{"report_id":"b16aef15-7c74-4f69-a0c9-801f8d17e190","version":0,"status":"done","tags":[],"date":"2026-10-08T16:00:40Z","url":{"schema":"http","addr":"slyoni14cc.online/","fqdn":"slyoni14cc.online","domain":"slyoni14cc.online","tld":"online"},"ip":{"addr":"45.13.151.32","port":0,"asn":215703,"as":"Freakhosting Ltd","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"slyoni14cc.online/","fqdn":"slyoni14cc.online","domain":"slyoni14cc.online","tld":"online"},"title":"Slon14.cc: стеклянные душевые ограждения — от 9 000 ₽","dom":{"size":61676,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4282)","md5":"8249e854d9cf8e30d19342f0ea3084c0","sha1":"37c1e2ac99ae045b642a5ca803ed72acf7125f5d","sha256":"01e0e071130d6935f9bc10422639d799134b87433784d47c68eb27a04e8acdd2","sha512":"8feff5bf161fc66ecb6960b5ae3b64f1002cd07d9489c8f19dec57cfd05959ad86dcd5544a1061956b245254ee813e5b450153bd772060741c914cdbe6c1b761","ssdeep":"1536:qt9l5CBt6bI5VZX+lR4VBnWPCjo/APpjpzoJvutMo:8n8VZX+76BnWPCE/APpVzo5o","tlshash":"8253866112a9207a4106f05bf9087b4e3da690ff7f6b9352796c2d7e3be3470c526709","dom_hash":"domhashbdbaa238cde3339f27a8d0b39d2db202","first_seen":"2026-10-08T15:21:53.162539Z","last_seen":"2026-10-08T16:00:41.638477Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"slyoni14cc.online/","fqdn":"slyoni14cc.online","domain":"slyoni14cc.online","tld":"online"},"ip":{"addr":"45.13.151.32","port":0,"asn":215703,"as":"Freakhosting Ltd","country":"Romania","country_code":"RO"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-12T16:00:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"slyoni14cc.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"slyoni14cc.online","ip":{"addr":"45.13.151.32","port":443,"asn":215703,"as":"Freakhosting","country":"Romania","country_code":"RO"},"domain_registered":"2026-09-29","domain_rank":0,"first_seen":"2026-10-08T15:21:49.129721Z","last_seen":"2026-10-08T15:21:49.129721Z","alert_count":2,"request_count":2,"received_data":65662,"sent_data":996,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"slyoni14cc.online/","fqdn":"slyoni14cc.online","domain":"slyoni14cc.online","tld":"online"},"ip":{"addr":"45.13.151.32","port":443,"asn":215703,"as":"Freakhosting","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"f2f155d09f70faecd3b7b7530ec65e09","sha1":"e870b2822e9aa97ad9b7775a362389f2e60f661d","sha256":"716b4ed093f91a7012a514fbbd1e1d8e86e7696a40989bd5b7d2f92009a30c61","sha512":"e870f784732f581e9d058adb10cbd7c4e4b2746252cfd558f43aefb3d225f8c410ecc70438b72f68f1aff018d1b3608cfba1d11de9dc7f4eac2513240dbd9031","ssdeep":"","tlshash":"39f0ebf73c895238cb6b13a63733a2587426393e784aac53a81d18626c90ea9246760c","size":580,"data":"","first_seen":"2026-10-08T15:21:53.169387Z","last_seen":"2026-10-08T16:00:41.646804Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slyoni14cc.online/","fqdn":"slyoni14cc.online","domain":"slyoni14cc.online","tld":"online"},"ip":{"addr":"45.13.151.32","port":443,"asn":215703,"as":"Freakhosting","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"15b5bd965638f59395fc226646d7da37","sha1":"921e130bd8774a25edd24d91c3be0ad64aa6a810","sha256":"8657c9e307c2041cd00fa465a8adf3d58d43981a304ec30dd97ed7a16f0fa4e4","sha512":"47e185e6b84a0dd1221eed600c44cd3acf58719dae0bb5e669317399778c5e5e0f047a7915ea0af7dd0de8ac64564f15668ad173f951f33a1810344b913afeeb","ssdeep":"96:qD/M0E3ODHf9Ra8WAGymg3ziuSganUEldKzQXWrh7IXPXFwB0M7KG7r:IMORdqymg3ziuS/n1mz3l7IX/FwuM71X","tlshash":"60b196a9bb1938bb06b3b17ba59f37046e7701d71845c800a661e8552fbde1409b2fcf","size":5593,"data":"","first_seen":"2026-10-08T15:21:53.172039Z","last_seen":"2026-10-08T16:00:41.649754Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"slyoni14cc.online/","fqdn":"slyoni14cc.online","domain":"slyoni14cc.online","tld":"online"},"ip":{"addr":"45.13.151.32","port":443,"asn":215703,"as":"Freakhosting","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T16:00:11.711Z","timestamp":1791475211711,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"slyoni14cc.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 07:10:35 GMT","end":"Mon, 28 Dec 2026 07:10:34 GMT"},"fingerprint":{"sha1":"12:2E:E1:FA:F7:15:B1:2C:8B:04:1B:70:7C:21:0A:F2:85:F5:4B:25","sha256":"35:7B:E6:FB:4F:9C:96:D2:D6:37:AD:E9:85:C1:A0:6E:84:A4:EB:03:16:75:DC:AD:ED:CC:E6:8A:2A:D2:E5:D4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: slyoni14cc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 08 Oct 2026 16:00:10 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 29 Sep 2026 04:48:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6abb4332-f3bd\"\r\nCache-Control: no-cache, must-revalidate\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62397,"size_decoded":17726,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4282), with CRLF, LF line terminators","md5":"8b822fd8d74e5fa2d6d1ae24406aa173","sha1":"3b922d3484c629b10f0b3ea8d389e70bb6060d34","sha256":"ee0eee4f6a08aad77d94a66ad593ee0c667fe849bedeb62d85c9143eee88768d","sha512":"9acedc57dfe497466effa4a2f19c4c513c6f4c3937d2ec6dee2ce49580bfce7267013b22f9723a8d03f1c65ead2145487a2818975a9600125010475112fd4144","ssdeep":"1536:it9yGtU6Hk7UZ+W+sdZMQOWPAjhAPLjpEqBqj2uj:UIEZ+W+I6QOWPAVAPLVEqUj","tlshash":"945395611295246a0127f05bfa046b4dbcaa80ff7f5b975239982d6f3bf3470c62b709","first_seen":"2026-10-08T15:21:53.166871Z","last_seen":"2026-10-08T16:00:41.64259Z","times_seen":2,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":20,"connect":60,"send":0,"wait":125,"receive":0,"ssl":183},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"slyoni14cc.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slyoni14cc.online/favicon.svg","fqdn":"slyoni14cc.online","domain":"slyoni14cc.online","tld":"online"},"ip":{"addr":"45.13.151.32","port":443,"asn":215703,"as":"Freakhosting","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slyoni14cc.online/","date":"2026-10-08T16:00:12.585Z","timestamp":1791475212585,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"slyoni14cc.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 07:10:35 GMT","end":"Mon, 28 Dec 2026 07:10:34 GMT"},"fingerprint":{"sha1":"12:2E:E1:FA:F7:15:B1:2C:8B:04:1B:70:7C:21:0A:F2:85:F5:4B:25","sha256":"35:7B:E6:FB:4F:9C:96:D2:D6:37:AD:E9:85:C1:A0:6E:84:A4:EB:03:16:75:DC:AD:ED:CC:E6:8A:2A:D2:E5:D4"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: slyoni14cc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://slyoni14cc.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 08 Oct 2026 16:00:10 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Tue, 29 Sep 2026 04:48:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6abb4332-a4c\"\r\nCache-Control: public, max-age=31536000, immutable\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2636,"size_decoded":1627,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7a99fa7f1a2eb10e790086baf306150b","sha1":"3254cede71f00af11f694b787956ddbc03ad43d2","sha256":"e84f5d575cbedaa8730e7e08e1303dc056af424f9551be9085dbd91df50314cd","sha512":"12a7820462db5461eccb10f7bfe20c39accafdb6cfcab75d5cd076e0d506a45a22d55135833fddcf43393fe4ed042b139821b61a77b97d7a6b1b88ecc0d589e7","ssdeep":"","tlshash":"e25175b4e99860fcca7d53e14af0b8683b1f31fa7b8244484d5d7a654a22fec4a5c8c5","first_seen":"2026-05-29T18:13:28.05403Z","last_seen":"2026-10-08T16:00:41.64539Z","times_seen":21,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"slyoni14cc.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}