{"report_id":"da66a275-5b7b-4e86-b1c0-537846d981dd","version":0,"status":"done","tags":["amazon","phishing"],"date":"2026-07-29T12:55:11Z","url":{"schema":"http","addr":"rkydkp.shop","fqdn":"rkydkp.shop","domain":"rkydkp.shop","tld":"shop"},"ip":{"addr":"37.221.66.157","port":0,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"final":{"url":{"schema":"https","addr":"rkydkp.shop/#/","fqdn":"rkydkp.shop","domain":"rkydkp.shop","tld":"shop"},"title":"Amazon Sign-In","dom":{"size":4301,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2803)","md5":"7fa410a8abfc4336081ad91a7756c9d1","sha1":"7e323f57c373e52e9ad6c2ab2d8513f535829fdc","sha256":"ada00c0311b8b0ca595abdbc33cc75c3137e16fcae92d805476d0daa044c31ca","sha512":"8e2bd22a4fa8eb2c68caa4bf4626aa8da9bdfc8633f007f6fc92b9e6c05a4807a92e606f2f30e2f520694e197103417b36c84c635b7fdc9a1b67326b13a9a441","ssdeep":"96:ynyKous9IDYGpuVKNQiegSWQwQtsQLQwQ9/QqMHQ4Q2yQuQfQsQbhQ5ZQ2QrQZQw:yjKIDYGpuVKNHegSWpEs+HQ/HM15yT0F","tlshash":"0191cd1631000c275533e7d1fec1af0432b6a31bc60e8ed153f98266cedbeb1a96b665","dom_hash":"domhashd7ac6e248f9f8890fde3d77b2c83c6e4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rkydkp.shop","fqdn":"rkydkp.shop","domain":"rkydkp.shop","tld":"shop"},"ip":{"addr":"37.221.66.157","port":0,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-02T12:55:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"rkydkp.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]},"summary":[{"fqdn":"rkydkp.shop","ip":{"addr":"37.221.66.157","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-29T12:52:37.002032Z","last_seen":"2026-07-29T12:52:37.002032Z","alert_count":40,"request_count":8,"received_data":432515,"sent_data":3722,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"118.25.42.241","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-07-24T17:44:02.835081Z","alert_count":0,"request_count":1,"received_data":577,"sent_data":546,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"rkydkp.shop/assets/index-2hLddfSb.js","fqdn":"rkydkp.shop","domain":"rkydkp.shop","tld":"shop"},"ip":{"addr":"37.221.66.157","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"4605c37a6e8f364f866aacab38ed8ff5","sha1":"a474cd857d2d85c00140f4aee2f5ed3755119989","sha256":"9039a6e94fb6e65fa29cd1b760f032a55d7a13c195ce5f100fe11b4e5b89fb8f","sha512":"7cf65b33fdb41f80f31257a487c94d941af9d4675dbfa7d722530ba25e85ddf7654ecc9821a0271458e7a87036358d58fd0ad972e255ba6ca2e8f1d90afa3442","ssdeep":"6144:jfcEmwfyX2B9toucZkjaJ4m3wV4PlyYLv1C6oc0ibH5:jfto7JIV4PlyYLVoEl","tlshash":"935439d53282b07283f619f6407b0106b23a2955384e94d4f16ce8ef3dba55992bbf7c","size":300262,"data":"","first_seen":"2026-07-29T12:52:40.884415Z","last_seen":"2026-07-29T15:30:45.169054Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkydkp.shop/assets/pages-security-check.BydMZBUT.js","fqdn":"rkydkp.shop","domain":"rkydkp.shop","tld":"shop"},"ip":{"addr":"37.221.66.157","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3f18def626c3eee711e81ee0b91c9f0","sha1":"27a5ed5769630abad18fb43f1b361d47b235a8ce","sha256":"03a83d17ffab6a2ec98d36f8c348786a5408bf5822aefdc24f9748100aaaeb73","sha512":"fe44ba3627fe251f4d596b93bc90b88ce58f43acec04a4252a26bb227cebe81dfabe0f82967690e608df5e69ecd77eed7a5de03ac5f3f6176bc22bd3003af483","ssdeep":"192:SXvSolqnGekZorS/MV2nYU3QCVZ29FseTV6su7ASi8RMZ0xo2RC8W:orlqnGekZorS/M8njAsZVMVt6BzaZURA","tlshash":"c4222a8c71c5be3923720661a1532222b13d2b429845009156fecd043e78e7ab7effdd","size":10455,"data":"","first_seen":"2026-07-29T12:52:40.896206Z","last_seen":"2026-07-29T15:30:45.169815Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkydkp.shop/assets/_plugin-vue_export-helper.D5jX3FIs.js","fqdn":"rkydkp.shop","domain":"rkydkp.shop","tld":"shop"},"ip":{"addr":"37.221.66.157","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb41dad265829a48dc76e5cd7bc2c4a9","sha1":"a92fc3e353329d0783b61a757c6f669157f07c44","sha256":"2a1686c88b1042f0afa3ee4f2b6e0d9b0131f20efcc1916f6fdeae0a30ca90ea","sha512":"7ad7d85a9bddefdc32cf05f1d5b2c575c07b9a12d8f807d057cd09503f9abc545632aaaca9a85f345854c6882e3911d1161c017ee2039120dc4b3f6cb7b761b4","ssdeep":"","tlshash":"3f41e2dd30c66171a7f505be9337a104f1380b657c6c9180a21628da3db62af937fe9e","size":2020,"data":"","first_seen":"2026-07-29T12:52:40.898203Z","last_seen":"2026-07-29T15:30:45.17066Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rkydkp.shop/","fqdn":"rkydkp.shop","domain":"rkydkp.shop","tld":"shop"},"ip":{"addr":"37.221.66.157","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-29T12:54:34.170Z","timestamp":1785329674170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rkydkp.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 21 Jul 2026 10:00:00 GMT","end":"Mon, 19 Oct 2026 09:59:59 GMT"},"fingerprint":{"sha1":"B9:91:EF:B6:D5:87:20:08:23:03:CA:98:CB:0F:7B:45:E8:36:EF:05","sha256":"DA:CA:AF:AE:DD:B3:AF:8B:F0:85:D7:B4:E5:AE:E6:84:21:FD:81:4E:14:DC:2A:DF:5F:6F:BD:C7:38:17:9A:A5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rkydkp.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 12:54:34 GMT\r\ncontent-type: text/html\r\ncontent-length: 926\r\nlast-modified: Tue, 21 Jul 2026 11:02:53 GMT\r\netag: \"6a5f51dd-39e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":926,"size_decoded":1362,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"ff173ac86022f96292f7b5a31f2e142b","sha1":"c7a5c5d3890cddf3a607f764950f1111936a6497","sha256":"4e2eb70ce5ea2a11ecd989c612d3461e70341e468a16c12041e4f13cde6a626a","sha512":"2662070ad8b6707c42622a1e810d377d2daafe32292975fb2b28ca986621b19e0fdb2319712384ee933ee73746cc43b84433a54273ab921bfa4aa757814707c3","ssdeep":"","tlshash":"c211004790408808e2604b286ec1f4141591da56879daea874ee607eced5fd1cdfb7b8","first_seen":"2026-07-29T12:52:40.891524Z","last_seen":"2026-07-29T15:30:45.165975Z","times_seen":6,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":6,"connect":53,"send":0,"wait":53,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"rkydkp.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"rkydkp.shop/assets/uni.ddee3048.css","fqdn":"rkydkp.shop","domain":"rkydkp.shop","tld":"shop"},"ip":{"addr":"37.221.66.157","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rkydkp.shop/","date":"2026-07-29T12:54:34.615Z","timestamp":1785329674615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rkydkp.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 21 Jul 2026 10:00:00 GMT","end":"Mon, 19 Oct 2026 09:59:59 GMT"},"fingerprint":{"sha1":"B9:91:EF:B6:D5:87:20:08:23:03:CA:98:CB:0F:7B:45:E8:36:EF:05","sha256":"DA:CA:AF:AE:DD:B3:AF:8B:F0:85:D7:B4:E5:AE:E6:84:21:FD:81:4E:14:DC:2A:DF:5F:6F:BD:C7:38:17:9A:A5"}}},"request":{"raw":"GET /assets/uni.ddee3048.css HTTP/1.1\r\nHost: rkydkp.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkydkp.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 12:54:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Jul 2026 11:03:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f51f2-1ff2\"\r\nexpires: Thu, 30 Jul 2026 00:54:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8178,"size_decoded":2463,"mime_type":"text/css","magic":"ASCII text, with very long lines (8177)","md5":"93fe31c3a5df48246ce80f37f9488840","sha1":"7cc6cbbc7be7c130190c11cfbaa4cbb3903ee9e2","sha256":"ddee30489add78b0681012c2c2b41beb8a7a49fa5b6285f0649120dd5e015fd2","sha512":"d8356219ae25773099929cc77f1b2b16f3a6aa9ea71eca23795c28939236dffb83907f338afd842e8b56cc320e73b0d53ea8ad13a9de41ceae44d9a3f62d283e","ssdeep":"192:Ujj8LGJ0CQLnWL9/CWh57nYV2UNXVA8MED/Ph/:UXpmLWLAg8bB/","tlshash":"7ef15371d440132eb517cf2e12e2db4f312245b2dd123f28bf7624b44fa92c6693a786","first_seen":"2026-07-29T12:52:40.901968Z","last_seen":"2026-07-29T15:30:45.168419Z","times_seen":6,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"rkydkp.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"rkydkp.shop/assets/index-CRa_ZCTX.css","fqdn":"rkydkp.shop","domain":"rkydkp.shop","tld":"shop"},"ip":{"addr":"37.221.66.157","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rkydkp.shop/","date":"2026-07-29T12:54:34.618Z","timestamp":1785329674618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rkydkp.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 21 Jul 2026 10:00:00 GMT","end":"Mon, 19 Oct 2026 09:59:59 GMT"},"fingerprint":{"sha1":"B9:91:EF:B6:D5:87:20:08:23:03:CA:98:CB:0F:7B:45:E8:36:EF:05","sha256":"DA:CA:AF:AE:DD:B3:AF:8B:F0:85:D7:B4:E5:AE:E6:84:21:FD:81:4E:14:DC:2A:DF:5F:6F:BD:C7:38:17:9A:A5"}}},"request":{"raw":"GET /assets/index-CRa_ZCTX.css HTTP/1.1\r\nHost: rkydkp.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rkydkp.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 12:54:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Jul 2026 11:03:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f51e9-65c3\"\r\nexpires: Thu, 30 Jul 2026 00:54:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26051,"size_decoded":4863,"mime_type":"text/css","magic":"ASCII text, with very long lines (26050)","md5":"1e27eac1347385749093af3e2d065743","sha1":"7e613bde9bdb86578fc423c80784dd43ac776394","sha256":"2887f88bb2140d52e64438eb5894fae1a68a597e94f09a9f40a5a781790b538a","sha512":"80b525660066b37dee6d4dfc6c9229ad92c2a677959a19b8576dc702ab254d07b01f0b4d902871de9f266e9712b2b0f65e59ee30dd17326b221705afb6ee333a","ssdeep":"384:FzDzFzayIK5jBzQxtGkH9213E9z4TYDC2l:lDpOIW","tlshash":"d0c2ddb2aa503c17e27e8b33ec911668350460a0d36313f2b7db5f9a8d0965f46673ce","first_seen":"2026-07-29T12:52:40.893833Z","last_seen":"2026-07-29T15:30:45.166777Z","times_seen":6,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"rkydkp.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"rkydkp.shop/assets/pages-security-check.BydMZBUT.js","fqdn":"rkydkp.shop","domain":"rkydkp.shop","tld":"shop"},"ip":{"addr":"37.221.66.157","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rkydkp.shop/","date":"2026-07-29T12:54:34.934Z","timestamp":1785329674934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rkydkp.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 21 Jul 2026 10:00:00 GMT","end":"Mon, 19 Oct 2026 09:59:59 GMT"},"fingerprint":{"sha1":"B9:91:EF:B6:D5:87:20:08:23:03:CA:98:CB:0F:7B:45:E8:36:EF:05","sha256":"DA:CA:AF:AE:DD:B3:AF:8B:F0:85:D7:B4:E5:AE:E6:84:21:FD:81:4E:14:DC:2A:DF:5F:6F:BD:C7:38:17:9A:A5"}}},"request":{"raw":"GET /assets/pages-security-check.BydMZBUT.js HTTP/1.1\r\nHost: rkydkp.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rkydkp.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 12:54:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Jul 2026 11:03:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f51ef-28d7\"\r\nexpires: Thu, 30 Jul 2026 00:54:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10455,"size_decoded":4701,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10434)","md5":"e3f18def626c3eee711e81ee0b91c9f0","sha1":"27a5ed5769630abad18fb43f1b361d47b235a8ce","sha256":"03a83d17ffab6a2ec98d36f8c348786a5408bf5822aefdc24f9748100aaaeb73","sha512":"fe44ba3627fe251f4d596b93bc90b88ce58f43acec04a4252a26bb227cebe81dfabe0f82967690e608df5e69ecd77eed7a5de03ac5f3f6176bc22bd3003af483","ssdeep":"192:SXvSolqnGekZorS/MV2nYU3QCVZ29FseTV6su7ASi8RMZ0xo2RC8W:orlqnGekZorS/M8njAsZVMVt6BzaZURA","tlshash":"c4222a8c71c5be3923720661a1532222b13d2b429845009156fecd043e78e7ab7effdd","first_seen":"2026-07-29T12:52:40.896206Z","last_seen":"2026-07-29T15:30:45.169815Z","times_seen":6,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"rkydkp.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"rkydkp.shop/assets/_plugin-vue_export-helper.D5jX3FIs.js","fqdn":"rkydkp.shop","domain":"rkydkp.shop","tld":"shop"},"ip":{"addr":"37.221.66.157","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rkydkp.shop/","date":"2026-07-29T12:54:34.936Z","timestamp":1785329674936,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rkydkp.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 21 Jul 2026 10:00:00 GMT","end":"Mon, 19 Oct 2026 09:59:59 GMT"},"fingerprint":{"sha1":"B9:91:EF:B6:D5:87:20:08:23:03:CA:98:CB:0F:7B:45:E8:36:EF:05","sha256":"DA:CA:AF:AE:DD:B3:AF:8B:F0:85:D7:B4:E5:AE:E6:84:21:FD:81:4E:14:DC:2A:DF:5F:6F:BD:C7:38:17:9A:A5"}}},"request":{"raw":"GET /assets/_plugin-vue_export-helper.D5jX3FIs.js HTTP/1.1\r\nHost: rkydkp.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rkydkp.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 12:54:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Jul 2026 11:03:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f51f3-7e4\"\r\nexpires: Thu, 30 Jul 2026 00:54:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2020,"size_decoded":1434,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2019)","md5":"bb41dad265829a48dc76e5cd7bc2c4a9","sha1":"a92fc3e353329d0783b61a757c6f669157f07c44","sha256":"2a1686c88b1042f0afa3ee4f2b6e0d9b0131f20efcc1916f6fdeae0a30ca90ea","sha512":"7ad7d85a9bddefdc32cf05f1d5b2c575c07b9a12d8f807d057cd09503f9abc545632aaaca9a85f345854c6882e3911d1161c017ee2039120dc4b3f6cb7b761b4","ssdeep":"","tlshash":"3f41e2dd30c66171a7f505be9337a104f1380b657c6c9180a21628da3db62af937fe9e","first_seen":"2026-07-29T12:52:40.898203Z","last_seen":"2026-07-29T15:30:45.17066Z","times_seen":6,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"rkydkp.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"rkydkp.shop/static/r_f7a2c8.png","fqdn":"rkydkp.shop","domain":"rkydkp.shop","tld":"shop"},"ip":{"addr":"37.221.66.157","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rkydkp.shop/","date":"2026-07-29T12:54:34.997Z","timestamp":1785329674997,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rkydkp.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 21 Jul 2026 10:00:00 GMT","end":"Mon, 19 Oct 2026 09:59:59 GMT"},"fingerprint":{"sha1":"B9:91:EF:B6:D5:87:20:08:23:03:CA:98:CB:0F:7B:45:E8:36:EF:05","sha256":"DA:CA:AF:AE:DD:B3:AF:8B:F0:85:D7:B4:E5:AE:E6:84:21:FD:81:4E:14:DC:2A:DF:5F:6F:BD:C7:38:17:9A:A5"}}},"request":{"raw":"GET /static/r_f7a2c8.png HTTP/1.1\r\nHost: rkydkp.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rkydkp.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 12:54:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 21 Jul 2026 11:03:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f51f4-1226e\"\r\nexpires: Fri, 28 Aug 2026 12:54:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74350,"size_decoded":73324,"mime_type":"image/png","magic":"PNG image data, 720 x 589, 8-bit/color RGBA, non-interlaced","md5":"4dd91911b613e8a47eefa9744c0eea7c","sha1":"3fdb6505a6674b07a69e7f200f0ffe69c51a8523","sha256":"309d3df30f5aaf77d8c6ed72ce863636634b06192254bc40b0cbed046f0c6020","sha512":"ecfc90f19961e4c2307e9074fd67236bc5c643c6784574bb74533198cf1914255a541b1b6af2fbb2eb0d51fc5f4a15e021e6672afdf6ed1d5470871d7a521ec9","ssdeep":"1536:uPYpDfeCwwCijjJ2UrjO+GEhPIYpoFjpotmNk1ok8Tm1mNN8:uOfeCNrjjsoORjEoppImNk1WmAb8","tlshash":"f0730203db018c5fd6a48d3a04d705897436eca748e6d2a47316fa470afad690cbbf8d","first_seen":"2026-06-24T12:29:43.693944Z","last_seen":"2026-07-29T15:30:45.164321Z","times_seen":31,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"rkydkp.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"rkydkp.shop/assets/index-2hLddfSb.js","fqdn":"rkydkp.shop","domain":"rkydkp.shop","tld":"shop"},"ip":{"addr":"37.221.66.157","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rkydkp.shop/","date":"2026-07-29T12:54:34.616Z","timestamp":1785329674616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rkydkp.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 21 Jul 2026 10:00:00 GMT","end":"Mon, 19 Oct 2026 09:59:59 GMT"},"fingerprint":{"sha1":"B9:91:EF:B6:D5:87:20:08:23:03:CA:98:CB:0F:7B:45:E8:36:EF:05","sha256":"DA:CA:AF:AE:DD:B3:AF:8B:F0:85:D7:B4:E5:AE:E6:84:21:FD:81:4E:14:DC:2A:DF:5F:6F:BD:C7:38:17:9A:A5"}}},"request":{"raw":"GET /assets/index-2hLddfSb.js HTTP/1.1\r\nHost: rkydkp.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rkydkp.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 12:54:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Jul 2026 11:03:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f51e7-494e6\"\r\nexpires: Thu, 30 Jul 2026 00:54:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":300262,"size_decoded":114906,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (50334)","md5":"4605c37a6e8f364f866aacab38ed8ff5","sha1":"a474cd857d2d85c00140f4aee2f5ed3755119989","sha256":"9039a6e94fb6e65fa29cd1b760f032a55d7a13c195ce5f100fe11b4e5b89fb8f","sha512":"7cf65b33fdb41f80f31257a487c94d941af9d4675dbfa7d722530ba25e85ddf7654ecc9821a0271458e7a87036358d58fd0ad972e255ba6ca2e8f1d90afa3442","ssdeep":"6144:jfcEmwfyX2B9toucZkjaJ4m3wV4PlyYLv1C6oc0ibH5:jfto7JIV4PlyYLVoEl","tlshash":"935439d53282b07283f619f6407b0106b23a2955384e94d4f16ce8ef3dba55992bbf7c","first_seen":"2026-07-29T12:52:40.884415Z","last_seen":"2026-07-29T15:30:45.169054Z","times_seen":6,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"rkydkp.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"rkydkp.shop/assets/security-check-BnXYpA1v.css","fqdn":"rkydkp.shop","domain":"rkydkp.shop","tld":"shop"},"ip":{"addr":"37.221.66.157","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rkydkp.shop/","date":"2026-07-29T12:54:34.939Z","timestamp":1785329674939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rkydkp.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 21 Jul 2026 10:00:00 GMT","end":"Mon, 19 Oct 2026 09:59:59 GMT"},"fingerprint":{"sha1":"B9:91:EF:B6:D5:87:20:08:23:03:CA:98:CB:0F:7B:45:E8:36:EF:05","sha256":"DA:CA:AF:AE:DD:B3:AF:8B:F0:85:D7:B4:E5:AE:E6:84:21:FD:81:4E:14:DC:2A:DF:5F:6F:BD:C7:38:17:9A:A5"}}},"request":{"raw":"GET /assets/security-check-BnXYpA1v.css HTTP/1.1\r\nHost: rkydkp.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rkydkp.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 12:54:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Jul 2026 11:03:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f51f1-183f\"\r\nexpires: Thu, 30 Jul 2026 00:54:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6207,"size_decoded":2471,"mime_type":"text/css","magic":"ASCII text, with very long lines (6206)","md5":"816b6efccc4302e3fef95a9c56cd0230","sha1":"72187930d5cdd14b65de8d5153481bd91e1002ae","sha256":"38ee4357790956b52cb35de25939866b6ec96a89a478baf5e23dc18c9569c97d","sha512":"f114b58929686f2b4ff66d19ddb21e7866531b557418179c2083503d811cbcd1f98ec4b1417f015022217dc814a5db2161ddd82a1739159e09aab7b57769e646","ssdeep":"192:2wh72RQazOCQ7wkHkAiggWt8SiqNhu5lFaeHAe2tgyBvolH96i+RRmrdirwa0:l8RQaO7wkHkAiggWt8SiqNhu5lFaegeT","tlshash":"09d1533d7b4c142adc37e7722e507648433ee3519b1a8f8d9a9bee20c987577246b348","first_seen":"2026-07-29T12:52:40.887444Z","last_seen":"2026-07-29T15:30:45.167617Z","times_seen":6,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"rkydkp.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"rkydkp.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"118.25.42.241","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rkydkp.shop/","date":"2026-07-29T12:54:38.059Z","timestamp":1785329678059,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkydkp.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 12:54:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Wed, 29 Jul 2026 15:54:39 GMT\r\ncache-control: max-age=10800\r\nset-cookie: __uni__uid=rBEQMWpp+A+t/wsaA5UYAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":577,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-07-29T15:40:36.816206Z","times_seen":18894,"resource_available":false,"data":null}},"time_used":1201,"timings":{"blocked":0,"dns":4,"connect":193,"send":0,"wait":588,"receive":0,"ssl":415},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}