{"report_id":"d2b383b6-a716-4d9f-ae34-ce2f24459c52","version":0,"status":"done","tags":[],"date":"2026-10-07T08:24:01Z","url":{"schema":"http","addr":"plrlsnapshotportal.xyz/","fqdn":"plrlsnapshotportal.xyz","domain":"plrlsnapshotportal.xyz","tld":"xyz"},"ip":{"addr":"93.152.223.63","port":0,"asn":135388,"as":"RMP Protection Limited","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"plrlsnapshotportal.xyz/","fqdn":"plrlsnapshotportal.xyz","domain":"plrlsnapshotportal.xyz","tld":"xyz"},"title":"Access — PLRL Snapshot Portal","dom":{"size":10046,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (321)","md5":"532c48346232d921a5d381d737f8ed57","sha1":"2edbfa29128e7231c5242b52411c1c7874c2718a","sha256":"d1b4378b7ad0776ae92fcfd4277e1c31d8477f7f172d873be5309a686d772685","sha512":"9a31f8f83420f8657b9251a2004cb10115789cb7525ba0915ba2e6b0389eaef0c9fa750e7f070cbb6dd3fa698e2125d5ff3430887a6ccb408fad3028ae3ba3dd","ssdeep":"192:4zO21B4POCeddLKQzbzf8BNqTqkdU0DunYdJP8Uoo:72DLeU8BUZpoo","tlshash":"3122f972a61e023d7173469b77d7a30c30358603d006d924baee4269cfc78dadaa37b4","dom_hash":"domhashc10592270ae03737a5534d87d098cc90","first_seen":"2026-10-07T08:16:26.092727Z","last_seen":"2026-10-07T08:24:05.634381Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"plrlsnapshotportal.xyz/","fqdn":"plrlsnapshotportal.xyz","domain":"plrlsnapshotportal.xyz","tld":"xyz"},"ip":{"addr":"93.152.223.63","port":0,"asn":135388,"as":"RMP Protection Limited","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T08:24:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"plrlsnapshotportal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"plrlsnapshotportal.xyz","ip":{"addr":"93.152.223.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-08-29","domain_rank":0,"first_seen":"2026-10-07T08:16:20.94337Z","last_seen":"2026-10-07T08:16:20.94337Z","alert_count":7,"request_count":7,"received_data":327155,"sent_data":3653,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"plrlsnapshotportal.xyz/","fqdn":"plrlsnapshotportal.xyz","domain":"plrlsnapshotportal.xyz","tld":"xyz"},"ip":{"addr":"93.152.223.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ffc4cf10938ac90db38a035b15c0dc96","sha1":"2de112c512ebee04c8001da26da1d73251d8ca50","sha256":"b98737937fa1b0abaa444ceef38b3fc5714a528efa042325a7339b32351579d2","sha512":"09ba356fedffccf9b5d628d5f4d9529028952d463222ef1988f52ba33aec255265e2b3ae28d3636a6b0ffa077aa86ad74b8460c8acd358080565506c310b3f73","ssdeep":"","tlshash":"0a01907b781235b25df3616b5b7b6fc5322205271842c830bc4dd4441f51b45393aac0","size":788,"data":"","first_seen":"2026-10-07T08:16:26.306277Z","last_seen":"2026-10-07T08:24:05.652725Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"plrlsnapshotportal.xyz/","fqdn":"plrlsnapshotportal.xyz","domain":"plrlsnapshotportal.xyz","tld":"xyz"},"ip":{"addr":"93.152.223.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T08:23:31.612Z","timestamp":1791361411612,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plrlsnapshotportal.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:36:35 GMT","end":"Sat, 28 Nov 2026 00:36:34 GMT"},"fingerprint":{"sha1":"01:58:54:24:1C:41:B2:6D:B3:98:4D:22:4E:32:AD:EF:2E:FD:83:0D","sha256":"AE:88:2A:F5:18:90:3D:F3:8D:44:63:46:37:4D:6B:5D:48:80:06:8D:39:A3:F0:2D:D8:EF:1A:60:0F:D4:3A:BE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: plrlsnapshotportal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 07 Oct 2026 08:23:31 GMT\r\nContent-Type: text/html\r\nLast-Modified: Sat, 29 Aug 2026 20:25:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a93404a-2749\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10057,"size_decoded":4107,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (315)","md5":"4dd8a39f14841a8e701f44881b9736b9","sha1":"54a5581dfa61f32d7a9c76062bbb0af72b4c6fa3","sha256":"2951451e79c91c8e6990091f6b35c45719291a01b85067aafc6a9c7e9c7256c5","sha512":"eb0a58f9fedb94f52797bc394e5a9ff4612a1a668af05053a2d574f012e3aaa918e41ced66110803a7c317837cc99a2084ca587677863c36a4ab9cc4a149ff04","ssdeep":"192:mzx21B4POCeddLKQzbzf8BNqTqkdU0DunYdJP8U5g:a2DLeU8BUZp5g","tlshash":"2f22f972a65e023d7173465a77d7a30c30358603d106c924baef4269cfc78dadaa37b8","first_seen":"2026-10-07T08:16:26.114918Z","last_seen":"2026-10-07T08:24:05.637455Z","times_seen":2,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":7,"connect":20,"send":0,"wait":20,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"plrlsnapshotportal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plrlsnapshotportal.xyz/assets/img/logo-plrl-white.png","fqdn":"plrlsnapshotportal.xyz","domain":"plrlsnapshotportal.xyz","tld":"xyz"},"ip":{"addr":"93.152.223.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plrlsnapshotportal.xyz/","date":"2026-10-07T08:23:31.902Z","timestamp":1791361411902,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plrlsnapshotportal.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:36:35 GMT","end":"Sat, 28 Nov 2026 00:36:34 GMT"},"fingerprint":{"sha1":"01:58:54:24:1C:41:B2:6D:B3:98:4D:22:4E:32:AD:EF:2E:FD:83:0D","sha256":"AE:88:2A:F5:18:90:3D:F3:8D:44:63:46:37:4D:6B:5D:48:80:06:8D:39:A3:F0:2D:D8:EF:1A:60:0F:D4:3A:BE"}}},"request":{"raw":"GET /assets/img/logo-plrl-white.png HTTP/1.1\r\nHost: plrlsnapshotportal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plrlsnapshotportal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 07 Oct 2026 08:23:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 2599\r\nLast-Modified: Sat, 29 Aug 2026 19:55:57 GMT\r\nConnection: keep-alive\r\nETag: \"6a93394d-a27\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2599,"size_decoded":2847,"mime_type":"image/png","magic":"PNG image data, 234 x 64, 8-bit/color RGBA, non-interlaced","md5":"55f5e3b57fe3be9253586e57f1db9d93","sha1":"2a3a9e53899009357749376793f1f278a7c838c1","sha256":"cfa25740fc847fef83967912fd09ac525f791371f3c384ffe24ad627e4b9bd09","sha512":"214aabc5eff02e66ad228f8350d87a399a1206447549e65737d9b3dfa91fb77420a7c6ebbd3c13d6cb54a93e0fe23a18b369564ec864ee358486d011bf19609f","ssdeep":"","tlshash":"10516d13cb19bb45f227a976f26271460614175b13a236e0e1cfb2005c5f61b28bfc7c","first_seen":"2026-10-07T08:16:26.132215Z","last_seen":"2026-10-07T08:24:05.639232Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"plrlsnapshotportal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plrlsnapshotportal.xyz/assets/fonts/HostGrotesk-Medium.ttf","fqdn":"plrlsnapshotportal.xyz","domain":"plrlsnapshotportal.xyz","tld":"xyz"},"ip":{"addr":"93.152.223.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plrlsnapshotportal.xyz/","date":"2026-10-07T08:23:31.904Z","timestamp":1791361411904,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plrlsnapshotportal.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:36:35 GMT","end":"Sat, 28 Nov 2026 00:36:34 GMT"},"fingerprint":{"sha1":"01:58:54:24:1C:41:B2:6D:B3:98:4D:22:4E:32:AD:EF:2E:FD:83:0D","sha256":"AE:88:2A:F5:18:90:3D:F3:8D:44:63:46:37:4D:6B:5D:48:80:06:8D:39:A3:F0:2D:D8:EF:1A:60:0F:D4:3A:BE"}}},"request":{"raw":"GET /assets/fonts/HostGrotesk-Medium.ttf HTTP/1.1\r\nHost: plrlsnapshotportal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plrlsnapshotportal.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 07 Oct 2026 08:23:31 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 59528\r\nLast-Modified: Sat, 29 Aug 2026 19:42:13 GMT\r\nConnection: keep-alive\r\nETag: \"6a933615-e888\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":59528,"size_decoded":59793,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 34 names, Microsoft, language 0x409","md5":"cba5a49b8e59e56a9881238c25927662","sha1":"af444a32f3f8a636f0d6855ef8304d51500380d8","sha256":"42ecc75e9551e1a109689383ec4d8e38ee9b14025706a4f488af36a9e9ee75ab","sha512":"a3cbe19e40b651e30badbd1529e4b7b8aca8c290d12418e7ff2a46e3b2d55576d0c3ea0b41a4c7a7681fcd33e7e4a19d1dddb020c1fe1d363356e69fd3d3f157","ssdeep":"768:lh2fUxBXBlzYTFSZwmLRe8iP2K70YRThV2Cd1RMp2K8zSr/1Pa8G4aqBEUmSHRR:qUxBYy5sswPjVvRMEzSz1PDDa4EUm8","tlshash":"c8430722aa45a305e1957d749773d334e324bc32afcf420b9473aadaeccd4875f40a56","first_seen":"2026-02-25T05:34:27.477248Z","last_seen":"2026-10-07T08:24:05.643842Z","times_seen":6,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":39,"receive":20,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"plrlsnapshotportal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plrlsnapshotportal.xyz/assets/fonts/IBMPlexMono-Regular.ttf","fqdn":"plrlsnapshotportal.xyz","domain":"plrlsnapshotportal.xyz","tld":"xyz"},"ip":{"addr":"93.152.223.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plrlsnapshotportal.xyz/","date":"2026-10-07T08:23:31.913Z","timestamp":1791361411913,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plrlsnapshotportal.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:36:35 GMT","end":"Sat, 28 Nov 2026 00:36:34 GMT"},"fingerprint":{"sha1":"01:58:54:24:1C:41:B2:6D:B3:98:4D:22:4E:32:AD:EF:2E:FD:83:0D","sha256":"AE:88:2A:F5:18:90:3D:F3:8D:44:63:46:37:4D:6B:5D:48:80:06:8D:39:A3:F0:2D:D8:EF:1A:60:0F:D4:3A:BE"}}},"request":{"raw":"GET /assets/fonts/IBMPlexMono-Regular.ttf HTTP/1.1\r\nHost: plrlsnapshotportal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plrlsnapshotportal.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 07 Oct 2026 08:23:31 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 133796\r\nLast-Modified: Sat, 29 Aug 2026 19:42:14 GMT\r\nConnection: keep-alive\r\nETag: \"6a933616-20aa4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":133796,"size_decoded":134063,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 20 names, Microsoft, language 0x409","md5":"b112f77f65b1766764ee122703ebdcd0","sha1":"d6acbd905047bf48a872010f366ff7476f7e59ad","sha256":"ab08018ccd276b79fb2c636bb95b9c543598f9d50505fe92506fcb4dae7810cd","sha512":"ca489511301b4d1796499c4bb0795206a2914d1a71f8292aed6494901458d0435df8459939b0e7633a310a21a2a2c64d7dfb41ffe60c8fa2dfe1426a02f29c29","ssdeep":"3072:cVpga1W+2SWuOVfMMQ+n31lDLrLuYd2z9i597JR:cn5l2lDLrKYd2z9i37JR","tlshash":"64d3944feffb6a17b70e0af48de5b2b916b0ba1bef3161091c51d501c68f249422bd94","first_seen":"2025-10-17T14:17:55.795017Z","last_seen":"2026-10-07T08:24:05.645203Z","times_seen":70,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":40,"receive":40,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"plrlsnapshotportal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plrlsnapshotportal.xyz/assets/fonts/HostGrotesk-Bold.ttf","fqdn":"plrlsnapshotportal.xyz","domain":"plrlsnapshotportal.xyz","tld":"xyz"},"ip":{"addr":"93.152.223.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plrlsnapshotportal.xyz/","date":"2026-10-07T08:23:31.920Z","timestamp":1791361411920,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plrlsnapshotportal.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:36:35 GMT","end":"Sat, 28 Nov 2026 00:36:34 GMT"},"fingerprint":{"sha1":"01:58:54:24:1C:41:B2:6D:B3:98:4D:22:4E:32:AD:EF:2E:FD:83:0D","sha256":"AE:88:2A:F5:18:90:3D:F3:8D:44:63:46:37:4D:6B:5D:48:80:06:8D:39:A3:F0:2D:D8:EF:1A:60:0F:D4:3A:BE"}}},"request":{"raw":"GET /assets/fonts/HostGrotesk-Bold.ttf HTTP/1.1\r\nHost: plrlsnapshotportal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plrlsnapshotportal.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 07 Oct 2026 08:23:31 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 59432\r\nLast-Modified: Sat, 29 Aug 2026 19:42:14 GMT\r\nConnection: keep-alive\r\nETag: \"6a933616-e828\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":59432,"size_decoded":59697,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 32 names, Microsoft, language 0x409","md5":"759014d6a95931c20f02d87e54f1045d","sha1":"be610c0cf8d0741397a19ee54d20514b139b59d2","sha256":"b4a1ba243a259ff84494d7c67155a8cf3095896f572cb9b9554e5adfdbf4c522","sha512":"2d7cef797e4799bd21640e313f63874bda63b9cb7e365c5cb2c57828a9c7c11ccdbddde04917102c60278c82e701d3ad7b2ae663acb8eead4036cc62f43d54c4","ssdeep":"768:BcT70Bb6UwSZwmLRUZhLqUo0isU0nPTqY4OU+2r8ur8G0aqBEUmSHRR:ZBNj5KPqN0tUsuY4x7r8u4Xa4EUm8","tlshash":"8c430722ba42a305e1413d7447b3c374e324b931afcf520be5739aeaec8e5975f40a56","first_seen":"2026-02-25T05:34:27.450547Z","last_seen":"2026-10-07T08:24:05.64714Z","times_seen":18,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":41,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"plrlsnapshotportal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plrlsnapshotportal.xyz/assets/fonts/HostGrotesk-SemiBold.ttf","fqdn":"plrlsnapshotportal.xyz","domain":"plrlsnapshotportal.xyz","tld":"xyz"},"ip":{"addr":"93.152.223.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plrlsnapshotportal.xyz/","date":"2026-10-07T08:23:31.923Z","timestamp":1791361411923,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plrlsnapshotportal.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:36:35 GMT","end":"Sat, 28 Nov 2026 00:36:34 GMT"},"fingerprint":{"sha1":"01:58:54:24:1C:41:B2:6D:B3:98:4D:22:4E:32:AD:EF:2E:FD:83:0D","sha256":"AE:88:2A:F5:18:90:3D:F3:8D:44:63:46:37:4D:6B:5D:48:80:06:8D:39:A3:F0:2D:D8:EF:1A:60:0F:D4:3A:BE"}}},"request":{"raw":"GET /assets/fonts/HostGrotesk-SemiBold.ttf HTTP/1.1\r\nHost: plrlsnapshotportal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plrlsnapshotportal.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 07 Oct 2026 08:23:31 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 59496\r\nLast-Modified: Sat, 29 Aug 2026 19:42:13 GMT\r\nConnection: keep-alive\r\nETag: \"6a933615-e868\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59496,"size_decoded":59761,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 34 names, Microsoft, language 0x409","md5":"849a5486f27154ba72d75a49bc927340","sha1":"3f358de82efccb964283c6b8383875ab68cc60ed","sha256":"665dbeae4f7e0b0694336806232b3456f3b8909280d911427ea19ea9e735b75c","sha512":"9b43b01cf4bc00bd51a382ddd8cc538dc80441a2b21ad11bcd426297417c24a5b71636b40188942ad6afd1565fd10cec333ca8b4394919f244c87c4d49b42215","ssdeep":"1536:cx8m51ry2RVZiFYDOppWw4ToSr9a4EUm8:cx8mbhVcFYDkeoSrlEb8","tlshash":"e94306227a82a345e1557d745333d334e324bd32bfcb960b94b36aeaec8d5874f41a06","first_seen":"2026-02-25T05:34:27.451667Z","last_seen":"2026-10-07T08:24:05.648237Z","times_seen":19,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":40,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"plrlsnapshotportal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plrlsnapshotportal.xyz/assets/img/favicon.png","fqdn":"plrlsnapshotportal.xyz","domain":"plrlsnapshotportal.xyz","tld":"xyz"},"ip":{"addr":"93.152.223.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plrlsnapshotportal.xyz/","date":"2026-10-07T08:23:32.043Z","timestamp":1791361412043,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plrlsnapshotportal.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:36:35 GMT","end":"Sat, 28 Nov 2026 00:36:34 GMT"},"fingerprint":{"sha1":"01:58:54:24:1C:41:B2:6D:B3:98:4D:22:4E:32:AD:EF:2E:FD:83:0D","sha256":"AE:88:2A:F5:18:90:3D:F3:8D:44:63:46:37:4D:6B:5D:48:80:06:8D:39:A3:F0:2D:D8:EF:1A:60:0F:D4:3A:BE"}}},"request":{"raw":"GET /assets/img/favicon.png HTTP/1.1\r\nHost: plrlsnapshotportal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plrlsnapshotportal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 07 Oct 2026 08:23:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 431\r\nLast-Modified: Sat, 29 Aug 2026 19:42:16 GMT\r\nConnection: keep-alive\r\nETag: \"6a933618-1af\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":431,"size_decoded":678,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2ab8086e78df7895a7acf18424dc10da","sha1":"7a418daae7bb2ca89d651b86c4e43afb2f821b36","sha256":"97b51dfa2c9a72fec9e4d774d840dc023d530867942611ce6843b05c0aa346e1","sha512":"be8553041f6cccc8f57a946c003b1f645a1baa139a93a3ae5ad9197a92b2cc4030445a7b66125cebec5cd73c700e07fed6f7db85996aad8b060dfca71bb2e5f6","ssdeep":"","tlshash":"eee0a3423c9a7f2f9151125bc778d059c4dac7d7346485570b3d2568cfb7440c6c9a05","first_seen":"2026-02-18T15:00:48.200091Z","last_seen":"2026-10-07T08:24:05.65102Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"plrlsnapshotportal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}