{"report_id":"b02673f2-c159-49da-965c-b1ddb29b899d","version":0,"status":"done","tags":[],"date":"2026-09-17T08:29:59Z","url":{"schema":"http","addr":"amccoinrbh.lol/","fqdn":"amccoinrbh.lol","domain":"amccoinrbh.lol","tld":"lol"},"ip":{"addr":"35.157.26.135","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"amccoinrbh.lol/","fqdn":"amccoinrbh.lol","domain":"amccoinrbh.lol","tld":"lol"},"title":"$TSUMIGI — Good Dog. Good Coin.","dom":{"size":523829,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (61044)","md5":"4b54e2a45684501298ed98c8f99b7622","sha1":"347c6cf2890cb6a450650b2c97f1af0dbfa1dc07","sha256":"5b328ff32ccc516862c435ad7200cfd2940a03c083b11929c6996bbb21f658fb","sha512":"2f286d252ffa0c718f08981631b4708a9b4193325388f4effbf5c0570ea5c8bd278aadddae3bf825442a2c4124de536a9700c937746841a3eb5c38201f651019","ssdeep":"12288:NFhn9hUjD9CaTuwCzqeMinbfOCROWsMpb1o10UVn7re:Nz9ix5uvzMMTOcnB20Uhe","tlshash":"07b42322096478fa16bd4ab671779f1dbe81cba0c84560d143b6934b03f4f94af3ed19","dom_hash":"domhashd1746be829267a1d6bf5b860b083dae3","first_seen":"2026-09-17T08:30:03.556609Z","last_seen":"2026-09-17T08:30:03.556609Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"amccoinrbh.lol/","fqdn":"amccoinrbh.lol","domain":"amccoinrbh.lol","tld":"lol"},"ip":{"addr":"35.157.26.135","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-22T08:29:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"amccoinrbh.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"amccoinrbh.lol","ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2026-09-04","domain_rank":0,"first_seen":"2026-09-17T08:29:59.813645Z","last_seen":"2026-09-17T08:29:59.813645Z","alert_count":2,"request_count":2,"received_data":528163,"sent_data":987,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"amccoinrbh.lol/","fqdn":"amccoinrbh.lol","domain":"amccoinrbh.lol","tld":"lol"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T08:29:23.098Z","timestamp":1789633763098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amccoinrbh.lol","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 20:40:40 GMT","end":"Thu, 03 Dec 2026 20:40:39 GMT"},"fingerprint":{"sha1":"DE:F7:76:11:50:01:AD:27:88:34:2E:AB:89:B8:19:D2:FA:AA:6E:68","sha256":"94:08:2E:5E:95:6D:AC:0C:95:AF:9A:AD:70:D7:C3:6A:68:42:D2:35:59:68:24:C7:CD:8A:18:3F:0C:2F:9F:98"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amccoinrbh.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 17 Sep 2026 08:29:23 GMT\r\netag: \"e6239eef8977d25d125d2f1e2628e5f1-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M2Q7R64KDNDVAZ228MWXMHW0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":523848,"size_decoded":391674,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (61027)","md5":"2d81bb85522ee8eb5c91583e888c8f4d","sha1":"a5d3245939210dc44701c4edb6035bea0f2e0041","sha256":"415fc2d48ddabb85277d9697f67e8480d0deba60528965c44b8a5b0c3596719f","sha512":"7c15985e052bdbc7ce2a9f18b115cde21b033a09a1ff147b0145c30fab599bc3a7d886f5b89f8bfd722d9ff046991b26f18477151e4aee335f1df8de90d364ba","ssdeep":"12288:MFhn9hUjD9CaTuwCzqeMinbfOCROWsMpb1o10UVn7rc:Mz9ix5uvzMMTOcnB20Uhc","tlshash":"9fb42322096478fa16bd4ab671779f1ebe81cba0c84560d143b6934b03f4f94af3ed19","first_seen":"2026-09-17T08:30:03.559078Z","last_seen":"2026-09-17T08:30:03.559078Z","times_seen":1,"resource_available":true,"data":null}},"time_used":511,"timings":{"blocked":0,"dns":202,"connect":25,"send":0,"wait":146,"receive":0,"ssl":138},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"amccoinrbh.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amccoinrbh.lol/favicon.ico","fqdn":"amccoinrbh.lol","domain":"amccoinrbh.lol","tld":"lol"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amccoinrbh.lol/","date":"2026-09-17T08:29:24.122Z","timestamp":1789633764122,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amccoinrbh.lol","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 20:40:40 GMT","end":"Thu, 03 Dec 2026 20:40:39 GMT"},"fingerprint":{"sha1":"DE:F7:76:11:50:01:AD:27:88:34:2E:AB:89:B8:19:D2:FA:AA:6E:68","sha256":"94:08:2E:5E:95:6D:AC:0C:95:AF:9A:AD:70:D7:C3:6A:68:42:D2:35:59:68:24:C7:CD:8A:18:3F:0C:2F:9F:98"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: amccoinrbh.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amccoinrbh.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=404; stored\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 17 Sep 2026 08:29:24 GMT\r\netag: 1788493157-ssl-df\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M2Q7R6S4W5C49ZVXM8HZH6AW\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":3449,"size_decoded":1618,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0f89e18d0abacb99149c5e59bf69b5e1","sha1":"9e1ebb10be890c5855eec444233c028270d3e65a","sha256":"8514f0009a58c6e0acb5468f88037732b59b70af5e524f452e3bef8fb33effc5","sha512":"5275d80f3f8f1f5e0d1b6b6b0745732a69d669d66dcdab418fc5a2094bffcb81ff1d34252c97c6dffe5470f0d359a3be03cfd3dfe3d729bf186917c8cf21ece0","ssdeep":"","tlshash":"1f61848dc9a7209b5c93643e27eb560a2274a247cd46da4c3fde6348cf492f214d36ac","first_seen":"2024-12-12T10:00:11.490986Z","last_seen":"2026-10-14T12:05:48.87571Z","times_seen":14953,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"amccoinrbh.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}