{"report_id":"c132c449-b4ba-4daf-b199-e4fd75166ec1","version":6,"status":"done","tags":[],"date":"2025-12-17T07:07:37Z","url":{"schema":"https","addr":"qomira.sbs/","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":0,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"qomira.sbs/","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"title":"Giriş Yap | Binance TR","dom":{"size":15418,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (612)","md5":"758f91572a3143f4bde061dbb320b26c","sha1":"7c7831498cbbf1570d9b34ddc89e8531ee444510","sha256":"d78119125c968b7a47b112615beeb4dc1e12ebc14af65d2d4f8335de467c7482","sha512":"019d17dacedb0d1e99815594c964043f5e2f66666a157404effa10082af001488e55a3c96045d03206f1140e2e8747da0dc2c8c4ad521440ae1461a8f94d5f82","ssdeep":"192:qf9w8TNJpVzTNjVVzTN6r0Vk1TNw2VU3mfu621iuvY7TbqkYgiOXLMQkTQUGs7Rx:urbJUVIWfPT2B3UL4VN1x","tlshash":"1f623d2c3ca1682902b7e2fde753950de570d303a90585a0756ec7641fe3de24c9badd","dom_hash":"domhash86ce82f189d593b261b70545a70f508e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"qomira.sbs/","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":0,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-21T07:07:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs/","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com","meta":null}],"urlquery":null},"summary":[{"fqdn":"qomira.sbs","ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-12-04","domain_rank":0,"first_seen":"2025-12-17T07:07:37.839648Z","last_seen":"2025-12-17T07:07:37.839648Z","alert_count":132,"request_count":22,"received_data":577734,"sent_data":11983,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-12-14T22:26:41.611695Z","alert_count":0,"request_count":1,"received_data":88168,"sent_data":418,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"qomira.sbs/","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"51916f6594b473fc2ad1ccfb653aa8cf","sha1":"29e0cbde24136a464b33d22b990122d4f76bb88d","sha256":"6baa3091b22e28c1b089f2fbf68a6a81e35a5c622810c002ac7bbaa8b02fc21a","sha512":"89e573c537b50d99911a08ff82ae20c4a4001e9ee486705e767b7057e8f3f545bea74be5f0c00090f83a1ec8b3a5887634ac0d8a24ead6f6fbb9a608ed85d4a1","ssdeep":"","tlshash":"eef0a35d3c66f55737f93638c2238b7b3755070175835525d645cc2878945c618c6d8d","size":444,"data":"","first_seen":"2025-12-17T07:07:42.636321Z","last_seen":"2025-12-21T06:42:35.262031Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-07-22T17:27:14.392547Z","times_seen":181311,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"f44fcfbb3be63a4c97ff34cd2e8a7dd1","sha1":"e8f7bbd3d4e33e187dda6a38bcf43ee28a93b241","sha256":"f7428ad93bfc0413b257c35c37a95747909417a832628c0a978e4c4015a72dbf","sha512":"988525f4302590be04fc58bb22b9898d6924c85353372f2798585791820ba991330424999fbb9264c553744f4ceb62b9d31ae889761fa0eae468de2d388521ba","ssdeep":"","tlshash":"92f0a39d3c66f45737f97534c2338b6f3365070176c39924c645cc24686458a1847d4d","size":445,"data":"","first_seen":"2025-12-17T07:07:42.637294Z","last_seen":"2025-12-22T20:05:15.731921Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"460e6fc104075dcf75458ed9d4a3710c","sha1":"b0ad1adfedad799519fa9884fd3c635df9d60aeb","sha256":"f744e1f353a54fab64bf57e9c08aabe42440b277572231f8fe016b2a21869ef7","sha512":"d1509d10f9ea6c8ea6650fe2aabdbe136bbb4e0e14cc69f67ec7f4ce08e4f73d49a25b723ba2b54ab3c25cf80450f2f0297b08b2c025d18074ee4fdf8b4709a9","ssdeep":"","tlshash":"25f0a35d3c56b55737f97639c3238a7f3795070175c35524ca46cc3468744c61846d4e","size":445,"data":"","first_seen":"2025-12-17T07:07:42.638237Z","last_seen":"2025-12-22T20:05:15.733075Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"102c1cca2c5881000df5304f721c13fe","sha1":"8dcaedfc46093475e12893b8d392b25cfc9604cb","sha256":"39e05390db18fc011b03742f5e0c6e0cfbe31ae713dfb7354be446c13f877995","sha512":"db1538a194e808c6fa29271ce34084248ab1ccd0e6006ed0905906d832a7a850ccd79c095e5cfd2c4c7b529c99bafd24804390fd837cf8cc7a87b7447266ed1f","ssdeep":"","tlshash":"17f0ab9d3ca6b46737f93638c2238a6f33a6070175839928c646cc2468649da1886d8e","size":445,"data":"","first_seen":"2025-12-17T07:07:42.639201Z","last_seen":"2025-12-22T20:05:15.738674Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"504bbe5413f6cab1b990672c13328dbf","sha1":"7a395645a098d401acd58359ab365c38d3a00c85","sha256":"34bc38a84f3b0c3e89453f7255f97b78da665e072af3eaded67224401267afd8","sha512":"c3c0ccefa61a992d9ca7a79b5bb0003261e1fc4eb4f2facacd1553bab8475a12342b9563ae42937ecdec497170791e200cc4681a7f681e8b5913d73d9603ebbd","ssdeep":"","tlshash":"d9e0cd7714f1883405afb59e375e55483410408725498942be6dbf5c5f60c724b61777","size":299,"data":"","first_seen":"2025-09-11T02:01:27.599826Z","last_seen":"2026-04-10T01:16:16.165329Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"16af02d312e75fa112da1be8bceb5090","sha1":"e84713be6bb86ce9dcb376f2d03d3b6a0846d94b","sha256":"da3aae71e5575330e4746a23c61c25777b2c3277f5f47ba6650365b0dee674e0","sha512":"96f0dccdcb09253d037db36eb5662eb007d24415a7fdb9ddf6f90b8e53d69d1dce66501b136e5921c34178e6a0ac8c1d6b7713dec18bbed07fe857dbe13bad29","ssdeep":"","tlshash":"0211dcbd227a2d3008328eb657cb605164f5f0032007c846773cdb481fabd824667eaf","size":981,"data":"","first_seen":"2025-09-11T02:01:27.602379Z","last_seen":"2026-04-10T01:16:16.166675Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"846f4d89a923c3959a4fb707160e9725","sha1":"362bb463c85529ad293d4fa61222442e5ed36024","sha256":"26253829de6ef7dc0923711a4717aa1b95d272823c35bcbeb4f22100e2575195","sha512":"97d94c497fa7d190e51884493fcbb05721dc7ecc22457bd2a441c465743fe85c00045e4b30786141faa5265e9781bc58ff6edded426f205a3269c0485cc54e64","ssdeep":"","tlshash":"6b8143295cb309394267f0bd978b560cf1b0c0537c09a502796c67809ff1c61aaafbda","size":4047,"data":"","first_seen":"2025-12-17T07:07:42.642004Z","last_seen":"2026-04-10T01:16:16.168191Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"2077154294c25c06b0b5e01ba4252f37","sha1":"9bc96aab69e141ec70c7b91cd63fa1f93d383cca","sha256":"6ab4202a505927d77d4f486337df4a61a0bba845bee44cc2c2d95a4f48787a8b","sha512":"c2c458f770294e11db53bf4b846ee809fe6534c27d7f1ac38bb3aeb4274b8717c63b9032cea8063d7aa852ec61f99b65a5272162747323bf5dc300f8d13c054d","ssdeep":"","tlshash":"b9f026ae28f6304016b3306a99dfd809242395171a0abf203f8c95908f2df7dd18376c","size":478,"data":"","first_seen":"2023-09-03T02:03:13Z","last_seen":"2026-06-01T00:45:05.352219Z","times_seen":153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"qomira.sbs/assets/css/quill.snow.css","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qomira.sbs/","date":"2025-12-17T07:07:13.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qomira.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 09:21:43 GMT","end":"Sun, 08 Mar 2026 09:21:42 GMT"},"fingerprint":{"sha1":"A1:4D:EC:1A:7B:12:B5:C8:A9:6A:F1:26:FD:1E:B7:87:05:59:07:69","sha256":"9E:98:9C:06:2D:0C:64:D6:BA:CE:B2:A9:73:B8:00:B0:C5:CA:1C:82:90:A5:6A:43:16:33:50:06:93:91:21:37"}}},"request":{"raw":"GET /assets/css/quill.snow.css HTTP/1.1\r\nHost: qomira.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qomira.sbs/\r\nCookie: PHPSESSID=fbad748932aba9c64df938a4f7309873\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Dec 2025 07:07:13 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 28 Nov 2025 12:11:36 GMT\r\nETag: \"60a7-644a687ed4e00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 24743\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24743,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5cf1f58f8bf2c990e09750ecf8ec2531","sha1":"39ab07bd3254084c2d61f1b447d026c0facb8d70","sha256":"f909c273dd7081ba8a3e772131ab9fce25255e987e6e1be2e2b7ad07516bb860","sha512":"09b7302a2879d7e38b2d76c958e4cd0fa683588f6082c71f0279d237e7ad261da692bd7e6ad1acb5c4444d9e69adf884a4b7c8800dc7516cc3a30f63ecaf28f5","ssdeep":"768:OXZh8GMCIQW+3P3/YgJhgoi6sEJRJByKn8WI7FFrFhFrFJ0SFWpr5mGibPz7QoYR:OXT85CIQW+3P3/YgJhgoi6sEJRJByKn1","tlshash":"91b21f4dedab1dbf412660bd900112d07fce6753d0ebaab9d4e16d8e25ec094c36a39c","first_seen":"2024-12-10T13:05:08.1815Z","last_seen":"2026-07-03T09:16:29.509069Z","times_seen":65,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":88,"dns":1,"connect":44,"send":0,"wait":47,"receive":44,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/process","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qomira.sbs/","date":"2025-12-17T07:07:20.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qomira.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 09:21:43 GMT","end":"Sun, 08 Mar 2026 09:21:42 GMT"},"fingerprint":{"sha1":"A1:4D:EC:1A:7B:12:B5:C8:A9:6A:F1:26:FD:1E:B7:87:05:59:07:69","sha256":"9E:98:9C:06:2D:0C:64:D6:BA:CE:B2:A9:73:B8:00:B0:C5:CA:1C:82:90:A5:6A:43:16:33:50:06:93:91:21:37"}}},"request":{"raw":"POST /process HTTP/1.1\r\nHost: qomira.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 43\r\nOrigin: https://qomira.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qomira.sbs/\r\nCookie: PHPSESSID=fbad748932aba9c64df938a4f7309873\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":43,"data":"ip=f81d80af9cbeb0011316fbba3da8002b32251f7a"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Dec 2025 07:07:20 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nX-Powered-By: PHP/8.4.15, PleskLin\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T17:24:26.53347Z","times_seen":17455687,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/process","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qomira.sbs/","date":"2025-12-17T07:07:24.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qomira.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 09:21:43 GMT","end":"Sun, 08 Mar 2026 09:21:42 GMT"},"fingerprint":{"sha1":"A1:4D:EC:1A:7B:12:B5:C8:A9:6A:F1:26:FD:1E:B7:87:05:59:07:69","sha256":"9E:98:9C:06:2D:0C:64:D6:BA:CE:B2:A9:73:B8:00:B0:C5:CA:1C:82:90:A5:6A:43:16:33:50:06:93:91:21:37"}}},"request":{"raw":"POST /process HTTP/1.1\r\nHost: qomira.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 43\r\nOrigin: https://qomira.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qomira.sbs/\r\nCookie: PHPSESSID=fbad748932aba9c64df938a4f7309873\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":43,"data":"ip=f81d80af9cbeb0011316fbba3da8002b32251f7a"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Dec 2025 07:07:24 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nX-Powered-By: PHP/8.4.15, PleskLin\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T17:24:26.53347Z","times_seen":17455687,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/process","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qomira.sbs/","date":"2025-12-17T07:07:28.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qomira.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 09:21:43 GMT","end":"Sun, 08 Mar 2026 09:21:42 GMT"},"fingerprint":{"sha1":"A1:4D:EC:1A:7B:12:B5:C8:A9:6A:F1:26:FD:1E:B7:87:05:59:07:69","sha256":"9E:98:9C:06:2D:0C:64:D6:BA:CE:B2:A9:73:B8:00:B0:C5:CA:1C:82:90:A5:6A:43:16:33:50:06:93:91:21:37"}}},"request":{"raw":"POST /process HTTP/1.1\r\nHost: qomira.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 43\r\nOrigin: https://qomira.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qomira.sbs/\r\nCookie: PHPSESSID=fbad748932aba9c64df938a4f7309873\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":43,"data":"ip=f81d80af9cbeb0011316fbba3da8002b32251f7a"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Dec 2025 07:07:28 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nX-Powered-By: PHP/8.4.15, PleskLin\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T17:24:26.53347Z","times_seen":17455687,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/process","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qomira.sbs/","date":"2025-12-17T07:07:14.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qomira.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 09:21:43 GMT","end":"Sun, 08 Mar 2026 09:21:42 GMT"},"fingerprint":{"sha1":"A1:4D:EC:1A:7B:12:B5:C8:A9:6A:F1:26:FD:1E:B7:87:05:59:07:69","sha256":"9E:98:9C:06:2D:0C:64:D6:BA:CE:B2:A9:73:B8:00:B0:C5:CA:1C:82:90:A5:6A:43:16:33:50:06:93:91:21:37"}}},"request":{"raw":"POST /process HTTP/1.1\r\nHost: qomira.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 43\r\nOrigin: https://qomira.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qomira.sbs/\r\nCookie: PHPSESSID=fbad748932aba9c64df938a4f7309873\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":43,"data":"ip=f81d80af9cbeb0011316fbba3da8002b32251f7a"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Dec 2025 07:07:14 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nX-Powered-By: PHP/8.4.15, PleskLin\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T17:24:26.53347Z","times_seen":17455687,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/assets/img/headermobil.png","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qomira.sbs/","date":"2025-12-17T07:07:13.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qomira.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 09:21:43 GMT","end":"Sun, 08 Mar 2026 09:21:42 GMT"},"fingerprint":{"sha1":"A1:4D:EC:1A:7B:12:B5:C8:A9:6A:F1:26:FD:1E:B7:87:05:59:07:69","sha256":"9E:98:9C:06:2D:0C:64:D6:BA:CE:B2:A9:73:B8:00:B0:C5:CA:1C:82:90:A5:6A:43:16:33:50:06:93:91:21:37"}}},"request":{"raw":"GET /assets/img/headermobil.png HTTP/1.1\r\nHost: qomira.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qomira.sbs/\r\nCookie: PHPSESSID=fbad748932aba9c64df938a4f7309873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Dec 2025 07:07:14 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 28 Nov 2025 12:11:36 GMT\r\nETag: \"e1a-644a687ed4e00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 3610\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3610,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 373 x 63, 8-bit/color RGBA, non-interlaced","md5":"62e0f63e92e600da6c504c952649053f","sha1":"8f5bafb0f961ef6a321a8069d26594b2ac8be3a5","sha256":"7cd9e895262415e01c2977ca7bc3a78af27d01d0cfb51b653a22aa247d7ba3b0","sha512":"74ac9ede0108e7f7effa4b22921fc2a783fce676367a7740e289f221dd7fe51e60e1801b43b5f83d3e3eeb2a3f2f5081798e3f7ebf14db22c44991597eaecbc4","ssdeep":"","tlshash":"98714caf65a286ebd76721e611bbf594d313704ac01b349c2c1da0624bdb3f24b342cb","first_seen":"2024-12-10T13:05:08.190197Z","last_seen":"2026-04-10T01:16:16.136735Z","times_seen":64,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":349,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/assets/img/footermobil.png","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qomira.sbs/","date":"2025-12-17T07:07:13.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qomira.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 09:21:43 GMT","end":"Sun, 08 Mar 2026 09:21:42 GMT"},"fingerprint":{"sha1":"A1:4D:EC:1A:7B:12:B5:C8:A9:6A:F1:26:FD:1E:B7:87:05:59:07:69","sha256":"9E:98:9C:06:2D:0C:64:D6:BA:CE:B2:A9:73:B8:00:B0:C5:CA:1C:82:90:A5:6A:43:16:33:50:06:93:91:21:37"}}},"request":{"raw":"GET /assets/img/footermobil.png HTTP/1.1\r\nHost: qomira.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qomira.sbs/\r\nCookie: PHPSESSID=fbad748932aba9c64df938a4f7309873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Dec 2025 07:07:14 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 28 Nov 2025 12:11:36 GMT\r\nETag: \"72dc-644a687ed4e00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 29404\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":29404,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 371 x 664, 8-bit/color RGBA, non-interlaced","md5":"dc0f1928a5c29cc4a951427ea3200f59","sha1":"0800ceddccae2e2713b044868717c99c0fd80a19","sha256":"805caeb738fd44789afaccddf66bc2d2df274d30aece6cc57c816341b9a3c6a5","sha512":"6fd3beb6e2d3063bacd4f285916859947d2974b43a91a9da50787cf37d1581b2fa6e5643d6cd2ac7ad95ec529f95a0d38597959b246e310669d5335b682b9595","ssdeep":"768:JnKKKKKurKKKKNKKQ3hKKKKKLQU2e04SYGFg7aKKK575SKKKtZKKKKK5NKNKKKK7:hKKKKKUKKKKNKKQ3hKKKKKLkN4SPrKKI","tlshash":"b5d29e8b0fa099bddd6a736112b86ed65f34f26128b3c7b0c0d7871c2612bf0e2b4651","first_seen":"2024-12-10T13:05:08.192953Z","last_seen":"2026-04-10T01:16:16.139014Z","times_seen":64,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":348,"dns":0,"connect":0,"send":0,"wait":46,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qomira.sbs/","date":"2025-12-17T07:07:13.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qomira.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 17 Dec 2025 07:07:13 GMT\r\nage: 2249212\r\nx-served-by: cache-lga21978-LGA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 27, 19607\r\nx-timer: S1765955234.700602,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-07-22T17:27:14.392547Z","times_seen":181311,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":43,"dns":1,"connect":13,"send":0,"wait":13,"receive":7,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/process","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qomira.sbs/","date":"2025-12-17T07:07:22.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qomira.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 09:21:43 GMT","end":"Sun, 08 Mar 2026 09:21:42 GMT"},"fingerprint":{"sha1":"A1:4D:EC:1A:7B:12:B5:C8:A9:6A:F1:26:FD:1E:B7:87:05:59:07:69","sha256":"9E:98:9C:06:2D:0C:64:D6:BA:CE:B2:A9:73:B8:00:B0:C5:CA:1C:82:90:A5:6A:43:16:33:50:06:93:91:21:37"}}},"request":{"raw":"POST /process HTTP/1.1\r\nHost: qomira.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 43\r\nOrigin: https://qomira.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qomira.sbs/\r\nCookie: PHPSESSID=fbad748932aba9c64df938a4f7309873\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":43,"data":"ip=f81d80af9cbeb0011316fbba3da8002b32251f7a"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Dec 2025 07:07:22 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nX-Powered-By: PHP/8.4.15, PleskLin\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T17:24:26.53347Z","times_seen":17455687,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/process","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qomira.sbs/","date":"2025-12-17T07:07:32.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qomira.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 09:21:43 GMT","end":"Sun, 08 Mar 2026 09:21:42 GMT"},"fingerprint":{"sha1":"A1:4D:EC:1A:7B:12:B5:C8:A9:6A:F1:26:FD:1E:B7:87:05:59:07:69","sha256":"9E:98:9C:06:2D:0C:64:D6:BA:CE:B2:A9:73:B8:00:B0:C5:CA:1C:82:90:A5:6A:43:16:33:50:06:93:91:21:37"}}},"request":{"raw":"POST /process HTTP/1.1\r\nHost: qomira.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 43\r\nOrigin: https://qomira.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qomira.sbs/\r\nCookie: PHPSESSID=fbad748932aba9c64df938a4f7309873\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":43,"data":"ip=f81d80af9cbeb0011316fbba3da8002b32251f7a"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Dec 2025 07:07:32 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nX-Powered-By: PHP/8.4.15, PleskLin\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=89\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T17:24:26.53347Z","times_seen":17455687,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-17T07:07:12.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qomira.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 09:21:43 GMT","end":"Sun, 08 Mar 2026 09:21:42 GMT"},"fingerprint":{"sha1":"A1:4D:EC:1A:7B:12:B5:C8:A9:6A:F1:26:FD:1E:B7:87:05:59:07:69","sha256":"9E:98:9C:06:2D:0C:64:D6:BA:CE:B2:A9:73:B8:00:B0:C5:CA:1C:82:90:A5:6A:43:16:33:50:06:93:91:21:37"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qomira.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Dec 2025 07:07:13 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nSet-Cookie: PHPSESSID=fbad748932aba9c64df938a4f7309873; path=/\r\nX-Powered-By: PHP/8.4.15, PleskLin\r\nContent-Length: 15849\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":15849,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (612), with CRLF line terminators","md5":"435cd0a4c6e0bc04f70e86a6c83d385e","sha1":"e9b2552784cacb93d49eee7be8133b53d23b07a9","sha256":"dab8fc82cde5e97410df3cf7e3fd5f2615130c59e7dfc3d4f315231ad36efd1a","sha512":"a9c3b757d3973ceb8f8a0e50c9dbce3a66d247ee8974141e5103c37255858c91b2d01df1c88ef145e2d9003d40256f9a1b0e13963f42b2b8def7929a7a54f69f","ssdeep":"192:t15PtL7q2sPtv7o2sPtE7U02wtPt+7r2I3H0Kzi71U7u3V7ne00aHauqChbGin77:t7OoficX0x7nnKj01N","tlshash":"0662d86c3c455c2d0273d3f8da229a0df764d34396024660b9ae93661fb2ca14cdbedd","first_seen":"2025-12-17T07:07:42.629654Z","last_seen":"2025-12-18T20:09:24.786549Z","times_seen":2,"resource_available":false,"data":null}},"time_used":703,"timings":{"blocked":141,"dns":55,"connect":43,"send":0,"wait":368,"receive":42,"ssl":51},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs/","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/assets/css/mystyle.css","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qomira.sbs/","date":"2025-12-17T07:07:13.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qomira.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 09:21:43 GMT","end":"Sun, 08 Mar 2026 09:21:42 GMT"},"fingerprint":{"sha1":"A1:4D:EC:1A:7B:12:B5:C8:A9:6A:F1:26:FD:1E:B7:87:05:59:07:69","sha256":"9E:98:9C:06:2D:0C:64:D6:BA:CE:B2:A9:73:B8:00:B0:C5:CA:1C:82:90:A5:6A:43:16:33:50:06:93:91:21:37"}}},"request":{"raw":"GET /assets/css/mystyle.css HTTP/1.1\r\nHost: qomira.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qomira.sbs/\r\nCookie: PHPSESSID=fbad748932aba9c64df938a4f7309873\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Dec 2025 07:07:13 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 28 Nov 2025 12:11:36 GMT\r\nETag: \"71b62-644a687ed4e00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 465762\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":465762,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"9870e2f67975b7e77c5bb78d9f16f2c5","sha1":"c6380e36e51b841848f99ad75052d5668edb6180","sha256":"739458f863fbc6d7602821e21177ed33aacfcf446240771bf2e14765c35bd4b4","sha512":"43fbb10ad3da54b67035328ec5bba4010f6a726c6c288b2695eedd7b805f489314bd015ada1f6f9ede906f503b70fc9c119c29764d6a9a1e16fe4c59a63706ca","ssdeep":"1536:QSiPFLyMjSToAXcVh01sNVcoGXpzgP2q/40bmFsuRLnY5Rlu4ugP71DfMpiPX3rw:4yMjTIXgP71DfMpiPX3r2N","tlshash":"42a45f0fb902520d95b3e3289fa31609f7125427aa4350edbfdd93648fba3889951fcd","first_seen":"2024-12-10T13:05:08.185351Z","last_seen":"2026-04-10T01:16:16.134139Z","times_seen":58,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":87,"dns":1,"connect":43,"send":0,"wait":46,"receive":217,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/assets/fonts/BinancePlexV2/BinancePlex-Regular.otf","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qomira.sbs/","date":"2025-12-17T07:07:14.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qomira.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 09:21:43 GMT","end":"Sun, 08 Mar 2026 09:21:42 GMT"},"fingerprint":{"sha1":"A1:4D:EC:1A:7B:12:B5:C8:A9:6A:F1:26:FD:1E:B7:87:05:59:07:69","sha256":"9E:98:9C:06:2D:0C:64:D6:BA:CE:B2:A9:73:B8:00:B0:C5:CA:1C:82:90:A5:6A:43:16:33:50:06:93:91:21:37"}}},"request":{"raw":"GET /assets/fonts/BinancePlexV2/BinancePlex-Regular.otf HTTP/1.1\r\nHost: qomira.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qomira.sbs/assets/css/resetV2.css\r\nCookie: PHPSESSID=fbad748932aba9c64df938a4f7309873\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 17 Dec 2025 07:07:14 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 08 Dec 2025 10:07:32 GMT\r\nETag: \"328-6456df6ab9919\"\r\nAccept-Ranges: bytes\r\nContent-Length: 808\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-22T17:51:01.210004Z","times_seen":38429,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/assets/favicon.ico","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qomira.sbs/","date":"2025-12-17T07:07:14.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qomira.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 09:21:43 GMT","end":"Sun, 08 Mar 2026 09:21:42 GMT"},"fingerprint":{"sha1":"A1:4D:EC:1A:7B:12:B5:C8:A9:6A:F1:26:FD:1E:B7:87:05:59:07:69","sha256":"9E:98:9C:06:2D:0C:64:D6:BA:CE:B2:A9:73:B8:00:B0:C5:CA:1C:82:90:A5:6A:43:16:33:50:06:93:91:21:37"}}},"request":{"raw":"GET /assets/favicon.ico HTTP/1.1\r\nHost: qomira.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qomira.sbs/\r\nCookie: PHPSESSID=fbad748932aba9c64df938a4f7309873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Dec 2025 07:07:14 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 28 Nov 2025 12:11:36 GMT\r\nETag: \"3c2e-644a687ed4e00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 15406\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/vnd.microsoft.icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"e3381c658b97f22c37690173610c1ce7","sha1":"d0cb9c1d83e428428b8780870a1dd12493b7dba9","sha256":"67660a071f53b64eabe8e0a6855e65f35869dd803bbb4d04fdd002b0d948a30f","sha512":"783e7adba81ed002fcb93b512bb94fcd0718fb64147a9b1b3f11eef55ec55ddc152ee11c879e57bf7976aac72cbda17dfa870e481f0c42fddb140314e0ca99f4","ssdeep":"48:n669z3NAD656Kaq6+etnOHnH5GUc0MTPEWH5PDTjaaKNSSOxvfs3fSH+fTswfjiz:TuMKcssRm","tlshash":"15629fd63b127ae1e9281f768446b5d5e8a015908bd887f63ff1d2af34af02436c46c7","first_seen":"2024-12-10T13:05:08.196894Z","last_seen":"2026-04-10T01:16:16.142678Z","times_seen":71,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/process","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qomira.sbs/","date":"2025-12-17T07:07:16.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qomira.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 09:21:43 GMT","end":"Sun, 08 Mar 2026 09:21:42 GMT"},"fingerprint":{"sha1":"A1:4D:EC:1A:7B:12:B5:C8:A9:6A:F1:26:FD:1E:B7:87:05:59:07:69","sha256":"9E:98:9C:06:2D:0C:64:D6:BA:CE:B2:A9:73:B8:00:B0:C5:CA:1C:82:90:A5:6A:43:16:33:50:06:93:91:21:37"}}},"request":{"raw":"POST /process HTTP/1.1\r\nHost: qomira.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 43\r\nOrigin: https://qomira.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qomira.sbs/\r\nCookie: PHPSESSID=fbad748932aba9c64df938a4f7309873\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":43,"data":"ip=f81d80af9cbeb0011316fbba3da8002b32251f7a"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Dec 2025 07:07:16 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nX-Powered-By: PHP/8.4.15, PleskLin\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T17:24:26.53347Z","times_seen":17455687,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/process","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qomira.sbs/","date":"2025-12-17T07:07:30.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qomira.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 09:21:43 GMT","end":"Sun, 08 Mar 2026 09:21:42 GMT"},"fingerprint":{"sha1":"A1:4D:EC:1A:7B:12:B5:C8:A9:6A:F1:26:FD:1E:B7:87:05:59:07:69","sha256":"9E:98:9C:06:2D:0C:64:D6:BA:CE:B2:A9:73:B8:00:B0:C5:CA:1C:82:90:A5:6A:43:16:33:50:06:93:91:21:37"}}},"request":{"raw":"POST /process HTTP/1.1\r\nHost: qomira.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 43\r\nOrigin: https://qomira.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qomira.sbs/\r\nCookie: PHPSESSID=fbad748932aba9c64df938a4f7309873\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":43,"data":"ip=f81d80af9cbeb0011316fbba3da8002b32251f7a"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Dec 2025 07:07:30 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nX-Powered-By: PHP/8.4.15, PleskLin\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=90\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T17:24:26.53347Z","times_seen":17455687,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/assets/fonts/BinancePlexV2/BinancePlex-SemiBold.otf","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qomira.sbs/","date":"2025-12-17T07:07:14.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qomira.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 09:21:43 GMT","end":"Sun, 08 Mar 2026 09:21:42 GMT"},"fingerprint":{"sha1":"A1:4D:EC:1A:7B:12:B5:C8:A9:6A:F1:26:FD:1E:B7:87:05:59:07:69","sha256":"9E:98:9C:06:2D:0C:64:D6:BA:CE:B2:A9:73:B8:00:B0:C5:CA:1C:82:90:A5:6A:43:16:33:50:06:93:91:21:37"}}},"request":{"raw":"GET /assets/fonts/BinancePlexV2/BinancePlex-SemiBold.otf HTTP/1.1\r\nHost: qomira.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qomira.sbs/assets/css/resetV2.css\r\nCookie: PHPSESSID=fbad748932aba9c64df938a4f7309873\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 17 Dec 2025 07:07:14 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 08 Dec 2025 10:07:32 GMT\r\nETag: \"328-6456df6ab9919\"\r\nAccept-Ranges: bytes\r\nContent-Length: 808\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-22T17:51:01.210004Z","times_seen":38429,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/assets/css/global.css","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qomira.sbs/","date":"2025-12-17T07:07:13.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qomira.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 09:21:43 GMT","end":"Sun, 08 Mar 2026 09:21:42 GMT"},"fingerprint":{"sha1":"A1:4D:EC:1A:7B:12:B5:C8:A9:6A:F1:26:FD:1E:B7:87:05:59:07:69","sha256":"9E:98:9C:06:2D:0C:64:D6:BA:CE:B2:A9:73:B8:00:B0:C5:CA:1C:82:90:A5:6A:43:16:33:50:06:93:91:21:37"}}},"request":{"raw":"GET /assets/css/global.css HTTP/1.1\r\nHost: qomira.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qomira.sbs/\r\nCookie: PHPSESSID=fbad748932aba9c64df938a4f7309873\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Dec 2025 07:07:13 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 28 Nov 2025 12:11:36 GMT\r\nETag: \"f36-644a687ed4e00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 3894\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":3894,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"df9e079d74e961131b45751bcbf34881","sha1":"635bf4b66906b209ee678157191ee71ac544aafd","sha256":"5dbeef7595172d9e1cf6d442c044235e08ec982adaf155b9718eb7745af13889","sha512":"e6c05bc6bf2b266f633a64f93e587fd041d13a420f10c2eb22e7966f5a475de79e3e68a6c69ab02ce05ba12c8368297616a9f4770498947b4f2bfd81d3617b97","ssdeep":"","tlshash":"b38123d7fae50904346be4689886e37d372d4143a70edebcb7e0392c4f89ba44972781","first_seen":"2024-12-10T13:05:08.175354Z","last_seen":"2026-07-03T09:16:29.465527Z","times_seen":62,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":87,"dns":1,"connect":41,"send":0,"wait":48,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/assets/css/resetV2.css","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qomira.sbs/","date":"2025-12-17T07:07:13.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qomira.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 09:21:43 GMT","end":"Sun, 08 Mar 2026 09:21:42 GMT"},"fingerprint":{"sha1":"A1:4D:EC:1A:7B:12:B5:C8:A9:6A:F1:26:FD:1E:B7:87:05:59:07:69","sha256":"9E:98:9C:06:2D:0C:64:D6:BA:CE:B2:A9:73:B8:00:B0:C5:CA:1C:82:90:A5:6A:43:16:33:50:06:93:91:21:37"}}},"request":{"raw":"GET /assets/css/resetV2.css HTTP/1.1\r\nHost: qomira.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qomira.sbs/\r\nCookie: PHPSESSID=fbad748932aba9c64df938a4f7309873\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Dec 2025 07:07:13 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 28 Nov 2025 12:11:36 GMT\r\nETag: \"e42-644a687ed4e00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 3650\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":3650,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5802c92b63a3e0a6d3576e2dc212863d","sha1":"1bf2b8841353cdf37be0576ed9a236eef037fbf9","sha256":"0b6fc629f312f9f2220798b5c5c4fc928928720eaa035835f47674f18d8de3a9","sha512":"ded80af5c55b190657d1bc09fbed12431c5284c18af0b5372a78c8ba73c6ccb97fcfc9d6d9b5f40b95bd844a8c5a55e449a12fd6bf3f565852df4d9133d8cd59","ssdeep":"","tlshash":"067121ae17f90e01a2264cd573872f32332c8426844ef8b9d7a46c68dfcae2152d134e","first_seen":"2024-12-10T13:05:08.173396Z","last_seen":"2026-07-03T09:16:29.513973Z","times_seen":62,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/assets/css/theme_light.css","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qomira.sbs/","date":"2025-12-17T07:07:13.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qomira.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 09:21:43 GMT","end":"Sun, 08 Mar 2026 09:21:42 GMT"},"fingerprint":{"sha1":"A1:4D:EC:1A:7B:12:B5:C8:A9:6A:F1:26:FD:1E:B7:87:05:59:07:69","sha256":"9E:98:9C:06:2D:0C:64:D6:BA:CE:B2:A9:73:B8:00:B0:C5:CA:1C:82:90:A5:6A:43:16:33:50:06:93:91:21:37"}}},"request":{"raw":"GET /assets/css/theme_light.css HTTP/1.1\r\nHost: qomira.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qomira.sbs/\r\nCookie: PHPSESSID=fbad748932aba9c64df938a4f7309873\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Dec 2025 07:07:13 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 28 Nov 2025 12:11:36 GMT\r\nETag: \"2c-644a687ed4e00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 44\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":44,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"174cda5e91e39823af742e020ebff569","sha1":"5cd0f0407dcbc43a35241696a45ede7422fc5559","sha256":"66637678c4c5c473c81f85e6a585056650cbbe12a2fc8059da40efb72d7392a9","sha512":"41378af17c6cf31b97272248ce45f362fee388e175b2d4dfc105361f83300e691ef587bcda83f160f5a73440b90068d4b135b598bfa4f7d00d3c875d1fe80d41","ssdeep":"","tlshash":"8b90021061d6c8093142516015370b21a72c000484541f5c017a31f8a0044847076400","first_seen":"2024-12-10T13:05:08.17732Z","last_seen":"2026-07-03T09:16:29.491653Z","times_seen":63,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/assets/css/iconfont.css","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qomira.sbs/","date":"2025-12-17T07:07:13.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qomira.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 09:21:43 GMT","end":"Sun, 08 Mar 2026 09:21:42 GMT"},"fingerprint":{"sha1":"A1:4D:EC:1A:7B:12:B5:C8:A9:6A:F1:26:FD:1E:B7:87:05:59:07:69","sha256":"9E:98:9C:06:2D:0C:64:D6:BA:CE:B2:A9:73:B8:00:B0:C5:CA:1C:82:90:A5:6A:43:16:33:50:06:93:91:21:37"}}},"request":{"raw":"GET /assets/css/iconfont.css HTTP/1.1\r\nHost: qomira.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qomira.sbs/\r\nCookie: PHPSESSID=fbad748932aba9c64df938a4f7309873\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Dec 2025 07:07:13 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 28 Nov 2025 12:11:36 GMT\r\nETag: \"1a7b-644a687ed4e00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 6779\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":6779,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a8c45c50f4209faedb0c103ec2c9f7aa","sha1":"f4641445d51fe2506f3ab939e074a31c86befb65","sha256":"1bc9c4d56b4ea9fdd090c6be696f406e2193c855846ec36adc4e320a63afa846","sha512":"35f6e7b9e554d09712f5e946dc392ed8616d42ddfbc64da583e9720aa741bf38378ebf6d71e3dbf259a816263d95704ffe805ba081e8ef9ff08cf6d031e1d5fb","ssdeep":"96:1cVHcXcOerDZyUjYCZald6rHAaZzvDvFX2e368F74B:1yoeR7Z46LAa1vDvJVDOB","tlshash":"dae1ebd498bd2c711719e5c02246e724ff1da2a98e0b4c1bf2b37d9ca7e221091c2bdd","first_seen":"2024-12-10T13:05:08.179328Z","last_seen":"2026-04-10T01:16:16.147778Z","times_seen":59,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":88,"dns":1,"connect":45,"send":0,"wait":47,"receive":1,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/process","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qomira.sbs/","date":"2025-12-17T07:07:18.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qomira.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 09:21:43 GMT","end":"Sun, 08 Mar 2026 09:21:42 GMT"},"fingerprint":{"sha1":"A1:4D:EC:1A:7B:12:B5:C8:A9:6A:F1:26:FD:1E:B7:87:05:59:07:69","sha256":"9E:98:9C:06:2D:0C:64:D6:BA:CE:B2:A9:73:B8:00:B0:C5:CA:1C:82:90:A5:6A:43:16:33:50:06:93:91:21:37"}}},"request":{"raw":"POST /process HTTP/1.1\r\nHost: qomira.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 43\r\nOrigin: https://qomira.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qomira.sbs/\r\nCookie: PHPSESSID=fbad748932aba9c64df938a4f7309873\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":43,"data":"ip=f81d80af9cbeb0011316fbba3da8002b32251f7a"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Dec 2025 07:07:18 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nX-Powered-By: PHP/8.4.15, PleskLin\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T17:24:26.53347Z","times_seen":17455687,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qomira.sbs/process","fqdn":"qomira.sbs","domain":"qomira.sbs","tld":"sbs"},"ip":{"addr":"46.151.182.165","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qomira.sbs/","date":"2025-12-17T07:07:26.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qomira.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 09:21:43 GMT","end":"Sun, 08 Mar 2026 09:21:42 GMT"},"fingerprint":{"sha1":"A1:4D:EC:1A:7B:12:B5:C8:A9:6A:F1:26:FD:1E:B7:87:05:59:07:69","sha256":"9E:98:9C:06:2D:0C:64:D6:BA:CE:B2:A9:73:B8:00:B0:C5:CA:1C:82:90:A5:6A:43:16:33:50:06:93:91:21:37"}}},"request":{"raw":"POST /process HTTP/1.1\r\nHost: qomira.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 43\r\nOrigin: https://qomira.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qomira.sbs/\r\nCookie: PHPSESSID=fbad748932aba9c64df938a4f7309873\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":43,"data":"ip=f81d80af9cbeb0011316fbba3da8002b32251f7a"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Dec 2025 07:07:26 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nX-Powered-By: PHP/8.4.15, PleskLin\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T17:24:26.53347Z","times_seen":17455687,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-17","alert":"Phishing Block","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-17","alert":"Phishing - Binance","trigger":"qomira.sbs","verdict":"phishing","severity":"medium","comment":"Binance","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"qomira.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}