{"report_id":"a1d4aed8-51db-48e2-8a53-cd551161760d","version":6,"status":"done","tags":[],"date":"2026-01-07T07:56:33Z","url":{"schema":"https","addr":"syncvalidate.xyz","fqdn":"syncvalidate.xyz","domain":"syncvalidate.xyz","tld":"xyz"},"ip":{"addr":"95.214.235.120","port":0,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"syncvalidate.xyz/","fqdn":"syncvalidate.xyz","domain":"syncvalidate.xyz","tld":"xyz"},"title":"IssueSync | You're Covered!","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T07:58:21.484737Z","times_seen":17669411,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"syncvalidate.xyz","fqdn":"syncvalidate.xyz","domain":"syncvalidate.xyz","tld":"xyz"},"ip":{"addr":"95.214.235.120","port":0,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-11T07:56:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"syncvalidate.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"syncvalidate.xyz","ip":{"addr":"95.214.235.120","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"domain_registered":"2025-12-31","domain_rank":0,"first_seen":"2026-01-07T07:56:33.830856Z","last_seen":"2026-01-07T07:56:33.830856Z","alert_count":6,"request_count":6,"received_data":6542201,"sent_data":2742,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"syncvalidate.xyz/ad70f5c7-651b-4439-9a5d-17bcf9cc0269","fqdn":"syncvalidate.xyz","domain":"syncvalidate.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e21c7073dd3f60811af1a791d551817","sha1":"077553740f37d68445d1ae0c7e68d14fea65789d","sha256":"3af13eb81f4adfdcca76f9f1ed24f1441a147b6319c9a0993076431dfe5b2391","sha512":"7f7c28429efa881ae4dff484c5d207d2687c1715a36f2bb6c80738e600032919e818878bff24de21fdc3f5a72dc6f03a540a9f82d216fe7485c35f40012cb96d","ssdeep":"","tlshash":"ee11ef00f670e8b612ef58d100313807f2545869f16d84a477bdecb320b18de6bab235","size":1000,"data":"","first_seen":"2025-03-11T06:37:48.554747Z","last_seen":"2026-04-30T18:33:03.078686Z","times_seen":681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syncvalidate.xyz/smooth-2.17.0.js","fqdn":"syncvalidate.xyz","domain":"syncvalidate.xyz","tld":"xyz"},"ip":{"addr":"95.214.235.120","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"26b2509891771de392917b0c885b3807","sha1":"76170f37c90cd0a16f4b1bb194954a7c2912d32e","sha256":"3a69b62c0d2974d7187cbc4701bad2e9b1b21002c88071d1d3c0ebaf34947e80","sha512":"2503a51d4245d22ddbcc537f65d4de1acc3869d6851820b9874b6df3ad5d77315930101bd7d9945ff70392f7c041ec92d347f4100a8832b9732bf77be884c9f6","ssdeep":"1536:wb2EBoVSzAAvtiqUDDMlFHwpKOujaIgC3IzeteWGFpn8:wb2YoVSzAAvtiqUDDMlFHwpKOuj1/tRP","tlshash":"4d83b5d6a91bd4d08e5210cee473e905e1680923cd6df1a3aa3cdec2b45df66c4871bb","size":87489,"data":"","first_seen":"2026-01-07T07:56:37.249685Z","last_seen":"2026-01-07T07:56:39.856438Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"syncvalidate.xyz/images/icons/metamask-69ce6b56bbc9953dfb4aecebdf88729b.png","fqdn":"syncvalidate.xyz","domain":"syncvalidate.xyz","tld":"xyz"},"ip":{"addr":"95.214.235.120","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://syncvalidate.xyz/","date":"2026-01-07T07:56:09.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncvalidate.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 18:22:13 GMT","end":"Fri, 03 Apr 2026 18:22:12 GMT"},"fingerprint":{"sha1":"18:EB:9C:31:87:A3:4A:48:71:B0:7B:63:BA:0E:16:F6:36:C8:19:EE","sha256":"86:33:30:DE:8D:C9:D3:8F:CA:ED:FC:B7:B3:E7:24:C8:E3:D7:E5:0B:FB:D3:BE:B4:92:A9:59:10:5A:3A:0F:D7"}}},"request":{"raw":"GET /images/icons/metamask-69ce6b56bbc9953dfb4aecebdf88729b.png HTTP/1.1\r\nHost: syncvalidate.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 07:56:09 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-02T07:38:45.158038Z","times_seen":53539,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"syncvalidate.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncvalidate.xyz/images/icons/otherssss.jpg","fqdn":"syncvalidate.xyz","domain":"syncvalidate.xyz","tld":"xyz"},"ip":{"addr":"95.214.235.120","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://syncvalidate.xyz/","date":"2026-01-07T07:56:09.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncvalidate.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 18:22:13 GMT","end":"Fri, 03 Apr 2026 18:22:12 GMT"},"fingerprint":{"sha1":"18:EB:9C:31:87:A3:4A:48:71:B0:7B:63:BA:0E:16:F6:36:C8:19:EE","sha256":"86:33:30:DE:8D:C9:D3:8F:CA:ED:FC:B7:B3:E7:24:C8:E3:D7:E5:0B:FB:D3:BE:B4:92:A9:59:10:5A:3A:0F:D7"}}},"request":{"raw":"GET /images/icons/otherssss.jpg HTTP/1.1\r\nHost: syncvalidate.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 07:56:09 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-02T07:38:45.158038Z","times_seen":53539,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"syncvalidate.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncvalidate.xyz/secureproxy?e=jscdn/getFile","fqdn":"syncvalidate.xyz","domain":"syncvalidate.xyz","tld":"xyz"},"ip":{"addr":"95.214.235.120","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://syncvalidate.xyz/","date":"2026-01-07T07:56:10.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncvalidate.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 18:22:13 GMT","end":"Fri, 03 Apr 2026 18:22:12 GMT"},"fingerprint":{"sha1":"18:EB:9C:31:87:A3:4A:48:71:B0:7B:63:BA:0E:16:F6:36:C8:19:EE","sha256":"86:33:30:DE:8D:C9:D3:8F:CA:ED:FC:B7:B3:E7:24:C8:E3:D7:E5:0B:FB:D3:BE:B4:92:A9:59:10:5A:3A:0F:D7"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: syncvalidate.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://syncvalidate.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"u550ij607d8pw3vcsnnu\"}"}},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 07:56:10 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-02T07:38:45.158038Z","times_seen":53539,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"syncvalidate.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncvalidate.xyz/secureproxy.php?e=jscdn/getFile","fqdn":"syncvalidate.xyz","domain":"syncvalidate.xyz","tld":"xyz"},"ip":{"addr":"95.214.235.120","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://syncvalidate.xyz/","date":"2026-01-07T07:56:10.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncvalidate.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 18:22:13 GMT","end":"Fri, 03 Apr 2026 18:22:12 GMT"},"fingerprint":{"sha1":"18:EB:9C:31:87:A3:4A:48:71:B0:7B:63:BA:0E:16:F6:36:C8:19:EE","sha256":"86:33:30:DE:8D:C9:D3:8F:CA:ED:FC:B7:B3:E7:24:C8:E3:D7:E5:0B:FB:D3:BE:B4:92:A9:59:10:5A:3A:0F:D7"}}},"request":{"raw":"POST /secureproxy.php?e=jscdn/getFile HTTP/1.1\r\nHost: syncvalidate.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://syncvalidate.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"u550ij607d8pw3vcsnnu\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 07:56:12 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4727146,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1cecede2750dfa50773efd9f61a5be49","sha1":"80472af1d63abc78a64a5dce903614dcea0d9fa6","sha256":"19e131a46ac506e52401f5a1c7491177c01ec84624dc98d3e78e67906826eac5","sha512":"9929072b75ce3151dc64daac7bec4341ddb6c7f56546db273a806a46b8e60518777c3f86e9c144f002c143ffcfb8edce8da28f8eb0109c2856a86ba4f2a1289e","ssdeep":"24576:leoaQgmE8S2PROJMdlHHlKmYHZ7jry0E3zmyO95fdr2Dep:lry8S0DzHH9mDy0Eju9FR2yp","tlshash":"8f2523d57040f0c7352402f8b5e3edc8be2a709ff69356393b5caee0295656246acbe1","first_seen":"2026-01-07T07:56:37.245794Z","last_seen":"2026-01-07T07:56:39.854153Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"syncvalidate.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncvalidate.xyz/","fqdn":"syncvalidate.xyz","domain":"syncvalidate.xyz","tld":"xyz"},"ip":{"addr":"95.214.235.120","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-07T07:56:08.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncvalidate.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 18:22:13 GMT","end":"Fri, 03 Apr 2026 18:22:12 GMT"},"fingerprint":{"sha1":"18:EB:9C:31:87:A3:4A:48:71:B0:7B:63:BA:0E:16:F6:36:C8:19:EE","sha256":"86:33:30:DE:8D:C9:D3:8F:CA:ED:FC:B7:B3:E7:24:C8:E3:D7:E5:0B:FB:D3:BE:B4:92:A9:59:10:5A:3A:0F:D7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: syncvalidate.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 07:56:08 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 03 Jan 2026 20:17:08 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1725185,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (36574), with CRLF line terminators","md5":"ac51518a279179a6e90f4fe6af560749","sha1":"d09f9ac3ee556a6de8aa4d9a18c071f482f69425","sha256":"ae486ff1de4d504df0736560b7d93a924a8e0de79cae0a5e114dec9b90b3cf4c","sha512":"8a7a59cb3a5c5e59eeb1307775a1bb3c8d0e1eeed815468739e31450a468019b77c6a009aa8ac70223f92cd33e76b12ba6a1fbe45a97d92f46a5335152aa7c8d","ssdeep":"24576:Hnf3yysQmLuosPvh7Qz0ddsPiwUCv+VXKF:Hf8L6v2/UC2Q","tlshash":"962523714a4a1e9f433e8bb978ab4bc8367c5991b861d0c66647b0f7b0cf749096fc12","first_seen":"2026-01-07T07:56:37.248658Z","last_seen":"2026-01-07T07:56:39.855591Z","times_seen":2,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":213,"dns":119,"connect":46,"send":0,"wait":46,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"syncvalidate.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncvalidate.xyz/smooth-2.17.0.js","fqdn":"syncvalidate.xyz","domain":"syncvalidate.xyz","tld":"xyz"},"ip":{"addr":"95.214.235.120","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syncvalidate.xyz/","date":"2026-01-07T07:56:09.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncvalidate.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 18:22:13 GMT","end":"Fri, 03 Apr 2026 18:22:12 GMT"},"fingerprint":{"sha1":"18:EB:9C:31:87:A3:4A:48:71:B0:7B:63:BA:0E:16:F6:36:C8:19:EE","sha256":"86:33:30:DE:8D:C9:D3:8F:CA:ED:FC:B7:B3:E7:24:C8:E3:D7:E5:0B:FB:D3:BE:B4:92:A9:59:10:5A:3A:0F:D7"}}},"request":{"raw":"GET /smooth-2.17.0.js HTTP/1.1\r\nHost: syncvalidate.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncvalidate.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 07:56:09 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 03 Jan 2026 09:11:54 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87489,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"26b2509891771de392917b0c885b3807","sha1":"76170f37c90cd0a16f4b1bb194954a7c2912d32e","sha256":"3a69b62c0d2974d7187cbc4701bad2e9b1b21002c88071d1d3c0ebaf34947e80","sha512":"2503a51d4245d22ddbcc537f65d4de1acc3869d6851820b9874b6df3ad5d77315930101bd7d9945ff70392f7c041ec92d347f4100a8832b9732bf77be884c9f6","ssdeep":"1536:wb2EBoVSzAAvtiqUDDMlFHwpKOujaIgC3IzeteWGFpn8:wb2YoVSzAAvtiqUDDMlFHwpKOuj1/tRP","tlshash":"4d83b5d6a91bd4d08e5210cee473e905e1680923cd6df1a3aa3cdec2b45df66c4871bb","first_seen":"2026-01-07T07:56:37.249685Z","last_seen":"2026-01-07T07:56:39.856438Z","times_seen":2,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"syncvalidate.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}