{"report_id":"cf18bc80-e727-4361-9f1b-800d1d566c0d","version":0,"status":"done","tags":[],"date":"2026-07-12T17:16:26Z","url":{"schema":"https","addr":"appindubai.com","fqdn":"appindubai.com","domain":"appindubai.com","tld":"com"},"ip":{"addr":"141.11.243.141","port":0,"asn":201120,"as":"Lebex First International Trading","country":"Lebanon","country_code":"LB"},"final":{"url":{"schema":"https","addr":"appindubai.com/","fqdn":"appindubai.com","domain":"appindubai.com","tld":"com"},"title":"appindubai.com/","dom":{"size":3532,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3532), with no line terminators","md5":"6f0fcc48fc9b87e34689c8409149fcff","sha1":"fec38695f59fc5347d399232b02b73c7aa58a9a1","sha256":"1417971f2bb196f1ee1c084f5f125923eec98d5b9516075744d3150685dbd1c0","sha512":"b6c1f0b360d4d9ee40ca60fc9e542847704f5a553e5488ff1371edd48ba47645105123cb580c9371998ca08f4d466efb4a308ee7d440872a00e67f7172ce3953","ssdeep":"","tlshash":"d971e070a1e00977442f9dd1b0f8ef9830c2c50dcd4610467ea9175a2bf7c72b45d66e","dom_hash":"domhash400e1453143f585e3fd14851a115d4f8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"appindubai.com","fqdn":"appindubai.com","domain":"appindubai.com","tld":"com"},"ip":{"addr":"141.11.243.141","port":0,"asn":201120,"as":"Lebex First International Trading","country":"Lebanon","country_code":"LB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T17:16:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"appindubai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"appindubai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"appindubai.com","ip":{"addr":"141.11.243.141","port":443,"asn":201120,"as":"Lebex First International Trading","country":"Lebanon","country_code":"LB"},"domain_registered":"2024-12-04","domain_rank":0,"first_seen":"2026-06-22T06:24:50.201846Z","last_seen":"2026-07-10T20:15:54.504824Z","alert_count":4,"request_count":2,"received_data":1882,"sent_data":1018,"comment":"","tags":null,"fingerprints":[{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":[{"level":"log","text":"Data available from the console:\n\n$json.data - The parsed JSON object\n$json.text - The original JSON text\n$json.headers - HTTP request and response headers\n\nThe JSON Viewer is documented here:\nhttps://firefox-source-docs.mozilla.org/devtools-user/json_viewer/","filename":"resource://devtools/client/jsonview/json-viewer.mjs","line_number":383,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"appindubai.com/","fqdn":"appindubai.com","domain":"appindubai.com","tld":"com"},"ip":{"addr":"141.11.243.141","port":443,"asn":201120,"as":"Lebex First International Trading","country":"Lebanon","country_code":"LB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T17:15:59.661Z","timestamp":1783876559661,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appindubai.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 06:53:25 GMT","end":"Sat, 19 Sep 2026 06:53:24 GMT"},"fingerprint":{"sha1":"3E:BB:7A:F7:2F:17:FF:D3:3D:91:73:6B:E7:8F:4D:39:64:02:48:B4","sha256":"21:0A:5C:DD:A7:75:96:4D:48:47:C8:9E:91:4D:A7:EE:49:D1:E6:E4:98:2F:D7:83:57:39:15:F9:84:A6:08:55"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: appindubai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Sun, 12 Jul 2026 17:15:59 GMT\r\nContent-Type: application/json;\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Security-Policy: default-src 'self' https://static.me-talk.ru/ https://widget.me-talk.ru/ https://newassets.hcaptcha.com/; script-src 'self' https://me-talk.ru http://me-talk.ru https://static.me-talk.ru/ https://widget.me-talk.ru/ https://static.site-chat.me/ https://www.hcaptcha.com/ https://js.hcaptcha.com/; script-src-elem 'self' https://me-talk.ru http://me-talk.ru https://static.me-talk.ru/ https://widget.me-talk.ru/ https://static.site-chat.me/ https://www.hcaptcha.com/ https://js.hcaptcha.com/; connect-src 'self' wss://rivkaur.info/ws/ wss://widget.me-talk.ru/ https://static.me-talk.ru/ https://widget.me-talk.ru/ https://static.site-chat.me wss://widget.site-chat.me/ https://newassets.hcaptcha.com/; img-src 'self' https://cdn.jsdelivr.net/ https://esalvir.xyz https://static.me-talk.ru/ https://static.site-chat.me/ data:; style-src 'self' https://fonts.googleapis.com; style-src-elem 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com; media-src 'self' https://static.site-chat.me/ https://widget.me-talk.ru/;\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nSet-Cookie: PHPSESSID=hcc29f9ok495k2vke6f8bjhft2; expires=Sun, 19 Jul 2026 17:15:59 GMT; Max-Age=604800; path=/; HttpOnly; SameSite=Lax\nsl-session=pT8qck8dVWqq+58eaKpc2Q==; SameSite=None; Secure; Path=/; Max-Age=86400; HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":42,"size_decoded":1613,"mime_type":"application/vnd.mozilla.json.view","magic":"JSON text data","md5":"7f6f4d210d738bb00d0aabca09c1ffe2","sha1":"ee9a71dcc3084b3bc947738f22c1c2be65577b76","sha256":"80b303c049cb780cc4ba477d7f65506bcc996db7898077ecf4a7a19fdc20d4cb","sha512":"2f831d7b5bf638fd4303e4e1cb99798f43f3cc921bbdb9ba95812816b81f4d8c8e42ecc0d3ce932bbb2554db0967efca2497161eda5634db40f118004f807378","ssdeep":"","tlshash":"5d90040503007d5d030155d1f014150017c40043f0413005c40d441c57554cd31f31f5","first_seen":"2025-09-21T14:54:45.25219Z","last_seen":"2026-07-12T17:16:26.985466Z","times_seen":8,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":158,"connect":22,"send":0,"wait":36,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"appindubai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"appindubai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"appindubai.com/favicon.ico","fqdn":"appindubai.com","domain":"appindubai.com","tld":"com"},"ip":{"addr":"141.11.243.141","port":443,"asn":201120,"as":"Lebex First International Trading","country":"Lebanon","country_code":"LB"},"is_navigation_request":false,"resource_type":"img","requested_by":"resource://devtools/client/jsonview/","date":"2026-07-12T17:16:00.497Z","timestamp":1783876560497,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appindubai.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 06:53:25 GMT","end":"Sat, 19 Sep 2026 06:53:24 GMT"},"fingerprint":{"sha1":"3E:BB:7A:F7:2F:17:FF:D3:3D:91:73:6B:E7:8F:4D:39:64:02:48:B4","sha256":"21:0A:5C:DD:A7:75:96:4D:48:47:C8:9E:91:4D:A7:EE:49:D1:E6:E4:98:2F:D7:83:57:39:15:F9:84:A6:08:55"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: appindubai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://appindubai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 12 Jul 2026 17:16:00 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nSet-Cookie: sl-session=jz8zOFAdVWrJO4qV+0xwyQ==; SameSite=None; Secure; Path=/; Max-Age=86400; HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T16:40:16.279947Z","times_seen":17319419,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"appindubai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"appindubai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}