{"report_id":"c0de17c8-901c-44e5-b658-722d51a1fea9","version":6,"status":"done","tags":[],"date":"2025-10-14T06:41:41Z","url":{"schema":"http","addr":"bhwalmartoffer.com/","fqdn":"bhwalmartoffer.com","domain":"bhwalmartoffer.com","tld":"com"},"ip":{"addr":"103.224.212.200","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"final":{"url":{"schema":"http","addr":"ww16.bhwalmartoffer.com/?sub1=20251014-1741-1948-b209-3a2070b1016e","fqdn":"ww16.bhwalmartoffer.com","domain":"bhwalmartoffer.com","tld":"com"},"title":"bhwalmartoffer.com - Dette nettstedet er til salgs! - bhwalmartoffer Ressurser og informasjon"},"submit":{"url":{"schema":"http","addr":"bhwalmartoffer.com/","fqdn":"bhwalmartoffer.com","domain":"bhwalmartoffer.com","tld":"com"},"ip":{"addr":"103.224.212.200","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-18T06:41:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"bhwalmartoffer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"ww16.bhwalmartoffer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"img.sedoparking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"bhwalmartoffer.com","ip":{"addr":"103.224.212.200","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"domain_registered":"2014-02-25","domain_rank":0,"first_seen":"2025-10-14T06:41:41.312403Z","last_seen":"2025-10-14T06:41:41.312403Z","alert_count":1,"request_count":1,"received_data":59815,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"ww16.bhwalmartoffer.com","ip":{"addr":"91.195.240.14","port":80,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-25","domain_rank":0,"first_seen":"2025-10-14T06:41:41.312944Z","last_seen":"2025-10-14T06:41:41.312944Z","alert_count":2,"request_count":2,"received_data":60316,"sent_data":1235,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.sedoparking.com","ip":{"addr":"205.234.175.175","port":80,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"domain_registered":"2001-09-18","domain_rank":591238,"first_seen":"2013-04-22T22:23:29Z","last_seen":"2025-10-12T22:24:07.401219Z","alert_count":1,"request_count":1,"received_data":15626,"sent_data":385,"comment":"","tags":null,"fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"ww16.bhwalmartoffer.com/?sub1=20251014-1741-1948-b209-3a2070b1016e","fqdn":"ww16.bhwalmartoffer.com","domain":"bhwalmartoffer.com","tld":"com"},"ip":{"addr":"91.195.240.14","port":80,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"2984fb65b2f3e9aa74b5d70c38b4a12a","sha1":"40d3569ab331511a1d856852b172046d6a07bbef","sha256":"91e93ea8bd32a27c735f3276cf824f8b5255992b9ddd85cbcb50e26b17d47a18","sha512":"42d2c61a021c6d56cbe482f0249c5a048c368c59e8bfbf860f50cb688596bcbab792c04e1547effe76969e98259dde84c5263efeb834ff60ed7a81d8a2045eaf","ssdeep":"","tlshash":"4a71170d6ea34dbcce50a2ddf029fd4503d8719369a2e89ce05c44ad46eb8db3b1086f","size":3552,"data":"","first_seen":"2025-10-14T06:41:44.427094Z","last_seen":"2025-10-14T06:41:44.427094Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww16.bhwalmartoffer.com/?sub1=20251014-1741-1948-b209-3a2070b1016e","fqdn":"ww16.bhwalmartoffer.com","domain":"bhwalmartoffer.com","tld":"com"},"ip":{"addr":"91.195.240.14","port":80,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbb3d2ae8e9948970837ce73e3f47ef8","sha1":"26a24bc9b9af1b731d839ddda11d87665c2f894f","sha256":"9b8e88ae70dfa4837c62be1a9365b23b059a034f76554ad476098e72c1fd8a71","sha512":"af17443adcaecc9e7497020b2482fb46021f055d09824726330dde493e7e817380a7e0efc2ee9dddd506f8a0fb70cb24f74d473307526558342a613b0fa07a55","ssdeep":"","tlshash":"82118e8926e614194637a5388fcfc20871209007318a8d2c7f0d73e45f52a359bf77ed","size":916,"data":"","first_seen":"2024-05-24T00:49:23Z","last_seen":"2026-03-30T23:37:14.044359Z","times_seen":3862,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"bhwalmartoffer.com/","fqdn":"bhwalmartoffer.com","domain":"bhwalmartoffer.com","tld":"com"},"ip":{"addr":"103.224.212.200","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-14T06:41:18.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"devintage2.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 06:40:14 GMT","end":"Fri, 02 Jan 2026 06:40:13 GMT"},"fingerprint":{"sha1":"61:C8:CB:B6:90:D9:E5:79:14:01:B7:2F:59:81:E9:26:BB:D2:4C:F9","sha256":"89:1B:B9:F1:BE:6B:FC:0E:9D:FB:22:34:FC:F3:89:89:92:C4:D9:E6:0B:12:6F:E3:7E:69:1B:47:56:74:AE:7D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bhwalmartoffer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\ndate: Tue, 14 Oct 2025 06:41:19 GMT\r\nserver: Apache\r\nset-cookie: __tad=1760424079.6138456; expires=Fri, 12 Oct 2035 06:41:19 GMT; Max-Age=315360000\r\nlocation: http://ww16.bhwalmartoffer.com/?sub1=20251014-1741-1948-b209-3a2070b1016e\r\ncontent-length: 2\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":59481,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":1146,"timings":{"blocked":490,"dns":178,"connect":147,"send":0,"wait":166,"receive":0,"ssl":161},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"bhwalmartoffer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ww16.bhwalmartoffer.com/?sub1=20251014-1741-1948-b209-3a2070b1016e","fqdn":"ww16.bhwalmartoffer.com","domain":"bhwalmartoffer.com","tld":"com"},"ip":{"addr":"91.195.240.14","port":80,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-14T06:41:19.141Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?sub1=20251014-1741-1948-b209-3a2070b1016e HTTP/1.1\r\nHost: ww16.bhwalmartoffer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Tue, 14 Oct 2025 06:41:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ntransfer-encoding: chunked\r\nvary: Accept-Encoding\r\nexpires: Mon, 26 Jul 1997 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_GeMGtnNH35A1Ict62Hm7CBUjN8LQ5O+vWyWiuD/ApfmTtR/p2B8UeVxeMJQPbkF11xr4+nVjXEf4WXeT7meW6g==\r\nlast-modified: Tue, 14 Oct 2025 06:41:19 GMT\r\nx-cache-miss-from: parking-7fbf5fd67f-mmr6x\r\nserver: Parking/1.0\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":59481,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10651)","md5":"85725f1c373ac5dd6608d45166b57aeb","sha1":"cdd5d662ceeb67c23fca8c849b0c168d7560ef8f","sha256":"b97affc7f79833982f63b9aa496096a5fa6da70a7a0ebfbfc1265f87e0158055","sha512":"80b2bed82803bc913f5d73c8ec89b20abea03353195b118f9a8dfd2747b873a6ace4f90f66b57bf7caf5284abf1ce3238521b493b8ce99ef79bd421ca4398bbb","ssdeep":"768:5iuPNTN1L6CjosviuER8v89pXulauILYVhiIA8Ssbk8CMq7jqKAN0Dz3DSmBZ2Jz:5rfHryXulUAbL","tlshash":"ce43421599b50566686241ae89f2b348b3d3e4dfdd52adccf83cc2708fa6c9322c8d59","first_seen":"2025-10-14T06:41:44.414236Z","last_seen":"2025-10-14T06:41:44.414236Z","times_seen":1,"resource_available":false,"data":null}},"time_used":738,"timings":{"blocked":235,"dns":190,"connect":46,"send":0,"wait":265,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"ww16.bhwalmartoffer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ww16.bhwalmartoffer.com/search/tsc.php?ses=ogcyr5zHw9JnO8YzW1bl7ZFNGt5CFNV8m8dJt4OBMBaFavy15zG6ewhI_V1-RkH7LtNaInWndLiYHX0DmcOXZ6up3WzlR6zeq7Imv5hlNeHyYlJaRnJ878u16Yx8DMXU6SCPwhcmF-glvXUEYDAn50QifvvwmHuT8IcO_P_zM1yNd69MLmcWXofOdWswOUfKsd2N6hcBGCXSc0GI3fieOenCBqtGQMIq552i5K7dLwat0OgJIe4RVlr_3XA5OJKFEwqmBd3rbTnmafE8hxRY38RiPar3HY_e764RJk5TYVwDJwhEWZeSiGUBfaJJomSUsdFT0AVb0pwyxMfpuDM_Lg2csH4NOKyJwFdgko9NBRT7_YsGG2xXU7u8tHuPQ\u0026cv=2","fqdn":"ww16.bhwalmartoffer.com","domain":"bhwalmartoffer.com","tld":"com"},"ip":{"addr":"91.195.240.14","port":80,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww16.bhwalmartoffer.com/?sub1=20251014-1741-1948-b209-3a2070b1016e","date":"2025-10-14T06:41:19.853Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /search/tsc.php?ses=ogcyr5zHw9JnO8YzW1bl7ZFNGt5CFNV8m8dJt4OBMBaFavy15zG6ewhI_V1-RkH7LtNaInWndLiYHX0DmcOXZ6up3WzlR6zeq7Imv5hlNeHyYlJaRnJ878u16Yx8DMXU6SCPwhcmF-glvXUEYDAn50QifvvwmHuT8IcO_P_zM1yNd69MLmcWXofOdWswOUfKsd2N6hcBGCXSc0GI3fieOenCBqtGQMIq552i5K7dLwat0OgJIe4RVlr_3XA5OJKFEwqmBd3rbTnmafE8hxRY38RiPar3HY_e764RJk5TYVwDJwhEWZeSiGUBfaJJomSUsdFT0AVb0pwyxMfpuDM_Lg2csH4NOKyJwFdgko9NBRT7_YsGG2xXU7u8tHuPQ\u0026cv=2 HTTP/1.1\r\nHost: ww16.bhwalmartoffer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww16.bhwalmartoffer.com/?sub1=20251014-1741-1948-b209-3a2070b1016e\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Tue, 14 Oct 2025 06:41:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nx-cache-miss-from: parking-7fbf5fd67f-jdckw\r\nserver: Parking/1.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"ww16.bhwalmartoffer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"img.sedoparking.com/templates/logos/sedo_logo.png","fqdn":"img.sedoparking.com","domain":"sedoparking.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":80,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww16.bhwalmartoffer.com/?sub1=20251014-1741-1948-b209-3a2070b1016e","date":"2025-10-14T06:41:19.911Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /templates/logos/sedo_logo.png HTTP/1.1\r\nHost: img.sedoparking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww16.bhwalmartoffer.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 14 Oct 2025 06:41:19 GMT\r\nContent-Type: image/png\r\nContent-Length: 15086\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=604800\r\nExpires: Tue, 21 Oct 2025 06:41:19 GMT\r\nX-CFHash: \"def00c11b1596db4efee6a9fbe64fc27\"\r\nX-CFF: B\r\nLast-Modified: Mon, 11 Jan 2021 07:44:34 GMT\r\nX-CF3: H\r\nCF4Age: 0\r\nx-cf-tsc: 1729867994\r\nCF4ttl: 31536000.000\r\nX-CF2: H\r\nServer: CFS 1124\r\nX-CF-ReqID: e8952d1b1f8952c231d9f2bad4be0f53\r\nX-CF1: 11696:fA.arn1:cf:nom:cacheN.arn1-01:H\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"def00c11b1596db4efee6a9fbe64fc27","sha1":"bd298981e6d8d7e4ffa18abcf687041f4246672d","sha256":"95c427fa3143b1896faf42a6406686ce7602cb39052081bb32d12b51c9e047e4","sha512":"c056e95dbfa1aab3a50dff18c6d577dbffea72c93316ffc53b6b7aa41dcc7707a810d563894589a7305de0b76610f88150b2034670de368773b2b356f14ad30f","ssdeep":"192:jiHSINqv0tJ30DezSfPAXTZwC3D2N2xp1Fd/ar/+zi3LHZNwkQH0iWpXDt3TN8rB:jzAnP9j","tlshash":"31623e0bfd4bc358ce50b23ae67c4bfb6361d8c1b090a7e257d9d51aafa7b014c9a011","first_seen":"2023-04-14T07:11:21Z","last_seen":"2026-04-03T18:25:00.1998Z","times_seen":219658,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":1,"connect":7,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"img.sedoparking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}