{"report_id":"abed65b3-a8e1-4120-b49c-18de56b9f212","version":6,"status":"done","tags":[],"date":"2026-03-09T02:03:35Z","url":{"schema":"http","addr":"wardenprotocolrewards.sbs/","fqdn":"wardenprotocolrewards.sbs","domain":"wardenprotocolrewards.sbs","tld":"sbs"},"ip":{"addr":"216.150.1.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"wardenprotocolrewards.sbs/","fqdn":"wardenprotocolrewards.sbs","domain":"wardenprotocolrewards.sbs","tld":"sbs"},"title":"Deployment Paused","dom":{"size":1638,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1638), with no line terminators","md5":"2b0ee623a481c8ddf8c246fc52d4902f","sha1":"ae572b3da6d3941433e7990872e862de55eaed47","sha256":"5aceee6eb1895ecbac9b21fa85cc3ea8d1a05b63b7c5f2dd12574f864e1ed4f7","sha512":"c6a06e06c8ea684431832daba31c3d3c6768df3de36ca95c81504fb31fa37f2222fef47a3bb6e6c5ec3751c6d9dac3c9062e6a75e71bde852014751e2fe9ea61","ssdeep":"","tlshash":"8a31767755b1602df23b88fe74e673642244901bc0960f59f518fbb4e2c7ca69123345","dom_hash":"domhashec6cdb565b8b0f77c754672472fa9910","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wardenprotocolrewards.sbs/","fqdn":"wardenprotocolrewards.sbs","domain":"wardenprotocolrewards.sbs","tld":"sbs"},"ip":{"addr":"216.150.1.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-13T02:03:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wardenprotocolrewards.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"wardenprotocolrewards.sbs","ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-07-30","domain_rank":0,"first_seen":"2026-03-09T02:03:35.480502Z","last_seen":"2026-03-09T02:03:35.480502Z","alert_count":3,"request_count":3,"received_data":4317,"sent_data":1445,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wardenprotocolrewards.sbs/","fqdn":"wardenprotocolrewards.sbs","domain":"wardenprotocolrewards.sbs","tld":"sbs"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T02:03:13.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wardenprotocolrewards.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 20:37:51 GMT","end":"Thu, 30 Apr 2026 20:37:50 GMT"},"fingerprint":{"sha1":"3F:28:BD:0B:34:63:CB:07:85:EE:5F:C3:80:0B:75:C3:FC:6A:4D:7C","sha256":"47:82:EB:AC:5D:AE:9F:EB:EC:29:3B:AE:E1:0F:AD:F6:7F:A2:AE:62:1D:88:32:C3:8A:F8:CB:69:4E:F5:7C:C6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wardenprotocolrewards.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 402 Payment Required\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 09 Mar 2026 02:03:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: DEPLOYMENT_DISABLED\r\nx-vercel-id: arn1::qsknf-1773021793267-2e9b1f16120d\r\ncontent-length: 1592\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"402","status_text":"Payment Required","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1592,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1592), with no line terminators","md5":"bd776bce34f86d6362012d3a58fecd13","sha1":"7aa945a797b4e29bc99c711f5d0100549a9276af","sha256":"06db1e9a8cb05aa94bf75277f7b43caec6300b90ee3c40fc6c9ed2ffc4027660","sha512":"d69d2980fbea4b9d7026b815e94ff1a279f845f84df42d3f474c4728679df2345fc1a476c8a9fa2df0f798c64aeaa10d7eedc5f17af4e4d9ae44a5e93f316daf","ssdeep":"","tlshash":"6831426715b5702ef23b88f938e6336462089527c0920f9af518ebb8e2c7da65137749","first_seen":"2026-03-09T02:03:37.518311Z","last_seen":"2026-03-09T02:03:37.518311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":105,"dns":74,"connect":1,"send":0,"wait":11,"receive":9,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wardenprotocolrewards.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wardenprotocolrewards.sbs/","fqdn":"wardenprotocolrewards.sbs","domain":"wardenprotocolrewards.sbs","tld":"sbs"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T02:03:13.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wardenprotocolrewards.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 20:37:51 GMT","end":"Thu, 30 Apr 2026 20:37:50 GMT"},"fingerprint":{"sha1":"3F:28:BD:0B:34:63:CB:07:85:EE:5F:C3:80:0B:75:C3:FC:6A:4D:7C","sha256":"47:82:EB:AC:5D:AE:9F:EB:EC:29:3B:AE:E1:0F:AD:F6:7F:A2:AE:62:1D:88:32:C3:8A:F8:CB:69:4E:F5:7C:C6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wardenprotocolrewards.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 402 Payment Required\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 09 Mar 2026 02:03:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: DEPLOYMENT_DISABLED\r\nx-vercel-id: arn1::qsknf-1773021793371-39439399491b\r\ncontent-length: 1592\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"402","status_text":"Payment Required","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1592,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1592), with no line terminators","md5":"2ad425508cb6715d130ea7c5ccb36295","sha1":"f0a46d17ad652ca78ea729fdd29b1075a31b26d9","sha256":"8732cac0bc379c170b46b9beec73280966329a05a3eef7179a3e13d5459e1912","sha512":"bb9ab335a17d1afb964c05ce65cb484cfea6fd26a040037014746db216128565cae2925a86538c2ce8ed04e94dea8af9cab9c3d113dfeb33460d9e8f67fcd7df","ssdeep":"","tlshash":"f931446715b1702df23b88f938d6776462049427c0921f95f518fbb8d2c79a65133749","first_seen":"2026-03-09T02:03:37.521439Z","last_seen":"2026-03-09T02:03:37.521439Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wardenprotocolrewards.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wardenprotocolrewards.sbs/favicon.ico","fqdn":"wardenprotocolrewards.sbs","domain":"wardenprotocolrewards.sbs","tld":"sbs"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wardenprotocolrewards.sbs/","date":"2026-03-09T02:03:13.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wardenprotocolrewards.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 20:37:51 GMT","end":"Thu, 30 Apr 2026 20:37:50 GMT"},"fingerprint":{"sha1":"3F:28:BD:0B:34:63:CB:07:85:EE:5F:C3:80:0B:75:C3:FC:6A:4D:7C","sha256":"47:82:EB:AC:5D:AE:9F:EB:EC:29:3B:AE:E1:0F:AD:F6:7F:A2:AE:62:1D:88:32:C3:8A:F8:CB:69:4E:F5:7C:C6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wardenprotocolrewards.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wardenprotocolrewards.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 402 Payment Required\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Mon, 09 Mar 2026 02:03:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: DEPLOYMENT_DISABLED\r\nx-vercel-id: arn1::nznm4-1773021793471-6045574d7d90\r\ncontent-length: 78\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"402","status_text":"Payment Required","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"9c7dac0968c93dbec69ca7b596fbe49b","sha1":"3fe77c0d380047370707e34405e56ac3f3bed45c","sha256":"748ca6a94c5c72e8d0ca0464e5dd1c207be3800c442c9746eee45a68ac89bbc9","sha512":"d52701400d911d7ca6b9596def82cb67d5268f6a75192bacda66a4c276782467335a4a5fd7c6d7fb813e809d4f9e11fed40f7e50872f7cbe9362bcd9613b1c17","ssdeep":"","tlshash":"08a01295208f204471bf08400e1086281581e23803d46001418110b232605340b0c030","first_seen":"2026-03-09T02:03:37.524131Z","last_seen":"2026-03-09T02:03:37.524131Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wardenprotocolrewards.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}