{"report_id":"b26c7727-979a-4cab-8de3-df8b39cc8932","version":6,"status":"done","tags":[],"date":"2026-03-12T12:55:21Z","url":{"schema":"http","addr":"b2.kqryri1.club","fqdn":"b2.kqryri1.club","domain":"kqryri1.club","tld":"club"},"ip":{"addr":"50.6.203.58","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"b2.kqryri1.club/","fqdn":"b2.kqryri1.club","domain":"kqryri1.club","tld":"club"},"title":"Coming Soon","dom":{"size":1087,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"00242089890cf6e0d562026ca92e3ec5","sha1":"82a8c0ff2dabddaa0eb35d9f39c449f028b77680","sha256":"8d5bd4458b56c4bcfb7240a13d9813118bd6bd9f91e8a2c1fc8d8d6ced3a7ed1","sha512":"b4a86704ff528f1a0107d8481925b795030da4249b242dbde64cff4b1ba8fa9b5c360926e184c105e830a5d1a590b3f6e494f5536c4a67d7c9addbffc07b0ea0","ssdeep":"","tlshash":"4611000c56e34107668bac122fa6b70426f3d423848efd23368dbb84cfc922545e7b9c","dom_hash":"domhash029390b9a5aba26c7071d27b7c824792","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"b2.kqryri1.club","fqdn":"b2.kqryri1.club","domain":"kqryri1.club","tld":"club"},"ip":{"addr":"50.6.203.58","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-16T12:55:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"b2.kqryri1.club","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"b2.kqryri1.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"b2.kqryri1.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"b2.kqryri1.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"b2.kqryri1.club","ip":{"addr":"50.6.203.58","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"domain_registered":"2026-02-15","domain_rank":0,"first_seen":"2026-03-11T22:37:53.697694Z","last_seen":"2026-03-11T22:37:53.697695Z","alert_count":8,"request_count":2,"received_data":2693,"sent_data":921,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"b2.kqryri1.club/","fqdn":"b2.kqryri1.club","domain":"kqryri1.club","tld":"club"},"ip":{"addr":"50.6.203.58","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ea3502b3ca86641c0168e72c88497e5","sha1":"fcc3c851da9db750b690324db75d5620eb820ebe","sha256":"1b856b7a21149c04c9dc588e161c61e6d8cf68dbb0797a6364465f2d945e9d02","sha512":"86900b7ecef35cf74b75714e3f12a981f411966b7d1356fcd453b63d830f3ba4cfce6da19257a28003999cc95a0d67146b56dbcf6def6917319257c8823edd23","ssdeep":"","tlshash":"39e0d84c57d7941713de6c535a0a7a5412738067a4957903356cae8c4fd92160177d54","size":375,"data":"","first_seen":"2026-03-12T12:55:22.759753Z","last_seen":"2026-03-12T13:00:39.129551Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"b2.kqryri1.club/","fqdn":"b2.kqryri1.club","domain":"kqryri1.club","tld":"club"},"ip":{"addr":"50.6.203.58","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-12T12:54:59.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2.kqryri1.club","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 02:21:38 GMT","end":"Mon, 25 May 2026 02:21:37 GMT"},"fingerprint":{"sha1":"50:B8:A7:14:16:EC:07:F8:6F:F9:3D:18:98:56:3C:A7:D5:6F:A2:26","sha256":"F8:D7:8F:B6:D2:74:17:BC:F4:54:48:64:AE:82:BF:E9:EF:79:FC:12:73:2A:7C:4C:C3:F4:0B:B1:83:F3:16:64"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: b2.kqryri1.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 12 Mar 2026 12:54:59 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 10 Mar 2026 16:58:20 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1104\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1104,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"5e13dad10cbc34f65c8e8e779ea50580","sha1":"5a134d7662300650c4aeb190ff8e4e245a41f654","sha256":"4da2f970cce53b741c50ebbeb7d1b00422e56eddad3df29d07f74849f69aed01","sha512":"0d5b1895ea7224e88764c3d72126977c2d36ab6d57486cfad3b5c6e41631ac30b4b3d867670d8473b9f4ef49be5ab1f092292e99551ac6f379c6ee5dc7890180","ssdeep":"","tlshash":"3811d04856e34107628bac122fa5b71426b3d463848efd1336cdf784cfc922545e7b5c","first_seen":"2026-03-12T12:55:22.758633Z","last_seen":"2026-03-12T13:00:39.128811Z","times_seen":2,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":276,"dns":2,"connect":141,"send":0,"wait":122,"receive":0,"ssl":131},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"b2.kqryri1.club","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"b2.kqryri1.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"b2.kqryri1.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"b2.kqryri1.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b2.kqryri1.club/favicon.ico","fqdn":"b2.kqryri1.club","domain":"kqryri1.club","tld":"club"},"ip":{"addr":"50.6.203.58","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://b2.kqryri1.club/","date":"2026-03-12T12:55:00.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2.kqryri1.club","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 02:21:38 GMT","end":"Mon, 25 May 2026 02:21:37 GMT"},"fingerprint":{"sha1":"50:B8:A7:14:16:EC:07:F8:6F:F9:3D:18:98:56:3C:A7:D5:6F:A2:26","sha256":"F8:D7:8F:B6:D2:74:17:BC:F4:54:48:64:AE:82:BF:E9:EF:79:FC:12:73:2A:7C:4C:C3:F4:0B:B1:83:F3:16:64"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: b2.kqryri1.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2.kqryri1.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 12 Mar 2026 12:55:00 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 10 Mar 2026 16:58:20 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1104\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1104,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"5e13dad10cbc34f65c8e8e779ea50580","sha1":"5a134d7662300650c4aeb190ff8e4e245a41f654","sha256":"4da2f970cce53b741c50ebbeb7d1b00422e56eddad3df29d07f74849f69aed01","sha512":"0d5b1895ea7224e88764c3d72126977c2d36ab6d57486cfad3b5c6e41631ac30b4b3d867670d8473b9f4ef49be5ab1f092292e99551ac6f379c6ee5dc7890180","ssdeep":"","tlshash":"3811d04856e34107628bac122fa5b71426b3d463848efd1336cdf784cfc922545e7b5c","first_seen":"2026-03-12T12:55:22.758633Z","last_seen":"2026-03-12T13:00:39.128811Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"b2.kqryri1.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"b2.kqryri1.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"b2.kqryri1.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"b2.kqryri1.club","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}