{"report_id":"92ec6173-047f-42f8-9610-9b2cd1864141","version":6,"status":"done","tags":[],"date":"2026-04-15T20:16:25Z","url":{"schema":"https","addr":"sekiya-souzoku.com/Scripts/index.html","fqdn":"sekiya-souzoku.com","domain":"sekiya-souzoku.com","tld":"com"},"ip":{"addr":"157.7.107.106","port":0,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"final":{"url":{"schema":"https","addr":"sekiya-souzoku.com/Scripts/index.html","fqdn":"sekiya-souzoku.com","domain":"sekiya-souzoku.com","tld":"com"},"title":"Webmail Login","dom":{"size":274420,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65210)","md5":"d31dd499765d8dbf857ca206e3388f6b","sha1":"6c4c7db56c7e386a3b024e55a5c3b83a5565506c","sha256":"59633f7727531778ce86125fee578ea2ef6e1b57f252121f0f5cce1115d0dbeb","sha512":"627db0ebc813c517329cf4a9cd527fa80b4755a67b50883cdc24221afceb583c1fa4eab720587e754750b01a961b122bc74f1cb3584f82def15878d4a55ed456","ssdeep":"6144:1CGZhr4a/3pQWLRZFXvoONXgtmBwWRmSfSEYp8kn2oRD8ATZmk:1RkaBQoZFvOdWoSrdoRjYk","tlshash":"98441270a48858b6902d098c50d62c1c2d8cee67d74f4e56f61cacda8ff7b8e993f458","dom_hash":"domhash2e50a1f093c9eec1779c331209d78565","first_seen":"2026-04-14T21:39:14.849824Z","last_seen":"2026-06-04T12:55:53.375362Z","times_seen":15,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"sekiya-souzoku.com/Scripts/index.html","fqdn":"sekiya-souzoku.com","domain":"sekiya-souzoku.com","tld":"com"},"ip":{"addr":"157.7.107.106","port":0,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-20T20:16:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"sekiya-souzoku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"sekiya-souzoku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"sekiya-souzoku.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-15","alert":"Phishing Block","trigger":"sekiya-souzoku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"sekiya-souzoku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sekiya-souzoku.com","ip":{"addr":"157.7.107.106","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"domain_registered":"2023-06-12","domain_rank":0,"first_seen":"2026-04-14T21:39:10.046553Z","last_seen":"2026-04-14T21:39:10.046554Z","alert_count":5,"request_count":1,"received_data":274728,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sekiya-souzoku.com/Scripts/index.html","fqdn":"sekiya-souzoku.com","domain":"sekiya-souzoku.com","tld":"com"},"ip":{"addr":"157.7.107.106","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T20:16:03.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sekiya-souzoku.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 07:07:12 GMT","end":"Thu, 30 Apr 2026 07:07:11 GMT"},"fingerprint":{"sha1":"B3:86:46:1D:C4:FF:F0:34:E2:47:C2:8A:D4:E2:D1:5F:3D:81:1A:1D","sha256":"10:48:B6:E3:5A:07:A1:79:BE:5A:7D:AD:98:A7:7B:A8:9F:A2:AF:3C:3F:5D:63:7C:0B:05:A4:9E:BC:96:27:7E"}}},"request":{"raw":"GET /Scripts/index.html HTTP/1.1\r\nHost: sekiya-souzoku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 20:16:04 GMT\r\ncontent-type: text/html\r\ncontent-length: 175496\r\nserver: LiteSpeed\r\nlast-modified: Mon, 09 Jun 2025 18:51:24 GMT\r\netag: \"42fde-68472d2c-fca29f606da19ac1;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":274398,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65198), with CRLF line terminators","md5":"66454e33cb9095cdfb4f61362009eb4c","sha1":"fc814d27e30dd5ea072af72f617b6e555da4d1af","sha256":"1e09267ceecfd1f049a51a1e4586f6d4ffe1185abaa9fea74fd4971868728b31","sha512":"be8e4f4f977cff335641126754a9e326d365e3e22a259537969eb0d5ace0769bc6342b3ff28681148a8b20280010dc07a621cc76167468ace1e9e56130d8128d","ssdeep":"6144:6CGZhr4a/3pQWLRZFXvoONXgtmBwWRmSfSEYp8kn2oRD819Zf:6RkaBQoZFvOdWoSrdoRoD","tlshash":"82441231a4885876a03e494c40d6281c7d8cea63974f4e46fa1cacdb8ff7b9e953f458","first_seen":"2026-04-14T21:39:14.856553Z","last_seen":"2026-06-04T12:55:53.377541Z","times_seen":15,"resource_available":false,"data":null}},"time_used":4134,"timings":{"blocked":1582,"dns":1101,"connect":239,"send":0,"wait":244,"receive":720,"ssl":244},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"sekiya-souzoku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"sekiya-souzoku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"sekiya-souzoku.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-15","alert":"Phishing Block","trigger":"sekiya-souzoku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"sekiya-souzoku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}