{"report_id":"992ecad3-c946-4443-9a81-95c404b95f01","version":6,"status":"done","tags":[],"date":"2026-05-15T19:01:29Z","url":{"schema":"http","addr":"www.bigsaleapple.com/","fqdn":"www.bigsaleapple.com","domain":"bigsaleapple.com","tld":"com"},"ip":{"addr":"195.24.68.9","port":0,"asn":48287,"as":"Jsc ru-center","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"www.bigsaleapple.com/","fqdn":"www.bigsaleapple.com","domain":"bigsaleapple.com","tld":"com"},"title":"Big Sale Apple","dom":{"size":3989,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ec1d398718f42d91c468b5bbf25d8d8e","sha1":"82f7b34eca9b931fe981d77a67f8aaef0385a9e3","sha256":"158a508815e0e856cbc8d5f2a2830881ebdf961b8e9cc08cee49d80eaf077d8e","sha512":"13d09bb73f7a2db7b48862f20d9e7e9e51c09cce71f5b0db5845071251321842236b60f41e772023b0198b5b9b3d336c8f24f844159f339aa0d00798969504b6","ssdeep":"","tlshash":"a48114b34a959427065652c8fba17b1ca8938c2fed462c21f9fd064ba7d5df2881334f","dom_hash":"domhashd05673c4dd5a7c6d86e5b246f9d4db40","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.bigsaleapple.com/","fqdn":"www.bigsaleapple.com","domain":"bigsaleapple.com","tld":"com"},"ip":{"addr":"195.24.68.9","port":0,"asn":48287,"as":"Jsc ru-center","country":"Russia","country_code":"RU"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-19T19:01:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"www.bigsaleapple.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.bigsaleapple.com","ip":{"addr":"195.24.68.9","port":443,"asn":48287,"as":"Jsc ru-center","country":"Russia","country_code":"RU"},"domain_registered":"2016-06-04","domain_rank":0,"first_seen":"2026-05-15T19:01:30.055054Z","last_seen":"2026-05-15T19:01:30.055054Z","alert_count":25,"request_count":5,"received_data":195471,"sent_data":2276,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-05-13T19:34:05.395595Z","alert_count":0,"request_count":2,"received_data":8199,"sent_data":900,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.bigsaleapple.com/","fqdn":"www.bigsaleapple.com","domain":"bigsaleapple.com","tld":"com"},"ip":{"addr":"195.24.68.9","port":443,"asn":48287,"as":"Jsc ru-center","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c629a0c52a2afad699d260f673481fd","sha1":"a4fd0ed3e5daa31480eb6de0faa5d442f015cbf6","sha256":"ea0d804370930ee958af535ce56cddf1dda419bdc676315ae8af0fbb4c733471","sha512":"dac369a2699b0f8a0d32acfcdd5c43c73d77e3dbd07dda400d0087608fd5e3f857d6952b730d1ce20f89d095f67794d3549dfc16181276b92e550bb76c7e0a53","ssdeep":"","tlshash":"57c012b42900643a2daa096cb636dbe83d321563f2a23410e22cc16c0021ed31000ec8","size":193,"data":"","first_seen":"2023-03-07T01:31:07Z","last_seen":"2026-07-26T09:35:52.698368Z","times_seen":59280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bigsaleapple.com/","fqdn":"www.bigsaleapple.com","domain":"bigsaleapple.com","tld":"com"},"ip":{"addr":"195.24.68.9","port":443,"asn":48287,"as":"Jsc ru-center","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c202c1a3a82cc55fff65a395550790f8","sha1":"3b96e720a4caa0c95ab5685f7035699776c83215","sha256":"c3ad76d69ff3b9618233a4d1fd4469555d0d0396e6bb3b67cb88e7641cbf8d52","sha512":"fb07edce9b37d9afa471a08f7a95cc40bc4ae7abdb374952c65ffa678a008b0e999102042a34fe4349d9373700179e43d1d5809e17e7b79be8797f200f7e7e02","ssdeep":"","tlshash":"1fe0f1953cd8102183b2116967eb640db416793e1c0ead24f90dc8422f6ddbd082b54c","size":408,"data":"","first_seen":"2025-06-29T20:47:45.901876Z","last_seen":"2026-05-15T19:01:34.632115Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.bigsaleapple.com/","fqdn":"www.bigsaleapple.com","domain":"bigsaleapple.com","tld":"com"},"ip":{"addr":"195.24.68.9","port":443,"asn":48287,"as":"Jsc ru-center","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-15T19:01:07.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsaleapple.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 26 Nov 2025 15:38:53 GMT","end":"Mon, 28 Dec 2026 15:38:52 GMT"},"fingerprint":{"sha1":"DA:B0:B7:A2:8E:48:B8:FC:BB:C4:63:91:61:B4:60:C6:68:A2:6E:5F","sha256":"65:F1:DD:74:23:06:73:EB:12:DE:E5:D9:2C:58:EB:1E:C1:6D:51:2C:63:A1:06:83:67:95:8A:13:CD:AA:BE:54"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.bigsaleapple.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 15 May 2026 19:01:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":4035,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"6d6354aac2ffc84db766b8d528673044","sha1":"49c446d53700e829796ab6eb3ee4211400e4783f","sha256":"eb0adc529ece19f0dce0b83d3209f34adcb123fd07e5f736871d6deffa66bfbe","sha512":"8d20e76946f7b14ddbdbd7618a2cf3c5b4f3088c77d536b7a594ff4e4e2ecaf3d4837c03b5fd6484e58c4132949bd0f58ceba9806aa70ce74fd1e467f730cbd5","ssdeep":"","tlshash":"8e8123b74a955027065282c8fb927a1ce8938c2fed461c21f9fd068ba7e5df6481330f","first_seen":"2026-05-15T19:01:34.623246Z","last_seen":"2026-05-15T19:01:34.623246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1068,"timings":{"blocked":509,"dns":55,"connect":47,"send":0,"wait":50,"receive":0,"ssl":404},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"www.bigsaleapple.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bigsaleapple.com/files/bootstrap.min.css","fqdn":"www.bigsaleapple.com","domain":"bigsaleapple.com","tld":"com"},"ip":{"addr":"195.24.68.9","port":443,"asn":48287,"as":"Jsc ru-center","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bigsaleapple.com/","date":"2026-05-15T19:01:08.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsaleapple.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 26 Nov 2025 15:38:53 GMT","end":"Mon, 28 Dec 2026 15:38:52 GMT"},"fingerprint":{"sha1":"DA:B0:B7:A2:8E:48:B8:FC:BB:C4:63:91:61:B4:60:C6:68:A2:6E:5F","sha256":"65:F1:DD:74:23:06:73:EB:12:DE:E5:D9:2C:58:EB:1E:C1:6D:51:2C:63:A1:06:83:67:95:8A:13:CD:AA:BE:54"}}},"request":{"raw":"GET /files/bootstrap.min.css HTTP/1.1\r\nHost: www.bigsaleapple.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bigsaleapple.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 15 May 2026 19:01:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 23 Jun 2022 07:55:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62b41c8c-a61b\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42523,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (42164)","md5":"c2656e265ef58a9cc9f4b70b15da5fb9","sha1":"85c5ebdb89d4574d72688c2650d4b84b9b09770a","sha256":"f1d083ffaa644c708f11db29707aa57c19246e6d32643b03fee3f82c17b224b3","sha512":"6417aadebeef4ee35381bfc7034148d57fd061d84de9974d798468c6426c24a6bd1c9913cf517accf3e349fa06cbdd546d2883ea8391c595285fe0c6127e26e8","ssdeep":"384:6RvBBVkrJxvcwYBUQ7X85AUfvDUNeFUBOgBmjeYP4PSvSdlb1bGjpXJNNRyIrOM:2k0p38OBmjeYP4xb1bG/bRyIH","tlshash":"6313c811f36031aa2167c61c65d4aad63f256120da8e0fbbf93376e88b8d6c91373f05","first_seen":"2023-04-07T00:00:47Z","last_seen":"2026-07-26T09:35:52.685183Z","times_seen":68138,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"www.bigsaleapple.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bigsaleapple.com/files/logo.png","fqdn":"www.bigsaleapple.com","domain":"bigsaleapple.com","tld":"com"},"ip":{"addr":"195.24.68.9","port":443,"asn":48287,"as":"Jsc ru-center","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bigsaleapple.com/","date":"2026-05-15T19:01:08.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsaleapple.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 26 Nov 2025 15:38:53 GMT","end":"Mon, 28 Dec 2026 15:38:52 GMT"},"fingerprint":{"sha1":"DA:B0:B7:A2:8E:48:B8:FC:BB:C4:63:91:61:B4:60:C6:68:A2:6E:5F","sha256":"65:F1:DD:74:23:06:73:EB:12:DE:E5:D9:2C:58:EB:1E:C1:6D:51:2C:63:A1:06:83:67:95:8A:13:CD:AA:BE:54"}}},"request":{"raw":"GET /files/logo.png HTTP/1.1\r\nHost: www.bigsaleapple.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bigsaleapple.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 15 May 2026 19:01:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 26410\r\nlast-modified: Fri, 24 Jun 2022 10:28:06 GMT\r\netag: \"62b591b6-672a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26410,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 497 x 497, 8-bit/color RGBA, non-interlaced","md5":"6880eb831287ac9e4dfe536a9e52a992","sha1":"61e7d6c981f5e288bb2a8f8550070e98a15c88c8","sha256":"c4cb3406af84350e88f9bd7c9e742655e4e92ca4578d922f312fae42034f063b","sha512":"d397018f8fd954cf90d56cbeab942d8c6a07ac090b884cb1f22a4faa4d73edad9cb733292484b35c9e6dba4ff0e899001ff8355822fad773c3e1a6774906e5aa","ssdeep":"768:cXocUKabt9ii9lHYCVA6kE7KarMczsj4dHr:cFUPbt4iPHYrnE7Kn8Hr","tlshash":"4ec2d053d0d23eec8a95c74dae58b6d22d7d0f7487e84604204a2b07adb09e4dbdd38b","first_seen":"2025-06-29T20:47:45.893792Z","last_seen":"2026-05-15T19:01:34.625236Z","times_seen":4,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"www.bigsaleapple.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/website_icon.svg?4","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bigsaleapple.com/","date":"2026-05-15T19:01:08.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/website_icon.svg?4 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bigsaleapple.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.30.1\r\ndate: Fri, 15 May 2026 19:01:08 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 20 Jul 2020 20:41:37 GMT\r\netag: W/\"5f160181-768\"\r\nexpires: Tue, 19 May 2026 19:01:08 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1896,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"02f7553e1ac3129cd1c4d0442b5a0f81","sha1":"0dd8634450681fe1a2d0c1e5b02d6d0954e2772d","sha256":"0019255c610cb0843c524d7995905fa5201651fcc393846bee8414f0610097f5","sha512":"ac141a5648a3a22ceb295de8ecc6823f53d2a453316cd591dde888715344a60694316e1b85a5ceec72af62e34cc3d01768b020e5dfd5e0cb9916ec975ba4318e","ssdeep":"","tlshash":"1d41959d23ba14faf245c768d82560076a6704b7664980e4f08d6bfdaf180f3cb9d8d5","first_seen":"2023-05-31T00:52:27Z","last_seen":"2026-07-26T09:35:52.687196Z","times_seen":20268,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":12,"connect":24,"send":0,"wait":23,"receive":0,"ssl":178},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bigsaleapple.com/files/css","fqdn":"www.bigsaleapple.com","domain":"bigsaleapple.com","tld":"com"},"ip":{"addr":"195.24.68.9","port":443,"asn":48287,"as":"Jsc ru-center","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bigsaleapple.com/","date":"2026-05-15T19:01:08.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsaleapple.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 26 Nov 2025 15:38:53 GMT","end":"Mon, 28 Dec 2026 15:38:52 GMT"},"fingerprint":{"sha1":"DA:B0:B7:A2:8E:48:B8:FC:BB:C4:63:91:61:B4:60:C6:68:A2:6E:5F","sha256":"65:F1:DD:74:23:06:73:EB:12:DE:E5:D9:2C:58:EB:1E:C1:6D:51:2C:63:A1:06:83:67:95:8A:13:CD:AA:BE:54"}}},"request":{"raw":"GET /files/css HTTP/1.1\r\nHost: www.bigsaleapple.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bigsaleapple.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 15 May 2026 19:01:08 GMT\r\ncontent-length: 4088\r\nlast-modified: Thu, 23 Jun 2022 07:55:56 GMT\r\netag: \"ff8-5e218c89e257a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4088,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3dcd8d9dc8e7e53807231e6bc4648e37","sha1":"4fa9dc659c06e7fbaf25372c6af55795c9577ae1","sha256":"740052f6c1e166e7cbe71194bb23bc969be65887a991af38daa863403091282f","sha512":"70ab2aff63c06bf9ac47a781c93d2795731e0f3807e22bb3e230aaa38cf7c8f96d0d21abd270dd8ea6169f0657f795472a6fbc68caa6d23bd72b11a7744ba0ad","ssdeep":"","tlshash":"e08129a1481ba400ab431cd673cebe35ed4f52152446c4b6ebfe6ca8ade3d27436474e","first_seen":"2023-08-01T20:53:54Z","last_seen":"2026-05-15T19:01:34.627642Z","times_seen":25,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"www.bigsaleapple.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bigsaleapple.com/files/telegram.css","fqdn":"www.bigsaleapple.com","domain":"bigsaleapple.com","tld":"com"},"ip":{"addr":"195.24.68.9","port":443,"asn":48287,"as":"Jsc ru-center","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bigsaleapple.com/","date":"2026-05-15T19:01:08.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsaleapple.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 26 Nov 2025 15:38:53 GMT","end":"Mon, 28 Dec 2026 15:38:52 GMT"},"fingerprint":{"sha1":"DA:B0:B7:A2:8E:48:B8:FC:BB:C4:63:91:61:B4:60:C6:68:A2:6E:5F","sha256":"65:F1:DD:74:23:06:73:EB:12:DE:E5:D9:2C:58:EB:1E:C1:6D:51:2C:63:A1:06:83:67:95:8A:13:CD:AA:BE:54"}}},"request":{"raw":"GET /files/telegram.css HTTP/1.1\r\nHost: www.bigsaleapple.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bigsaleapple.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 15 May 2026 19:01:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 23 Jun 2022 10:18:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62b43dea-1ca4a\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":117322,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1862)","md5":"cab74f7f416ac6bddc65d470f0b87a8f","sha1":"4303c54d885802a351cb64f34b4f255e3ce90cc7","sha256":"de13017ca5b239bac0b609bf9a1337d290c28e76f4118484fa5cbbf4bea9c7ff","sha512":"1bc1eb5f1e1296c9971b2c7bef8cdbfeaac63df161b28a58034403c81ad30fb26ba46efa9196c26cbc0d7768a068e17f010f4bf575144e190315d4cd33eaac7e","ssdeep":"1536:NmzylcfDxYzbt3iw93BC2cXdm791WoDYzWlw4uJuhGNpfewltog69FjxNDpfoV6N:Gylc7xYzMwyVXkC0Yz8KL5u","tlshash":"4cb392db9ab99608746b80647ea35b42337d8003a54ece7dbbb1346cefc56d08173749","first_seen":"2025-06-29T20:47:45.897515Z","last_seen":"2026-05-15T19:01:34.629339Z","times_seen":4,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"www.bigsaleapple.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"www.bigsaleapple.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/apple-touch-icon.png","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bigsaleapple.com/","date":"2026-05-15T19:01:08.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/apple-touch-icon.png HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bigsaleapple.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.30.1\r\ndate: Fri, 15 May 2026 19:01:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 5644\r\nlast-modified: Thu, 21 Apr 2022 13:47:47 GMT\r\netag: \"62616083-160c\"\r\nexpires: Tue, 19 May 2026 19:01:08 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"295ccdb03006b8dfef45090dafbd46ac","sha1":"491ab660270e47cbac6a5731c51cca71c1c1b2b1","sha256":"a51d667d4262047c23e3a2a8aac3b46dc8a58c686cc013f2354011c07bf22cf3","sha512":"90bf3871af6d20372e1b7daa177afccaa16d30970873c2a1363d05fc49eca24b18e406835da051d79887e0e223aae345fd797cfa479f324f776e28b461b17bcd","ssdeep":"96:ZKgGepqI/QddfO0T+kST5610/DXhkyFBKNpu7UhDjuTu+uCCar+0xWl/rB61LVWR:yesBf+DNPVFANc7UhDku5G+0xWl/t6OR","tlshash":"28c19eb8f6ed2e5bc5f28693eb472665b2972a208534c06053f1ea1bd7b2121b4c6342","first_seen":"2023-05-02T07:47:09Z","last_seen":"2026-07-26T09:35:52.683793Z","times_seen":68528,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":13,"connect":21,"send":0,"wait":23,"receive":0,"ssl":180},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}