{"report_id":"a758faf2-b79c-4be7-8528-897a85b4abfb","version":6,"status":"done","tags":[],"date":"2026-06-01T12:05:28Z","url":{"schema":"http","addr":"samut.com/","fqdn":"samut.com","domain":"samut.com","tld":"com"},"ip":{"addr":"172.104.149.86","port":0,"asn":63949,"as":"Akamai Connected Cloud","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"samut.com/","fqdn":"samut.com","domain":"samut.com","tld":"com"},"title":"samut.com","dom":{"size":10617,"mime_type":"text/html; charset=utf-8","magic":"C++ source, Unicode text, UTF-8 text","md5":"d45c9ffabbac6ffcc67ab60dbfd7658e","sha1":"4fe8a3a1ef287e525371960cab97d84ef80c47d8","sha256":"e352db07b40dda790f8afa3dbe9eea42ed013f1bb23a6f0b79ee2a9e46fc2e53","sha512":"1f477bfa77985d2135820ef133b038568994b679cf2a37eacfe586c0d1eb092b41c845f71031c6134cf5712358f486432f9221cc2a4dd080bf83199e339c8574","ssdeep":"192:jhpGneIknQ3ncC6HZ07qWwL93mYLY4+o9m+1NUNPaNyJs5MsMeaVoT+O:tpGeI2Q3cN5UOMIBx","tlshash":"f322661969b300156453917e73e7a2492334d057d90ade683edc82989fc5aec6dd378c","dom_hash":"domhash4b1446ba110962f081535dfaa40bcf9e","first_seen":"2026-06-01T12:05:33.346204Z","last_seen":"2026-06-01T12:05:33.346204Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"samut.com/","fqdn":"samut.com","domain":"samut.com","tld":"com"},"ip":{"addr":"172.104.149.86","port":0,"asn":63949,"as":"Akamai Connected Cloud","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-06T12:05:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"samut.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"samut.com","ip":{"addr":"172.104.203.186","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-01T12:05:29.009075Z","last_seen":"2026-06-01T12:05:29.009075Z","alert_count":4,"request_count":4,"received_data":21640,"sent_data":2038,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"samut.com/","fqdn":"samut.com","domain":"samut.com","tld":"com"},"ip":{"addr":"172.104.203.186","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ff3a15a6bdb95f47ab1558b06b44bd0","sha1":"bd054eb7b35a1718f30dd21b44250bb5b42c5422","sha256":"f79ed87f8a0856ffc1069ce233b973385d876db422ef194d730761c02ece8630","sha512":"fe0116db9d824d20107dfd120af107a3717f5df46c87f04a5525b50fd5653ae7022251b64e04497ba7280690fdd4b0aab4d5cdafef61080733645d8119af17a6","ssdeep":"","tlshash":"c151fe6f75a701751a6bb1354fbf61093632005b4846ce007e7e92802fe1beeb97a7c8","size":3016,"data":"","first_seen":"2026-06-01T12:05:33.353914Z","last_seen":"2026-06-01T12:05:33.353914Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"samut.com/favicon.ico","fqdn":"samut.com","domain":"samut.com","tld":"com"},"ip":{"addr":"172.104.203.186","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samut.com/","date":"2026-06-01T12:05:06.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samut.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 23:42:50 GMT","end":"Fri, 07 Aug 2026 23:42:49 GMT"},"fingerprint":{"sha1":"54:E7:7A:F2:B9:B4:1B:EC:F5:9F:72:B5:53:B3:FE:DF:1E:B6:7A:E4","sha256":"8A:60:BE:05:A8:39:E2:9A:CA:39:0B:BE:D6:8F:13:9B:08:72:95:46:B2:2E:E0:F1:87:25:8A:37:9C:D9:F7:3A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: samut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 01 Jun 2026 12:05:06 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":159,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1620e905665c273e91a8cb2a00df1509","sha1":"e0ea169369ad349affad0f6d41987a73fea0280f","sha256":"5a41c6b1c3d5061adbd15744312c919ee4a639abc0572a2927b06838bec1a6ed","sha512":"e68b327c2831cbadcf332943242c8c800b82a888960465fbf394e2b790b71694dc99ad26dc35326e9bde0b322e1a835fff997b7656772edf4e1e261acd13cfda","ssdeep":"","tlshash":"32c02b6d2c137e0c86a330b636c37490c1878337f57e41114480805770cf1998ac33ab","first_seen":"2025-04-14T16:48:50.204909Z","last_seen":"2026-07-30T08:47:35.282211Z","times_seen":10882,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"samut.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samut.com/_challenge/complete","fqdn":"samut.com","domain":"samut.com","tld":"com"},"ip":{"addr":"172.104.203.186","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://samut.com/","date":"2026-06-01T12:05:07.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samut.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 23:42:50 GMT","end":"Fri, 07 Aug 2026 23:42:49 GMT"},"fingerprint":{"sha1":"54:E7:7A:F2:B9:B4:1B:EC:F5:9F:72:B5:53:B3:FE:DF:1E:B6:7A:E4","sha256":"8A:60:BE:05:A8:39:E2:9A:CA:39:0B:BE:D6:8F:13:9B:08:72:95:46:B2:2E:E0:F1:87:25:8A:37:9C:D9:F7:3A"}}},"request":{"raw":"POST /_challenge/complete HTTP/1.1\r\nHost: samut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://samut.com/\r\nContent-Type: application/json\r\nContent-Length: 131\r\nOrigin: https://samut.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":131,"data":"{\"nonce\":\"4502ef8ce8f32e79588ff62cf092f191.1780315506.96a72cc9e8024427e8fb771dd1edd3150df24b2a0ebe67bed3c104746060e981\",\"path\":\"/\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 01 Jun 2026 12:05:07 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nset-cookie: _gp_sid=d4269697-ea4a-4199-8ab3-1983fd5d36a6; Path=/; Domain=samut.com; Max-Age=86400; HttpOnly; SameSite=Lax\n_gp_ac=1780315507.6efd1549e630abe2085c802fdcaa4fc0533eac410064752782489d44891aa849; Path=/; Max-Age=14400; HttpOnly; Secure; SameSite=Lax\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"15b96b7aeb1c5e6c0c71702c47b73bec","sha1":"1eb74e53f7f9fec818f6ad4212f88ff409c05bd1","sha256":"a6f0d49e484cc43aa43b255c00d0ca906cbf7943521607f5face635fc3774e21","sha512":"60a45188aa6c331fba35026722d0e78675ac4f48bc08bc0b50a851f5446569da81541bc746a37182e939a43f1a23e93cd453bdfeecacd897e28ce415711298f1","ssdeep":"","tlshash":"fe80002b228320a2f083328e82bc2e2233c20232a20c0038e08ca32c8e28002b08300f","first_seen":"2026-05-15T20:28:34.539766Z","last_seen":"2026-08-03T01:58:08.659664Z","times_seen":2084,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"samut.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samut.com/","fqdn":"samut.com","domain":"samut.com","tld":"com"},"ip":{"addr":"172.104.203.186","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-01T12:05:07.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samut.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 23:42:50 GMT","end":"Fri, 07 Aug 2026 23:42:49 GMT"},"fingerprint":{"sha1":"54:E7:7A:F2:B9:B4:1B:EC:F5:9F:72:B5:53:B3:FE:DF:1E:B6:7A:E4","sha256":"8A:60:BE:05:A8:39:E2:9A:CA:39:0B:BE:D6:8F:13:9B:08:72:95:46:B2:2E:E0:F1:87:25:8A:37:9C:D9:F7:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: samut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samut.com/\r\nCookie: _gp_sid=d4269697-ea4a-4199-8ab3-1983fd5d36a6; _gp_ac=1780315507.6efd1549e630abe2085c802fdcaa4fc0533eac410064752782489d44891aa849\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 01 Jun 2026 12:05:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10461,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"C++ source, ASCII text","md5":"e7b46cdf7b56b828c39641b7b335f1fe","sha1":"7519c107b995d47234ee9b62331de1ebcd418dcc","sha256":"d786b2c6484dff6e8f4c8fc20f8d3374a1b7936315fc0cde09c8866436e5d3fe","sha512":"b8d4cc59e2e1a657f43eba7a6b316962f416b53d1376d761ebd6eee9f2c0b3a3e08ce6683517c23f5851d07fa3e404e56bc82aaa1b289a88e922afc69b4982e2","ssdeep":"192:XppGneIknQ3ncC6HZ07qWwL93mYLY4+o9m+1NUNPaNyJs5MsMea7oT++:ZpGeI2Q3cN5UOMI9b","tlshash":"eb225519a9b310156853913e73eba3492334e057d90ade683ddc83989fc5aec6dd378c","first_seen":"2026-06-01T12:05:33.349919Z","last_seen":"2026-06-01T12:05:33.349919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"samut.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samut.com/","fqdn":"samut.com","domain":"samut.com","tld":"com"},"ip":{"addr":"172.104.203.186","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-01T12:05:06.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samut.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 23:42:50 GMT","end":"Fri, 07 Aug 2026 23:42:49 GMT"},"fingerprint":{"sha1":"54:E7:7A:F2:B9:B4:1B:EC:F5:9F:72:B5:53:B3:FE:DF:1E:B6:7A:E4","sha256":"8A:60:BE:05:A8:39:E2:9A:CA:39:0B:BE:D6:8F:13:9B:08:72:95:46:B2:2E:E0:F1:87:25:8A:37:9C:D9:F7:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: samut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 01 Jun 2026 12:05:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: no-store\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9698,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"7555f89a2f3d5e114a636f50c0fd79dc","sha1":"0c5b096b6b30123ba0bd7751f6d8ccc46c1bfdda","sha256":"33c766f08e51cc62c6be5ae3d8b6977305b7a9a36ceea37fd794ba52b74abb6c","sha512":"e930c7da2deefbee659e41fed1b1e31ab219a166cb7694e4b61d13f373c7b1e70d7aade5b6950d19dcd1eb571a5697356f60a3c349fb341b38edf21227db1739","ssdeep":"192:WI2smnR3/ZzxnZHqz1c7AvRMOGw9FQcnJ9csEro8s/kNYEEp4+ml1vBxcOABvml:wLZzFOPF7EUDQip4BvvA4","tlshash":"6212839ba6a704366d13a5346faba70633318047c20acd253fed92844f866d9bd773dc","first_seen":"2026-06-01T12:05:33.35182Z","last_seen":"2026-06-01T12:05:33.35182Z","times_seen":1,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":99,"dns":45,"connect":23,"send":0,"wait":24,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"samut.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}