{"report_id":"a262209f-b842-4eb5-a81a-7ca3e1db4729","version":6,"status":"done","tags":[],"date":"2026-01-08T01:47:09Z","url":{"schema":"http","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":0,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"final":{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"title":"MyMonero Wallet – Private, Fast \u0026 Secure XMR Access","dom":{"size":97844,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"827c53c58eaeda709c2ee8f7ee5fc1e2","sha1":"5d268f13e17147263939a21c01619e5705f1d620","sha256":"614cd14b56c7641e6b20f91330936fd6a79eed20209690fba78612c9824f6453","sha512":"25c130dd30354ac06dab42b8f4f88c6aca397890e3e897c841c9716ab9aa9a453fdb1aa19bc1aca75d0bb8e71e59593337d476c05387cba1a7649e845af72346","ssdeep":"1536:lUYp5euZAfmFqoNfI6I902B0liKzJPF/bKR9LV0RS0PgRNUhKKXJz9qxScw+pRWw:ZymFqoNfICliKtNG9LV0RS0IR85z9qL","tlshash":"e6a3c99a9b81160ab42bc5697d92e75863798103dd17ccbc73e1b01ccfcbaed41b2792","dom_hash":"domhasheaf117b16cfc0d8c148755c1146744ae","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":0,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-12T01:47:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-08","alert":"Hunting_JS_WebAssembly","trigger":"mymone.ro/dist/bundle.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"mymone.ro","ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"domain_registered":"2022-07-19","domain_rank":0,"first_seen":"2025-07-29T09:03:45.556306Z","last_seen":"2025-12-05T04:19:10.848822Z","alert_count":43,"request_count":14,"received_data":4718529,"sent_data":6216,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"ebd7c180c678db5ee41801a465c85edf","sha1":"cb54e5ff473e0f085c25424451e5d37bb539aba7","sha256":"a395f5914c525c02f757a10f37d43786014ca9ed5ed524ee79179c4674c0d4e2","sha512":"fa83763caa83247cdc994acb6e82b104fa089151cc82848f65547b7948ff2e3c58794db390f64db3523ff33aa7304dbf2ba65f3a185249f4aa54507ecbb41f89","ssdeep":"","tlshash":"06f0491470d82ebe9e5240b2d4595c6f60e444245f9dafb4f14ff93135ea870c1aa58b","size":656,"data":"","first_seen":"2024-08-20T12:53:14.081413Z","last_seen":"2026-01-08T01:47:13.281078Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"ba24c2aa913eadff5e0eb5f720d8332f","sha1":"ef4c8a017cd0ecd085e59cb7585b97fa135f0682","sha256":"d120ab501de814b82b1aa20f98f1497b125becbcff1cb9822ec44b0b90bcd3b6","sha512":"90b252eea30a3c83a4ebe8975dc42f67ddcd513f2ab816796188589dd43d79f2726fe2872932088b4a3b51e2383ed3e71327b89a10ad8c51f6f842ef35cad9e5","ssdeep":"","tlshash":"0411d51470e03e7e9e4940e2d4644c6b91ec0128dbd56bb4f18ef935b4e6860d3e929b","size":1079,"data":"","first_seen":"2024-08-20T12:53:14.066189Z","last_seen":"2026-01-08T01:47:13.282045Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"d9fb29984167482f62da39a7b70e64a0","sha1":"c24c691224187a9025ecf4b41876d3d3cab67118","sha256":"c00278f45ee31bd0b23f297772738eadeb416eec465c1f1bd16d2916a3834adb","sha512":"05c3c1c486a521feda51219e2d25c8e1262728c7fe966baac231dbccc87f7e0da9c046bbe925df740c1e5f8d1749955904b3b2c2916fa80572edafcfd2687f5d","ssdeep":"","tlshash":"d7b09b9875d3a191567221d8955fad8591348420208c1550545991557e6343d41768d8","size":119,"data":"","first_seen":"2023-04-27T21:40:59Z","last_seen":"2026-07-21T22:28:46.148243Z","times_seen":6069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"9fc3ae62cfdc47f034ffe7e289290acb","sha1":"454efcc1b6f7cc7ee2e521db5c4a692c81a6ef71","sha256":"cfd335eb353b8d1cb9b5f828989b032eb295597044c307a943c1b7cb40d5a373","sha512":"23702a26461c2249dce2addcc913866160fcea50380060451097f80b9576557698315c028990f34ab45aac25b5779edc1a2fbb4cd020b8de25c93097df1a5e7f","ssdeep":"","tlshash":"f6f0490074d43efe8e5540b2a4584c6b60a844245f4dafb0f14ff92271fa830c597197","size":630,"data":"","first_seen":"2024-08-20T12:53:14.047791Z","last_seen":"2026-01-08T01:47:13.28374Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"d9fb29984167482f62da39a7b70e64a0","sha1":"c24c691224187a9025ecf4b41876d3d3cab67118","sha256":"c00278f45ee31bd0b23f297772738eadeb416eec465c1f1bd16d2916a3834adb","sha512":"05c3c1c486a521feda51219e2d25c8e1262728c7fe966baac231dbccc87f7e0da9c046bbe925df740c1e5f8d1749955904b3b2c2916fa80572edafcfd2687f5d","ssdeep":"","tlshash":"d7b09b9875d3a191567221d8955fad8591348420208c1550545991557e6343d41768d8","size":119,"data":"","first_seen":"2023-04-27T21:40:59Z","last_seen":"2026-07-21T22:28:46.148243Z","times_seen":6069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"a792765cdd71ea926bc09cead706895c","sha1":"1f860bd31d1744c601232bba60e1cb65ac8d2c45","sha256":"149ebc478e4716e808d87924fe628ca478733f0275c01becc180b0faed161bd2","sha512":"507e09c5404d1be64dcff610fb891f76572146cf86ccf89ebe5776bb211cea8389da2a1b3c68580e6c5b8732362b97c7854aed7bc4af55e5115bfd9324bfa59d","ssdeep":"","tlshash":"e6f04910b0d43ebe8e5144b29859cc6b60a444245f8eafb0f14ef92675fa830d59a587","size":644,"data":"","first_seen":"2024-08-20T12:53:14.084499Z","last_seen":"2026-01-08T01:47:13.284689Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"d9fb29984167482f62da39a7b70e64a0","sha1":"c24c691224187a9025ecf4b41876d3d3cab67118","sha256":"c00278f45ee31bd0b23f297772738eadeb416eec465c1f1bd16d2916a3834adb","sha512":"05c3c1c486a521feda51219e2d25c8e1262728c7fe966baac231dbccc87f7e0da9c046bbe925df740c1e5f8d1749955904b3b2c2916fa80572edafcfd2687f5d","ssdeep":"","tlshash":"d7b09b9875d3a191567221d8955fad8591348420208c1550545991557e6343d41768d8","size":119,"data":"","first_seen":"2023-04-27T21:40:59Z","last_seen":"2026-07-21T22:28:46.148243Z","times_seen":6069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"7c28170f96bd6f272e3a9673752a6a4f","sha1":"60aa9de73843b1d932bb28fa8e1afb0d6dc3f2a8","sha256":"1d0ebc44189a9fb7c42aece4d48daae12a3f2240eb68c255d6166debbbcacdcc","sha512":"ed2376d92a7b796972bfb878cd5ce9d1d3bb887af523d3d2c67810177f99cd94d798111325be881f0f27514d7bd4bf2ffc2d7b4db2da7b95502d28df125df928","ssdeep":"","tlshash":"31f0c90034f02dfa8e6210e2a48d5cab90a489201f05aaa0b10ef82130aea31d2e60ca","size":509,"data":"","first_seen":"2024-08-20T12:53:14.060727Z","last_seen":"2026-01-08T01:47:13.285689Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"d9fb29984167482f62da39a7b70e64a0","sha1":"c24c691224187a9025ecf4b41876d3d3cab67118","sha256":"c00278f45ee31bd0b23f297772738eadeb416eec465c1f1bd16d2916a3834adb","sha512":"05c3c1c486a521feda51219e2d25c8e1262728c7fe966baac231dbccc87f7e0da9c046bbe925df740c1e5f8d1749955904b3b2c2916fa80572edafcfd2687f5d","ssdeep":"","tlshash":"d7b09b9875d3a191567221d8955fad8591348420208c1550545991557e6343d41768d8","size":119,"data":"","first_seen":"2023-04-27T21:40:59Z","last_seen":"2026-07-21T22:28:46.148243Z","times_seen":6069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"6a6070a6560148b69dbf9e38a1eacddb","sha1":"02c1c0bb9e757d168675d02d5b1584a8cff43f92","sha256":"76216990a6ae786866be58a4b811208139f0fce2dd0c7de6deade56897d658ea","sha512":"b4512330b744a9e40683853a532ba45d002eaf4d7b66c87f223f58a1b31ae1689b83e5c67082474f6e17a75e9f24ee177330b023ad04e3bca1d99baa5f2aad58","ssdeep":"","tlshash":"80f00e0430e01df7cf9310b2944e4c9f41b749241f45ada0b00efc2021eaa31c2d6086","size":501,"data":"","first_seen":"2024-08-20T12:53:14.059546Z","last_seen":"2026-01-08T01:47:13.286574Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"0c44a3fe66b5ccc3292d9af290317c9b","sha1":"66541b6c107e1b823b5df02157d4923b48eff6bf","sha256":"33323f14ac666ee63bbb0d8eed6ee6f6ec1ad1fe9c6c7179fdbfd056c5dad359","sha512":"61bdeaf87264669ae4b04e8e1f49f1f06494390c9762c2a45a6ee1a0edc153c753aa608001d361af10edabb3652f3ca09362b1b78de97f24a5634bf6a0633891","ssdeep":"","tlshash":"29b02bd425e39182427211c8890fac89e134c430108c1980244c80013a2343891714d8","size":123,"data":"","first_seen":"2023-04-27T21:41:00Z","last_seen":"2026-07-21T22:28:46.172396Z","times_seen":6731,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"d9fb29984167482f62da39a7b70e64a0","sha1":"c24c691224187a9025ecf4b41876d3d3cab67118","sha256":"c00278f45ee31bd0b23f297772738eadeb416eec465c1f1bd16d2916a3834adb","sha512":"05c3c1c486a521feda51219e2d25c8e1262728c7fe966baac231dbccc87f7e0da9c046bbe925df740c1e5f8d1749955904b3b2c2916fa80572edafcfd2687f5d","ssdeep":"","tlshash":"d7b09b9875d3a191567221d8955fad8591348420208c1550545991557e6343d41768d8","size":119,"data":"","first_seen":"2023-04-27T21:40:59Z","last_seen":"2026-07-21T22:28:46.148243Z","times_seen":6069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"d9fb29984167482f62da39a7b70e64a0","sha1":"c24c691224187a9025ecf4b41876d3d3cab67118","sha256":"c00278f45ee31bd0b23f297772738eadeb416eec465c1f1bd16d2916a3834adb","sha512":"05c3c1c486a521feda51219e2d25c8e1262728c7fe966baac231dbccc87f7e0da9c046bbe925df740c1e5f8d1749955904b3b2c2916fa80572edafcfd2687f5d","ssdeep":"","tlshash":"d7b09b9875d3a191567221d8955fad8591348420208c1550545991557e6343d41768d8","size":119,"data":"","first_seen":"2023-04-27T21:40:59Z","last_seen":"2026-07-21T22:28:46.148243Z","times_seen":6069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"d9fb29984167482f62da39a7b70e64a0","sha1":"c24c691224187a9025ecf4b41876d3d3cab67118","sha256":"c00278f45ee31bd0b23f297772738eadeb416eec465c1f1bd16d2916a3834adb","sha512":"05c3c1c486a521feda51219e2d25c8e1262728c7fe966baac231dbccc87f7e0da9c046bbe925df740c1e5f8d1749955904b3b2c2916fa80572edafcfd2687f5d","ssdeep":"","tlshash":"d7b09b9875d3a191567221d8955fad8591348420208c1550545991557e6343d41768d8","size":119,"data":"","first_seen":"2023-04-27T21:40:59Z","last_seen":"2026-07-21T22:28:46.148243Z","times_seen":6069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"d9fb29984167482f62da39a7b70e64a0","sha1":"c24c691224187a9025ecf4b41876d3d3cab67118","sha256":"c00278f45ee31bd0b23f297772738eadeb416eec465c1f1bd16d2916a3834adb","sha512":"05c3c1c486a521feda51219e2d25c8e1262728c7fe966baac231dbccc87f7e0da9c046bbe925df740c1e5f8d1749955904b3b2c2916fa80572edafcfd2687f5d","ssdeep":"","tlshash":"d7b09b9875d3a191567221d8955fad8591348420208c1550545991557e6343d41768d8","size":119,"data":"","first_seen":"2023-04-27T21:40:59Z","last_seen":"2026-07-21T22:28:46.148243Z","times_seen":6069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"d9fb29984167482f62da39a7b70e64a0","sha1":"c24c691224187a9025ecf4b41876d3d3cab67118","sha256":"c00278f45ee31bd0b23f297772738eadeb416eec465c1f1bd16d2916a3834adb","sha512":"05c3c1c486a521feda51219e2d25c8e1262728c7fe966baac231dbccc87f7e0da9c046bbe925df740c1e5f8d1749955904b3b2c2916fa80572edafcfd2687f5d","ssdeep":"","tlshash":"d7b09b9875d3a191567221d8955fad8591348420208c1550545991557e6343d41768d8","size":119,"data":"","first_seen":"2023-04-27T21:40:59Z","last_seen":"2026-07-21T22:28:46.148243Z","times_seen":6069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"b629ba2454d044fc22e6c40e60038328","sha1":"5b1b14a7ecc12c2ab22ed3098cdd5bf7e73df03f","sha256":"97c3de0ba6f5bd3737a2b94b57f7c4d52aea7d3549533d014b97de7008ac7ec9","sha512":"a9e7edd02ab9b0610261a641c56402f34918b9dc55984b74e39a96b86b25b67a01410ff6468500e8d4dca592b826e52c57660dfc6b05a97a395a5a4690ea532d","ssdeep":"","tlshash":"b5f0490474e42ebe8e4140b294585c6f60a444385f5dafb4f14ef92131ea871c5da587","size":638,"data":"","first_seen":"2024-08-20T12:53:14.062419Z","last_seen":"2026-01-08T01:47:13.288055Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"d9fb29984167482f62da39a7b70e64a0","sha1":"c24c691224187a9025ecf4b41876d3d3cab67118","sha256":"c00278f45ee31bd0b23f297772738eadeb416eec465c1f1bd16d2916a3834adb","sha512":"05c3c1c486a521feda51219e2d25c8e1262728c7fe966baac231dbccc87f7e0da9c046bbe925df740c1e5f8d1749955904b3b2c2916fa80572edafcfd2687f5d","ssdeep":"","tlshash":"d7b09b9875d3a191567221d8955fad8591348420208c1550545991557e6343d41768d8","size":119,"data":"","first_seen":"2023-04-27T21:40:59Z","last_seen":"2026-07-21T22:28:46.148243Z","times_seen":6069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"66b9a47b23015dc9a845797272d0cfb2","sha1":"e778ec8f297e5ec95e5df80e68a15ccb58d550f3","sha256":"4e3f13c83c8e18de6bb2bdea31132eb65562edb0782d18184154cc393fdd3632","sha512":"9f66c1e68d55d7fd7e6662fb9bcd11e53302d83859f1809115a6970ea51ddb249faecd5246d8ca294ed312f12a5f52add441f18b8d0e9f9af27fa7ad69084008","ssdeep":"","tlshash":"89b02bd526e390c252712188450fac81d034c43010cc4d40544881153a5703981314dc","size":124,"data":"","first_seen":"2023-04-27T21:41:02Z","last_seen":"2026-07-21T22:28:46.176706Z","times_seen":6733,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"d9fb29984167482f62da39a7b70e64a0","sha1":"c24c691224187a9025ecf4b41876d3d3cab67118","sha256":"c00278f45ee31bd0b23f297772738eadeb416eec465c1f1bd16d2916a3834adb","sha512":"05c3c1c486a521feda51219e2d25c8e1262728c7fe966baac231dbccc87f7e0da9c046bbe925df740c1e5f8d1749955904b3b2c2916fa80572edafcfd2687f5d","ssdeep":"","tlshash":"d7b09b9875d3a191567221d8955fad8591348420208c1550545991557e6343d41768d8","size":119,"data":"","first_seen":"2023-04-27T21:40:59Z","last_seen":"2026-07-21T22:28:46.148243Z","times_seen":6069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"ed78d15fc16f92575082c3e528bd16fd","sha1":"82e6fd75f18d687eeb38cd6687df65a0b8e23713","sha256":"07d532160290a41868d979ee487fcd442eb03461571104240befa45605685d64","sha512":"054b2c73186e0e89d53a40f5f1ddf2c723665db96fac783bcd52250c1a13d387cdd1adef3eedcec4b725f22b8cf46c8ba08c81ecbc0463a164ffeb3b92a13dff","ssdeep":"","tlshash":"34f0991430e03ebece5240b294695caf60e444288f8dafb0f04ef92231ea931d5a648b","size":654,"data":"","first_seen":"2024-08-20T12:53:14.047016Z","last_seen":"2026-01-08T01:47:13.289533Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"6825ff9e2a3dac80e3185f99d93c3d13","sha1":"a97d186265f46ef32718b73c460e1e10a5fe1a92","sha256":"ef6bf7db9e18fa776957ab736dcf5dd958c26ddf452ba2cc30d5f1da23c52cfd","sha512":"547872906f72c3b186ad71e32f66ead443ad090dc2d9549d6ab4abf81ae17e81e93c7dc5dc61e5d701cdcc96e50cd23c8d138b6c55c6b1a5a8bbdeb74b18f46d","ssdeep":"","tlshash":"a9018910b0e03eba9e4200b398a95c6b92ec00244f9aabb4f14ff93174e5560c3e908b","size":797,"data":"","first_seen":"2024-08-20T12:53:14.064248Z","last_seen":"2026-01-08T01:47:13.290478Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"310f8330b836a047ed0c1f80fd3c641b","sha1":"42c85b25c2bdc4fd1ebe89c63ec449523655b01d","sha256":"65975f3dc83f6fce298a09437dd44426568cd18a1a85b7a5da9e54aea032aa55","sha512":"e68160121bd0d98643cddd40d3eefdc53ad4b30d2ab80e3af8447374c270b84c220ed572c807c6f400c6bfee7b91bc2be3d9fe9fe414d7076ef3c9899c68f1fc","ssdeep":"","tlshash":"8ff0d40070d42df68f9200b6541d5caf50a54d241f05ada0f14ef93031faa31d5d6096","size":475,"data":"","first_seen":"2024-08-20T12:53:14.067201Z","last_seen":"2026-01-08T01:47:13.291457Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"d9fb29984167482f62da39a7b70e64a0","sha1":"c24c691224187a9025ecf4b41876d3d3cab67118","sha256":"c00278f45ee31bd0b23f297772738eadeb416eec465c1f1bd16d2916a3834adb","sha512":"05c3c1c486a521feda51219e2d25c8e1262728c7fe966baac231dbccc87f7e0da9c046bbe925df740c1e5f8d1749955904b3b2c2916fa80572edafcfd2687f5d","ssdeep":"","tlshash":"d7b09b9875d3a191567221d8955fad8591348420208c1550545991557e6343d41768d8","size":119,"data":"","first_seen":"2023-04-27T21:40:59Z","last_seen":"2026-07-21T22:28:46.148243Z","times_seen":6069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b0574a0febab581ef5ac7c40340d726","sha1":"b364f8d3bbcb7cd2140ec7655743490be69fc165","sha256":"36682b729b5a806f75f7be752933c0b8435a0a0d2a79767b204c7f5fd975bd8e","sha512":"6ce4903a03ccf282fd815ddb60ddc45368e78c3c977c0b3bb47447dd0d1883c903b714650fdc40421a2099ec8a9a413b5a9b10ae8ebb18de417ddfc8805d2356","ssdeep":"","tlshash":"f3d0802926d74924a91a4050871b23467345107b0d0674b07d5c45925f1ca4bf6b9fcc","size":201,"data":"","first_seen":"2025-07-27T16:05:40.993416Z","last_seen":"2026-01-08T01:47:13.292488Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"f9266f859272933b59f61bbb72d8d253","sha1":"bc873ea7e95529e33eda35e95a7d262a8b80977a","sha256":"7f0c9dbcbd5c32be5e91ec3c72da2c040e2a95cc9aadbf28d8c708cbbdb7de4b","sha512":"9039d34ceb6809d781aa009250923eec5bb63b8d454334933dc105751780517e85a1420648e25f9b40d40d9ae5e438b712f0cdc25b8cf14dcb0bb94ee855f696","ssdeep":"","tlshash":"f5e0205479aa4adb0ee32151285e9d6e5235cd20254cee51111de50015abe33f563055","size":338,"data":"","first_seen":"2024-08-20T12:53:14.076058Z","last_seen":"2026-01-08T01:47:13.293335Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"e7625d746a5e9d62416b0c12f69192c5","sha1":"3968512b0e57898404dd3049af900ad9d1f42b38","sha256":"c7fdab310628aba58fed9a3b55ab3234fe4c08b8407fafcd167f8b844b05618e","sha512":"322cd76bf8d55c1051e7909de4c1e82c77edda2c3975bb821363ef9b15e2f00b61867c5586cada496919004918b2cd00d1c86a2f550c8700038f2f0561e5e944","ssdeep":"","tlshash":"fdf0491071d82ebe8e4240b294585c6b61a448245f4eafb0f14ef93234ea831d1aa18b","size":640,"data":"","first_seen":"2024-08-20T12:53:14.080333Z","last_seen":"2026-01-08T01:47:13.294253Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"d9fb29984167482f62da39a7b70e64a0","sha1":"c24c691224187a9025ecf4b41876d3d3cab67118","sha256":"c00278f45ee31bd0b23f297772738eadeb416eec465c1f1bd16d2916a3834adb","sha512":"05c3c1c486a521feda51219e2d25c8e1262728c7fe966baac231dbccc87f7e0da9c046bbe925df740c1e5f8d1749955904b3b2c2916fa80572edafcfd2687f5d","ssdeep":"","tlshash":"d7b09b9875d3a191567221d8955fad8591348420208c1550545991557e6343d41768d8","size":119,"data":"","first_seen":"2023-04-27T21:40:59Z","last_seen":"2026-07-21T22:28:46.148243Z","times_seen":6069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"d9fb29984167482f62da39a7b70e64a0","sha1":"c24c691224187a9025ecf4b41876d3d3cab67118","sha256":"c00278f45ee31bd0b23f297772738eadeb416eec465c1f1bd16d2916a3834adb","sha512":"05c3c1c486a521feda51219e2d25c8e1262728c7fe966baac231dbccc87f7e0da9c046bbe925df740c1e5f8d1749955904b3b2c2916fa80572edafcfd2687f5d","ssdeep":"","tlshash":"d7b09b9875d3a191567221d8955fad8591348420208c1550545991557e6343d41768d8","size":119,"data":"","first_seen":"2023-04-27T21:40:59Z","last_seen":"2026-07-21T22:28:46.148243Z","times_seen":6069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"418eaef3d7872dde7d46c4611fb1bbe7","sha1":"4b7a6b3cdcc253df2c4bc87a4edd0d5b61ab6da5","sha256":"aac31b5a4d153148ebdbde4807413323b7cdd9f528973731dd4265820d6cb33b","sha512":"44e0489a573fac439fec3ab084696e68bf4d72555ffe34ddce0843dc17125354761a5e141b99bd824db8480f87c070af809375639254c793449a906c4fe6e075","ssdeep":"","tlshash":"04f0c00034e01ef6ce9300a268894c5b50a548205f199da0b04df82122faa31e1d6045","size":509,"data":"","first_seen":"2024-08-20T12:53:14.083486Z","last_seen":"2026-01-08T01:47:13.295194Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/dist/bundle.js","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"af199d8471264943bdd5b6dca580409a","sha1":"fbaace10f155d1931b08b973ea9bb21d2f9a1261","sha256":"0ce54f3700d67d0a0e0aaaf4eb9c18d680efa3ed9f665f998f694fffd8efb2e2","sha512":"0836102cba9f7089e6f503be8f0babc72a495d704aa732900552ea81baef4d78be190fc00b66b4ce383001c9d6a7cd7d5422513c59f0fadb10b380b4f6adcab2","ssdeep":"49152:Pi15+WMVX76PI+zZYeWWeyk3j/wYE0hJERJc0sgZBRhyiAco7Ui2sUGubDHPhsJi:t9Weyk3j/wYE0hJwoEbW0","tlshash":"70a56e847361703383966ae5157b110eb339ba1d680a447cf66cd8fb7fa9c84527af38","size":2231503,"data":"","first_seen":"2025-11-18T02:14:53.958979Z","last_seen":"2026-01-08T01:47:13.296722Z","times_seen":3,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-08","alert":"Hunting_JS_WebAssembly","trigger":"mymone.ro/dist/bundle.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"85a3eccda836110e42b3735ced2bfa11","sha1":"41aef69027eee29fd87cd7c0a1fe3816fc6878e3","sha256":"4208cf9a53d7c39492c3de7be20f23e5a7597e514d612af16d29ff4f1072f656","sha512":"893879e071c3839946dd241319f62b70e1a4475e94e47eaf478dd5ef2ff13e8e3999728a2f355b092d551f038b3d8dc91ba56c992cfb50139966743bd61121c1","ssdeep":"","tlshash":"39f07d0070d43ebe8e5140b398584c6f70e844245f4dafb0f14ef93a35fa830c596587","size":628,"data":"","first_seen":"2024-08-20T12:53:14.055107Z","last_seen":"2026-01-08T01:47:13.298714Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"d9fb29984167482f62da39a7b70e64a0","sha1":"c24c691224187a9025ecf4b41876d3d3cab67118","sha256":"c00278f45ee31bd0b23f297772738eadeb416eec465c1f1bd16d2916a3834adb","sha512":"05c3c1c486a521feda51219e2d25c8e1262728c7fe966baac231dbccc87f7e0da9c046bbe925df740c1e5f8d1749955904b3b2c2916fa80572edafcfd2687f5d","ssdeep":"","tlshash":"d7b09b9875d3a191567221d8955fad8591348420208c1550545991557e6343d41768d8","size":119,"data":"","first_seen":"2023-04-27T21:40:59Z","last_seen":"2026-07-21T22:28:46.148243Z","times_seen":6069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"d9fb29984167482f62da39a7b70e64a0","sha1":"c24c691224187a9025ecf4b41876d3d3cab67118","sha256":"c00278f45ee31bd0b23f297772738eadeb416eec465c1f1bd16d2916a3834adb","sha512":"05c3c1c486a521feda51219e2d25c8e1262728c7fe966baac231dbccc87f7e0da9c046bbe925df740c1e5f8d1749955904b3b2c2916fa80572edafcfd2687f5d","ssdeep":"","tlshash":"d7b09b9875d3a191567221d8955fad8591348420208c1550545991557e6343d41768d8","size":119,"data":"","first_seen":"2023-04-27T21:40:59Z","last_seen":"2026-07-21T22:28:46.148243Z","times_seen":6069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"f27500c9c7bf3aeb7d2248d3b43162b1","sha1":"82e593d3482d7bac55f245091c67b045de2bb007","sha256":"60cd8661adc469958b5e071ad23e3d2dd6fd1268f3e9d6e2fa5a491b6c0a22f6","sha512":"67a895ed51beff0d3c0377a43f1eb583f0c3ee1401796862c9b3d52877d852780bce490987b3ad860e6d548c9b0a6b39ff5608d9e554e5f32a62bbd7c173db63","ssdeep":"","tlshash":"4911f31470e03e7a9e4940f294a45c6f91ec01289fd66bb4f18ef93174e6464c3e92aa","size":1101,"data":"","first_seen":"2024-08-20T12:53:14.056196Z","last_seen":"2026-01-08T01:47:13.299802Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"9004972b2586277265c522800fc4936f","sha1":"4ec67c17690844291bcf0f30f28aff7832e30c56","sha256":"96dc7e3ee24b8bcd866c75195d03c286bae6f0e45582c0a566af8e4d7f828856","sha512":"d0080aec79539124c8bd32e9e626d1f9905381099519f5de6525d1d4fe6a571297e01001741435d5c0c70e8392bade34884834a1b9d393415b556722d263a4f3","ssdeep":"","tlshash":"f5f0c90030f01ef69e9200f2649a8c9b80a48d202f15a9a0b14efd2020aee31c197085","size":505,"data":"","first_seen":"2024-08-20T12:53:14.086558Z","last_seen":"2026-01-08T01:47:13.30121Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"e926152bd63c206321c37d30a3f5baa7","sha1":"90aba98950daaf9f44ca89eadac0677d02b4eaa5","sha256":"129260f47bb6abe1b17e6d4604c75b1f19ba563dfac0d40bcd004af423306cbc","sha512":"001f81970cc45cb2be5aa576479e001070b655e6a136ea1c3aa91a8e04ae8e6751c637ec7d5da158cf6b156ca81cb50b8e5d8294ff1891fbeeefbad1535660ab","ssdeep":"","tlshash":"85b02bc435f3d587927611d8467fbdc1d134cc30108c49502448e0153e2307844775d8","size":127,"data":"","first_seen":"2023-04-27T21:41:00Z","last_seen":"2026-07-21T22:28:46.159271Z","times_seen":6615,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"d9fb29984167482f62da39a7b70e64a0","sha1":"c24c691224187a9025ecf4b41876d3d3cab67118","sha256":"c00278f45ee31bd0b23f297772738eadeb416eec465c1f1bd16d2916a3834adb","sha512":"05c3c1c486a521feda51219e2d25c8e1262728c7fe966baac231dbccc87f7e0da9c046bbe925df740c1e5f8d1749955904b3b2c2916fa80572edafcfd2687f5d","ssdeep":"","tlshash":"d7b09b9875d3a191567221d8955fad8591348420208c1550545991557e6343d41768d8","size":119,"data":"","first_seen":"2023-04-27T21:40:59Z","last_seen":"2026-07-21T22:28:46.148243Z","times_seen":6069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"ee67b28d7bc41b933f12fcc596d9ef72","sha1":"f3fe5b606c744a94a31f562c7bb12d087bbfd6b2","sha256":"c70b73a64bd7949a2ebe8a1a83440e75fce7a730c7d962ef2f514ece3cdd77cd","sha512":"be8197a3d0d1ee68a297ad23467d19072eb841217f0d5012e21ba89d3889ae1f3a940df4c5f33c1015c03993d9eb050e0d632b3c471562b6f4ce3f3ae947830a","ssdeep":"","tlshash":"62f0991071d83ebe8e4140b398994c6ba0e448245f8defb0f14ef822b0ea930c5aa0c7","size":642,"data":"","first_seen":"2024-08-20T12:53:14.052536Z","last_seen":"2026-01-08T01:47:13.303108Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"d2aa9cfc6b8f351c8c36ee89b14f19cd","sha1":"9b5ee53ca158f95de3469b3bfe28f9bc7895f2df","sha256":"7191b5d4b997ab169029c2317090bdc5b71ac4582e0d5ff5127bb900c929dc89","sha512":"46b57c3bd8fc31b66e4ccb7991f8b08056f8b86ced71937a6cb492da7e3f671f130381353f0806338a6216b1a5d9a2d183b03944863f17cf985fee2a49b0172a","ssdeep":"","tlshash":"e3012610b0d03ebe8e4204a294549caba1ec44245f9abbb0f14ef93575f5870d7a919b","size":793,"data":"","first_seen":"2024-08-20T12:53:14.065174Z","last_seen":"2026-01-08T01:47:13.306473Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"Function","is_inline":false,"md5":"d9fb29984167482f62da39a7b70e64a0","sha1":"c24c691224187a9025ecf4b41876d3d3cab67118","sha256":"c00278f45ee31bd0b23f297772738eadeb416eec465c1f1bd16d2916a3834adb","sha512":"05c3c1c486a521feda51219e2d25c8e1262728c7fe966baac231dbccc87f7e0da9c046bbe925df740c1e5f8d1749955904b3b2c2916fa80572edafcfd2687f5d","ssdeep":"","tlshash":"d7b09b9875d3a191567221d8955fad8591348420208c1550545991557e6343d41768d8","size":119,"data":"","first_seen":"2023-04-27T21:40:59Z","last_seen":"2026-07-21T22:28:46.148243Z","times_seen":6069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mymone.ro/dist/611bdecee531cb261e34.png","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mymone.ro/","date":"2026-01-08T01:46:56.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mymone.ro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 18:56:03 GMT","end":"Mon, 06 Apr 2026 18:56:02 GMT"},"fingerprint":{"sha1":"89:28:ED:BE:93:04:C7:60:43:BD:FF:7B:F3:1B:84:98:63:5E:43:BF","sha256":"C8:9C:27:C5:C0:F6:35:F0:7D:40:1F:8E:44:29:BD:06:12:FD:5B:8B:0D:8F:A5:8E:5E:3A:96:26:43:9E:98:DF"}}},"request":{"raw":"GET /dist/611bdecee531cb261e34.png HTTP/1.1\r\nHost: mymone.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mymone.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 08 Jan 2026 01:46:56 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\nage: 27128\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\netag: \"dff35b2dc7fc9256eb5564eb5e6fa3d7-ssl\"\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KB6CFNZWRVX2H8B186DFQ9AW\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\ncf-ray: 9ba80626cf878a37-OTP\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1010,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"7009f6df848a00cad5519657e9f5bd48","sha1":"8aef4ca720d930c302850fd26be45e5f633c94c6","sha256":"4570e75efa429c7a746eecab8ab73e3f72373516bb36275a85f4168659f506f3","sha512":"50f37b3b0e9204ef0eddaa70d75f28d8c825aa70e16c9406524344e8f00da8f1038367ebd94537834a935246ebbd4ed6264303b2e0368f04aa65389ffa81941f","ssdeep":"","tlshash":"9f11d89bfeccae78e215892221ac90f0f0a04114b38006e2ac1b623c56f15902965fc8","first_seen":"2024-08-20T12:53:14.039063Z","last_seen":"2026-02-21T03:01:09.045391Z","times_seen":13,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":118,"dns":1,"connect":53,"send":0,"wait":208,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/dist/72e38f44659e24c12c16.png","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mymone.ro/","date":"2026-01-08T01:46:56.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mymone.ro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 18:56:03 GMT","end":"Mon, 06 Apr 2026 18:56:02 GMT"},"fingerprint":{"sha1":"89:28:ED:BE:93:04:C7:60:43:BD:FF:7B:F3:1B:84:98:63:5E:43:BF","sha256":"C8:9C:27:C5:C0:F6:35:F0:7D:40:1F:8E:44:29:BD:06:12:FD:5B:8B:0D:8F:A5:8E:5E:3A:96:26:43:9E:98:DF"}}},"request":{"raw":"GET /dist/72e38f44659e24c12c16.png HTTP/1.1\r\nHost: mymone.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mymone.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 08 Jan 2026 01:46:56 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\nage: 50191\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\netag: \"133cc3ed674ad395891319b86544f8bf-ssl\"\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01K4A3X3N07AFPWCEMQSN1PZBP\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\ncf-ray: 9ba80627bb096af8-OTP\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":1591,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"27aa9a1b377132529a4f8af4d489a674","sha1":"05698c32be0c83579ba901687a4858b1262e4fc9","sha256":"2a06e0ef38517d2441c0ceefca1e916cc8395554f2bb50ec7f3b3e39278dcc5b","sha512":"b14e4c8dc1e9ce48626982b2b24f7650e4ed3f8546fad4707ffa067aa318f46b8bcdfabf11ad718b5680c162bb9f1ea0d5ee846b8c63fa8292ca1306836509ac","ssdeep":"","tlshash":"33310a9c3d404b585f3e106923af156d76a611787a1bc50163599d2db1fe8c0e346a32","first_seen":"2024-08-20T12:53:14.040665Z","last_seen":"2026-02-21T03:01:09.04011Z","times_seen":13,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":218,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/dist/096610f9952b450de00b.png","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mymone.ro/","date":"2026-01-08T01:46:56.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mymone.ro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 18:56:03 GMT","end":"Mon, 06 Apr 2026 18:56:02 GMT"},"fingerprint":{"sha1":"89:28:ED:BE:93:04:C7:60:43:BD:FF:7B:F3:1B:84:98:63:5E:43:BF","sha256":"C8:9C:27:C5:C0:F6:35:F0:7D:40:1F:8E:44:29:BD:06:12:FD:5B:8B:0D:8F:A5:8E:5E:3A:96:26:43:9E:98:DF"}}},"request":{"raw":"GET /dist/096610f9952b450de00b.png HTTP/1.1\r\nHost: mymone.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mymone.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 08 Jan 2026 01:46:56 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\netag: \"408c5924a34b9a4ad1ea7687921fadfd-ssl\"\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KBPG36AA8NWBPJFKCVTGC4RZ\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\ncf-ray: 9ba806279bede4aa-OTP\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":2243,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 93 x 63, 8-bit/color RGBA, non-interlaced","md5":"f4e7a04e47f202485a89e1e256c2d859","sha1":"dedf1731e11de731ce406b75832b01aa0dda3d47","sha256":"ab84adb6664db745ff29262e89cb501c12d7648a987a0d724f4a53377c17b372","sha512":"3f8c35c7cdaf93aa692fd5dcc654222045e512d5ad835c720ca7a674f75affdfafe8d4a63927ee2016f2c18bbb62b02d6532669286723b19854f182568042f78","ssdeep":"","tlshash":"bc4109b42d52100a95ffe4f326f2ea8ef4bd045db06c2714a5e8c2bc7486c1cc1112ba","first_seen":"2024-08-20T12:53:14.038357Z","last_seen":"2026-02-21T03:01:09.046221Z","times_seen":13,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":217,"dns":0,"connect":0,"send":0,"wait":260,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/dist/0b4a23e235010677a5fc.jpg","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mymone.ro/","date":"2026-01-08T01:46:56.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mymone.ro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 18:56:03 GMT","end":"Mon, 06 Apr 2026 18:56:02 GMT"},"fingerprint":{"sha1":"89:28:ED:BE:93:04:C7:60:43:BD:FF:7B:F3:1B:84:98:63:5E:43:BF","sha256":"C8:9C:27:C5:C0:F6:35:F0:7D:40:1F:8E:44:29:BD:06:12:FD:5B:8B:0D:8F:A5:8E:5E:3A:96:26:43:9E:98:DF"}}},"request":{"raw":"GET /dist/0b4a23e235010677a5fc.jpg HTTP/1.1\r\nHost: mymone.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mymone.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 08 Jan 2026 01:46:56 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\nage: 24257\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\netag: \"1117ca88cb09de766d5382c67036899d-ssl\"\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01K3M2DRC5AJMZGN254PYEPWF7\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\ncf-ray: 9ba80627abf0e4b2-OTP\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1567,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: \"Created with GIMP\", progressive, precision 8, 16x16, components 3","md5":"c5981e98701c6bf62fbc0ab970996d08","sha1":"13086cc671ddfbfc39e0edca258c85c486b7bebd","sha256":"b99e85422355884707a1985e98d15d4e40dd71a1c7f1fd60a19a4ed6cdd611ed","sha512":"1261577085f19b2da8fc2fe2cb19677128915085e4a652578c9745787da73ae918c5bcf5fae2c66f6012494c0d9fe3b9055d000761bb7ef5b8479683342106f4","ssdeep":"","tlshash":"d731753a675d87c9faf20b3050e42f01fbedae232ae1836f21c014411bb52d2095824a","first_seen":"2024-08-20T12:53:14.042507Z","last_seen":"2026-02-21T03:01:09.041095Z","times_seen":13,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":213,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/src/assets/img/favicon/apple-touch-icon.png","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mymone.ro/","date":"2026-01-08T01:46:48.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mymone.ro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 18:56:03 GMT","end":"Mon, 06 Apr 2026 18:56:02 GMT"},"fingerprint":{"sha1":"89:28:ED:BE:93:04:C7:60:43:BD:FF:7B:F3:1B:84:98:63:5E:43:BF","sha256":"C8:9C:27:C5:C0:F6:35:F0:7D:40:1F:8E:44:29:BD:06:12:FD:5B:8B:0D:8F:A5:8E:5E:3A:96:26:43:9E:98:DF"}}},"request":{"raw":"GET /src/assets/img/favicon/apple-touch-icon.png HTTP/1.1\r\nHost: mymone.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mymone.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 08 Jan 2026 01:46:55 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\nage: 13493\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\netag: \"984e29cd950cc87d0ff08b1a31a2dbad-ssl\"\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KE4BE2X55KER27JK63ZEQWXR\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\ncf-ray: 9ba8061e5911e44f-OTP\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2781,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"4031549fbb4f46beeceea1a465ac59b2","sha1":"3e037eed04bcaeb0825ca8136e97f731999fe609","sha256":"8612773cce3a257faf9e88500429c1afebd57126fbee33f0f3522887efeb4a95","sha512":"55329514e7f8c5e19185e0e0d0a4ea7caade122c4ba9aced1615b3389aab856ca1bfdefdf24cda74add25d3b79a06727461bd2b8e4353a7ce1292877cc8b981f","ssdeep":"","tlshash":"63510bd8fe74bdacc1a9b7f50a12d703dc6992067b90d04fae10d159a82d49b01ace86","first_seen":"2024-08-20T12:53:14.034935Z","last_seen":"2026-04-30T09:30:42.420578Z","times_seen":20,"resource_available":false,"data":null}},"time_used":6494,"timings":{"blocked":0,"dns":1,"connect":52,"send":0,"wait":6365,"receive":1,"ssl":74},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/src/assets/img/favicon/favicon-16x16.png","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mymone.ro/","date":"2026-01-08T01:46:48.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mymone.ro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 18:56:03 GMT","end":"Mon, 06 Apr 2026 18:56:02 GMT"},"fingerprint":{"sha1":"89:28:ED:BE:93:04:C7:60:43:BD:FF:7B:F3:1B:84:98:63:5E:43:BF","sha256":"C8:9C:27:C5:C0:F6:35:F0:7D:40:1F:8E:44:29:BD:06:12:FD:5B:8B:0D:8F:A5:8E:5E:3A:96:26:43:9E:98:DF"}}},"request":{"raw":"GET /src/assets/img/favicon/favicon-16x16.png HTTP/1.1\r\nHost: mymone.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mymone.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 08 Jan 2026 01:46:55 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\nage: 1\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\netag: \"54dd77c9003fdee49a91fdd2cb8602c5-ssl\"\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KE5F623E31E0BBQ4ABSPD310\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\ncf-ray: 9ba8061e6de1e404-OTP\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":705,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"9ba7e388e7e020cbb8e8ee31ec492d15","sha1":"de0e88539dc7e74dc8c142491f8e5a50f95699e3","sha256":"15fb03a95988e0b724895f1a2e45783e681f16c6c51fc7008fd8c8dc4fb2b12f","sha512":"51f8e5e3b68550e678d46433d00ddfc3a9c8663ad881be37a0c1f6b9861c3aaaeee8506cb062dc8aecf1c8c6ec18dd290e6ed6610bae8c35fef380ec2111add8","ssdeep":"","tlshash":"f60144c225a6c598d4096f7aa2dbaa62ae3cca5b01d40dc4b70df01e1b1c7444131f07","first_seen":"2024-08-20T12:53:14.034114Z","last_seen":"2026-04-30T09:30:42.422027Z","times_seen":20,"resource_available":false,"data":null}},"time_used":6726,"timings":{"blocked":-1,"dns":2,"connect":53,"send":0,"wait":6598,"receive":1,"ssl":71},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/assets/MyMoneroLibAppCpp_WASM.wasm","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mymone.ro/","date":"2026-01-08T01:46:55.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mymone.ro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 18:56:03 GMT","end":"Mon, 06 Apr 2026 18:56:02 GMT"},"fingerprint":{"sha1":"89:28:ED:BE:93:04:C7:60:43:BD:FF:7B:F3:1B:84:98:63:5E:43:BF","sha256":"C8:9C:27:C5:C0:F6:35:F0:7D:40:1F:8E:44:29:BD:06:12:FD:5B:8B:0D:8F:A5:8E:5E:3A:96:26:43:9E:98:DF"}}},"request":{"raw":"GET /assets/MyMoneroLibAppCpp_WASM.wasm HTTP/1.1\r\nHost: mymone.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mymone.ro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 08 Jan 2026 01:46:55 GMT\r\nContent-Type: application/wasm\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\nage: 20433\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\netag: \"40f7f3ef51c08c1a7b956e15b01b6a06-ssl-df\"\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KEDMJ4AR7VWME4X7QQ6Z8PYZ\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9ba806220d8ec9de-OTP\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2456152,"size_decoded":0,"mime_type":"application/wasm","magic":"WebAssembly (wasm) binary module version 0x1 (MVP)","md5":"23d98576112e566476aedbda08db995b","sha1":"bf2f46f7a03ecb943f142dedccc4c24900f51bca","sha256":"8bc0284d8d4234a632220a45e343be97e07e683b76f85bde41671d343df50298","sha512":"39abc8d8ef912e5a6955021466824c3c0adf706c374c6d582cd4af1286ab06f6d735cfc9a52a1ba8b7128a0ef4a69c17879864f88dd9e05b7f397a3ad95744dd","ssdeep":"6144:4WNWqzZE+zwlnEnRvEsyec/j+DKt3ZP2G6pWLYDZy6izF6s5N/c1wYyDQnCv8U1w:4W7qYYjzzbcLWAmKL","tlshash":"ef25ab276f35598bb014ec1c1586593503b7908a624fb85edb8810abb9ff88b7c7f274","first_seen":"2025-07-27T16:05:40.94868Z","last_seen":"2026-01-08T01:47:13.269475Z","times_seen":7,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":373,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/src/assets/img/detectedCheckmark@3x.png","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mymone.ro/","date":"2026-01-08T01:46:56.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mymone.ro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 18:56:03 GMT","end":"Mon, 06 Apr 2026 18:56:02 GMT"},"fingerprint":{"sha1":"89:28:ED:BE:93:04:C7:60:43:BD:FF:7B:F3:1B:84:98:63:5E:43:BF","sha256":"C8:9C:27:C5:C0:F6:35:F0:7D:40:1F:8E:44:29:BD:06:12:FD:5B:8B:0D:8F:A5:8E:5E:3A:96:26:43:9E:98:DF"}}},"request":{"raw":"GET /src/assets/img/detectedCheckmark@3x.png HTTP/1.1\r\nHost: mymone.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mymone.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 08 Jan 2026 01:46:56 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\netag: \"e991b5c24fe5290541649c70aae0cb9c-ssl\"\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KB5TDXRFWBA312W45ZEW9SMR\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\ncf-ray: 9ba80625efbee3f0-OTP\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":559,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 27 x 21, 8-bit/color RGBA, non-interlaced","md5":"3fbb7b16c4579c58ed73096f8ba9924d","sha1":"0ecc4eae0a113fe46d6357f9fd252114c79ab2eb","sha256":"fbcf163e22e846b57193a1e8934f446ff7f42a01ae97541cf3f9949ebc8ed29d","sha512":"d5cde6da1554d7d79b8ff93de87694e4b620b67ccebb17e7e7ffd1636090be1a97c869ddd1570d9e3d2c4ba2a6b5f977f42d47302d8edfdcf4460f7987fe726f","ssdeep":"","tlshash":"69f0ebdb6b50287ec28317a6580e04bb9ce236556b90c148708fed98019610bd8e3316","first_seen":"2024-08-20T12:53:14.046119Z","last_seen":"2026-01-08T01:47:13.271858Z","times_seen":8,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/dist/f0f5f3deb7e540cc773a.png","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mymone.ro/","date":"2026-01-08T01:46:56.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mymone.ro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 18:56:03 GMT","end":"Mon, 06 Apr 2026 18:56:02 GMT"},"fingerprint":{"sha1":"89:28:ED:BE:93:04:C7:60:43:BD:FF:7B:F3:1B:84:98:63:5E:43:BF","sha256":"C8:9C:27:C5:C0:F6:35:F0:7D:40:1F:8E:44:29:BD:06:12:FD:5B:8B:0D:8F:A5:8E:5E:3A:96:26:43:9E:98:DF"}}},"request":{"raw":"GET /dist/f0f5f3deb7e540cc773a.png HTTP/1.1\r\nHost: mymone.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mymone.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 08 Jan 2026 01:46:56 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\nage: 52432\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\netag: \"29495af4bf0b56ac76fbf30149cbed00-ssl\"\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KDCXHJHY4CAVZ2216F0EJXJM\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\ncf-ray: 9ba806260a769916-OTP\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1011,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"1d96985e3d6c95aa9555c1021b9a7f94","sha1":"3b0527a91470963d396eb1f3e31ac430b79ca94a","sha256":"69bc60debc15a71a67b9b3be5f08ebbea38505f67b73d588c793da7897097e66","sha512":"65dc62ade46e9c129a4969c8aed3e80b1d62e9afb15f3ec74cf84e15207bff25fbc046d1ecf63a7d17b980f78c248a92dd6f4d063a6a39b6ab071e198947fb6b","ssdeep":"","tlshash":"4211c8c0c52a9fdee49704ffc9d2c3f6e555472101e0126fb5073452e9af1903484b9a","first_seen":"2024-08-20T12:53:14.039716Z","last_seen":"2026-02-21T03:01:09.043546Z","times_seen":13,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/dist/d70f45d20aa7794a897b.png","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mymone.ro/","date":"2026-01-08T01:46:56.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mymone.ro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 18:56:03 GMT","end":"Mon, 06 Apr 2026 18:56:02 GMT"},"fingerprint":{"sha1":"89:28:ED:BE:93:04:C7:60:43:BD:FF:7B:F3:1B:84:98:63:5E:43:BF","sha256":"C8:9C:27:C5:C0:F6:35:F0:7D:40:1F:8E:44:29:BD:06:12:FD:5B:8B:0D:8F:A5:8E:5E:3A:96:26:43:9E:98:DF"}}},"request":{"raw":"GET /dist/d70f45d20aa7794a897b.png HTTP/1.1\r\nHost: mymone.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mymone.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 08 Jan 2026 01:46:56 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\nage: 5837\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\netag: \"a39f2bf145d46bf17bdb095ab7836267-ssl\"\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KCRPAA46P0K9Y9W6WNMVG4S3\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\ncf-ray: 9ba806261ef9e466-OTP\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2304,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 75, 8-bit/color RGBA, non-interlaced","md5":"6c097b27df8194660c3562b284729110","sha1":"de174397c93c32b701faceb8e54204b5e2f7212d","sha256":"5d297bc24a441ec9eac526f501bd3e32ea8fc118b452fc5c85f60f80a508ae50","sha512":"cda3c5da986bcefc319f70438b5e62923906a0facce7b2dd779bfe7d96a3c3fc0b4b6628054b049dcbca1f3cc793d92423cc269985e93896ee0b91f1dcb03f42","ssdeep":"","tlshash":"15411aec69ccd8dec6481f418668e1a78ce683254320851968388ee60d6357847ab34a","first_seen":"2024-08-20T12:53:14.041577Z","last_seen":"2026-02-21T03:01:09.044608Z","times_seen":13,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/dist/bd7e27440fa47c2bca89.png","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mymone.ro/","date":"2026-01-08T01:46:56.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mymone.ro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 18:56:03 GMT","end":"Mon, 06 Apr 2026 18:56:02 GMT"},"fingerprint":{"sha1":"89:28:ED:BE:93:04:C7:60:43:BD:FF:7B:F3:1B:84:98:63:5E:43:BF","sha256":"C8:9C:27:C5:C0:F6:35:F0:7D:40:1F:8E:44:29:BD:06:12:FD:5B:8B:0D:8F:A5:8E:5E:3A:96:26:43:9E:98:DF"}}},"request":{"raw":"GET /dist/bd7e27440fa47c2bca89.png HTTP/1.1\r\nHost: mymone.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mymone.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 08 Jan 2026 01:46:56 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\netag: \"f54dc308e517e9fff6ecf465e2093e70-ssl\"\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KAWGQ8G7RCC9ME5QWCJ0FVDW\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\ncf-ray: 9ba80626eff9e467-OTP\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":2687,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 69, 8-bit/color RGBA, non-interlaced","md5":"41f1be2f7ed5c9678c9668bd1b27a366","sha1":"6177434253a110a20b1dd4fa46dacf34ae29589b","sha256":"a75e82cd8834f379b0c0cc9d191d1ee6184d5049313604f1846db6b65541d669","sha512":"59e2f4e038e3b149eaa6ed5c235d3342def1a20b3a4efc23645b117c3fdd1a5e0febb9ac8abe686ac070fe3827a7c403f5d78385cc14ee973280c284f340ad4e","ssdeep":"","tlshash":"54518e96c48a8d22d16f1b93898243e3e43f007ed703cc2e86a5a6c87153fc4f7b2128","first_seen":"2024-08-20T12:53:14.037051Z","last_seen":"2026-02-21T03:01:09.038008Z","times_seen":13,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":120,"dns":1,"connect":53,"send":0,"wait":223,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/dist/75ad74af513c5716ec38.svg","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mymone.ro/","date":"2026-01-08T01:46:56.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mymone.ro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 18:56:03 GMT","end":"Mon, 06 Apr 2026 18:56:02 GMT"},"fingerprint":{"sha1":"89:28:ED:BE:93:04:C7:60:43:BD:FF:7B:F3:1B:84:98:63:5E:43:BF","sha256":"C8:9C:27:C5:C0:F6:35:F0:7D:40:1F:8E:44:29:BD:06:12:FD:5B:8B:0D:8F:A5:8E:5E:3A:96:26:43:9E:98:DF"}}},"request":{"raw":"GET /dist/75ad74af513c5716ec38.svg HTTP/1.1\r\nHost: mymone.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mymone.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 08 Jan 2026 01:46:56 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\netag: \"1bcfd771f28c089dde0fe85f2c255345-ssl-df\"\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KE7GB4AYPH9JSKGYETX396NB\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9ba80626dd4fc9d1-OTP\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5364,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b46c8451b3fa031f835849bf89d2f85","sha1":"3c1ef23f8bf28e3c8d340c412373e79f18e8de51","sha256":"f51b7fa489617a836bdc27fa3920d73fef5dc6b1e0912256cf63abc9ee312ed3","sha512":"738304ddcdd2a50ea4232e974ce4097c78fd16e646d45c3802e87161892dce4ab64666b8f5f3faafaf056f8b76976d26e258029d27a2b0282f99d71ea8eefb9f","ssdeep":"96:xvf61Zc8nVeIbss99QZ/myTy4U5fThYBy5TG4QPcYC8Ns7LpXw7W99gmArOooU+:h61Zc8QIbs69QZXy4U5VYkmPAWyeNmA4","tlshash":"50b16817030197aabfad012cba002099b6e1d9d7e0b4e1c4fb6b5412d59c8f4ba1d7fd","first_seen":"2025-07-27T16:05:40.969974Z","last_seen":"2026-02-21T03:01:09.039074Z","times_seen":10,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":119,"dns":1,"connect":54,"send":0,"wait":210,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-08T01:46:46.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mymone.ro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 18:56:03 GMT","end":"Mon, 06 Apr 2026 18:56:02 GMT"},"fingerprint":{"sha1":"89:28:ED:BE:93:04:C7:60:43:BD:FF:7B:F3:1B:84:98:63:5E:43:BF","sha256":"C8:9C:27:C5:C0:F6:35:F0:7D:40:1F:8E:44:29:BD:06:12:FD:5B:8B:0D:8F:A5:8E:5E:3A:96:26:43:9E:98:DF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mymone.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 08 Jan 2026 01:46:47 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nage: 26414\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KEDMHW09XJCVY2N9C980MXHM\r\ncontent-encoding: br\r\ncf-ray: 9ba805ecba9ff4c8-OTP\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2011,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"7bdf844b32a20607cccb3dae50ce68d3","sha1":"9d5cb84f8595b507340bf3c0d7d092b6401d3281","sha256":"d8a8c040d996293415e1761a58f41f313b36131e996b97321ce7d4da76ce5add","sha512":"95690a1074af963a447249ed33ee6674a1e58705b2b4011db749f56d5e21b919fc1e10452a46884ef6ca9a9036f9435d9983b12d82bac413c000fd60376c04bd","ssdeep":"","tlshash":"4a41744348a19c1422126225dfd6f299db41854bcf495c3874df20259fece91c6e3afd","first_seen":"2025-11-18T02:14:53.914257Z","last_seen":"2026-01-08T01:47:13.278982Z","times_seen":3,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":184,"dns":66,"connect":53,"send":0,"wait":147,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mymone.ro/dist/bundle.js","fqdn":"mymone.ro","domain":"mymone.ro","tld":"ro"},"ip":{"addr":"193.233.202.251","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mymone.ro/","date":"2026-01-08T01:46:47.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mymone.ro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 18:56:03 GMT","end":"Mon, 06 Apr 2026 18:56:02 GMT"},"fingerprint":{"sha1":"89:28:ED:BE:93:04:C7:60:43:BD:FF:7B:F3:1B:84:98:63:5E:43:BF","sha256":"C8:9C:27:C5:C0:F6:35:F0:7D:40:1F:8E:44:29:BD:06:12:FD:5B:8B:0D:8F:A5:8E:5E:3A:96:26:43:9E:98:DF"}}},"request":{"raw":"GET /dist/bundle.js HTTP/1.1\r\nHost: mymone.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mymone.ro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 08 Jan 2026 01:46:55 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\nage: 1\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\netag: \"ed29b39b3c847179d19378e88427db8b-ssl-df\"\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KE9GKAQKKDXN11GDAE1AS403\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9ba805ef690de3f8-OTP\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2231503,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65464)","md5":"b9b299f224d0ddcacb01584245b275bc","sha1":"310827f4bfdea8455fe22232533fd5abf749c04f","sha256":"0d0249f66fc31e2ae69b08096ae0156c68a9e39549d7084d3a69d2cd2fb9146d","sha512":"791a7763a3e8c771f669ccdb8cbb941ba003f261644e3ff765ee82d6371e46b95f1d1f3cf18c5f04a7198175d15d1d3e6a2daeca28d3824d5eceb2f9284258ff","ssdeep":"12288:PSj3LOWOvYX5+WCOMYb9SFAVWFk9IXZd6PvOHAX6r+3amsMZDEQw:PS7LZ5+WMAykKXZd6PI+3DZYx","tlshash":"61254b4573a0b033879b6ee015ab504eb33dba1d580a047cb65cd4f7bfa9884967af34","first_seen":"2025-07-29T09:03:50.220808Z","last_seen":"2026-01-08T01:47:13.279999Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7605,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-08","alert":"Hunting_JS_WebAssembly","trigger":"mymone.ro/dist/bundle.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"mymone.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}