\r\nHost: www.m.bostanciescortq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.m.bostanciescortq.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 14:04:53 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":459,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"445697371633c79871bf78a0fdf3c370","sha1":"2927e758128fbfe0ffbe898288e8bf700c84f408","sha256":"23cb3e29ca4ecece95eaf4a5e45fc628bf2ce1d21a01da4ef33d71e8d8e4630c","sha512":"587e1db171c52e6ae7bd37ae5d8896a62f39523bd591219088067af64d6e521095bc0add46e0c1397fd112ec316c467c289e25eefaf7858a7b505532a3b471b6","ssdeep":"","tlshash":"74f02e7721347a7405a575bb36c657c8d63b00efb80510013e098d181f746e60372f9d","first_seen":"2025-12-05T14:56:02.67166Z","last_seen":"2025-12-08T00:33:51.961738Z","times_seen":64,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.m.bostanciescortq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.m.bostanciescortq.com/","fqdn":"www.m.bostanciescortq.com","domain":"bostanciescortq.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-06T14:04:53.217Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.m.bostanciescortq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T17:57:29.880101Z","times_seen":17840789,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":14,"connect":8,"send":0,"wait":0,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.m.bostanciescortq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.m.bostanciescortq.com/","fqdn":"www.m.bostanciescortq.com","domain":"bostanciescortq.com","tld":"com"},"ip":{"addr":"193.105.134.30","port":80,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-06T14:04:53.317Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.m.bostanciescortq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 14:04:53 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24143,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15068), with CRLF line terminators","md5":"81dafc14a61eb81fd1018686d2be5e6c","sha1":"754fdaf3d78db533526a7663c591fca960734749","sha256":"38a5726547267494560f517643873ceff4840f727d48cdf15d5a7662b8788459","sha512":"7fed0fa91fbaa9a91e0fe70acfa42341819be978bff0597c857f57a02cd023636e6f3d2b88f9e8fa54035c6aab7e4b90c5ea7a9ff47f3494e789071c0ce14b13","ssdeep":"384:It9EZhldnTKCmbf9pCJZep+GjkO/KwO4dC+kQCI/jGsZlutcbJyzty9yMFEEiOyt:IsZhla9pCJEprTKr4WQCqqftIyzH54fW","tlshash":"0fb28d31b586200a1ab1e55bfb11be0cffa9007fa60b166134bc529f7fe2d648527d98","first_seen":"2025-12-06T14:05:19.65927Z","last_seen":"2025-12-06T14:05:19.65927Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":8,"dns":0,"connect":8,"send":0,"wait":165,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.m.bostanciescortq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.m.bostanciescortq.com/style.css","fqdn":"www.m.bostanciescortq.com","domain":"bostanciescortq.com","tld":"com"},"ip":{"addr":"193.105.134.30","port":80,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.m.bostanciescortq.com/","date":"2025-12-06T14:04:53.606Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: www.m.bostanciescortq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.m.bostanciescortq.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 14:04:53 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 27 Nov 2025 18:07:30 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69289362-12dc\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4828,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"5754c32a98dc53994b7b10e2c7edabe5","sha1":"315cb12fc138b932de08d43401414cab95dfd246","sha256":"1992412e3a1020da3805f21c9c6dbed6431a79e9cddc5761ee7f9ee373ff7306","sha512":"cfc4dcf3f1a3b92bf61a971005dcf0cb4bcf4e4eb1576a283e55616e925097e006aea0f0fddcb470ce1cf681ca061617f48ce0bf24e01cf328eebfc7728eabf5","ssdeep":"48:E8pdnkKw8BK19dQQoQQQ0t33gtEbPaCM+DWlKhX08Bs818X0yb898f8KLfHV8fDT:E8rjw88190gtwRPWlKhXILfUupM","tlshash":"b1a1f016ea0910467132d278fb614705fb6980bb970646fd3ffc62286ff62658621fdc","first_seen":"2025-11-07T18:36:06.4639Z","last_seen":"2026-02-03T08:21:52.155737Z","times_seen":265,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.m.bostanciescortq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}