{"report_id":"a3b6a499-3ba6-497b-b3b0-18e3f4b191b1","version":6,"status":"done","tags":[],"date":"2026-04-29T13:00:38Z","url":{"schema":"https","addr":"ganges-ae.com","fqdn":"ganges-ae.com","domain":"ganges-ae.com","tld":"com"},"ip":{"addr":"172.67.213.59","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ganges-ae.com/","fqdn":"ganges-ae.com","domain":"ganges-ae.com","tld":"com"},"title":"ganges-ae.com/","dom":{"size":141,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"679a0b3978c38d12675f1f5f2bf9293b","sha1":"90694cd0c5ecf8b1386b438550ec56604d7770fd","sha256":"a95d8ec53ba7219e1292108962e47a64c0ef412808d808024dc7731c33194211","sha512":"3b667c421794f1e9c2e3e7757635dac04bce4915503cc21e4322deedf3d3a21df833c63b8861d46cf4d1678d78c3c954ab514c8792b341c156731f1b0f5a876b","ssdeep":"","tlshash":"22c02bb771090b0bb22036c1e982310479840004f02a0c20b78005a4c0c925ccca5f80","dom_hash":"domhashc1fec9cafeadbac0b33c1409ff211c3f","first_seen":"2026-04-29T13:00:39.188463Z","last_seen":"2026-08-07T03:03:35.571573Z","times_seen":8,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ganges-ae.com","fqdn":"ganges-ae.com","domain":"ganges-ae.com","tld":"com"},"ip":{"addr":"172.67.213.59","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-03T13:00:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"ganges-ae.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"ganges-ae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ganges-ae.com","ip":{"addr":"104.21.23.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-25","domain_rank":0,"first_seen":"2026-04-28T09:30:33.910996Z","last_seen":"2026-04-28T09:30:33.910996Z","alert_count":2,"request_count":1,"received_data":561,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ganges-ae.com/","fqdn":"ganges-ae.com","domain":"ganges-ae.com","tld":"com"},"ip":{"addr":"104.21.23.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-29T13:00:16.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ganges-ae.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 13:41:25 GMT","end":"Sun, 26 Jul 2026 14:41:21 GMT"},"fingerprint":{"sha1":"8D:C6:E3:35:E3:74:12:D7:C3:28:5F:63:10:DE:2C:C6:99:02:1A:2B","sha256":"66:05:51:0D:00:64:21:99:7B:74:B3:A2:B1:30:57:46:CA:96:8C:B9:7D:EA:7D:D8:6C:FD:00:EA:08:BD:3F:0E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ganges-ae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ndate: Wed, 29 Apr 2026 13:00:16 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 17\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P0w%2FPiEcA8vPQQxfrItda99E81q33UkUxz%2BBvFlD6VrUBXT5sRFX%2BWuVqx77DMAiVWhVaFDoxvgr%2Faop96XqeWl8rgbpg4GH5YC%2FkErKRUwrGmOVZNFl8XvvYj0HIfds\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9f3e7d1d8afa0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"7ef3d29f56d2e6d82d502e7e4501c877","sha1":"09f6e27c9365be4354c2faaff737bf507d7f30d7","sha256":"ccbc40b25637a3c6e2eda48ef266d69edc13069f139e6f0fb2ad69faa5889ec3","sha512":"531bd9ac3a3c40ae0803ae065398821b66f4245184fb0670452e571010986597b09b0108f65f7565d8fa1af13bdcf1b604e4e1f9402c34e4427976b5af063246","ssdeep":"","tlshash":"b460000003c00303000003c0303000000f0c00c0330c00000cf0cfc0000fcf0f030f00","first_seen":"2024-08-20T08:50:56.947958Z","last_seen":"2026-08-07T03:03:35.572516Z","times_seen":9,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":31,"dns":10,"connect":1,"send":0,"wait":13,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"ganges-ae.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"ganges-ae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}