{"report_id":"c618b1a2-1e24-4429-89b5-7b135e034b8e","version":0,"status":"done","tags":[],"date":"2026-09-25T03:53:58Z","url":{"schema":"https","addr":"omgup10att.ru/","fqdn":"omgup10att.ru","domain":"omgup10att.ru","tld":"ru"},"ip":{"addr":"104.194.143.10","port":0,"asn":198983,"as":"'Tornado Datacenter GmbH \u0026 Co. KG'","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"omgup10att.ru/","fqdn":"omgup10att.ru","domain":"omgup10att.ru","tld":"ru"},"title":"OMGup10.at | Премиальный магазин цветов и напитков. Букеты с доставкой","dom":{"size":4837,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"84aef6c5bc1f8a26f83e5a5dff064461","sha1":"819a0dd6ffe96c85d5031dc9dff697015d01b689","sha256":"1396600682bca37e1541546b3c6f17b18b3a9decb36b52d218bdb565cd3e2845","sha512":"6b5de66547f13f36590f91962c2caed0f3bb0cc81d08583fea366e96a538ce36374da7f063015be269c2cac2994bf17055b25cb7ff7212b7dd47e7322c1d3133","ssdeep":"96:Pvf+6xt8HKFOO1gjW92ki+qjdQCw/433fj:PvfHx6HKZKvkudQ7/6b","tlshash":"20a1c66641532949b903a8784fe365866368c133c50ee8693ecc26acdfd35c4c6f335e","dom_hash":"domhashd0c59ad02534dcc712ba7419278cdc54","first_seen":"2026-09-25T03:54:01.649958Z","last_seen":"2026-09-25T03:54:01.649958Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"omgup10att.ru/","fqdn":"omgup10att.ru","domain":"omgup10att.ru","tld":"ru"},"ip":{"addr":"104.194.143.10","port":0,"asn":198983,"as":"'Tornado Datacenter GmbH \u0026 Co. KG'","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T03:53:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"omgup10att.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"omgup10att.ru","ip":{"addr":"104.194.143.10","port":443,"asn":198983,"as":"'Tornado Datacenter GmbH \u0026 Co. KG'","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-03-12","domain_rank":0,"first_seen":"2026-09-25T03:49:41.266012Z","last_seen":"2026-09-25T03:49:41.266012Z","alert_count":3,"request_count":3,"received_data":12768,"sent_data":1639,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"omgup10att.ru/","fqdn":"omgup10att.ru","domain":"omgup10att.ru","tld":"ru"},"ip":{"addr":"104.194.143.10","port":443,"asn":198983,"as":"'Tornado Datacenter GmbH \u0026 Co. KG'","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T03:53:29.564Z","timestamp":1790308409564,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"omgup10att.ru","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 23:31:12 GMT","end":"Tue, 15 Dec 2026 23:31:11 GMT"},"fingerprint":{"sha1":"D8:59:59:9B:A3:1F:70:43:EF:A5:A0:C4:23:6A:AF:9C:06:E0:0F:DC","sha256":"6F:ED:62:4D:F6:C3:8C:5E:EE:02:9B:13:C9:1D:69:1B:5B:3A:20:81:8E:1F:A6:CD:EF:F8:57:6D:3B:41:23:08"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: omgup10att.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 25 Sep 2026 03:53:28 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: antibot=001ed974-b66e-4b55-bd2a-f808ead0330f; Path=/; HttpOnly; Secure; SameSite=Strict\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"antibot","value":"001ed974-b66e-4b55-bd2a-f808ead0330f","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"Strict","partitioned":false,"raw":"antibot=001ed974-b66e-4b55-bd2a-f808ead0330f; Path=/; HttpOnly; Secure; SameSite=Strict"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":5029,"size_decoded":2182,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"60cb5734f390337aecd385576ff8d1bf","sha1":"1e8be8db81716ce12af3673c4e80918d2ec92402","sha256":"6449954f0bb94f7f25f7a18d372f78b28a851d04499b7d079538caeff35518e3","sha512":"75c87efa482b19b3524b5b20cff65afca986aca1222c9314f03c150f33b5a309d840a8ff18c34af97c2bd3ddcd42ad87b229dfb7946d58bbee420200cde5294e","ssdeep":"96:e+VOMuw8zqMmnVIj7ZjW9Dki+qRpoAw/f3Qb:eUHkvqi94k+po5/PQ","tlshash":"fea18325814029497133a6759fa36a8af7598173c30914293edc36abeff2548c3f3b9d","first_seen":"2026-09-25T03:54:01.651561Z","last_seen":"2026-09-25T03:54:01.651561Z","times_seen":1,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":51,"connect":17,"send":0,"wait":155,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"omgup10att.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"omgup10att.ru/antibot_generatecaptcha?ATIc4qgffg","fqdn":"omgup10att.ru","domain":"omgup10att.ru","tld":"ru"},"ip":{"addr":"104.194.143.10","port":443,"asn":198983,"as":"'Tornado Datacenter GmbH \u0026 Co. KG'","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://omgup10att.ru/","date":"2026-09-25T03:53:30.025Z","timestamp":1790308410025,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"omgup10att.ru","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 23:31:12 GMT","end":"Tue, 15 Dec 2026 23:31:11 GMT"},"fingerprint":{"sha1":"D8:59:59:9B:A3:1F:70:43:EF:A5:A0:C4:23:6A:AF:9C:06:E0:0F:DC","sha256":"6F:ED:62:4D:F6:C3:8C:5E:EE:02:9B:13:C9:1D:69:1B:5B:3A:20:81:8E:1F:A6:CD:EF:F8:57:6D:3B:41:23:08"}}},"request":{"raw":"GET /antibot_generatecaptcha?ATIc4qgffg HTTP/1.1\r\nHost: omgup10att.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://omgup10att.ru/\r\nCookie: antibot=001ed974-b66e-4b55-bd2a-f808ead0330f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 25 Sep 2026 03:53:28 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2638\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: no-store, no-cache, must-revalidate, private\r\nExpires: 0\r\nLast-Modified: Wed, 14 Jan 2026 17:00:02 GMT\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2638,"size_decoded":2940,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"475ccc7b61e8fad09f482515257c8853","sha1":"ee47bd2974d77db828d4d3c10c6ce4640ee51070","sha256":"af465ad0a6d438c4802f2b9853d721b3d3d580cb089c22d9f406c6d815547af1","sha512":"7698f082d4ab9d5a47c007161aeb204ab83512e94b683cefca8d067630e6f4b305f8dd38006d0ccf82da22e6712dff12d7c4029fc85dba3d7599e72acab5b88b","ssdeep":"","tlshash":"aa512ccccb37622ef0448ebe01555429b794b530c62608f09f454e34afbfb626503836","first_seen":"2026-09-25T03:54:01.652718Z","last_seen":"2026-09-25T03:54:01.652718Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"omgup10att.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"omgup10att.ru/antibot_assets/omg-favicon.ico","fqdn":"omgup10att.ru","domain":"omgup10att.ru","tld":"ru"},"ip":{"addr":"104.194.143.10","port":443,"asn":198983,"as":"'Tornado Datacenter GmbH \u0026 Co. KG'","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://omgup10att.ru/","date":"2026-09-25T03:53:30.126Z","timestamp":1790308410126,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"omgup10att.ru","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 23:31:12 GMT","end":"Tue, 15 Dec 2026 23:31:11 GMT"},"fingerprint":{"sha1":"D8:59:59:9B:A3:1F:70:43:EF:A5:A0:C4:23:6A:AF:9C:06:E0:0F:DC","sha256":"6F:ED:62:4D:F6:C3:8C:5E:EE:02:9B:13:C9:1D:69:1B:5B:3A:20:81:8E:1F:A6:CD:EF:F8:57:6D:3B:41:23:08"}}},"request":{"raw":"GET /antibot_assets/omg-favicon.ico HTTP/1.1\r\nHost: omgup10att.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://omgup10att.ru/\r\nCookie: antibot=001ed974-b66e-4b55-bd2a-f808ead0330f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 25 Sep 2026 03:53:29 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 4286\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 03 Sep 2026 15:38:29 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":4511,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"eec7aa91319b5bd0fe1d9419fd48dbff","sha1":"0f7ad5d886e0193ee220659cc2f44baee4121b83","sha256":"ed87353f4f024980391cf09bf4e267c79d7ace3349afbe13535a92e99e7b4d28","sha512":"5d132c45458e1c4819d2501f0af1dddee99328f8984cf32b4fa1a57f5ebcb3609be5dab4a3889d6341d47b9f283162679d6ed30da7a5406f17aa79c4029c6987","ssdeep":"48:nSCBYbbbx7E5V6rNnNLSVY9En81jkVMayYkr9I0z2n:Ne7EL6ZtSVY9E81QMnVr9Ifn","tlshash":"b991c6c04785d957c5069b363ee3e6bfa1c22d653022920937dc3d33fe256c20a6e1da","first_seen":"2023-10-17T22:03:29Z","last_seen":"2026-09-25T06:23:00.39012Z","times_seen":54,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":21,"send":0,"wait":174,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"omgup10att.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}