{"report_id":"b3931ef0-da05-4d21-8a62-84bca4bd9549","version":6,"status":"done","tags":["amazon","phishing"],"date":"2026-04-29T12:52:38Z","url":{"schema":"http","addr":"realcarandtoysnow.com","fqdn":"realcarandtoysnow.com","domain":"realcarandtoysnow.com","tld":"com"},"ip":{"addr":"78.135.73.11","port":0,"asn":61135,"as":"Comnet Bilgi Iletisim Teknolojileri Ticaret A.s.","country":"Türkiye","country_code":"TR"},"final":{"url":{"schema":"https","addr":"realcarandtoysnow.com/","fqdn":"realcarandtoysnow.com","domain":"realcarandtoysnow.com","tld":"com"},"title":"Amazon Sign-In","dom":{"size":11021,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (407)","md5":"08d2b738a18ba2c898d8febbbbe63eea","sha1":"c472c47f2a25eb1ce8e595fbdc0a59536d50d23e","sha256":"bcefb6336e2c2c56d1aa77f0ba40211888bad4a67621b2089e1ac30e75d9e78d","sha512":"a0933d4425a3e3294f535b65ed6c3aa108e641ddff53a2331ceaa350b819748a1fab7a2932503e971f8abc8673b647ff433bc08e31b44a7c2f08879533469ddc","ssdeep":"96:lURSqaG/JsHwVQQZ7s55R3Z4KXhZKqSREs7PiLyqqiCNj:Ata/wdxwniKXhZKjREs7O6iCNj","tlshash":"1032635115f3093156039661bba66e0b7e51e803cb8b4f50babc07b87fefc86491319e","dom_hash":"domhashb198a4be4aa0b85c8b4f3a74e948f985","first_seen":"2026-04-29T12:52:42.675809Z","last_seen":"2026-04-29T13:56:49.332617Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"realcarandtoysnow.com","fqdn":"realcarandtoysnow.com","domain":"realcarandtoysnow.com","tld":"com"},"ip":{"addr":"78.135.73.11","port":0,"asn":61135,"as":"Comnet Bilgi Iletisim Teknolojileri Ticaret A.s.","country":"Türkiye","country_code":"TR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-03T12:52:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"realcarandtoysnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"realcarandtoysnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]},"summary":[{"fqdn":"realcarandtoysnow.com","ip":{"addr":"78.135.73.11","port":443,"asn":61135,"as":"Comnet Bilgi Iletisim Teknolojileri Ticaret A.s.","country":"Türkiye","country_code":"TR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":18,"request_count":6,"received_data":419120,"sent_data":2789,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"realcarandtoysnow.com/","fqdn":"realcarandtoysnow.com","domain":"realcarandtoysnow.com","tld":"com"},"ip":{"addr":"78.135.73.11","port":443,"asn":61135,"as":"Comnet Bilgi Iletisim Teknolojileri Ticaret A.s.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"15db6212c81f99165000ca33f08fe4e7","sha1":"e4e06958cf775a50d844ad334a2a060b3146dc4c","sha256":"8495d42e8354bb28249cc3bd811f32432ed7e03b32ed38d6f74b12fe10c604dc","sha512":"7fc81f2c29b19d8859b80f52b4522bf0cc6ee9d15b88f65c4b065820ca860508e469eaa489e486b81ce6ca167bfa27b7d59b17e842f0eadc61b817b145f75893","ssdeep":"","tlshash":"e241caab31b32d600b5bfa75476f9605322120072c46dd853e7c874d2f2ef6a24a26d6","size":1973,"data":"","first_seen":"2026-04-29T12:52:42.694758Z","last_seen":"2026-04-29T13:56:49.340076Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"realcarandtoysnow.com/public/img/favicon.ico","fqdn":"realcarandtoysnow.com","domain":"realcarandtoysnow.com","tld":"com"},"ip":{"addr":"78.135.73.11","port":443,"asn":61135,"as":"Comnet Bilgi Iletisim Teknolojileri Ticaret A.s.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://realcarandtoysnow.com/","date":"2026-04-29T12:52:18.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realcarandtoysnow.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 16:08:26 GMT","end":"Sun, 26 Jul 2026 16:08:25 GMT"},"fingerprint":{"sha1":"7C:B8:ED:8F:4A:78:D5:11:03:75:53:4C:64:6C:C2:2B:87:98:AF:02","sha256":"7C:21:15:A2:1D:8E:A0:E9:A1:DA:2E:35:44:3B:34:D2:10:CD:63:FA:B1:99:E8:26:98:0D:4A:36:17:78:5B:EF"}}},"request":{"raw":"GET /public/img/favicon.ico HTTP/1.1\r\nHost: realcarandtoysnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://realcarandtoysnow.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 29 Apr 2026 12:52:18 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 1406\r\nLast-Modified: Fri, 27 Jan 2023 07:06:06 GMT\r\nConnection: keep-alive\r\nETag: \"63d377de-57e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16","md5":"8ef5eb4dd07d9b7859d32267205bee56","sha1":"def0589001e68ccda622a78020d576ca772b7c0f","sha256":"c3c2771e8898e8c3afa105a07be93837c3296d14f7004d3c2d471c78463f18a9","sha512":"97f1e52dc489a890b89813628721798fd3fcb6b51ebe41d2b87631e8e33325cb14f0b802ebb9aa8e827b979d94307d36c3a398f1ddd7aaf25db31a0a69b751b1","ssdeep":"","tlshash":"682102620b84dbaacd6c8f7865a077190305993a339b831b02601412ecc25d59ef4dc3","first_seen":"2023-05-07T01:49:30Z","last_seen":"2026-08-11T03:36:01.04134Z","times_seen":196,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"realcarandtoysnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"realcarandtoysnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"realcarandtoysnow.com/public/img/favicon.ico","fqdn":"realcarandtoysnow.com","domain":"realcarandtoysnow.com","tld":"com"},"ip":{"addr":"78.135.73.11","port":443,"asn":61135,"as":"Comnet Bilgi Iletisim Teknolojileri Ticaret A.s.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://realcarandtoysnow.com/","date":"2026-04-29T12:52:18.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realcarandtoysnow.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 16:08:26 GMT","end":"Sun, 26 Jul 2026 16:08:25 GMT"},"fingerprint":{"sha1":"7C:B8:ED:8F:4A:78:D5:11:03:75:53:4C:64:6C:C2:2B:87:98:AF:02","sha256":"7C:21:15:A2:1D:8E:A0:E9:A1:DA:2E:35:44:3B:34:D2:10:CD:63:FA:B1:99:E8:26:98:0D:4A:36:17:78:5B:EF"}}},"request":{"raw":"GET /public/img/favicon.ico HTTP/1.1\r\nHost: realcarandtoysnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://realcarandtoysnow.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 29 Apr 2026 12:52:18 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 1406\r\nLast-Modified: Fri, 27 Jan 2023 07:06:06 GMT\r\nConnection: keep-alive\r\nETag: \"63d377de-57e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16","md5":"8ef5eb4dd07d9b7859d32267205bee56","sha1":"def0589001e68ccda622a78020d576ca772b7c0f","sha256":"c3c2771e8898e8c3afa105a07be93837c3296d14f7004d3c2d471c78463f18a9","sha512":"97f1e52dc489a890b89813628721798fd3fcb6b51ebe41d2b87631e8e33325cb14f0b802ebb9aa8e827b979d94307d36c3a398f1ddd7aaf25db31a0a69b751b1","ssdeep":"","tlshash":"682102620b84dbaacd6c8f7865a077190305993a339b831b02601412ecc25d59ef4dc3","first_seen":"2023-05-07T01:49:30Z","last_seen":"2026-08-11T03:36:01.04134Z","times_seen":196,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"realcarandtoysnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"realcarandtoysnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"realcarandtoysnow.com/","fqdn":"realcarandtoysnow.com","domain":"realcarandtoysnow.com","tld":"com"},"ip":{"addr":"78.135.73.11","port":443,"asn":61135,"as":"Comnet Bilgi Iletisim Teknolojileri Ticaret A.s.","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-29T12:52:16.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realcarandtoysnow.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 16:08:26 GMT","end":"Sun, 26 Jul 2026 16:08:25 GMT"},"fingerprint":{"sha1":"7C:B8:ED:8F:4A:78:D5:11:03:75:53:4C:64:6C:C2:2B:87:98:AF:02","sha256":"7C:21:15:A2:1D:8E:A0:E9:A1:DA:2E:35:44:3B:34:D2:10:CD:63:FA:B1:99:E8:26:98:0D:4A:36:17:78:5B:EF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: realcarandtoysnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 29 Apr 2026 12:52:16 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11219,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (401)","md5":"782f8d857385fcb2580d484943ba0ce2","sha1":"9066230326976b41c6e230b77cbb393c684ef1c9","sha256":"b42c26b8492dbd5e45b75a07a0412bd86d72ce8e899c9dc9ae84186314c583ef","sha512":"a81da1e8c22f02ccfced7d4cfbed97a5942a1ea6e75cf058e04bcddd25149c289faa28663552436c133964a259808a4b635bb9e60b854c164d8b75b5308add5c","ssdeep":"96:QURSOG/JsHwVQyAAp5JR3Z4KXhZKqSREs7PiLyqqiCr:Bn/wQAXXiKXhZKjREs7O6iCr","tlshash":"7c32525115f3093212039661bba6ae0b7e51e803ca8b4f507abc47b97fefc87591319e","first_seen":"2026-04-29T12:52:42.68261Z","last_seen":"2026-04-29T13:56:49.336388Z","times_seen":3,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":216,"dns":42,"connect":81,"send":0,"wait":91,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"realcarandtoysnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"realcarandtoysnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"realcarandtoysnow.com/public/img/avatar-placeholder.png","fqdn":"realcarandtoysnow.com","domain":"realcarandtoysnow.com","tld":"com"},"ip":{"addr":"78.135.73.11","port":443,"asn":61135,"as":"Comnet Bilgi Iletisim Teknolojileri Ticaret A.s.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://realcarandtoysnow.com/","date":"2026-04-29T12:52:16.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realcarandtoysnow.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 16:08:26 GMT","end":"Sun, 26 Jul 2026 16:08:25 GMT"},"fingerprint":{"sha1":"7C:B8:ED:8F:4A:78:D5:11:03:75:53:4C:64:6C:C2:2B:87:98:AF:02","sha256":"7C:21:15:A2:1D:8E:A0:E9:A1:DA:2E:35:44:3B:34:D2:10:CD:63:FA:B1:99:E8:26:98:0D:4A:36:17:78:5B:EF"}}},"request":{"raw":"GET /public/img/avatar-placeholder.png HTTP/1.1\r\nHost: realcarandtoysnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://realcarandtoysnow.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 29 Apr 2026 12:52:18 GMT\r\nContent-Type: image/png\r\nContent-Length: 21158\r\nLast-Modified: Fri, 24 Apr 2026 00:24:11 GMT\r\nConnection: keep-alive\r\nETag: \"69eab82b-52a6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21158,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 739 x 740, 8-bit/color RGBA, non-interlaced","md5":"80f7cc5b0cb2fbb47333e715260a3ce4","sha1":"0f3e41413835a4d83176213ac0de7b936f09112b","sha256":"3d39022631c50c3144c9531d0e960eaef63ed76a89c60a8b7c0cf177dd5084ad","sha512":"51a529f793ed990c7e419f02bfd28098a5835271f31feed71c55a8623a0bb469646373e0421c9507b5136512e51eaf5acf86d823a36c1420113031555cebf9cc","ssdeep":"384:6uapFCED5kj6F2sxanDv3N82Li34cVfEo5JX1BGMBX/Cen2t3J:6uavCED6s8nM4a55JX1MMl/N2t3J","tlshash":"5e92d1d51bfe4d864d14f1a2931f4b2ab56cf05259e421edc03b0ba4d93eac6c8212fd","first_seen":"2026-04-29T12:52:42.685707Z","last_seen":"2026-04-29T13:56:49.339343Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2437,"timings":{"blocked":1123,"dns":1,"connect":90,"send":0,"wait":182,"receive":1,"ssl":91},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"realcarandtoysnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"realcarandtoysnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"realcarandtoysnow.com/public/css/style.css","fqdn":"realcarandtoysnow.com","domain":"realcarandtoysnow.com","tld":"com"},"ip":{"addr":"78.135.73.11","port":443,"asn":61135,"as":"Comnet Bilgi Iletisim Teknolojileri Ticaret A.s.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://realcarandtoysnow.com/","date":"2026-04-29T12:52:16.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realcarandtoysnow.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 16:08:26 GMT","end":"Sun, 26 Jul 2026 16:08:25 GMT"},"fingerprint":{"sha1":"7C:B8:ED:8F:4A:78:D5:11:03:75:53:4C:64:6C:C2:2B:87:98:AF:02","sha256":"7C:21:15:A2:1D:8E:A0:E9:A1:DA:2E:35:44:3B:34:D2:10:CD:63:FA:B1:99:E8:26:98:0D:4A:36:17:78:5B:EF"}}},"request":{"raw":"GET /public/css/style.css HTTP/1.1\r\nHost: realcarandtoysnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://realcarandtoysnow.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 29 Apr 2026 12:52:17 GMT\r\nContent-Type: text/css\r\nContent-Length: 379690\r\nLast-Modified: Thu, 23 Apr 2026 23:50:26 GMT\r\nConnection: keep-alive\r\nETag: \"69eab042-5cb2a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":379690,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (44903), with CRLF line terminators","md5":"d32a0ef146a34d7b57051f94d471a5e9","sha1":"ef3de445a119f5bd3399cb91b0d4728aebd0ba36","sha256":"1d616e9107729001d9ccec1acdea24ba624d139743b9a929b270a6747e0358ef","sha512":"132bb117561d0ea291498819c321d53b55af5913501d50427dd35e2ee664748e20e8153193a7f7ff3015c2a0c3ede3961ab147f23b5e77a605b6deb6b2da0d63","ssdeep":"3072:Wdg5HGo3pouSXmkglKEKajAQlkEXZKt4ReJD4+AgbDzydODsS3i:Wdg5H+4+AgbDzydODsyi","tlshash":"1684d9902480173fff73c761e2a6278c62255583cf621e6ce0937a94a1cbbd37537a66","first_seen":"2026-04-29T12:52:42.689535Z","last_seen":"2026-04-29T13:56:49.337888Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":957,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"realcarandtoysnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"realcarandtoysnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"realcarandtoysnow.com/public/img/logo.png","fqdn":"realcarandtoysnow.com","domain":"realcarandtoysnow.com","tld":"com"},"ip":{"addr":"78.135.73.11","port":443,"asn":61135,"as":"Comnet Bilgi Iletisim Teknolojileri Ticaret A.s.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://realcarandtoysnow.com/","date":"2026-04-29T12:52:16.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realcarandtoysnow.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 16:08:26 GMT","end":"Sun, 26 Jul 2026 16:08:25 GMT"},"fingerprint":{"sha1":"7C:B8:ED:8F:4A:78:D5:11:03:75:53:4C:64:6C:C2:2B:87:98:AF:02","sha256":"7C:21:15:A2:1D:8E:A0:E9:A1:DA:2E:35:44:3B:34:D2:10:CD:63:FA:B1:99:E8:26:98:0D:4A:36:17:78:5B:EF"}}},"request":{"raw":"GET /public/img/logo.png HTTP/1.1\r\nHost: realcarandtoysnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://realcarandtoysnow.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 29 Apr 2026 12:52:18 GMT\r\nContent-Type: image/png\r\nContent-Length: 2787\r\nLast-Modified: Thu, 23 Apr 2026 23:37:13 GMT\r\nConnection: keep-alive\r\nETag: \"69eaad29-ae3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2787,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 159 x 28, 8-bit/color RGBA, non-interlaced","md5":"9e946f27321ae3337a6b90170192dc59","sha1":"d8356e92e7a66a6200b1d651da3c3ae17d48ab01","sha256":"6d41af45fc77c0071d323d5b08163fc565dcdd7f94cd22fc0e11cf2e84a9a0ff","sha512":"be919a1a5763d87ea6d4e3567433b2bc15333587a789a9ed538d1c3c89d2f76dffb61d2315f7f146bd435ecba133a871fd77aefeacecd941d8bda7cf3eb49831","ssdeep":"","tlshash":"43513b45ee84ef844e28e9d5f4e9dd6e9b128f01e4c8e031ac8bec0101b78f458657c7","first_seen":"2023-08-16T11:02:52Z","last_seen":"2026-08-08T14:56:14.291738Z","times_seen":46,"resource_available":false,"data":null}},"time_used":2338,"timings":{"blocked":1124,"dns":1,"connect":79,"send":0,"wait":83,"receive":0,"ssl":88},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"realcarandtoysnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"realcarandtoysnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}}]}