{"report_id":"c9b9e0e8-7721-471d-89fb-7f946b4056ba","version":0,"status":"done","tags":[],"date":"2026-09-08T19:10:50Z","url":{"schema":"http","addr":"dsdss-x.com/","fqdn":"dsdss-x.com","domain":"dsdss-x.com","tld":"com"},"ip":{"addr":"62.182.80.15","port":0,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"dsdss-x.com/","fqdn":"dsdss-x.com","domain":"dsdss-x.com","tld":"com"},"title":"Copyright Infringement Appeal - X","dom":{"size":13927,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13921), with no line terminators","md5":"9a66f95e6fe0b08b3417beaaddf3c5a6","sha1":"a5620e26c42a9d9525a5fa7c77c1208bde9856c3","sha256":"4968f7d84d06f6fcbb8c57ec8033ba4f952a9fbd8d6e76f8e55c847fd94ee94d","sha512":"18c972d4e81e57f0a251767e4916f58620e9b5969d7a30b7faa88816a77c90889356bacc14f8eef61a09c6d019d2c482e0f566840fdec1efeafb87f6f415dbdf","ssdeep":"192:Ktm5zL/1lQCqWfuE4oNwQDyi0/FidCNgOT80dGj6cqfy/21:KtEked4PQ7mHzb1","tlshash":"e052c7306818ad37029383d6ff35a72bb2a1c291cb075b05a6f9e79d6fdbe55cc01161","dom_hash":"domhash105fdc1ce25038435c50cc79f93ebd46","first_seen":"2026-09-08T19:10:51.271817Z","last_seen":"2026-09-08T19:10:51.271817Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dsdss-x.com/","fqdn":"dsdss-x.com","domain":"dsdss-x.com","tld":"com"},"ip":{"addr":"62.182.80.15","port":0,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-13T19:10:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"dsdss-x.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dsdss-x.com","ip":{"addr":"62.182.80.15","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"domain_registered":"2026-08-31","domain_rank":0,"first_seen":"2026-09-08T18:20:07.15814Z","last_seen":"2026-09-08T18:20:07.15814Z","alert_count":8,"request_count":8,"received_data":273508,"sent_data":4199,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dsdss-x.com/assets/js/main.js?v=1.1","fqdn":"dsdss-x.com","domain":"dsdss-x.com","tld":"com"},"ip":{"addr":"62.182.80.15","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"86c9b8b2d69f16fd44a1f50a263e2a04","sha1":"0339d91363c3d8c44283a385aebfcb3c4dd4bf50","sha256":"03f895ffc15be0e8ab023761cd79c898cf8f29350b45268a87e444ed250da7ac","sha512":"409263921ab194f73061a79355259a06c5709ca3bc085d05d63dd73a07582ceca9ac40cd261b0f99398b47c8d54159dc8b79131a6052268b3cf9af94ef451a67","ssdeep":"3072:yvzJCGcIM1WwYZQubCXfADPAi63Bn82glQz5wskx:yvzFlM1kxbC6Pu35kMwH","tlshash":"4ef3f6d97286b43306eb50b9807b420bf2366894644d8118f5acd8ed3d7cd8a61bbf7d","size":170689,"data":"","first_seen":"2026-05-26T18:47:47.950318Z","last_seen":"2026-09-08T19:10:51.275857Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dsdss-x.com/assets/css/login.css","fqdn":"dsdss-x.com","domain":"dsdss-x.com","tld":"com"},"ip":{"addr":"62.182.80.15","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dsdss-x.com/","date":"2026-09-08T19:10:21.656Z","timestamp":1788894621656,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsdss-x.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 17:32:55 GMT","end":"Sun, 29 Nov 2026 17:32:54 GMT"},"fingerprint":{"sha1":"21:F9:36:11:38:EC:A0:6E:4E:66:1C:F4:AD:33:A5:68:ED:B2:F7:2A","sha256":"E3:9B:70:F1:91:67:83:C8:4B:E9:12:97:9A:06:DE:84:4B:2A:2B:AE:BA:DE:C8:D0:A2:D8:4B:DE:24:4B:3F:EF"}}},"request":{"raw":"GET /assets/css/login.css HTTP/1.1\r\nHost: dsdss-x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dsdss-x.com/\r\nCookie: PHPSESSID=e9003f328a24557562700737c71ae61d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 08 Sep 2026 19:10:21 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 23 Dec 2025 18:55:36 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10514,"size_decoded":2283,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"a9ea4680682b0106b25254d5464df450","sha1":"aba4b7e57f8d5fc9b462c71fd56185bcc6c1e292","sha256":"bff1109678d09848b063611d2df374a4e0b362298225437c8e79e45fed210571","sha512":"14b8afcae3ff62574bd49b7fa62313076b17b78220763704c9d5bfe98adbd2b720e43def40a11b5cef4365dbfb1b00e280a2ed98a33379a6ef13e21b7250437e","ssdeep":"192:Ld9HjJJcosobynIIzPCbc+aTKGBsHVeMEooNo0zE0oGv9oPs+JVdMKRy0E8ZXs5x:hKx","tlshash":"2f22434a9aa31447b913696cb7db47895739a0138095ce7e7f5c33848fcb2848bf1b8d","first_seen":"2025-07-04T22:38:13.682165Z","last_seen":"2026-09-08T19:10:51.274729Z","times_seen":6,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"dsdss-x.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsdss-x.com/assets/js/main.js?v=1.1","fqdn":"dsdss-x.com","domain":"dsdss-x.com","tld":"com"},"ip":{"addr":"62.182.80.15","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dsdss-x.com/","date":"2026-09-08T19:10:21.657Z","timestamp":1788894621657,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsdss-x.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 17:32:55 GMT","end":"Sun, 29 Nov 2026 17:32:54 GMT"},"fingerprint":{"sha1":"21:F9:36:11:38:EC:A0:6E:4E:66:1C:F4:AD:33:A5:68:ED:B2:F7:2A","sha256":"E3:9B:70:F1:91:67:83:C8:4B:E9:12:97:9A:06:DE:84:4B:2A:2B:AE:BA:DE:C8:D0:A2:D8:4B:DE:24:4B:3F:EF"}}},"request":{"raw":"GET /assets/js/main.js?v=1.1 HTTP/1.1\r\nHost: dsdss-x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dsdss-x.com/\r\nCookie: PHPSESSID=e9003f328a24557562700737c71ae61d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 08 Sep 2026 19:10:21 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 23 Apr 2026 17:01:44 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":170689,"size_decoded":56042,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"86c9b8b2d69f16fd44a1f50a263e2a04","sha1":"0339d91363c3d8c44283a385aebfcb3c4dd4bf50","sha256":"03f895ffc15be0e8ab023761cd79c898cf8f29350b45268a87e444ed250da7ac","sha512":"409263921ab194f73061a79355259a06c5709ca3bc085d05d63dd73a07582ceca9ac40cd261b0f99398b47c8d54159dc8b79131a6052268b3cf9af94ef451a67","ssdeep":"3072:yvzJCGcIM1WwYZQubCXfADPAi63Bn82glQz5wskx:yvzFlM1kxbC6Pu35kMwH","tlshash":"4ef3f6d97286b43306eb50b9807b420bf2366894644d8118f5acd8ed3d7cd8a61bbf7d","first_seen":"2026-05-26T18:47:47.950318Z","last_seen":"2026-09-08T19:10:51.275857Z","times_seen":5,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"dsdss-x.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsdss-x.com/assets/css/step-by-step.css","fqdn":"dsdss-x.com","domain":"dsdss-x.com","tld":"com"},"ip":{"addr":"62.182.80.15","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dsdss-x.com/","date":"2026-09-08T19:10:22.035Z","timestamp":1788894622035,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsdss-x.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 17:32:55 GMT","end":"Sun, 29 Nov 2026 17:32:54 GMT"},"fingerprint":{"sha1":"21:F9:36:11:38:EC:A0:6E:4E:66:1C:F4:AD:33:A5:68:ED:B2:F7:2A","sha256":"E3:9B:70:F1:91:67:83:C8:4B:E9:12:97:9A:06:DE:84:4B:2A:2B:AE:BA:DE:C8:D0:A2:D8:4B:DE:24:4B:3F:EF"}}},"request":{"raw":"GET /assets/css/step-by-step.css HTTP/1.1\r\nHost: dsdss-x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dsdss-x.com/assets/css/main.css?v=1.1\r\nCookie: PHPSESSID=e9003f328a24557562700737c71ae61d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 08 Sep 2026 19:10:21 GMT\r\ncontent-type: text/css\r\ncontent-length: 0\r\nlast-modified: Thu, 25 Dec 2025 13:25:02 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":198,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-08T22:47:46.014141Z","times_seen":18354170,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"dsdss-x.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsdss-x.com/ajax.php","fqdn":"dsdss-x.com","domain":"dsdss-x.com","tld":"com"},"ip":{"addr":"62.182.80.15","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dsdss-x.com/","date":"2026-09-08T19:10:23.113Z","timestamp":1788894623113,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsdss-x.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 17:32:55 GMT","end":"Sun, 29 Nov 2026 17:32:54 GMT"},"fingerprint":{"sha1":"21:F9:36:11:38:EC:A0:6E:4E:66:1C:F4:AD:33:A5:68:ED:B2:F7:2A","sha256":"E3:9B:70:F1:91:67:83:C8:4B:E9:12:97:9A:06:DE:84:4B:2A:2B:AE:BA:DE:C8:D0:A2:D8:4B:DE:24:4B:3F:EF"}}},"request":{"raw":"GET /ajax.php HTTP/1.1\r\nHost: dsdss-x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dsdss-x.com/\r\nCookie: PHPSESSID=e9003f328a24557562700737c71ae61d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 08 Sep 2026 19:10:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":326,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"04c7889ae50f839dd9ab06596bdaeca5","sha1":"1deb1cdfb0caa9eb42766c96ce5e4632d6ef01df","sha256":"c9340a070d1c3756400e24c1f97f7c88b134c12a9dd64bcda02cfc93014002ef","sha512":"ae26669262e9f45a3e6072b311157e8edba18a9ea2618d548199135433642cb884aa908dafea2a55ae7084326cbf5c4e6ad6c7ffdc2f8937052044451ee293ac","ssdeep":"","tlshash":"3470000e0028038028c888c0000220e02be80a88002e8a88203c00280c802828288220","first_seen":"2025-07-04T22:38:13.690254Z","last_seen":"2026-09-08T19:10:51.279278Z","times_seen":10,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"dsdss-x.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsdss-x.com/","fqdn":"dsdss-x.com","domain":"dsdss-x.com","tld":"com"},"ip":{"addr":"62.182.80.15","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-08T19:10:20.809Z","timestamp":1788894620809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsdss-x.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 17:32:55 GMT","end":"Sun, 29 Nov 2026 17:32:54 GMT"},"fingerprint":{"sha1":"21:F9:36:11:38:EC:A0:6E:4E:66:1C:F4:AD:33:A5:68:ED:B2:F7:2A","sha256":"E3:9B:70:F1:91:67:83:C8:4B:E9:12:97:9A:06:DE:84:4B:2A:2B:AE:BA:DE:C8:D0:A2:D8:4B:DE:24:4B:3F:EF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dsdss-x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 08 Sep 2026 19:10:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=e9003f328a24557562700737c71ae61d; path=/\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"e9003f328a24557562700737c71ae61d","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=e9003f328a24557562700737c71ae61d; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13885,"size_decoded":4855,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13879), with no line terminators","md5":"c4627bfcf8431f6853630282a501bfa6","sha1":"aba63334dbc36e7c65e0805d452e14bb2da70538","sha256":"3baa19bdb06528fa721580ed77abe460aa12141f230eb4fcf666e1cdf7f061d3","sha512":"b0e44411642e909b99f47c257947a4838a3ddac32e54aae06fa4bf826c953711f63b1e85173211239145275e84a0e41ba35530867cefed2dbe0135a6ae83eb51","ssdeep":"192:It0azT/1lQCqWfuE4oNwQDyi0P4idCNgyQq6dWe6cqfQ8/fR:ItD8ed4PQumh0kR","tlshash":"bc52c6316418a937029383d6ff31a72bb2a1c291c7075f06a6f5e79c6fcbe56cd01161","first_seen":"2026-09-08T19:10:51.281008Z","last_seen":"2026-09-08T19:10:51.281008Z","times_seen":1,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":134,"connect":39,"send":0,"wait":226,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"dsdss-x.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsdss-x.com/%3Cbr%20/%3E%20%3Cb%3EWarning%3C/b%3E:%20Undefined%20array%20key","fqdn":"dsdss-x.com","domain":"dsdss-x.com","tld":"com"},"ip":{"addr":"62.182.80.15","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dsdss-x.com/","date":"2026-09-08T19:10:21.661Z","timestamp":1788894621661,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsdss-x.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 17:32:55 GMT","end":"Sun, 29 Nov 2026 17:32:54 GMT"},"fingerprint":{"sha1":"21:F9:36:11:38:EC:A0:6E:4E:66:1C:F4:AD:33:A5:68:ED:B2:F7:2A","sha256":"E3:9B:70:F1:91:67:83:C8:4B:E9:12:97:9A:06:DE:84:4B:2A:2B:AE:BA:DE:C8:D0:A2:D8:4B:DE:24:4B:3F:EF"}}},"request":{"raw":"GET /%3Cbr%20/%3E%20%3Cb%3EWarning%3C/b%3E:%20Undefined%20array%20key HTTP/1.1\r\nHost: dsdss-x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dsdss-x.com/\r\nCookie: PHPSESSID=e9003f328a24557562700737c71ae61d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Tue, 08 Sep 2026 19:10:21 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":444,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-09-08T22:24:40.662492Z","times_seen":61453,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"dsdss-x.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsdss-x.com/assets/css/style.css","fqdn":"dsdss-x.com","domain":"dsdss-x.com","tld":"com"},"ip":{"addr":"62.182.80.15","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dsdss-x.com/","date":"2026-09-08T19:10:22.037Z","timestamp":1788894622037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsdss-x.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 17:32:55 GMT","end":"Sun, 29 Nov 2026 17:32:54 GMT"},"fingerprint":{"sha1":"21:F9:36:11:38:EC:A0:6E:4E:66:1C:F4:AD:33:A5:68:ED:B2:F7:2A","sha256":"E3:9B:70:F1:91:67:83:C8:4B:E9:12:97:9A:06:DE:84:4B:2A:2B:AE:BA:DE:C8:D0:A2:D8:4B:DE:24:4B:3F:EF"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: dsdss-x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dsdss-x.com/assets/css/main.css?v=1.1\r\nCookie: PHPSESSID=e9003f328a24557562700737c71ae61d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 08 Sep 2026 19:10:21 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 26 Dec 2025 21:47:48 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22923,"size_decoded":4589,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (463)","md5":"c0000e4c9df8db8e64189932f7eb6ba9","sha1":"b3a9ee630db8faaa70cd2cbc94c06dc4847d71f6","sha256":"cf5b922cbd54aead32fa4b2ab9386a51dd012949983b1a483123c1aca7652a33","sha512":"ec29577030751212e738907647635b2f8d67ad7439ac1c94503a8dfc58185292b1ac11a5a4ee1673b8d6c786da327a0b3340ca060dc3f870fa8121d576e663bb","ssdeep":"192:iPk+vRpz7pK6nTV+mjRZ7YoihufYKftscIfNdNbMrRPBiMYJyEs+KemogO/e/wg8:isWLZ7PIM/FY25xx/mx","tlshash":"d1a254966fb31455f817556867afab9a63189003d20fcd787e8d334ccf892e815a1b8c","first_seen":"2026-05-26T18:47:47.95216Z","last_seen":"2026-09-08T19:10:51.287424Z","times_seen":6,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"dsdss-x.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsdss-x.com/assets/css/main.css?v=1.1","fqdn":"dsdss-x.com","domain":"dsdss-x.com","tld":"com"},"ip":{"addr":"62.182.80.15","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dsdss-x.com/","date":"2026-09-08T19:10:21.655Z","timestamp":1788894621655,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsdss-x.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 17:32:55 GMT","end":"Sun, 29 Nov 2026 17:32:54 GMT"},"fingerprint":{"sha1":"21:F9:36:11:38:EC:A0:6E:4E:66:1C:F4:AD:33:A5:68:ED:B2:F7:2A","sha256":"E3:9B:70:F1:91:67:83:C8:4B:E9:12:97:9A:06:DE:84:4B:2A:2B:AE:BA:DE:C8:D0:A2:D8:4B:DE:24:4B:3F:EF"}}},"request":{"raw":"GET /assets/css/main.css?v=1.1 HTTP/1.1\r\nHost: dsdss-x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dsdss-x.com/\r\nCookie: PHPSESSID=e9003f328a24557562700737c71ae61d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 08 Sep 2026 19:10:21 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 23 Apr 2026 17:01:48 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53281,"size_decoded":10679,"mime_type":"text/css","magic":"ASCII text, with very long lines (53040)","md5":"a5bccd5ffc4e450c2fb3759f767f78a7","sha1":"5b85db5091304c012c0cfe5801667970f9815093","sha256":"eb91a869eaed304ee253fdd9b314fc26c9a597b0403e333bac563cd3a7f8e1f8","sha512":"4810c3d945c09e24a50b7a37415614ef3ee597427fba086b01a3f621fad2f7f022cf178cb74e5a41c03afdcc92f8e427c7498379ea45b3c48232b91c91053450","ssdeep":"384:ww5VGjANuxkUDhi0RUtqwBcx4VOLXM3Lec/k+ZXae6Mz6wHR/8WApW7h+bL15:v56DDUw3eDApk+95","tlshash":"0d33d5a4f564317c6dbfc249a6d4dedea3276684e60246b8f053221c62cf7e04963ecc","first_seen":"2026-05-26T18:47:47.948014Z","last_seen":"2026-09-08T19:10:51.28864Z","times_seen":5,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"dsdss-x.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
