{"report_id":"a3a19cb0-a963-440a-ac74-9a6754b530bd","version":0,"status":"done","tags":[],"date":"2026-08-30T07:24:45Z","url":{"schema":"http","addr":"www.phonelookupkoqzieg3.cfd/","fqdn":"www.phonelookupkoqzieg3.cfd","domain":"phonelookupkoqzieg3.cfd","tld":"cfd"},"ip":{"addr":"104.21.47.197","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.phonelookupkoqzieg3.cfd/","fqdn":"www.phonelookupkoqzieg3.cfd","domain":"phonelookupkoqzieg3.cfd","tld":"cfd"},"title":"Phone Number Lookup | Contact Us","dom":{"size":12818,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"4d7e550434d8e81323f5cfc0882e364f","sha1":"43a01849b460b80ddca8d1bcf27f7ee74cfbe16a","sha256":"f2854ea6b75e777bbe5b3b933acf5a6cdd27e6191483032d3849db08586f0d46","sha512":"1690933d3677617403e94c6c5033fc264e41580038e1b3ad8208356548fc80ecf7a26a2c0b5d709f2251b0e5535031dbd51cb37e23a2b039847213c22e250fbf","ssdeep":"192:j/segV5p454uEpjHHVupmBw5kogepA7JzKHzzhA2w2+0qXYnTHsSXi9j:AriLBwSjTI","tlshash":"e642960a35f304651d53a9f977eb9b893620d003dd06de19bedd63508f8ae95a8633cc","dom_hash":"domhash2ae158f210e31fe888f1367732072389","first_seen":"2026-07-22T04:37:03.030974Z","last_seen":"2026-08-30T07:24:47.923445Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.phonelookupkoqzieg3.cfd/","fqdn":"www.phonelookupkoqzieg3.cfd","domain":"phonelookupkoqzieg3.cfd","tld":"cfd"},"ip":{"addr":"104.21.47.197","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-04T07:24:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"www.phonelookupkoqzieg3.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.phonelookupkoqzieg3.cfd","ip":{"addr":"172.67.172.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-01","domain_rank":0,"first_seen":"2026-08-30T07:24:45.393931Z","last_seen":"2026-08-30T07:24:45.393931Z","alert_count":3,"request_count":3,"received_data":19763,"sent_data":1591,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.phonelookupkoqzieg3.cfd/","fqdn":"www.phonelookupkoqzieg3.cfd","domain":"phonelookupkoqzieg3.cfd","tld":"cfd"},"ip":{"addr":"172.67.172.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3ae0146cf5fe77a078868da2ca6a6b14","sha1":"992aa76590df3f4de4bf9402941d170c039d4ddf","sha256":"7a23d9f79c429b5a49525f4ebe51e41f67b91dbc073c429e58e1214e672757a1","sha512":"b0735adda4519f9dcb96a8ad966f3521dec7837bd022fdecd3e7c887ca038b275a6bc625fb2688b71bda2bf83c6f922caaa08e73e453281801ddd5ad3a86097d","ssdeep":"","tlshash":"a381539b30f208700ba77efb530ba254342190073806fb56b90c1b615f96e96a07b7ce","size":3866,"data":"","first_seen":"2026-06-21T22:35:00.704885Z","last_seen":"2026-08-30T07:35:39.234814Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.phonelookupkoqzieg3.cfd/","fqdn":"www.phonelookupkoqzieg3.cfd","domain":"phonelookupkoqzieg3.cfd","tld":"cfd"},"ip":{"addr":"172.67.172.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-30T07:24:16.529Z","timestamp":1788074656529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phonelookupkoqzieg3.cfd","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 00:33:35 GMT","end":"Thu, 26 Nov 2026 00:33:34 GMT"},"fingerprint":{"sha1":"82:EB:46:61:45:20:1C:3C:84:FE:E3:91:31:2E:02:0B:EB:32:CE:B3","sha256":"3F:CD:1F:6F:57:4E:4B:9E:9C:D4:88:28:39:A0:E5:3F:3B:12:90:16:75:78:D2:1A:09:60:72:4A:69:6C:0C:70"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.phonelookupkoqzieg3.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:24:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6YaNGUHV0Ncso5gEoKo5K%2BgTKU4gty4ECdI%2Fo4K432WDJtFI5qfgBe01Wclq6uM9x0WAExdJY8s8PODj49NEIH%2FW9%2FPryyfZ8L5XglbHv5d8Z2NmrGLjPrrGfX6QBIbPY7OGcNWp2mxo2SfNX0%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3320e0bf982569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12814,"size_decoded":4474,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"214a9b95e2753c74c8bc4717229860ef","sha1":"4a4eac9d92bbcdc79ac6a7ffc895d32bc1b2836d","sha256":"54f543715c28e00810d5502f46a720ffcaff207bbafa3fcd8faef8720c218cd1","sha512":"7afbb01ff4104e47d0a71f4f2c0e6bee271224d9f806aedee6b183da6eecc7e7a2617ce36f8dc59f78afc82726934dec8f0ecd6cef6c1a9f4522be86c17338ca","ssdeep":"192:/XsegV5p454uEpjHHVupmBw5kogepA7JzKHz0hH2w2+0qXYnTHsSXib:0riL1wSjTm","tlshash":"7a42950a35f304651d53a9f977eb9b893620d003dd06de19bedd63508f8ae95a8633cc","first_seen":"2026-07-19T02:32:07.270757Z","last_seen":"2026-08-30T07:35:39.232942Z","times_seen":61,"resource_available":true,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":80,"connect":22,"send":0,"wait":298,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"www.phonelookupkoqzieg3.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.phonelookupkoqzieg3.cfd/apple-touch-icon-precomposed-192x192.png","fqdn":"www.phonelookupkoqzieg3.cfd","domain":"phonelookupkoqzieg3.cfd","tld":"cfd"},"ip":{"addr":"172.67.172.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.phonelookupkoqzieg3.cfd/","date":"2026-08-30T07:24:17.152Z","timestamp":1788074657152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phonelookupkoqzieg3.cfd","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 00:33:35 GMT","end":"Thu, 26 Nov 2026 00:33:34 GMT"},"fingerprint":{"sha1":"82:EB:46:61:45:20:1C:3C:84:FE:E3:91:31:2E:02:0B:EB:32:CE:B3","sha256":"3F:CD:1F:6F:57:4E:4B:9E:9C:D4:88:28:39:A0:E5:3F:3B:12:90:16:75:78:D2:1A:09:60:72:4A:69:6C:0C:70"}}},"request":{"raw":"GET /apple-touch-icon-precomposed-192x192.png HTTP/1.1\r\nHost: www.phonelookupkoqzieg3.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.phonelookupkoqzieg3.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:24:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 25 Apr 2026 14:10:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69eccb45-1006\"\r\nexpires: Tue, 29 Sep 2026 07:24:17 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P216kLehH3POnd1sSzmCOa9fb9%2B29b7KD%2FhxdH4cyCBJNULWvKIs%2B4IqNcE6P8YcR7BPxUUUfWLTP6uH%2F57kNgfn76JHPhYq%2BxILzQEyfv8YbkK9dxmz6g3vTY1c1Nh2UWic%2BHnDx3jfqd081Kc%3D\"}]}\r\ncf-ray: a3320e0f3997569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4102,"size_decoded":4569,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"7b82e2b5d1f83b3fa4efa21fc2bd8931","sha1":"4c96945108ad5c228d4e83e6cdd3546a2ffb8d72","sha256":"a4f0e255543bd70ce7f0dfba1de3e33fbae86babfd5506aca29b4c6a0f78cf08","sha512":"a45778f95dff0458d2ee44a09cba15bbf42c59731c3cea8dad8973a33664c87ea815bb4cb78d9004527c6fd90fcd32ecd9d5903922521379a3f259443d146c70","ssdeep":"96:22V21elulcguyUDqmIUcOgDtaiCF863jn6Sk/5:yY1guyUDkDOetaRF8wj/kB","tlshash":"e3813a29e9547c5343a8b92624f75037a5198d01b9c4a3191fcee61f19364ae041add7","first_seen":"2025-12-06T00:37:31.08052Z","last_seen":"2026-08-30T07:35:39.23361Z","times_seen":160,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"www.phonelookupkoqzieg3.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.phonelookupkoqzieg3.cfd/favicon-16x16.png","fqdn":"www.phonelookupkoqzieg3.cfd","domain":"phonelookupkoqzieg3.cfd","tld":"cfd"},"ip":{"addr":"172.67.172.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.phonelookupkoqzieg3.cfd/","date":"2026-08-30T07:24:17.153Z","timestamp":1788074657153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phonelookupkoqzieg3.cfd","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 00:33:35 GMT","end":"Thu, 26 Nov 2026 00:33:34 GMT"},"fingerprint":{"sha1":"82:EB:46:61:45:20:1C:3C:84:FE:E3:91:31:2E:02:0B:EB:32:CE:B3","sha256":"3F:CD:1F:6F:57:4E:4B:9E:9C:D4:88:28:39:A0:E5:3F:3B:12:90:16:75:78:D2:1A:09:60:72:4A:69:6C:0C:70"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: www.phonelookupkoqzieg3.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.phonelookupkoqzieg3.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:24:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 25 Apr 2026 14:10:26 GMT\r\npriority: u=6,i=?0\r\netag: \"69eccb52-2c6\"\r\nexpires: Tue, 29 Sep 2026 07:24:17 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2BQyVuhUuY4yKMNh3dXPin99hPnfAKpJHPQ%2Fbo2JvujwWytjkj6bQ6aiCJ7kBDT4OmqUJmL5b724FE1KLpR7lcAZXu0tzkMssKfFd5H7Rw9cpfy3clisByTDKzwkDo0zU%2BPFrbACuf%2BexzJu1pc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320e0f3998569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 710\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":710,"size_decoded":1459,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"fb75d478b4c8650968a38cd36ad05d93","sha1":"5b190c15bc5a40e9f0addab9cff9d74140ac288b","sha256":"28436ecb4191e479d7ab7947f34b1df65d2692a26aa9179b582d79c507658e0d","sha512":"fb68a37e96e5c61c8e0f2834009e0f419fd9092fbf5fa12c59a7a05469d1d2b73e4abd36461dcc7e3ddbb313df9b11908353aa7010d263b3f1fa530a7caf8829","ssdeep":"","tlshash":"87018bc6e3b595b3c843517705262780dcf54a032a6a8964be8bc01c0a3df5b567aa95","first_seen":"2025-12-06T00:37:31.079276Z","last_seen":"2026-08-30T07:35:39.234202Z","times_seen":159,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"www.phonelookupkoqzieg3.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}