{"report_id":"cb9f5dd2-4ede-4738-adc3-47b05c89ff47","version":6,"status":"done","tags":[],"date":"2024-10-09T02:55:39Z","url":{"schema":"http","addr":"vk.com/away.php?to=https://jasonlozano.com/bl/ne/mkptcqb5r2//jbonet@slurpmail.net","fqdn":"vk.com","domain":"slurpmail.net","tld":"com"},"ip":{"addr":"93.186.225.194","port":0,"asn":47541,"as":"VKontakte Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"about","addr":"about:neterror?e=dnsNotFound\u0026u=https%3A//jasonlozano.com/bl/ne/mkptcqb5r2/jbonet%40slurpmail.net\u0026c=UTF-8\u0026d=We%20can%E2%80%99t%20connect%20to%20the%20server%20at%20jasonlozano.com.","fqdn":"","domain":"","tld":""},"title":"Server Not Found"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-20T08:43:26Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"away.vk.com","ip":{"addr":"87.240.132.67","port":0,"asn":47541,"as":"VKontakte Ltd","country":"Russia","country_code":"RU"},"domain_registered":"1997-06-24","domain_rank":92855,"first_seen":"2017-04-11 13:32:47","last_seen":"2024-09-26 12:21:24","alert_count":0,"request_count":1,"received_data":1243,"sent_data":755,"comment":"","tags":null,"fingerprints":null},{"fqdn":"jasonlozano.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-02-02","domain_rank":0,"first_seen":"2021-01-31 20:23:11","last_seen":"2023-11-07 09:21:18","alert_count":1,"request_count":1,"received_data":0,"sent_data":540,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r10.o.lencr.org","ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-06 21:45:11","last_seen":"2024-10-07 19:37:44","alert_count":0,"request_count":1,"received_data":887,"sent_data":327,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vk.com","ip":{"addr":"87.240.132.67","port":0,"asn":47541,"as":"VKontakte Ltd","country":"Russia","country_code":"RU"},"domain_registered":"1997-06-24","domain_rank":2243,"first_seen":"2012-05-21 17:01:19","last_seen":"2024-10-08 09:11:09","alert_count":0,"request_count":1,"received_data":1173,"sent_data":535,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-09","alert":"Sinkholed","trigger":"jasonlozano.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:neterror?e=dnsNotFound\u0026u=https%3A//jasonlozano.com/bl/ne/mkptcqb5r2/jbonet%40slurpmail.net\u0026c=UTF-8\u0026d=We%20can%E2%80%99t%20connect%20to%20the%20server%20at%20jasonlozano.com.","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T05:24:30.669032Z","times_seen":18437473,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-10-09T02:55:13.898844351Z","timestamp":1728442513898,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"B6DB380F5EEB73AA56ABF90AFA43B52CC9F51B01F33AD1EEFECCC473A41FFB86\"\r\nLast-Modified: Tue, 08 Oct 2024 11:18:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=4602\r\nExpires: Wed, 09 Oct 2024 04:11:55 GMT\r\nDate: Wed, 09 Oct 2024 02:55:13 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"33985775df7b619cb33f4050d88c5fb9","sha1":"cf0b2ff92cd2f7e12ce788a164a73d75dea5da83","sha256":"b6db380f5eeb73aa56abf90afa43b52cc9f51b01f33ad1eefeccc473a41ffb86","sha512":"6bc0e873177bc8082b9b3d8fdb3e1c3d3b2adf2d27c0053919c540d80bdfffa7a6f41b0ea381ef7e077c08bbd371ab5a9cbae5cea92e4752c766d8ff25ddb8f5","ssdeep":"","tlshash":"81f07551c5b13da01bb01629d9a89003dd10cdfa14c05be451f443e23c02bfc468054c","first_seen":"2024-10-08T16:14:32Z","last_seen":"2024-10-11T08:49:31.751651Z","times_seen":5844,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"vk.com/away.php?to=https://jasonlozano.com/bl/ne/mkptcqb5r2//jbonet@slurpmail.net","fqdn":"vk.com","domain":"vk.com","tld":"com"},"ip":{"addr":"87.240.132.67","port":0,"asn":47541,"as":"VKontakte Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-10-09T02:55:14.420577939Z","timestamp":1728442514420,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /away.php?to=https://jasonlozano.com/bl/ne/mkptcqb5r2//jbonet@slurpmail.net HTTP/1.1\r\nHost: vk.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 302 Found\r\nserver: kittenx\r\ndate: Wed, 09 Oct 2024 02:55:14 GMT\r\ncontent-type: text/html; charset=windows-1251\r\ncontent-length: 20\r\nlocation: https://away.vk.com/away.php?rh=5b36a3ea-a5cc-43ec-8e6c-18f6d98a4277\r\nx-powered-by: KPHP/7.4.118746\r\nset-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly\nremixlang=3; expires=Tue, 07 Oct 2025 06:00:55 GMT; path=/; domain=.vk.com\nremixstlid=9101819838229120824_dxaeyIu6pUEWZkyArN4ZUxytCNXpJzn9I5RZOPUrXkD; expires=Thu, 09 Oct 2025 02:55:14 GMT; path=/; domain=.vk.com; secure\nremixsec_redir=https%3A%2F%2Fjasonlozano.com%2Fbl%2Fne%2Fmkptcqb5r2%2Fjbonet%40slurpmail.net; path=/; domain=.vk.com\nremixua=-1%7C-1%7C332%7C3502452718; expires=Tue, 14 Oct 2025 01:46:23 GMT; path=/; domain=.vk.com; secure\r\ncache-control: no-store\r\nx-frame-options: DENY\r\ncontent-encoding: gzip\r\nx-frontend: front923000\r\nstrict-transport-security: max-age=15768000\r\naccess-control-expose-headers: X-Frontend\r\norigin-agent-cluster: ?0\r\nx-trace-id: Ka3dzFfCHlfpqkBBixWwAW1_GZ7nzQ\r\nserver-timing: tid;desc=\"Ka3dzFfCHlfpqkBBixWwAW1_GZ7nzQ\",front;dur=0.308\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":20,"size_decoded":20,"mime_type":"application/x-gzip","magic":"gzip compressed data, from Unix","md5":"7029066c27ac6f5ef18d660d5741979a","sha1":"46c6643f07aa7f6bfe7118de926b86defc5087c4","sha256":"59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2","sha512":"7e8e93f4a89ce7fae011403e14a1d53544c6e6f6b6010d61129dc27937806d2b03802610d7999eab33a4c36b0f9e001d9d76001b8354087634c1aa9c740c536f","ssdeep":"","tlshash":"de70000000c03c30cc00003000000000000c30000000c00300000c3000030c000c003c","first_seen":"2023-04-09T15:32:38Z","last_seen":"2025-03-02T06:10:10.559841Z","times_seen":229342,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"away.vk.com/away.php?rh=5b36a3ea-a5cc-43ec-8e6c-18f6d98a4277","fqdn":"away.vk.com","domain":"vk.com","tld":"com"},"ip":{"addr":"87.240.132.67","port":0,"asn":47541,"as":"VKontakte Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-10-09T02:55:14.550598765Z","timestamp":1728442514550,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /away.php?rh=5b36a3ea-a5cc-43ec-8e6c-18f6d98a4277 HTTP/1.1\r\nHost: away.vk.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: remixlang=3; remixstlid=9101819838229120824_dxaeyIu6pUEWZkyArN4ZUxytCNXpJzn9I5RZOPUrXkD; remixsec_redir=https%3A%2F%2Fjasonlozano.com%2Fbl%2Fne%2Fmkptcqb5r2%2Fjbonet%40slurpmail.net; remixua=-1%7C-1%7C332%7C3502452718\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: kittenx\r\ndate: Wed, 09 Oct 2024 02:55:14 GMT\r\ncontent-type: text/html; charset=windows-1251\r\ncontent-length: 449\r\nx-powered-by: KPHP/7.4.118746\r\nset-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly\nremixsec_redir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; domain=.vk.com\nremixsec_redir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=away.vk.com\nremixsec_redir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/\r\ncache-control: no-store\r\nx-frame-options: DENY\r\ncontent-encoding: gzip\r\nx-frontend: front923000\r\naccess-control-expose-headers: X-Frontend\r\nx-trace-id: KwfxpV98GZAC-018GzcBVNpcU77uiA\r\nserver-timing: tid;desc=\"KwfxpV98GZAC-018GzcBVNpcU77uiA\",front;dur=0.472\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":449,"size_decoded":843,"mime_type":"text/plain; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (843), with no line terminators","md5":"227feed0e963affd9879a85e28438fb4","sha1":"9d42c32a9982db30b1e04fcbd062a6ff860b5114","sha256":"cce9123a695b91e1e3f8a6168be2f2d4aa5a249213e4e8b62bd44b8daf53a0d9","sha512":"f922b12dcf9f29dbd4ded32cbc2100e0f9ff0c349f8eb9661ea0483f88dcd55ae72711f9e445bf6e0046850c62944c418e259682bf066db61f5aed1a93a5585d","ssdeep":"","tlshash":"4201efe33c15c1631be148e1b2bbe96d216317495d32acc0d05415a336e4fafe91a9d8","first_seen":"2024-10-11T08:43:29.285198Z","last_seen":"2024-10-11T08:43:29.285198Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jasonlozano.com/bl/ne/mkptcqb5r2/jbonet@slurpmail.net","fqdn":"jasonlozano.com","domain":"jasonlozano.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-10-09T02:55:14.934Z","timestamp":1728442514934,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /bl/ne/mkptcqb5r2/jbonet@slurpmail.net HTTP/1.1\r\nHost: jasonlozano.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://away.vk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T05:24:30.669032Z","times_seen":18437473,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-09","alert":"Sinkholed","trigger":"jasonlozano.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}