{"report_id":"c98589c2-7fcf-4e36-90d3-9ab07e332505","version":6,"status":"done","tags":[],"date":"2025-11-08T03:55:48Z","url":{"schema":"https","addr":"bakhtiarisrafil.com/8FFd6W7Qd22m1Yngmd3PnrrfG4x7oT9778ml2ZEuEcj96hMSJBtET9FgUXS7dyl9DUbdN4WK4bb6iGLU1u_CZyhA49gRfXOhrfjkkN_wkpnqkFxFSstw337/","fqdn":"bakhtiarisrafil.com","domain":"bakhtiarisrafil.com","tld":"com"},"ip":{"addr":"103.65.139.82","port":0,"asn":151967,"as":"DLITS","country":"Bangladesh","country_code":"BD"},"final":{"url":{"schema":"https","addr":"bakhtiarisrafil.com/8FFd6W7Qd22m1Yngmd3PnrrfG4x7oT9778ml2ZEuEcj96hMSJBtET9FgUXS7dyl9DUbdN4WK4bb6iGLU1u_CZyhA49gRfXOhrfjkkN_wkpnqkFxFSstw337/","fqdn":"bakhtiarisrafil.com","domain":"bakhtiarisrafil.com","tld":"com"},"title":"DocuSign - Secure Login","dom":{"size":17255,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (872)","md5":"734b61949e9cb1b905b6dda8c2973193","sha1":"0a191a7ab707ee2817b50702421b814c9762d8b1","sha256":"51ab7978092092e9f7b1e00a741b323ae08bccda5bec32d1e4792560e9efeea6","sha512":"401aa7e78c4cc2154567df8faeeafb127a32337a18864fd450ab5d68e1eb038cb056a9dc639d67bb6f9e13e1bbc84bf18a42ee347017f7b936364c5e9be7d103","ssdeep":"192:0VEmltLI9P5FH1GamY3dbnYz9ghBbwhdfAyAF+R3RplCh6WpVQJRFGp1pA2vFkV7:ult8OFwFBzKnVd8UAF/S2j6+15Q0Q/pL","tlshash":"2d72758b75f720965a43e0783ba7670536309007e80ace197e9c1794cf96f85aca33dd","dom_hash":"domhash20092c7201d121feb70dab4602079c07","first_seen":"2025-11-08T03:55:50.001433Z","last_seen":"2025-11-08T03:55:50.001433Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bakhtiarisrafil.com/8FFd6W7Qd22m1Yngmd3PnrrfG4x7oT9778ml2ZEuEcj96hMSJBtET9FgUXS7dyl9DUbdN4WK4bb6iGLU1u_CZyhA49gRfXOhrfjkkN_wkpnqkFxFSstw337/","fqdn":"bakhtiarisrafil.com","domain":"bakhtiarisrafil.com","tld":"com"},"ip":{"addr":"103.65.139.82","port":0,"asn":151967,"as":"DLITS","country":"Bangladesh","country_code":"BD"},"tags":["openphish"],"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-13T03:55:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"phishtank","sensor_type":"Blocklist","title":"PhishTank","description":"PhishTank","scan_date":"2025-10-22","alert":"Phishing - DocuSign","trigger":"bakhtiarisrafil.com/8FFd6W7Qd22m1Yngmd3PnrrfG4x7oT9778ml2ZEuEcj96hMSJBtET9FgUXS7dyl9DUbdN4WK4bb6iGLU1u_CZyhA49gRfXOhrfjkkN_wkpnqkFxFSstw337/","verdict":"phishing","severity":"medium","comment":"DocuSign","link":"http://phishtank.com","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-08","alert":"Phishing - DocuSign","trigger":"bakhtiarisrafil.com/8FFd6W7Qd22m1Yngmd3PnrrfG4x7oT9778ml2ZEuEcj96hMSJBtET9FgUXS7dyl9DUbdN4WK4bb6iGLU1u_CZyhA49gRfXOhrfjkkN_wkpnqkFxFSstw337/","verdict":"phishing","severity":"medium","comment":"DocuSign","link":"https://openphish.com","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-08","alert":"Sinkholed","trigger":"bakhtiarisrafil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-08","alert":"Sinkholed","trigger":"bakhtiarisrafil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"bakhtiarisrafil.com","ip":{"addr":"103.65.139.82","port":443,"asn":151967,"as":"DLITS","country":"Bangladesh","country_code":"BD"},"domain_registered":"2023-01-09","domain_rank":0,"first_seen":"2025-10-22T01:18:29.973256Z","last_seen":"2025-10-22T01:18:29.973256Z","alert_count":4,"request_count":1,"received_data":17681,"sent_data":608,"comment":"","tags":null,"fingerprints":null},{"fqdn":"docucdn-a.akamaihd.net","ip":{"addr":"23.36.77.112","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2009-09-14","domain_rank":51084,"first_seen":"2014-04-10T18:55:33Z","last_seen":"2025-11-06T02:44:00.347214Z","alert_count":0,"request_count":2,"received_data":4684,"sent_data":993,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bakhtiarisrafil.com/8FFd6W7Qd22m1Yngmd3PnrrfG4x7oT9778ml2ZEuEcj96hMSJBtET9FgUXS7dyl9DUbdN4WK4bb6iGLU1u_CZyhA49gRfXOhrfjkkN_wkpnqkFxFSstw337/","fqdn":"bakhtiarisrafil.com","domain":"bakhtiarisrafil.com","tld":"com"},"ip":{"addr":"103.65.139.82","port":443,"asn":151967,"as":"DLITS","country":"Bangladesh","country_code":"BD"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0b34c28d106a432da775c770b247d4e","sha1":"31da11916ba618f93cca4476c8bc73d8962be4bd","sha256":"6413441544f45da2833719f7b923744303a9aba6adc81ab5b46ad585bc4d541b","sha512":"5955872d6d723fed136429798b9ce0dba4bda580eeeb25ea9fd241aacb7f8d80ab9dcd0a71da62ba8afe36fc74a8572091bc7423be0e56fe26b325bca4106116","ssdeep":"192:iTQ4dHiLGvrTnS2jqlqFtr5QWrAbSGww/cX:iUAF/S2j6+15Q0Q/pA","tlshash":"22e1108a74b730b90a9bb47d2b9b3348703050173844ee08b96d47a41faae456c637ef","size":6870,"data":"","first_seen":"2025-10-22T01:18:34.909414Z","last_seen":"2025-11-08T03:55:50.004768Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bakhtiarisrafil.com/8FFd6W7Qd22m1Yngmd3PnrrfG4x7oT9778ml2ZEuEcj96hMSJBtET9FgUXS7dyl9DUbdN4WK4bb6iGLU1u_CZyhA49gRfXOhrfjkkN_wkpnqkFxFSstw337/","fqdn":"bakhtiarisrafil.com","domain":"bakhtiarisrafil.com","tld":"com"},"ip":{"addr":"103.65.139.82","port":443,"asn":151967,"as":"DLITS","country":"Bangladesh","country_code":"BD"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-08T03:55:25.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakhtiarisrafil.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Sep 2025 14:33:11 GMT","end":"Fri, 26 Dec 2025 14:33:10 GMT"},"fingerprint":{"sha1":"82:12:1B:87:AE:05:CB:58:AE:A2:A8:2D:E0:32:71:47:29:89:E9:CA","sha256":"53:58:8F:43:BE:04:CE:E4:36:AA:C4:B4:B5:98:2A:8F:CF:D1:CC:F4:67:45:12:B1:38:09:86:1A:2B:ED:29:AB"}}},"request":{"raw":"GET /8FFd6W7Qd22m1Yngmd3PnrrfG4x7oT9778ml2ZEuEcj96hMSJBtET9FgUXS7dyl9DUbdN4WK4bb6iGLU1u_CZyhA49gRfXOhrfjkkN_wkpnqkFxFSstw337/ HTTP/1.1\r\nHost: bakhtiarisrafil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 20 Oct 2025 23:25:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4087\r\ndate: Sat, 08 Nov 2025 03:55:26 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17269,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (872)","md5":"2239976fc42bbf1c007bbac93d765f13","sha1":"369be083da878e656688cbe78b4012e25714dd57","sha256":"d75d797e49f9770899e33cde419bb8d8339d8b8784d9c26f368e3ecf5904f83f","sha512":"7688c41276b24e39b6ccf12e570317acd266677d73890a76e9c28361f278400cfc64c707ffbde9b7dd6f21950bd0c02ea60bd65ab30e529096839cf65901cc13","ssdeep":"192:uVEmltLI9P5FH1GamY3dbnYz9ghBbwhdfAyAF+R3RplCh6WpVQJRFGp1pA2vFkVi:8lt8OFwFBzKyVd8UAF/S2j6+15Q0Q/pZ","tlshash":"1072758b75f720965a43e0783ba7670536309007e80ace197e9c1794cf9af85aca33dd","first_seen":"2025-10-22T01:18:34.895445Z","last_seen":"2025-11-08T03:55:50.002605Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1922,"timings":{"blocked":846,"dns":405,"connect":218,"send":0,"wait":224,"receive":0,"ssl":225},"alerts":{"ids":null,"analyzer":[{"sensor_name":"phishtank","sensor_type":"Blocklist","title":"PhishTank","description":"PhishTank","scan_date":"2025-10-22","alert":"Phishing - DocuSign","trigger":"bakhtiarisrafil.com/8FFd6W7Qd22m1Yngmd3PnrrfG4x7oT9778ml2ZEuEcj96hMSJBtET9FgUXS7dyl9DUbdN4WK4bb6iGLU1u_CZyhA49gRfXOhrfjkkN_wkpnqkFxFSstw337/","verdict":"phishing","severity":"medium","comment":"DocuSign","link":"http://phishtank.com","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-08","alert":"Phishing - DocuSign","trigger":"bakhtiarisrafil.com/8FFd6W7Qd22m1Yngmd3PnrrfG4x7oT9778ml2ZEuEcj96hMSJBtET9FgUXS7dyl9DUbdN4WK4bb6iGLU1u_CZyhA49gRfXOhrfjkkN_wkpnqkFxFSstw337/","verdict":"phishing","severity":"medium","comment":"DocuSign","link":"https://openphish.com","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-08","alert":"Sinkholed","trigger":"bakhtiarisrafil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-08","alert":"Sinkholed","trigger":"bakhtiarisrafil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docucdn-a.akamaihd.net/olive/images/2.72.0/global-assets/ds-logo-default.svg","fqdn":"docucdn-a.akamaihd.net","domain":"akamaihd.net","tld":"net"},"ip":{"addr":"23.36.77.112","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakhtiarisrafil.com/8FFd6W7Qd22m1Yngmd3PnrrfG4x7oT9778ml2ZEuEcj96hMSJBtET9FgUXS7dyl9DUbdN4WK4bb6iGLU1u_CZyhA49gRfXOhrfjkkN_wkpnqkFxFSstw337/","date":"2025-11-08T03:55:27.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 18 Mar 2025 00:00:00 GMT","end":"Wed, 18 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"51:B3:16:11:9C:44:F0:40:BC:CE:8A:C0:3A:1A:D3:BB:C6:47:40:B3","sha256":"BA:56:C4:EE:2A:1C:8D:B7:10:BF:E7:3A:1F:A3:E4:B0:AD:3F:29:0D:01:92:58:9B:8C:71:DE:44:99:61:C6:96"}}},"request":{"raw":"GET /olive/images/2.72.0/global-assets/ds-logo-default.svg HTTP/1.1\r\nHost: docucdn-a.akamaihd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bakhtiarisrafil.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\netag: \"55acf27e6b517af140d1c9fb147e31e8:1724885284.41283\"\r\nlast-modified: Wed, 28 Aug 2024 18:36:21 GMT\r\nserver: AkamaiNetStorage\r\ncontent-encoding: gzip\r\ncontent-length: 1344\r\ncache-control: max-age=9533534\r\ndate: Sat, 08 Nov 2025 03:55:27 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2940,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"55acf27e6b517af140d1c9fb147e31e8","sha1":"fd74318612d950ae56b82776d4507a703e2745ef","sha256":"769113eed5abf2bb8e472a29d439cc73ca6bccfa82e3d8f0b36d6f7d9fd740b6","sha512":"ef85f9034de1d6f0c04e7dd24f9743d39d63d2273884c1f46f744d4514e25569f07a7e7d9dbd8f644f6ae0b80e383c91954629356bfffec06746947645008826","ssdeep":"","tlshash":"b351217cc39da3788c1e93b486319864384f52aea4d0b239fba5dcb037520dc665d4ab","first_seen":"2024-06-11T08:17:02Z","last_seen":"2026-08-12T20:21:42.499172Z","times_seen":1028,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":134,"dns":110,"connect":1,"send":0,"wait":2,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docucdn-a.akamaihd.net/olive/images/2.64.0/global-assets/ds-icons-favicon-default-64x64.svg","fqdn":"docucdn-a.akamaihd.net","domain":"akamaihd.net","tld":"net"},"ip":{"addr":"23.36.77.112","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakhtiarisrafil.com/8FFd6W7Qd22m1Yngmd3PnrrfG4x7oT9778ml2ZEuEcj96hMSJBtET9FgUXS7dyl9DUbdN4WK4bb6iGLU1u_CZyhA49gRfXOhrfjkkN_wkpnqkFxFSstw337/","date":"2025-11-08T03:55:27.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 18 Mar 2025 00:00:00 GMT","end":"Wed, 18 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"51:B3:16:11:9C:44:F0:40:BC:CE:8A:C0:3A:1A:D3:BB:C6:47:40:B3","sha256":"BA:56:C4:EE:2A:1C:8D:B7:10:BF:E7:3A:1F:A3:E4:B0:AD:3F:29:0D:01:92:58:9B:8C:71:DE:44:99:61:C6:96"}}},"request":{"raw":"GET /olive/images/2.64.0/global-assets/ds-icons-favicon-default-64x64.svg HTTP/1.1\r\nHost: docucdn-a.akamaihd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bakhtiarisrafil.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\netag: \"17a782f04369cc79f490a976243511f6:1712168582.714799\"\r\nlast-modified: Wed, 03 Apr 2024 18:23:02 GMT\r\nserver: AkamaiNetStorage\r\ncontent-encoding: gzip\r\ncontent-length: 542\r\ncache-control: max-age=9533639\r\ndate: Sat, 08 Nov 2025 03:55:27 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":900,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"17a782f04369cc79f490a976243511f6","sha1":"84622e41838bdcd204ee2cfad064b4ba58d0b5d5","sha256":"500168ad65bae9fc7d865a3a98704346e4313bedfa401f50ebb24affbffb71cb","sha512":"ea715c41758d9735c22fff73cdd58cfbbecd6ef4f424e2380103d9d61e4b21a314dd51f8359211cbfc9af5dfbfb8cf20fa00b1093c8f9f34c413a43cc82ff7ce","ssdeep":"","tlshash":"9111c40a4705cdeab60c46209fb409c6137ce4ebe4bc04d876d92c66de6cde4150d7c4","first_seen":"2024-04-26T09:25:48Z","last_seen":"2026-08-12T20:21:42.516482Z","times_seen":689,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}