{"report_id":"b17f966b-a7e8-4ab2-b17b-df77d504294a","version":0,"status":"done","tags":[],"date":"2026-08-13T18:42:51Z","url":{"schema":"http","addr":"178.16.55.227:9000","fqdn":"178.16.55.227","domain":"178.16.55.227","tld":""},"ip":{"addr":"178.16.55.227","port":0,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"http","addr":"178.16.55.227:9000/login?redirect=/","fqdn":"178.16.55.227","domain":"178.16.55.227","tld":""},"title":"PhantomStrike C2","dom":{"size":2357,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1906)","md5":"eb8e4571de3e09f26062036ee5da97e5","sha1":"ded254691e5c0bf7f5b645da5a09aa49645b7bfb","sha256":"2aa08560d0752184f5d3e38861054eceeb0567b4c397858388414d97882707ba","sha512":"4bbc25daefb05aa2a258fd9dd4dffa433a51c51492dac6ae2b279825ba21e2404336f1fc6cdd30bc9a615be2ac9e072498e58873125cf3aa244bd9048fa8471a","ssdeep":"","tlshash":"b741783214511a3fb2270dd4f8e1fb2da45bd70ec54bd60462bc81d95fd2d854caf5a4","dom_hash":"domhash0e15d0b75f15d12f2a53be7335585a53","first_seen":"2026-08-13T18:42:55.476339Z","last_seen":"2026-08-13T18:42:55.476339Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"178.16.55.227:9000","fqdn":"178.16.55.227","domain":"178.16.55.227","tld":""},"ip":{"addr":"178.16.55.227","port":0,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-17T18:42:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"178.16.55.227","ip":{"addr":"178.16.55.227","port":9000,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":5,"received_data":198117,"sent_data":1954,"comment":"","tags":null,"fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"178.16.55.227:9000/assets/index-DdQPLxE_.js","fqdn":"178.16.55.227","domain":"178.16.55.227","tld":""},"ip":{"addr":"178.16.55.227","port":9000,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"da2ac48d6068ce46e8d2b15250e91861","sha1":"096a37745d7cf659b76b9530ed7fa925b87a5a5f","sha256":"720c898fd7ab3686e0b1be770d391e7a8b7a6b81b6a1b5a21a031ec07ac44b01","sha512":"0ce4181d8ac998f7d490e96185cdb9c7fd15f3690f2f2ba0311b9d5ede9ea857e5f39e4c62200f8f5067169b5c5080cc3056f890ef7681aad37e4325436283ef","ssdeep":"3072:B60Um6q8RlrIjdGcVlSC5KlzkcMQGh07MAOU7Rt1nAp6I:hUBqk6dDSzTGh07MAOU7RDnAZ","tlshash":"d0f327e53292b47253ea19e5407b1102f3392915384d84e8b16cadef3d7744a82bbfbd","size":162505,"data":"","first_seen":"2026-08-13T18:42:55.481449Z","last_seen":"2026-08-13T18:42:55.481449Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"178.16.55.227:9000/assets/LoginView-BhEwZq-7.js","fqdn":"178.16.55.227","domain":"178.16.55.227","tld":""},"ip":{"addr":"178.16.55.227","port":9000,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"importedModule","is_inline":false,"md5":"ad93fa34a7f9b673b8897023de20f5a2","sha1":"78845198d8c6083c8b1206bbac2c863f035f18eb","sha256":"f7af7bf06386e219f0beea8409d0958026767604a99e96f28d1c5d8304be3064","sha512":"824a96caa51f806d2fd3a68e079099904da27364341038ccbed113740c8dbdfa337f4942e23cebff2bb6a5591887b3793f00221c1f70106f20962386b3ddb3f2","ssdeep":"","tlshash":"637185351a314e3cf02308e4faa2b2a460195befd54bdf0862fc81256f81d99dd2a6f0","size":3590,"data":"","first_seen":"2026-08-13T18:42:55.486398Z","last_seen":"2026-08-13T18:42:55.486398Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"178.16.55.227:9000/","fqdn":"178.16.55.227","domain":"178.16.55.227","tld":""},"ip":{"addr":"178.16.55.227","port":9000,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-13T18:42:22.477Z","timestamp":1786646542477,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 178.16.55.227:9000\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Thu, 13 Aug 2026 18:42:22 GMT\r\nserver: uvicorn\r\ncache-control: no-cache, must-revalidate\r\ncontent-type: text/html; charset=utf-8\r\naccept-ranges: bytes\r\ncontent-length: 416\r\nlast-modified: Sat, 25 Jul 2026 04:29:21 GMT\r\netag: \"6ac1914c2001d696641510c5718d8df7\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]}],"data":{"size":416,"size_decoded":702,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"f49032d4ab4ebe667406cf09a4e96d6a","sha1":"3a95daab3a08f1d68f41aac733ef70b53df251ce","sha256":"4360e937c058bcba9366a8b856fb50bd06d4a4de3fb71884424dd504431c4b18","sha512":"99edfd39002087681cd14146f40a0748244a248b1c49b29b82e4820467ca6a0af828f719d88a6900edf17529f226a364d4b910f39bb9a7373f7dafa02d2fa596","ssdeep":"","tlshash":"82e0ab459cb1892a422006496dc0fd099992eb87c34e5a0464f6a06c4f84b86c9cf478","first_seen":"2026-08-13T18:42:55.479167Z","last_seen":"2026-08-13T18:42:55.479167Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":78,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"178.16.55.227:9000/assets/index-DdQPLxE_.js","fqdn":"178.16.55.227","domain":"178.16.55.227","tld":""},"ip":{"addr":"178.16.55.227","port":9000,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://178.16.55.227:9000/","date":"2026-08-13T18:42:22.715Z","timestamp":1786646542715,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/index-DdQPLxE_.js HTTP/1.1\r\nHost: 178.16.55.227:9000\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://178.16.55.227:9000/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Thu, 13 Aug 2026 18:42:22 GMT\r\nserver: uvicorn\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\ncontent-length: 162505\r\nlast-modified: Sat, 25 Jul 2026 04:29:21 GMT\r\netag: \"66579e4bc542a314f5d2290120e737b8\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":162505,"size_decoded":162758,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43343)","md5":"da2ac48d6068ce46e8d2b15250e91861","sha1":"096a37745d7cf659b76b9530ed7fa925b87a5a5f","sha256":"720c898fd7ab3686e0b1be770d391e7a8b7a6b81b6a1b5a21a031ec07ac44b01","sha512":"0ce4181d8ac998f7d490e96185cdb9c7fd15f3690f2f2ba0311b9d5ede9ea857e5f39e4c62200f8f5067169b5c5080cc3056f890ef7681aad37e4325436283ef","ssdeep":"3072:B60Um6q8RlrIjdGcVlSC5KlzkcMQGh07MAOU7Rt1nAp6I:hUBqk6dDSzTGh07MAOU7RDnAZ","tlshash":"d0f327e53292b47253ea19e5407b1102f3392915384d84e8b16cadef3d7744a82bbfbd","first_seen":"2026-08-13T18:42:55.481449Z","last_seen":"2026-08-13T18:42:55.481449Z","times_seen":1,"resource_available":true,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":343,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"178.16.55.227:9000/assets/index-f09Qyi4y.css","fqdn":"178.16.55.227","domain":"178.16.55.227","tld":""},"ip":{"addr":"178.16.55.227","port":9000,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://178.16.55.227:9000/","date":"2026-08-13T18:42:22.716Z","timestamp":1786646542716,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/index-f09Qyi4y.css HTTP/1.1\r\nHost: 178.16.55.227:9000\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://178.16.55.227:9000/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Thu, 13 Aug 2026 18:42:22 GMT\r\nserver: uvicorn\r\ncontent-type: text/css; charset=utf-8\r\naccept-ranges: bytes\r\ncontent-length: 29869\r\nlast-modified: Sat, 25 Jul 2026 04:29:21 GMT\r\netag: \"3c161cd9e92600c27f425cb2d036bfda\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":29869,"size_decoded":30114,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (29868)","md5":"bcef5909c178fa2d20bae27077aeb98b","sha1":"1eddbb7160c7b3881ba90d51079eb25861e006fe","sha256":"49a1ab9abecbfd388861d9d00334890d5db6c36cc03935ca1192cc0b987a5095","sha512":"1f9aa971c6ef4b473cc0aa1ead73ea7f302d440a756faf0cc4726511bec3843ad422997a25f7d5b749b04a0f02bfe969aa043205c39e913fac3ecdd1898b7219","ssdeep":"384:YTKz3wm/CGm30qCS8JTqZ2qjrcwULE/y/m/Hxr1YX:YTKzm9CSklExr10","tlshash":"87d2432dab04103f7d6380f5d1d4fa8df61bb0c1ef295bb9b98661119bc63ba1d93204","first_seen":"2026-08-13T18:42:55.484086Z","last_seen":"2026-08-13T18:42:55.484086Z","times_seen":1,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":84,"send":0,"wait":104,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"178.16.55.227:9000/assets/LoginView-BhEwZq-7.js","fqdn":"178.16.55.227","domain":"178.16.55.227","tld":""},"ip":{"addr":"178.16.55.227","port":9000,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://178.16.55.227:9000/","date":"2026-08-13T18:42:23.202Z","timestamp":1786646543202,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/LoginView-BhEwZq-7.js HTTP/1.1\r\nHost: 178.16.55.227:9000\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://178.16.55.227:9000/assets/index-DdQPLxE_.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Thu, 13 Aug 2026 18:42:22 GMT\r\nserver: uvicorn\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\ncontent-length: 3590\r\nlast-modified: Sat, 25 Jul 2026 04:29:21 GMT\r\netag: \"853a83707b6ce619ab8bdecb3850694f\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]}],"data":{"size":3590,"size_decoded":3841,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3465)","md5":"ad93fa34a7f9b673b8897023de20f5a2","sha1":"78845198d8c6083c8b1206bbac2c863f035f18eb","sha256":"f7af7bf06386e219f0beea8409d0958026767604a99e96f28d1c5d8304be3064","sha512":"824a96caa51f806d2fd3a68e079099904da27364341038ccbed113740c8dbdfa337f4942e23cebff2bb6a5591887b3793f00221c1f70106f20962386b3ddb3f2","ssdeep":"","tlshash":"637185351a314e3cf02308e4faa2b2a460195befd54bdf0862fc81256f81d99dd2a6f0","first_seen":"2026-08-13T18:42:55.486398Z","last_seen":"2026-08-13T18:42:55.486398Z","times_seen":1,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"178.16.55.227:9000/favicon.ico","fqdn":"178.16.55.227","domain":"178.16.55.227","tld":""},"ip":{"addr":"178.16.55.227","port":9000,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://178.16.55.227:9000/","date":"2026-08-13T18:42:23.280Z","timestamp":1786646543280,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 178.16.55.227:9000\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://178.16.55.227:9000/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Thu, 13 Aug 2026 18:42:22 GMT\r\nserver: uvicorn\r\ncache-control: no-cache, must-revalidate\r\ncontent-type: text/html; charset=utf-8\r\naccept-ranges: bytes\r\ncontent-length: 416\r\nlast-modified: Sat, 25 Jul 2026 04:29:21 GMT\r\netag: \"6ac1914c2001d696641510c5718d8df7\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":416,"size_decoded":702,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"f49032d4ab4ebe667406cf09a4e96d6a","sha1":"3a95daab3a08f1d68f41aac733ef70b53df251ce","sha256":"4360e937c058bcba9366a8b856fb50bd06d4a4de3fb71884424dd504431c4b18","sha512":"99edfd39002087681cd14146f40a0748244a248b1c49b29b82e4820467ca6a0af828f719d88a6900edf17529f226a364d4b910f39bb9a7373f7dafa02d2fa596","ssdeep":"","tlshash":"82e0ab459cb1892a422006496dc0fd099992eb87c34e5a0464f6a06c4f84b86c9cf478","first_seen":"2026-08-13T18:42:55.479167Z","last_seen":"2026-08-13T18:42:55.479167Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}