{"report_id":"b9be0859-dcd3-43bc-ba7e-7b545d0a68f2","version":0,"status":"done","tags":[],"date":"2026-10-13T00:02:55Z","url":{"schema":"http","addr":"g8688808.com/","fqdn":"g8688808.com","domain":"g8688808.com","tld":"com"},"ip":{"addr":"213.111.158.172","port":0,"asn":43180,"as":"Trunk Networks LTD","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"g8688808.com/panel","fqdn":"g8688808.com","domain":"g8688808.com","tld":"com"},"title":"墨影 V2","dom":{"size":92266,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52327)","md5":"f43846e3c3ff21ef8f218b71675a01f4","sha1":"8f18201ace2984dda4a67116c1be94c090f142dd","sha256":"c5b7a7887b748183a7f2ca09e058c6aef0f31e84db02ac382fbd0db8900884a1","sha512":"7c2ab25f557b54e8fa9808bb9bad32fc0da9562a9cff7c59849bcb4310a96f55ea131f3bf7545597e6b1868f2ce652a610d995732adbaff32aeb8628ea9477fc","ssdeep":"1536:9o8Ry+xBAa3N5yoLlajYR4rZjuOx1keeD:9vLlyooi4oe1w","tlshash":"5393dc60f3417935ba5acb3d12b8e59be005f043cedff56cf42262c44686e5d872aa23","dom_hash":"domhash7030583de29a4bbcb4e40272c48ac604","first_seen":"2026-09-26T08:34:11.947848Z","last_seen":"2026-10-13T00:02:58.824164Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"g8688808.com/","fqdn":"g8688808.com","domain":"g8688808.com","tld":"com"},"ip":{"addr":"213.111.158.172","port":0,"asn":43180,"as":"Trunk Networks LTD","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-17T00:02:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"g8688808.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"g8688808.com","ip":{"addr":"213.111.158.172","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-25T07:23:21.756251Z","last_seen":"2026-08-25T07:23:21.756252Z","alert_count":25,"request_count":5,"received_data":1311162,"sent_data":2279,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"g8688808.com/panel/assets/index-C_14mG7T.js","fqdn":"g8688808.com","domain":"g8688808.com","tld":"com"},"ip":{"addr":"213.111.158.172","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"855569db2a6f8e3402799be18dce792e","sha1":"e47fa639113b1722e680d73469379b7190c84ab5","sha256":"cf6acd0cd0c7c1957ad54e4d258f6da037e4636b43eec3244a4a6a2e75c9fd31","sha512":"53f2a735f335f277b5672b0a610542305b523ac7f986da4436f8deb2ef84f96733d39c6c560c06ef659438b7d223ae7a47217a0749bf71b514057e3bbcfec25b","ssdeep":"24576:r4/Iy0qecFRVYNKpCnR/k1HyX8zhbNKIVvnlLV:rwIy0q5FRVCKpCnR/k1HHzhbN1VvnlLV","tlshash":"21455c547154b964fb6741ed50af800c7237290cf80e84a0b378ecae6798686767bfed","size":1213956,"data":"","first_seen":"2026-09-26T08:34:11.966344Z","last_seen":"2026-10-13T00:02:58.831708Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g8688808.com/panel","fqdn":"g8688808.com","domain":"g8688808.com","tld":"com"},"ip":{"addr":"213.111.158.172","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"0db655c965ddf3a4aac7c73f42c2191b","sha1":"c714c5abc785862f9fa1dbc281003055caac3dab","sha256":"6a230d85cb88daa6190dcdbf87480e8df55cac75a6c02da6934db35d1259dfb3","sha512":"b81eade985e8409acd1508bc45009297033629fac9b12973abecd54063c5cd4dd98ff69ad843f9032c9d66da2757b05a960c264a088b7b2d58ae11a2f5c34107","ssdeep":"","tlshash":"c9e0ebbd82276338c1cb91c9e646c58423303022f218e23afa0c001a0fe0ac1c2d0b8e","size":293,"data":"","first_seen":"2026-09-06T01:04:02.419238Z","last_seen":"2026-10-13T00:02:58.832624Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"g8688808.com/panel/assets/index-DTncntn-.css","fqdn":"g8688808.com","domain":"g8688808.com","tld":"com"},"ip":{"addr":"213.111.158.172","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://g8688808.com/panel","date":"2026-10-13T00:02:22.596Z","timestamp":1791849742596,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.g8688808.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 05:29:27 GMT","end":"Sat, 12 Dec 2026 05:29:26 GMT"},"fingerprint":{"sha1":"D0:D3:2F:C3:A7:78:5A:F9:43:99:A2:EF:4C:AC:53:A5:6F:A1:9C:B3","sha256":"7F:08:D5:39:24:7E:FE:DE:6B:6D:4E:54:E5:34:99:4C:91:3B:3B:CE:87:3F:2F:39:C3:56:7B:4B:5D:91:A5:67"}}},"request":{"raw":"GET /panel/assets/index-DTncntn-.css HTTP/1.1\r\nHost: g8688808.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 00:02:23 GMT\r\nContent-Type: text/css; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nLast-Modified: Fri, 18 Sep 2026 18:25:14 GMT\r\nReferrer-Policy: no-referrer\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93770,"size_decoded":25239,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"185431028ca18f518644ef013bf17e9b","sha1":"dcec53c8a723dea44fbc18323e5c8221c1c84979","sha256":"dbf6c29cc19f89d2e8ed244cf4a14b697434d94bcd73bf61c606818a42c803dc","sha512":"7a4b0989382f586639b4d0492aa8aabc75ac1a265303d2914c0a4ee4d39a4ac36892a39dd92ea81dc692431074591ace89b4160afb0591605db53c6a1a1418d9","ssdeep":"1536:F/ii7r0HKydLTDEVdS7f6qfFqWeXxT72W:FqlKeDK","tlshash":"df937570a254a13eb927e9a867d8afdd3118f152d92347ecfd947138c4c7af70a61b08","first_seen":"2026-09-06T01:04:02.415673Z","last_seen":"2026-10-13T00:02:58.824892Z","times_seen":6,"resource_available":true,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":174,"send":0,"wait":349,"receive":0,"ssl":175},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"g8688808.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g8688808.com/panel/favicon.svg","fqdn":"g8688808.com","domain":"g8688808.com","tld":"com"},"ip":{"addr":"213.111.158.172","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://g8688808.com/panel","date":"2026-10-13T00:02:23.915Z","timestamp":1791849743915,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.g8688808.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 05:29:27 GMT","end":"Sat, 12 Dec 2026 05:29:26 GMT"},"fingerprint":{"sha1":"D0:D3:2F:C3:A7:78:5A:F9:43:99:A2:EF:4C:AC:53:A5:6F:A1:9C:B3","sha256":"7F:08:D5:39:24:7E:FE:DE:6B:6D:4E:54:E5:34:99:4C:91:3B:3B:CE:87:3F:2F:39:C3:56:7B:4B:5D:91:A5:67"}}},"request":{"raw":"GET /panel/favicon.svg HTTP/1.1\r\nHost: g8688808.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 00:02:24 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 282\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nLast-Modified: Fri, 18 Sep 2026 18:25:14 GMT\r\nReferrer-Policy: no-referrer\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":470,"size_decoded":691,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e4d93ab01691069a94f514b516e29932","sha1":"7f69f5c94c0283fcb431a74f8d757b2e9467b320","sha256":"9efc7bd6481c2209290938c01e5597386919a4e8ebd257d150d9413a6284754e","sha512":"aac92cf496ed057dabdf3733eabea5b4f41d8fca3c8f68b4b5ec336ada828e984a450031c8e3e138ff2dae6599ac849913aae1fe3045f4cc55fe937c0964e13a","ssdeep":"","tlshash":"05f0a369e30c0c3cfb628b08d73c3170503761c7170c5295a8652431521059fbcbf6e8","first_seen":"2026-09-06T01:04:02.41673Z","last_seen":"2026-10-13T00:02:58.827173Z","times_seen":7,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"g8688808.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g8688808.com/","fqdn":"g8688808.com","domain":"g8688808.com","tld":"com"},"ip":{"addr":"213.111.158.172","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T00:02:21.500Z","timestamp":1791849741500,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.g8688808.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 05:29:27 GMT","end":"Sat, 12 Dec 2026 05:29:26 GMT"},"fingerprint":{"sha1":"D0:D3:2F:C3:A7:78:5A:F9:43:99:A2:EF:4C:AC:53:A5:6F:A1:9C:B3","sha256":"7F:08:D5:39:24:7E:FE:DE:6B:6D:4E:54:E5:34:99:4C:91:3B:3B:CE:87:3F:2F:39:C3:56:7B:4B:5D:91:A5:67"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: g8688808.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 00:02:22 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 57\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nLocation: /panel\r\nReferrer-Policy: no-referrer\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T02:30:36.778018Z","times_seen":19069494,"resource_available":true,"data":null}},"time_used":731,"timings":{"blocked":-1,"dns":42,"connect":169,"send":0,"wait":173,"receive":0,"ssl":347},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"g8688808.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g8688808.com/panel","fqdn":"g8688808.com","domain":"g8688808.com","tld":"com"},"ip":{"addr":"213.111.158.172","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T00:02:22.240Z","timestamp":1791849742240,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.g8688808.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 05:29:27 GMT","end":"Sat, 12 Dec 2026 05:29:26 GMT"},"fingerprint":{"sha1":"D0:D3:2F:C3:A7:78:5A:F9:43:99:A2:EF:4C:AC:53:A5:6F:A1:9C:B3","sha256":"7F:08:D5:39:24:7E:FE:DE:6B:6D:4E:54:E5:34:99:4C:91:3B:3B:CE:87:3F:2F:39:C3:56:7B:4B:5D:91:A5:67"}}},"request":{"raw":"GET /panel HTTP/1.1\r\nHost: g8688808.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 00:02:22 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 509\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: no-cache, no-store, must-revalidate\r\nContent-Encoding: gzip\r\nLast-Modified: Fri, 18 Sep 2026 18:25:14 GMT\r\nReferrer-Policy: no-referrer\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":854,"size_decoded":981,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"39cf2ab1c9a88a491750afc7701593b7","sha1":"6cef4a9e711491b94aeca5616c1fea8d6fe1a3a7","sha256":"a4ff67f93aaa45e181b6b7dccb4ef56f885d3c275bd2d51c66c509105c61aec6","sha512":"faff1ae8d27329026ba01678128996512c371af0043b86d1474b5dfb7990dea8aa3361221209f17d2ec1b38b8a8c77d485ccc77a7026ce0528b60484f781c1df","ssdeep":"","tlshash":"f001c2a589b58915835083569f81f5081b61f14bb349e955758d107a0fc0bc2c6d7ba9","first_seen":"2026-09-26T08:34:11.952223Z","last_seen":"2026-10-13T00:02:58.829036Z","times_seen":3,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"g8688808.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g8688808.com/panel/assets/index-C_14mG7T.js","fqdn":"g8688808.com","domain":"g8688808.com","tld":"com"},"ip":{"addr":"213.111.158.172","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://g8688808.com/panel","date":"2026-10-13T00:02:22.594Z","timestamp":1791849742594,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.g8688808.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 05:29:27 GMT","end":"Sat, 12 Dec 2026 05:29:26 GMT"},"fingerprint":{"sha1":"D0:D3:2F:C3:A7:78:5A:F9:43:99:A2:EF:4C:AC:53:A5:6F:A1:9C:B3","sha256":"7F:08:D5:39:24:7E:FE:DE:6B:6D:4E:54:E5:34:99:4C:91:3B:3B:CE:87:3F:2F:39:C3:56:7B:4B:5D:91:A5:67"}}},"request":{"raw":"GET /panel/assets/index-C_14mG7T.js HTTP/1.1\r\nHost: g8688808.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 00:02:22 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nLast-Modified: Fri, 18 Sep 2026 18:25:14 GMT\r\nReferrer-Policy: no-referrer\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1213956,"size_decoded":431458,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3bd1e41900f602e7d8cff91580c36d80","sha1":"fc6fec7ea7c0e82020b91d242d4d228d03efa649","sha256":"fd5ac73f504ab2c05ec2283a98b9a26d026f4e48405381c40a47be6733d3db4e","sha512":"2502e494c6b5b0bb1ea8f69da7f8c61cd82fd6a7e1a845d0cf8830bf52149256bec8900f1fc25fa54876229d559cb26a09be15b694982b0aea3017ea79cf16ff","ssdeep":"24576:r4/Iy0qecFRVYNKpCnR/k1HyX8zhbNKIp:rwIy0q5FRVCKpCnR/k1HHzhbN1p","tlshash":"44356d547150b464fba741ed50af84097237290cf80e89a0b378ecae67a4689717bffd","first_seen":"2026-09-26T08:34:11.955986Z","last_seen":"2026-10-13T00:02:58.830172Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1020,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":676,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"g8688808.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"g8688808.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}