{"report_id":"bc104d6e-5af2-468b-9f1c-1bcc956582d8","version":6,"status":"done","tags":[],"date":"2026-02-08T14:36:47Z","url":{"schema":"http","addr":"un-bridge-v2.com","fqdn":"un-bridge-v2.com","domain":"un-bridge-v2.com","tld":"com"},"ip":{"addr":"130.49.217.5","port":0,"asn":4130,"as":"UPITT-AS","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"un-bridge-v2.com/","fqdn":"un-bridge-v2.com","domain":"un-bridge-v2.com","tld":"com"},"title":"404 Not Found","dom":{"size":147,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"dc0d27f6bf09037f8d21e1e409f274c0","sha1":"084adbb8d50c35a0cf8de8b293f16aeaa5d3650c","sha256":"86dce1a3c2132ac60c0d5e85db9f9327fdc16c55e432cf5fe7c0d79b685c395b","sha512":"971c7b546a0770bc7e60192a90282b6d540b9aed748e08db5da38d55766ced240214178855df658ba38bf63ecd70e1d97189e98549ce37446403490bd9c508ce","ssdeep":"","tlshash":"91c02b4d647361089e0310922ac33580c549c33be45e8051094340db70cf2bec0c23fd","dom_hash":"domhash18da208b3b39949e9ba09528a720f5c0","first_seen":"2026-01-31T16:44:39.302322Z","last_seen":"2026-02-18T13:46:57.474304Z","times_seen":7,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"un-bridge-v2.com","fqdn":"un-bridge-v2.com","domain":"un-bridge-v2.com","tld":"com"},"ip":{"addr":"130.49.217.5","port":0,"asn":4130,"as":"UPITT-AS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-15T14:36:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-08T14:36:24Z","timestamp":1770561384,"ip_dst":{"addr":"Client IP","port":45890,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"130.49.217.5","port":443,"asn":4130,"as":"UPITT-AS","country":"United States","country_code":"US"},"severity":"low","alert":"ET POLICY OpenSSL Demo CA - Internet Widgits Pty (O)","source":"{\"timestamp\":\"2026-02-08T14:36:24.664838+0000\",\"flow_id\":302145033769958,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"130.49.217.5\",\"src_port\":443,\"dest_ip\":\"172.18.0.13\",\"dest_port\":45890,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2011540,\"rev\":7,\"signature\":\"ET POLICY OpenSSL Demo CA - Internet Widgits Pty (O)\",\"category\":\"Not Suspicious Traffic\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2010_09_27\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_08_17\"]}},\"tls\":{\"subject\":\"C=AU, ST=Some-State, O=Internet Widgits Pty Ltd\",\"issuerdn\":\"C=AU, ST=Some-State, O=Internet Widgits Pty Ltd\",\"serial\":\"5A:12:5C:5A:D7:5A:8D:25:63:DB:B4:6B:64:3C:0B:7E:67:47:78:27\",\"fingerprint\":\"0b:13:9a:67:c0:7e:22:49:bd:c2:96:47:6e:c6:73:62:ca:3a:8f:d4\",\"sni\":\"un-bridge-v2.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2023-12-28T05:31:30\",\"notafter\":\"2033-12-25T05:31:30\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f9fcb52580329fb6a9b61d7542087b90\",\"string\":\"771,52392,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":4,\"bytes_toserver\":1152,\"bytes_toclient\":1547,\"start\":\"2026-02-08T14:36:24.562150+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-08T14:36:24Z","timestamp":1770561384,"ip_dst":{"addr":"Client IP","port":45894,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"130.49.217.5","port":443,"asn":4130,"as":"UPITT-AS","country":"United States","country_code":"US"},"severity":"low","alert":"ET POLICY OpenSSL Demo CA - Internet Widgits Pty (O)","source":"{\"timestamp\":\"2026-02-08T14:36:24.736837+0000\",\"flow_id\":1895577900594103,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"130.49.217.5\",\"src_port\":443,\"dest_ip\":\"172.18.0.13\",\"dest_port\":45894,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2011540,\"rev\":7,\"signature\":\"ET POLICY OpenSSL Demo CA - Internet Widgits Pty (O)\",\"category\":\"Not Suspicious Traffic\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2010_09_27\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_08_17\"]}},\"tls\":{\"subject\":\"C=AU, ST=Some-State, O=Internet Widgits Pty Ltd\",\"issuerdn\":\"C=AU, ST=Some-State, O=Internet Widgits Pty Ltd\",\"serial\":\"5A:12:5C:5A:D7:5A:8D:25:63:DB:B4:6B:64:3C:0B:7E:67:47:78:27\",\"fingerprint\":\"0b:13:9a:67:c0:7e:22:49:bd:c2:96:47:6e:c6:73:62:ca:3a:8f:d4\",\"sni\":\"un-bridge-v2.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2023-12-28T05:31:30\",\"notafter\":\"2033-12-25T05:31:30\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f9fcb52580329fb6a9b61d7542087b90\",\"string\":\"771,52392,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":4,\"bytes_toserver\":1023,\"bytes_toclient\":1547,\"start\":\"2026-02-08T14:36:24.635831+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"un-bridge-v2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"un-bridge-v2.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-02-06","domain_rank":0,"first_seen":"2026-02-08T14:21:29.653042Z","last_seen":"2026-02-08T14:21:29.653042Z","alert_count":3,"request_count":3,"received_data":686,"sent_data":1243,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"un-bridge-v2.com/","fqdn":"un-bridge-v2.com","domain":"un-bridge-v2.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-08T14:36:24.563Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: un-bridge-v2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T23:57:26.633165Z","times_seen":17845826,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":73,"dns":0,"connect":32,"send":0,"wait":0,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"un-bridge-v2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"un-bridge-v2.com/","fqdn":"un-bridge-v2.com","domain":"un-bridge-v2.com","tld":"com"},"ip":{"addr":"130.49.217.5","port":80,"asn":4130,"as":"UPITT-AS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-08T14:36:24.727Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: un-bridge-v2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty-cast\r\nDate: Sun, 08 Feb 2026 14:36:24 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":155,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"d48871340448821742f52506e427d6d5","sha1":"d33455952d52decc3f2c3342ab00f4b46d1a7a96","sha256":"2c837d5d1ed22b01b45195e332d17f35f74bb118d349dffb18174aa7538540d5","sha512":"7c36c088166b7e4a0df299766f3a3382ab51d1c9b8a8ae8125ac68c5b1dfef718e575736df59ec031ea0dbb51d1d1c5c1ec6028d5ed8e5d649389844d3162f91","ssdeep":"","tlshash":"e4c08c6d24232c0c86a3207626c36490c1868327a66a00120440805730cb2998ac23aa","first_seen":"2025-04-09T11:38:48.488113Z","last_seen":"2026-02-18T13:46:57.476061Z","times_seen":13,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":34,"dns":1,"connect":32,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"un-bridge-v2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"un-bridge-v2.com/favicon.ico","fqdn":"un-bridge-v2.com","domain":"un-bridge-v2.com","tld":"com"},"ip":{"addr":"130.49.217.5","port":80,"asn":4130,"as":"UPITT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://un-bridge-v2.com/","date":"2026-02-08T14:36:24.898Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: un-bridge-v2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://un-bridge-v2.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty-cast\r\nDate: Sun, 08 Feb 2026 14:36:24 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":155,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"d48871340448821742f52506e427d6d5","sha1":"d33455952d52decc3f2c3342ab00f4b46d1a7a96","sha256":"2c837d5d1ed22b01b45195e332d17f35f74bb118d349dffb18174aa7538540d5","sha512":"7c36c088166b7e4a0df299766f3a3382ab51d1c9b8a8ae8125ac68c5b1dfef718e575736df59ec031ea0dbb51d1d1c5c1ec6028d5ed8e5d649389844d3162f91","ssdeep":"","tlshash":"e4c08c6d24232c0c86a3207626c36490c1868327a66a00120440805730cb2998ac23aa","first_seen":"2025-04-09T11:38:48.488113Z","last_seen":"2026-02-18T13:46:57.476061Z","times_seen":13,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"un-bridge-v2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}