{"report_id":"d615e0b8-220f-49cd-8a91-86a0a0e225cb","version":0,"status":"done","tags":[],"date":"2026-09-29T03:07:46Z","url":{"schema":"http","addr":"consultauthority.sbs/","fqdn":"consultauthority.sbs","domain":"consultauthority.sbs","tld":"sbs"},"ip":{"addr":"172.67.209.54","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"consultauthority.sbs/","fqdn":"consultauthority.sbs","domain":"consultauthority.sbs","tld":"sbs"},"title":"Business Consulting glossary and knowledge hub | Consult Authority","dom":{"size":566155,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40675)","md5":"2bf0fcae1d595bfd7b2e1c12195fa95b","sha1":"73cf3cc0b8d5c84c7372695c2b90a296cb92906a","sha256":"f52b8902220d636651bb4525994b6c31c9807195fb5e81b9d1b06c99b81e8b30","sha512":"d8ad24405007774c2b9195f5aef528be0c9d050a70076606426584e2383cbd5d1cdf2165ca5e09f627b42bf9e8a5889c93b7a706b8b33391d7693b68239130ea","ssdeep":"12288:KoQKrrScOd5qnlNUtMsB6wxEZAcnu1sdJIkrTF:hwtdsnlNUtMK6wxmu1pkHF","tlshash":"e7c42302ada2297b07138255725dfd4a86a0d413d687a4e0d0fed2e49fc7e74a733b4e","dom_hash":"domhash53c177cecbd5558602c1817bff9fb4e1","first_seen":"2026-09-29T03:07:50.730024Z","last_seen":"2026-09-29T03:10:36.380404Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"consultauthority.sbs/","fqdn":"consultauthority.sbs","domain":"consultauthority.sbs","tld":"sbs"},"ip":{"addr":"172.67.209.54","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-03T03:07:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"consultauthority.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"consultauthority.sbs","ip":{"addr":"172.67.209.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-26","domain_rank":0,"first_seen":"2026-09-29T03:07:47.008094Z","last_seen":"2026-09-29T03:07:47.008094Z","alert_count":2,"request_count":2,"received_data":569042,"sent_data":976,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"consultauthority.sbs/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"consultauthority.sbs","domain":"consultauthority.sbs","tld":"sbs"},"ip":{"addr":"172.67.209.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-14T16:37:13.022171Z","times_seen":454764,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consultauthority.sbs/","fqdn":"consultauthority.sbs","domain":"consultauthority.sbs","tld":"sbs"},"ip":{"addr":"172.67.209.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1adb2d2cd92ab7366ce1b528b48f70cd","sha1":"fa0cfb900866c1db4927ed8419fb2c297a6565ff","sha256":"50aa25abdbe92f6bdd7afd6e473f8e21e7b256df9e06bdf83daaaaf122405a0f","sha512":"121cb4c7e65318fb69948368a5e7aab368ba69d6adf4c6cb60b7e2958dd3296ec847bb8e6802679bb5fd1590580ee788c33eca450a73879c04f4d41174c364b7","ssdeep":"","tlshash":"a361119f39fe007945fb727655af430631329017080acb067e7cdaa12fa4ea529b5fe1","size":3229,"data":"","first_seen":"2026-09-29T03:07:50.735878Z","last_seen":"2026-09-29T03:10:36.383173Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consultauthority.sbs/","fqdn":"consultauthority.sbs","domain":"consultauthority.sbs","tld":"sbs"},"ip":{"addr":"172.67.209.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"848974c582c3238a1ff9ebe1b66f1226","sha1":"860773b5882f53204b698032bb768dfaac274b98","sha256":"a9142dd9d77c50c016f77801e4ff67510be3cb1a274f40f502bd92087a49139b","sha512":"ca65b34ebb7f1c549b22cd837b5d22d0510302dcce41c5304415fc65310c59ce31b43a2f3f2859751c336be5a520f6ce4d2d79b1e54954e41e705e129ff94996","ssdeep":"","tlshash":"d721fc4d0db281f115b7658a2bbfb184712b14133081c9883f9de3485fa1d4faba1fc9","size":1140,"data":"","first_seen":"2026-09-29T03:07:50.737571Z","last_seen":"2026-09-29T03:10:36.384142Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"consultauthority.sbs/","fqdn":"consultauthority.sbs","domain":"consultauthority.sbs","tld":"sbs"},"ip":{"addr":"172.67.209.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-29T03:07:08.190Z","timestamp":1790651228190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"consultauthority.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 18:25:13 GMT","end":"Fri, 25 Dec 2026 18:25:12 GMT"},"fingerprint":{"sha1":"52:F3:91:67:8A:34:23:67:A3:C4:52:4A:9A:23:79:94:C3:4E:CC:31","sha256":"84:A4:CC:5D:1F:70:3C:F8:9D:CD:08:13:AC:FF:05:AA:93:71:CD:4E:7B:22:5F:44:08:66:AA:B3:A0:49:DB:E3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: consultauthority.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 03:07:08 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9b61%2BqFQ%2Fj%2FOFKy%2BVmm%2Be584HuYceOmSMKtyd8PHcfPWwoDAjGPUS7GEtae5ahvRwKjFsaC1ENNzO664nQX8CUtY669l1d8foJbCzAeQdgG7zwACcGgWzIy33sAG%2Fxjwxs2G%2Fdmiuw%3D%3D\"}]}\r\nlast-modified: Sat, 26 Sep 2026 20:08:04 GMT\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a427c6a11b57569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":566534,"size_decoded":409408,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40658)","md5":"48cea44faf4cdc53e8f0bfcaa777261c","sha1":"ca208ffe571eafa97cabbcbb94425d0696ce8ed9","sha256":"f01f88028804e6e8f4e612466a509363c925e300d74d9461676a270ef0b6eb1b","sha512":"311b9f1e7dad6dd474338db52c27649b3b4852f88b8be6bda1190146b129fe2b08a8565a9c6b710aea3cd8c2c732d00ed3a59264c2388991a7c7f18ad21c3cc7","ssdeep":"12288:UoQKrrScOd5qnlNUtMsB6wxEZAcnu1sdJIkrTl:fwtdsnlNUtMK6wxmu1pkHl","tlshash":"b8c42202ada2297b07138255725dfd4a86a0d413d687a4e0d0fed2e49fc7e74a733b4e","first_seen":"2026-09-29T03:07:50.732706Z","last_seen":"2026-09-29T03:07:50.732706Z","times_seen":1,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":117,"connect":23,"send":0,"wait":86,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"consultauthority.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"consultauthority.sbs/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"consultauthority.sbs","domain":"consultauthority.sbs","tld":"sbs"},"ip":{"addr":"172.67.209.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://consultauthority.sbs/","date":"2026-09-29T03:07:08.721Z","timestamp":1790651228721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"consultauthority.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 18:25:13 GMT","end":"Fri, 25 Dec 2026 18:25:12 GMT"},"fingerprint":{"sha1":"52:F3:91:67:8A:34:23:67:A3:C4:52:4A:9A:23:79:94:C3:4E:CC:31","sha256":"84:A4:CC:5D:1F:70:3C:F8:9D:CD:08:13:AC:FF:05:AA:93:71:CD:4E:7B:22:5F:44:08:66:AA:B3:A0:49:DB:E3"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: consultauthority.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://consultauthority.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 01 Oct 2026 03:07:08 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fDznE1W0oAOECcUHofwTmzDNd8HcVkkIXgI70QJ3yJaFHlQjbBuJGO4PX1KwlfDrxvozWwBbiK2Ww5Im38AySejLaZigZisHytonLsC19AER64YwKf5Q8TQrmZjyoj53m9zijN41Qw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Tue, 29 Sep 2026 03:07:08 GMT\r\nserver: cloudflare\r\ncf-ray: a427c6a38b7c569a-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1294,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-14T16:37:13.022171Z","times_seen":454764,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"consultauthority.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}