{"report_id":"bc109d5c-ced2-4e4c-a428-fb08c10b310d","version":6,"status":"done","tags":[],"date":"2026-03-03T12:27:43Z","url":{"schema":"http","addr":"de.sun0x.com","fqdn":"de.sun0x.com","domain":"sun0x.com","tld":"com"},"ip":{"addr":"85.93.10.175","port":0,"asn":29551,"as":"Aixit GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"de.sun0x.com/","fqdn":"de.sun0x.com","domain":"sun0x.com","tld":"com"},"title":"Apple","dom":{"size":223823,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (20277)","md5":"feb7e5e6844f2dcd960e6d99bb71e523","sha1":"dc984922470431cd1c0ac705737a3b67bca96889","sha256":"e7ac20642a6cb43fc9e4363b0569654a7e5b1900826ae09ca531f52ca447bc33","sha512":"26206122246e4b3a240c93b014d4fbd5231f93345fa396179758c5c7ccefd62f276a8081721be51de2e840dc6f050ff7fc180807e40b570c9fc703304ca31b76","ssdeep":"1536:JQkAwcsSiX8dVqE3mi7ZInGwNbANwLHN3q8dHO9Ga5lLZ+RC7+sEEUrc9+/47agy:2HGCSfrc9gVcG","tlshash":"f1240d7b325c686e130387dde8163928f1afac79dae690e9fa7747211243de0752bd10","dom_hash":"domhash3e54290e8a919b250947d39d5fadf33e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"de.sun0x.com","fqdn":"de.sun0x.com","domain":"sun0x.com","tld":"com"},"ip":{"addr":"85.93.10.175","port":0,"asn":29551,"as":"Aixit GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-07T12:27:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"de.sun0x.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"de.sun0x.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"de.sun0x.com","ip":{"addr":"85.93.10.175","port":443,"asn":29551,"as":"Aixit GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-11-12","domain_rank":0,"first_seen":"2026-03-03T03:06:05.650019Z","last_seen":"2026-03-03T03:06:05.650019Z","alert_count":2,"request_count":1,"received_data":230932,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Apple MapKit JS","description":"Apple MapKit JS lets you embed interactive maps directly into your websites across platforms and operating systems, including iOS and Android.","website":"https://developer.apple.com/maps/web/","common_platform_enumeration":"","icon":"Apple.svg","categories":["Maps"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"de.sun0x.com/","fqdn":"de.sun0x.com","domain":"sun0x.com","tld":"com"},"ip":{"addr":"85.93.10.175","port":443,"asn":29551,"as":"Aixit GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-03T12:27:21.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"de.sun0x.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:34:54 GMT","end":"Tue, 28 Apr 2026 10:34:53 GMT"},"fingerprint":{"sha1":"84:04:EC:22:00:E3:67:5D:8D:25:CE:69:DE:55:31:4C:F1:31:05:F5","sha256":"66:F3:6C:A0:4F:69:D9:17:1E:F0:1B:76:EA:5D:31:CB:AB:E1:97:7F:A9:30:96:F1:1B:97:55:C2:DB:EF:26:E0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: de.sun0x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 03 Mar 2026 12:27:21 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 38817\r\nConnection: keep-alive\r\nSet-Cookie: geo=DE; path=/; domain=.apple.com\r\nX-Frame-Options: SAMEORIGIN\r\nVary: Accept-Encoding\r\nContent-Security-Policy: default-src 'self' blob: data: *.akamaized.net *.apple.com *.apple-mapkit.com *.cdn-apple.com *.organicfruitapps.com; child-src blob: mailto: embed.music.apple.com embed.podcasts.apple.com https://recyclingprogram.apple.com https://smb.apple.com https://nova.apple.com swdlp.apple.com www.apple.com www.instagram.com platform.twitter.com www.youtube-nocookie.com; img-src 'unsafe-inline' blob: data: *.apple.com *.apple-mapkit.com *.cdn-apple.com *.mzstatic.com; script-src 'unsafe-inline' 'unsafe-eval' blob: *.apple.com *.apple-mapkit.com www.instagram.com platform.twitter.com; style-src 'unsafe-inline' *.apple.com\r\nReferrer-Policy: no-referrer-when-downgrade\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Xss-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\nCache-Control: max-age=61\r\nExpires: Tue, 03 Mar 2026 12:28:22 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apple MapKit JS","description":"Apple MapKit JS lets you embed interactive maps directly into your websites across platforms and operating systems, including iOS and Android.","website":"https://developer.apple.com/maps/web/","common_platform_enumeration":"","icon":"Apple.svg","categories":["Maps"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":229739,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (19957)","md5":"2d09ab8d87ab62f1c1ca8ddac0259b12","sha1":"a4a07d9fff7746f9661d258093acb53171939d49","sha256":"588042c0de62ca49095ee041bbb16c32cff087e3938f25363a7a4e6fa5004b7d","sha512":"2ad3332dd2ebacdd6b9c0c58df08121a91f768377d12143733b786d2e7fd32a7950d40fc00b9924a9f84c2c702f00549f8e499070f7c61bbb0cb24b2b7fb72cb","ssdeep":"1536:g/QOQrsBiW8d05E3mB7aInGnNEAqbLIN3q8dHO9Ga5lLZ+U/mwEEUrc9+/47ag/5:CKseLrc9gwEc","tlshash":"95241d7b325c687e130387dde8162938e29fac79dae590e9fa7b47251243de0752ec10","first_seen":"2026-03-03T02:06:55.205144Z","last_seen":"2026-03-03T13:47:32.575311Z","times_seen":7,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":132,"dns":0,"connect":38,"send":0,"wait":121,"receive":42,"ssl":89},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"de.sun0x.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"de.sun0x.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}