{"report_id":"9f351391-6288-403b-9985-19a803aa56d9","version":6,"status":"done","tags":[],"date":"2026-05-12T19:56:07Z","url":{"schema":"http","addr":"vlentevent-soc.cc","fqdn":"vlentevent-soc.cc","domain":"vlentevent-soc.cc","tld":"cc"},"ip":{"addr":"178.16.52.249","port":0,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"vlentevent-soc.cc/","fqdn":"vlentevent-soc.cc","domain":"vlentevent-soc.cc","tld":"cc"},"title":"Loading","dom":{"size":2689402,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51221)","md5":"392155b55f490166d91908e1872a3674","sha1":"2d96bb15044ba516da8ea3f0d86c97d9c2183291","sha256":"ce4bc2f512256b4d41515ca24d278b16c18f19441058bc3781b3158473f89fdf","sha512":"18eccc66252850ab4c902a1663705f9939bb5ca7d6af9d67f0164f3a02840117ccd33850f02f376374b9493b01e9bc4390266a722723a80359a707a5177f4887","ssdeep":"12288:xaBoHUw9mHDYw24y2wL+uTbhgp6tByYfab7KsWYfToV0+rToUop2/JXeZchpi1XX:kOtKMBv2Y+Ab2O2H","tlshash":"08c572d63991b55e04878732368e2af658bfc505c5caa04af8c89eedf0dce7329487c5","dom_hash":"domhash3510a583cc183b781043b4744a117d73","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"vlentevent-soc.cc","fqdn":"vlentevent-soc.cc","domain":"vlentevent-soc.cc","tld":"cc"},"ip":{"addr":"178.16.52.249","port":0,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-16T19:56:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"vlentevent-soc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"vlentevent-soc.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"vlentevent-soc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"vlentevent-soc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"vlentevent-soc.cc","ip":{"addr":"77.110.109.119","port":443,"asn":0,"as":"","country":"Lebanon","country_code":"LB"},"domain_registered":"2026-04-23","domain_rank":0,"first_seen":"2026-05-12T19:56:38.953833Z","last_seen":"2026-05-12T19:56:38.953833Z","alert_count":4,"request_count":1,"received_data":2370758,"sent_data":486,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vlentevent-soc.cc/","fqdn":"vlentevent-soc.cc","domain":"vlentevent-soc.cc","tld":"cc"},"ip":{"addr":"77.110.109.119","port":443,"asn":0,"as":"","country":"Lebanon","country_code":"LB"},"introduction_type":"scriptElement","is_inline":true,"md5":"50cf1e2b297be0af2cb63c49f80a4911","sha1":"7e96155c0a87e6c98ca16fdb48ed3ea2cd136952","sha256":"732d44ec4512ac1018c113549562bf33337b22c7ad0db450e92488e2492827e5","sha512":"3a1f40a6ffecbc7d3027a18310fdc6272be3e53027a58a84c8e61166a2445f983085cd0cf2585ec7b508e23f7fcf48ee7ba0768d33bc0fd90bfa933709d6a895","ssdeep":"12288:qp6tByYfab7KsWYfToV0+rToUop2/JXeZchpi1Xu3R4NkJ3n6QEPLFoyz401yMYB:yO22","tlshash":"f5b50fd63991b55e048787323a8d2af658bfc505c5caa04af8c89eedf0dce7329487c5","size":2353939,"data":"","first_seen":"2026-05-12T19:58:07.765028Z","last_seen":"2026-05-12T19:58:07.765028Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"vlentevent-soc.cc/","fqdn":"vlentevent-soc.cc","domain":"vlentevent-soc.cc","tld":"cc"},"ip":{"addr":"77.110.109.119","port":443,"asn":0,"as":"","country":"Lebanon","country_code":"LB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-12T19:55:42.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vlentevent-soc.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 10:40:24 GMT","end":"Wed, 22 Jul 2026 10:40:23 GMT"},"fingerprint":{"sha1":"91:38:F8:4F:7D:5E:67:90:C5:3D:A2:DC:42:3F:DF:43:59:8A:29:AE","sha256":"C7:23:EA:F3:83:F7:89:5D:DA:9C:78:C8:2F:5F:13:4A:17:31:B9:C4:1F:1E:8F:52:88:3B:21:E5:E2:F9:FC:A4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vlentevent-soc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 698374\r\ncache-control: no-store\r\nx-edge-action: captcha\r\nset-cookie: sil_ses=18d3a9adf94863c4a41c248327359c12; Path=/; Domain=vlentevent-soc.cc; Max-Age=86400; HttpOnly; Secure; SameSite=None\n__Host-sil_ses=18d3a9adf94863c4a41c248327359c12; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=None; Partitioned\nsil_gate=ASAxOGQzYTlhZGY5NDg2M2M0YTQxYzI0ODMyNzM1OWMxMgGsoJygDSzoMPeHFYgs.fvcGjY2j8ZnPsEOJRYVH6figzb_NILq4wRam4sjp0qYNcRZ4ZoCElD6zA6gh2f3i7ycQQJrWgeN6ZHCfWub1CA; Path=/; Domain=vlentevent-soc.cc; Max-Age=600; HttpOnly; Secure; SameSite=None\n__Host-sil_gate=ASAxOGQzYTlhZGY5NDg2M2M0YTQxYzI0ODMyNzM1OWMxMgGsoJygDSzoMPeHFYgs.fvcGjY2j8ZnPsEOJRYVH6figzb_NILq4wRam4sjp0qYNcRZ4ZoCElD6zA6gh2f3i7ycQQJrWgeN6ZHCfWub1CA; Path=/; Max-Age=600; HttpOnly; Secure; SameSite=None; Partitioned\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 19:55:42 GMT\r\nalt-svc: h3=\":443\"; ma=60\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2369770,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (49412)","md5":"e227e8331e63ead52249122e779d7ca8","sha1":"028ac8d609c44e109336d9af2423ea650baf18e4","sha256":"6fc260d12bd544e5e3bd8ab07f3c74455ef26289439c052ac78fe3b523721fe4","sha512":"4aae75edbf2b189a5d8cd2951ede2d6c8e10e46070376861ca835ddd57a2bbd25e0e66f4ce2114123b18314a6e1f6e5fb7a193329ef62b62dbca67141bf15ee7","ssdeep":"12288:yp6tByYfab7KsWYfToV0+rToUop2/JXeZchpi1Xu3R4NkJ3n6QEPLFoyz401yMYy:0","tlshash":"ed25ffd63991b55e04878731368d6af698bfc905c5cba44af8c89eecf0dce7229483c5","first_seen":"2026-05-12T19:58:07.763284Z","last_seen":"2026-05-12T19:58:07.763284Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1558,"timings":{"blocked":388,"dns":171,"connect":101,"send":0,"wait":189,"receive":593,"ssl":112},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"vlentevent-soc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"vlentevent-soc.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"vlentevent-soc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"vlentevent-soc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}