{"report_id":"9449b7c6-4f8e-4698-9dd8-ae3e33251729","version":6,"status":"done","tags":[],"date":"2026-02-23T12:32:23Z","url":{"schema":"http","addr":"konverzekryptomeny.top","fqdn":"konverzekryptomeny.top","domain":"konverzekryptomeny.top","tld":"top"},"ip":{"addr":"176.125.243.188","port":0,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"konverzekryptomeny.top/","fqdn":"konverzekryptomeny.top","domain":"konverzekryptomeny.top","tld":"top"},"title":"konverzekryptomeny","dom":{"size":5888,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5443)","md5":"efb9afb539d5d069abd5a76232d10821","sha1":"1bf7775c11a332161d498608ed83729f1e4cc617","sha256":"52b3338e865b5c892683017e0c27e5505e75dc4b5d2030e5b408ff6c675623d1","sha512":"db6b21e6fd95a49a95022c4b9c488be14ac612dfc7787aad236907cd01a972052bac2c001d94d0feb65ab4a955aac5341a8cc8ff0d6c8fb76faca78549a5cb60","ssdeep":"48:nQLf1G7RGYvqnBb41xGrOEyX7disNje8dKiT1e8dKC1e8dK/l1e8dKQ1e8dKVO1S:nQLf10tqnhsX1ggvTrMlBQORmHP","tlshash":"cdc1ef22660c5d1ef2134ad3eb68332921be52bfc85d5214e4b502f0834af99fe3f456","dom_hash":"domhash00f7cc335c76ab8a13ebc0ccb97f2fc8","first_seen":"2026-02-23T12:32:27.986654Z","last_seen":"2026-02-23T12:33:06.797448Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"konverzekryptomeny.top","fqdn":"konverzekryptomeny.top","domain":"konverzekryptomeny.top","tld":"top"},"ip":{"addr":"176.125.243.188","port":0,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-30T12:32:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"konverzekryptomeny.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"konverzekryptomeny.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"konverzekryptomeny.top","ip":{"addr":"176.125.243.188","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2026-02-20","domain_rank":0,"first_seen":"2026-02-23T12:32:24.194685Z","last_seen":"2026-02-23T12:32:24.194685Z","alert_count":12,"request_count":6,"received_data":187686,"sent_data":2754,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"konverzekryptomeny.top/assets/index-e3abb29d.js","fqdn":"konverzekryptomeny.top","domain":"konverzekryptomeny.top","tld":"top"},"ip":{"addr":"176.125.243.188","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1223fa587177226bb1c773fe4721e1cd","sha1":"f1f448a673f599a798e90f2a4013cc15819890a9","sha256":"bc90a0cdd5ca55dbe117bb227b13a2c56efb6737471727722abad1a1cf98e5a1","sha512":"33a27f6372222231e8b1cc28ef1936dbb50cafd56bb396dfa216a8b318f9d49ad854505397df6eb05749b2b70df582d66e4218078988e0c85aa3626ab43b6209","ssdeep":"3072:bzp42K3l/ivBzmiUnYl5/VNaZIxzfPuikH:J0logiUnYxNHuikH","tlshash":"76f30be831aeb5626ba316b5006f1507b33d29172c4c8860b111fdee7bb540991bbfed","size":169135,"data":"","first_seen":"2026-02-23T12:32:27.995639Z","last_seen":"2026-02-23T12:33:06.798384Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"konverzekryptomeny.top/assets/index-ca3b5d1a.css","fqdn":"konverzekryptomeny.top","domain":"konverzekryptomeny.top","tld":"top"},"ip":{"addr":"176.125.243.188","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://konverzekryptomeny.top/","date":"2026-02-23T12:32:01.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konverzekryptomeny.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 12:17:16 GMT","end":"Thu, 21 May 2026 12:17:15 GMT"},"fingerprint":{"sha1":"70:A2:EB:AA:B5:CE:72:21:89:0C:A1:52:6A:4B:19:A8:62:72:4C:1E","sha256":"AF:E2:A7:D7:8F:D6:28:B6:A5:D8:0E:F7:C7:18:BF:75:57:E6:13:0F:2B:6C:2A:3C:3A:CA:43:52:F1:2D:75:69"}}},"request":{"raw":"GET /assets/index-ca3b5d1a.css HTTP/1.1\r\nHost: konverzekryptomeny.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konverzekryptomeny.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 23 Feb 2026 12:32:01 GMT\r\ncontent-type: text/css\r\ncontent-length: 2329\r\nlast-modified: Fri, 20 Feb 2026 12:58:10 GMT\r\netag: \"69985a62-919\"\r\nexpires: Tue, 23 Feb 2027 12:32:01 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2329,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2328)","md5":"1d3a5fa99a1fe2d433b6dd66e3851a88","sha1":"a72d3bac7ff0394fe7b6bcd6765a6add5f3e8314","sha256":"ca3b5d1a00903be25cda640cbccb9348ed8ce6d150402a0200a10671ea5417f7","sha512":"4f458a2470069bf9e66eb6b88ccf6c803d779a245a9bacbf345e22c63bee845818f182ee66254d09c4abfb320c2c66a853249cf6547e2780d8f5f3667fe87c35","ssdeep":"","tlshash":"f8416423b5a0612cf5178ca0f451b78b24189826c05a977bf9537938c9ce1e31b29b2d","first_seen":"2026-02-23T12:32:27.992821Z","last_seen":"2026-02-23T12:33:06.802323Z","times_seen":2,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"konverzekryptomeny.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"konverzekryptomeny.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konverzekryptomeny.top/assets/index-e3abb29d.js","fqdn":"konverzekryptomeny.top","domain":"konverzekryptomeny.top","tld":"top"},"ip":{"addr":"176.125.243.188","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konverzekryptomeny.top/","date":"2026-02-23T12:32:01.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konverzekryptomeny.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 12:17:16 GMT","end":"Thu, 21 May 2026 12:17:15 GMT"},"fingerprint":{"sha1":"70:A2:EB:AA:B5:CE:72:21:89:0C:A1:52:6A:4B:19:A8:62:72:4C:1E","sha256":"AF:E2:A7:D7:8F:D6:28:B6:A5:D8:0E:F7:C7:18:BF:75:57:E6:13:0F:2B:6C:2A:3C:3A:CA:43:52:F1:2D:75:69"}}},"request":{"raw":"GET /assets/index-e3abb29d.js HTTP/1.1\r\nHost: konverzekryptomeny.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konverzekryptomeny.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 23 Feb 2026 12:32:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 169135\r\nlast-modified: Fri, 20 Feb 2026 12:58:10 GMT\r\netag: \"69985a62-294af\"\r\nexpires: Tue, 23 Feb 2027 12:32:01 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169135,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37529)","md5":"1223fa587177226bb1c773fe4721e1cd","sha1":"f1f448a673f599a798e90f2a4013cc15819890a9","sha256":"bc90a0cdd5ca55dbe117bb227b13a2c56efb6737471727722abad1a1cf98e5a1","sha512":"33a27f6372222231e8b1cc28ef1936dbb50cafd56bb396dfa216a8b318f9d49ad854505397df6eb05749b2b70df582d66e4218078988e0c85aa3626ab43b6209","ssdeep":"3072:bzp42K3l/ivBzmiUnYl5/VNaZIxzfPuikH:J0logiUnYxNHuikH","tlshash":"76f30be831aeb5626ba316b5006f1507b33d29172c4c8860b111fdee7bb540991bbfed","first_seen":"2026-02-23T12:32:27.995639Z","last_seen":"2026-02-23T12:33:06.798384Z","times_seen":2,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"konverzekryptomeny.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"konverzekryptomeny.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konverzekryptomeny.top/coinbase-logo.png","fqdn":"konverzekryptomeny.top","domain":"konverzekryptomeny.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konverzekryptomeny.top/","date":"2026-02-23T12:32:01.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konverzekryptomeny.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 12:17:16 GMT","end":"Thu, 21 May 2026 12:17:15 GMT"},"fingerprint":{"sha1":"70:A2:EB:AA:B5:CE:72:21:89:0C:A1:52:6A:4B:19:A8:62:72:4C:1E","sha256":"AF:E2:A7:D7:8F:D6:28:B6:A5:D8:0E:F7:C7:18:BF:75:57:E6:13:0F:2B:6C:2A:3C:3A:CA:43:52:F1:2D:75:69"}}},"request":{"raw":"GET /coinbase-logo.png HTTP/1.1\r\nHost: konverzekryptomeny.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konverzekryptomeny.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T14:51:47.486746Z","times_seen":17872751,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"konverzekryptomeny.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"konverzekryptomeny.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konverzekryptomeny.top/coinbase-logo.png","fqdn":"konverzekryptomeny.top","domain":"konverzekryptomeny.top","tld":"top"},"ip":{"addr":"176.125.243.188","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konverzekryptomeny.top/","date":"2026-02-23T12:32:01.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konverzekryptomeny.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 12:17:16 GMT","end":"Thu, 21 May 2026 12:17:15 GMT"},"fingerprint":{"sha1":"70:A2:EB:AA:B5:CE:72:21:89:0C:A1:52:6A:4B:19:A8:62:72:4C:1E","sha256":"AF:E2:A7:D7:8F:D6:28:B6:A5:D8:0E:F7:C7:18:BF:75:57:E6:13:0F:2B:6C:2A:3C:3A:CA:43:52:F1:2D:75:69"}}},"request":{"raw":"GET /coinbase-logo.png HTTP/1.1\r\nHost: konverzekryptomeny.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konverzekryptomeny.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 23 Feb 2026 12:32:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 6033\r\nlast-modified: Fri, 20 Feb 2026 12:58:10 GMT\r\netag: \"69985a62-1791\"\r\nexpires: Tue, 23 Feb 2027 12:32:01 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6033,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 342 x 73, 8-bit/color RGBA, non-interlaced","md5":"74ed07604b7162eab8e2b06062e77ff8","sha1":"5594bbebb56fa95112173b38a0ed63b94836bcf9","sha256":"b757727cabc7d67eb5f3b1422be2b3924cc32fb0fb405d079b36b6e6985ec3f8","sha512":"6d3341a3069d551e3d7cc05e624ba281b09b68e5881681621b10138c0eab489cbbdfdf367ac99e8d76c6c4ae88b76d182f437845ef6452c090e036303e2d61f3","ssdeep":"96:USVTyLypXAHyrKmi43GXTee43z/embMweXVqUpsxSIGb3vVmRzQgMx3Mmin/tEhk:USIsXAHyrKmiFTf43zWmbMZXVqSYrc3e","tlshash":"e5c19ebc473eec3623991476424b52241a27b8b3d275592e240d9ef08e2b566e7b6a02","first_seen":"2026-02-23T12:32:28.001111Z","last_seen":"2026-02-23T12:33:06.79998Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"konverzekryptomeny.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"konverzekryptomeny.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konverzekryptomeny.top/favicon.png","fqdn":"konverzekryptomeny.top","domain":"konverzekryptomeny.top","tld":"top"},"ip":{"addr":"176.125.243.188","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konverzekryptomeny.top/","date":"2026-02-23T12:32:01.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konverzekryptomeny.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 12:17:16 GMT","end":"Thu, 21 May 2026 12:17:15 GMT"},"fingerprint":{"sha1":"70:A2:EB:AA:B5:CE:72:21:89:0C:A1:52:6A:4B:19:A8:62:72:4C:1E","sha256":"AF:E2:A7:D7:8F:D6:28:B6:A5:D8:0E:F7:C7:18:BF:75:57:E6:13:0F:2B:6C:2A:3C:3A:CA:43:52:F1:2D:75:69"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: konverzekryptomeny.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konverzekryptomeny.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 23 Feb 2026 12:32:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 8178\r\nlast-modified: Fri, 20 Feb 2026 12:58:10 GMT\r\netag: \"69985a62-1ff2\"\r\nexpires: Tue, 23 Feb 2027 12:32:01 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8178,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"9fbb688f7c2e65586711ef8dc2977b97","sha1":"718817ea10011665c6e2be74368d52cbede36df4","sha256":"5ead7e051c20c80329c3beca73ed1cba3dea2d66e91c2c4e9eda21549662569b","sha512":"8b162ee3e730c91fbcd120bfe4a01bde315152c2cf90f33bb0437f946c1dde2dd8281684612cc3c6591028a49cebae9b9240c6a074acceb45079a7480b69a450","ssdeep":"192:nSe+IxnkbfBtQg2BnkEMJvHdyDEM2gbWVMDNt74TTuBC:SOxkbX92BkXJ1MF2gIMDD74/uk","tlshash":"e6f19e4bdc572656e4acd8f90eb0c88f763b1193117180a06ec6fb70b3b39619a67d49","first_seen":"2026-02-23T12:32:28.005425Z","last_seen":"2026-02-23T12:33:06.800877Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"konverzekryptomeny.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"konverzekryptomeny.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konverzekryptomeny.top/","fqdn":"konverzekryptomeny.top","domain":"konverzekryptomeny.top","tld":"top"},"ip":{"addr":"176.125.243.188","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-23T12:32:00.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konverzekryptomeny.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 12:17:16 GMT","end":"Thu, 21 May 2026 12:17:15 GMT"},"fingerprint":{"sha1":"70:A2:EB:AA:B5:CE:72:21:89:0C:A1:52:6A:4B:19:A8:62:72:4C:1E","sha256":"AF:E2:A7:D7:8F:D6:28:B6:A5:D8:0E:F7:C7:18:BF:75:57:E6:13:0F:2B:6C:2A:3C:3A:CA:43:52:F1:2D:75:69"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: konverzekryptomeny.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 23 Feb 2026 12:32:01 GMT\r\ncontent-type: text/html\r\ncontent-length: 461\r\nlast-modified: Mon, 23 Feb 2026 10:38:19 GMT\r\netag: \"699c2e1b-1cd\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":461,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"f8f1177444b5a9c273a9d1afc772e959","sha1":"81a38ec67b00d04563700c31ebfa5d3f5206ffe5","sha256":"c28c224511bfd332f3d6ba06a2bcb6add2a5a6a9c23d4b14089f28b2a7c701f6","sha512":"4c3acbe431c6b34a2c0ed8ee84172868c3753b2ac557cc8eec29b315c8f705ec623bafe04d24009595e33b05e538ec5a83f1b9f3f02ed12c138dfaeb2c850788","ssdeep":"","tlshash":"9df05c4184e0c916527006606ed1fa049f86d68787895e5832eb50794fc4bc5cedf5bc","first_seen":"2026-02-23T12:32:28.007707Z","last_seen":"2026-02-23T12:33:06.801586Z","times_seen":2,"resource_available":false,"data":null}},"time_used":994,"timings":{"blocked":471,"dns":347,"connect":52,"send":0,"wait":52,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"konverzekryptomeny.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"konverzekryptomeny.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}