{"report_id":"ab895916-c522-4210-ab6d-cd826ae9f90c","version":6,"status":"done","tags":[],"date":"2025-10-27T18:01:50Z","url":{"schema":"http","addr":"wwwdeokhalikdhf.art","fqdn":"wwwdeokhalikdhf.art","domain":"wwwdeokhalikdhf.art","tld":"art"},"ip":{"addr":"178.128.255.225","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"wwwdeokhalikdhf.art/","fqdn":"wwwdeokhalikdhf.art","domain":"wwwdeokhalikdhf.art","tld":"art"},"title":"wwwdeokhalikdhf.art/","dom":{"size":791,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (306)","md5":"e752eeb7a0a254c622211781de4b5c69","sha1":"0bd26a346bcb489be1122b35b6251181a52fa560","sha256":"25ace8bca66f3b82ea9ef5336ae9204c5e4736f6dc425e540a5c43e1419bb3b0","sha512":"3cda5ade51efabaf204df2993a09e0aace85497cab33b96aeb8d92c0f6ae36734e5237bed39ba14329b5ab932f1eb7a17ffcb960ed76778badfc2ab0aef6a46c","ssdeep":"","tlshash":"8f01fd6bc2dba082e45320913710bf1c194008a2118b863b7acf6c82fb8686337973cb","dom_hash":"domhashe83f30da56ec9d3fa620bc96f018156e","first_seen":"2025-10-27T18:01:50.848199Z","last_seen":"2026-08-16T03:42:36.335592Z","times_seen":152,"resource_available":false,"data":"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"}},"submit":{"url":{"schema":"http","addr":"wwwdeokhalikdhf.art","fqdn":"wwwdeokhalikdhf.art","domain":"wwwdeokhalikdhf.art","tld":"art"},"ip":{"addr":"178.128.255.225","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98","country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-01T18:01:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-27","alert":"Sinkholed","trigger":"wwwdeokhalikdhf.art","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-27","alert":"Phishing - Commonwealth Bank of Australia","trigger":"wwwdeokhalikdhf.art","verdict":"phishing","severity":"medium","comment":"Commonwealth Bank of Australia","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-27","alert":"Sinkholed","trigger":"wwwdeokhalikdhf.art","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"wwwdeokhalikdhf.art","ip":{"addr":"178.128.255.225","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-01-16","domain_rank":0,"first_seen":"2025-10-25T08:45:57.62816Z","last_seen":"2025-10-25T08:45:57.62816Z","alert_count":6,"request_count":2,"received_data":2856,"sent_data":933,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wwwdeokhalikdhf.art/","fqdn":"wwwdeokhalikdhf.art","domain":"wwwdeokhalikdhf.art","tld":"art"},"ip":{"addr":"178.128.255.225","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-27T18:01:29.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wwwdeokhalikdhf.art","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Oct 2025 00:45:41 GMT","end":"Thu, 15 Jan 2026 00:45:40 GMT"},"fingerprint":{"sha1":"EF:A4:E7:75:D4:A4:2F:3E:E8:63:A5:2A:85:3C:41:0D:C9:75:FD:EE","sha256":"1D:A1:C5:AE:D3:53:AD:D9:26:2A:53:3E:D7:0B:E8:82:C7:10:5F:DA:11:D8:80:03:FA:C1:66:AA:56:0C:3A:95"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wwwdeokhalikdhf.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"2f0-68f19779-1f8149;br\"\r\nlast-modified: Fri, 17 Oct 2025 01:10:17 GMT\r\ncontent-type: text/html\r\ncontent-length: 294\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 27 Oct 2025 18:01:29 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":752,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (306)","md5":"a0e6379a378aa8b7d57189c9018e2682","sha1":"fa429a17d39127170c3dbeeaa46cb0e720bf0bd2","sha256":"d203c6296719a62bcfe209c89f1a7aca3f26d11cc3837a900943a2a4a3a6196c","sha512":"4b888b41eddb5b228e6e7353fced5a36ee9575c40d7b52492fc764b82471186f1033b584838f74b04536ecf133346208067d4fc40064684dd4ce83806ef70d28","ssdeep":"","tlshash":"41019c6bd6dbe482e05310523710bf1c198108a6518b863bb99f6c82fb85ca337967cb","first_seen":"2024-07-17T03:22:57Z","last_seen":"2026-08-16T03:42:36.338366Z","times_seen":287,"resource_available":true,"data":null}},"time_used":367,"timings":{"blocked":172,"dns":116,"connect":23,"send":0,"wait":23,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-27","alert":"Sinkholed","trigger":"wwwdeokhalikdhf.art","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-27","alert":"Phishing - Commonwealth Bank of Australia","trigger":"wwwdeokhalikdhf.art","verdict":"phishing","severity":"medium","comment":"Commonwealth Bank of Australia","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-27","alert":"Sinkholed","trigger":"wwwdeokhalikdhf.art","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wwwdeokhalikdhf.art/favicon.ico","fqdn":"wwwdeokhalikdhf.art","domain":"wwwdeokhalikdhf.art","tld":"art"},"ip":{"addr":"178.128.255.225","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wwwdeokhalikdhf.art/","date":"2025-10-27T18:01:29.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wwwdeokhalikdhf.art","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Oct 2025 00:45:41 GMT","end":"Thu, 15 Jan 2026 00:45:40 GMT"},"fingerprint":{"sha1":"EF:A4:E7:75:D4:A4:2F:3E:E8:63:A5:2A:85:3C:41:0D:C9:75:FD:EE","sha256":"1D:A1:C5:AE:D3:53:AD:D9:26:2A:53:3E:D7:0B:E8:82:C7:10:5F:DA:11:D8:80:03:FA:C1:66:AA:56:0C:3A:95"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wwwdeokhalikdhf.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wwwdeokhalikdhf.art/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncontent-type: text/html\r\ncache-control: private, no-cache, max-age=0\r\npragma: no-cache\r\ndate: Mon, 27 Oct 2025 18:01:29 GMT\r\nserver: LiteSpeed\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1249,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"f58515dfe987f7e027c8a71bbc884621","sha1":"bec6aebf5940ea88fbbff5748d539453d49fa284","sha256":"679e7e62b81267c93d0778083ae0fd0efe24172ff0ac581835b54165b3d9ed43","sha512":"f085346a38318f7935d76909db0367862924cc9b0d96256f7ff4e8999c041e610bbcde8ca56c92673bde0991c85e9c9d9b6726abd91d0c3177462c80d4a99140","ssdeep":"","tlshash":"8b21653ec1c1520ae0271164fb81f3a86629821191970f703b8eb176f6cd0bb52a36c8","first_seen":"2024-02-10T12:39:22Z","last_seen":"2026-08-16T18:49:43.909459Z","times_seen":43495,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-27","alert":"Sinkholed","trigger":"wwwdeokhalikdhf.art","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-27","alert":"Phishing - Commonwealth Bank of Australia","trigger":"wwwdeokhalikdhf.art","verdict":"phishing","severity":"medium","comment":"Commonwealth Bank of Australia","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-27","alert":"Sinkholed","trigger":"wwwdeokhalikdhf.art","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}