{"report_id":"da69ad88-3928-4006-9b07-46c728d0c89b","version":0,"status":"done","tags":[],"date":"2026-08-12T15:00:45Z","url":{"schema":"http","addr":"my-rabby.com/","fqdn":"my-rabby.com","domain":"my-rabby.com","tld":"com"},"ip":{"addr":"2.27.14.245","port":0,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"http","addr":"my-rabby.com/","fqdn":"my-rabby.com","domain":"my-rabby.com","tld":"com"},"title":"404 - Page Not Found","dom":{"size":901,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (901), with no line terminators","md5":"4c0f92b8128ecf09814949837c91b9a9","sha1":"0ff168154fb3f3b9eb979a904e2334109f74c9be","sha256":"f05873b6b379d08f5bec9c1e4d8879eb21d90699f3d9d4d7a429144989efe70a","sha512":"163b4a11cfca142a3ce930cd78600b4b64a3b2154db64a505ed20e96f81824a31ef1af2c473c8895e97959fb01cce0ef5b0dc09f24df543672265a685a16bf6b","ssdeep":"","tlshash":"af11842b8381201cfa2390b8b6a0326930445c079563cea4ea8af769c4d616b27a230d","dom_hash":"domhash7d4c5416d4b663491a2db14326bebbb7","first_seen":"2026-08-12T15:00:34.483802Z","last_seen":"2026-08-12T15:00:45.747377Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"my-rabby.com/","fqdn":"my-rabby.com","domain":"my-rabby.com","tld":"com"},"ip":{"addr":"2.27.14.245","port":0,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-16T15:00:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"my-rabby.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"my-rabby.com","ip":{"addr":"2.27.14.245","port":80,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-08-09","domain_rank":0,"first_seen":"2026-08-12T15:00:31.115448Z","last_seen":"2026-08-12T15:00:31.115448Z","alert_count":3,"request_count":3,"received_data":3508,"sent_data":1290,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"my-rabby.com/","fqdn":"my-rabby.com","domain":"my-rabby.com","tld":"com"},"ip":{"addr":"2.27.14.245","port":80,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-12T15:00:19.066Z","timestamp":1786546819066,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: my-rabby.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nserver: nginx\r\ndate: Wed, 12 Aug 2026 15:00:19 GMT\r\ncontent-type: text/html; charset=utf-8\r\ntransfer-encoding: chunked\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":916,"size_decoded":740,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (916), with no line terminators","md5":"164c855a3afce1ad274b461b08ddb358","sha1":"e93d7fc3f3af2db7a29e5dcbea4dc4f97a447401","sha256":"38a6c8c71d600c7e49997900243e808f032bfc05842925820b24688d5690d1d9","sha512":"ca470a9262639e5379e38f4fbd9ce0f252e5ca39cc4078ecf1cf20e84d8239b7f488c28db15fb8725d05b0af95bad5ec1a2b931301f114a83efb78b94d802f0e","ssdeep":"","tlshash":"f011886b4381201cfa2360f8b5a0326530455d079563cfa4eac5f769c4d616b276330d","first_seen":"2026-08-12T15:00:34.485155Z","last_seen":"2026-08-12T15:00:45.75022Z","times_seen":2,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":123,"connect":45,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"my-rabby.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"my-rabby.com/favicon.ico","fqdn":"my-rabby.com","domain":"my-rabby.com","tld":"com"},"ip":{"addr":"2.27.14.245","port":80,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://my-rabby.com/","date":"2026-08-12T15:00:19.356Z","timestamp":1786546819356,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: my-rabby.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://my-rabby.com/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx\r\ndate: Wed, 12 Aug 2026 15:00:19 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1101\r\nlast-modified: Mon, 10 Aug 2026 04:46:56 GMT\r\netag: \"6a7957c0-44d\"\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1101,"size_decoded":1312,"mime_type":"image/x-icon","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"cce219041f3c1327f7f3ced572bc8a2e","sha1":"8d03a2130f770e2e7d26557aa872a2183ac54346","sha256":"fe1bfe73c2d61a22475c7a4c25d04cfb8af7a5a0930710a960606c679cca51ec","sha512":"8c9eda1006b21bae4d98311fa1579a9888b1b907c8742025c31bdb56131ace7fc2f2516932cb5d32c77ebf7e023f35007c060dfeeb7c0016ad6e1675e3e3fb08","ssdeep":"","tlshash":"f311b60f1bb112b8d617863aa552bd109630a6b05e2a5b24d33a7ab46ca3232d3593c4","first_seen":"2025-04-01T23:45:44.138331Z","last_seen":"2026-08-12T15:39:00.359697Z","times_seen":36,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"my-rabby.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"my-rabby.com/","fqdn":"my-rabby.com","domain":"my-rabby.com","tld":"com"},"ip":{"addr":"2.27.14.245","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-12T15:00:18.750Z","timestamp":1786546818750,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my-rabby.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 04:17:15 GMT","end":"Sun, 08 Nov 2026 04:17:14 GMT"},"fingerprint":{"sha1":"C9:A8:91:03:97:A7:6C:72:35:3E:25:B3:95:F7:0C:7F:7D:F2:7C:92","sha256":"0C:21:27:57:60:58:6D:37:31:50:20:CD:8D:E0:AB:02:CC:98:8E:83:8F:72:89:A7:29:C8:04:27:D5:59:E6:9F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: my-rabby.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 12 Aug 2026 15:00:18 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":916,"size_decoded":764,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (916), with no line terminators","md5":"164c855a3afce1ad274b461b08ddb358","sha1":"e93d7fc3f3af2db7a29e5dcbea4dc4f97a447401","sha256":"38a6c8c71d600c7e49997900243e808f032bfc05842925820b24688d5690d1d9","sha512":"ca470a9262639e5379e38f4fbd9ce0f252e5ca39cc4078ecf1cf20e84d8239b7f488c28db15fb8725d05b0af95bad5ec1a2b931301f114a83efb78b94d802f0e","ssdeep":"","tlshash":"f011886b4381201cfa2360f8b5a0326530455d079563cfa4eac5f769c4d616b276330d","first_seen":"2026-08-12T15:00:34.485155Z","last_seen":"2026-08-12T15:00:45.75022Z","times_seen":2,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":112,"connect":18,"send":0,"wait":31,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"my-rabby.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}