{"report_id":"df630057-a824-4fa7-8e99-298c2dab28a8","version":6,"status":"done","tags":[],"date":"2025-12-18T16:10:41Z","url":{"schema":"https","addr":"www-bonkplus.top/","fqdn":"www-bonkplus.top","domain":"www-bonkplus.top","tld":"top"},"ip":{"addr":"144.31.244.50","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www-bonkplus.top/","fqdn":"www-bonkplus.top","domain":"www-bonkplus.top","tld":"top"},"title":"www-bonkplus.top/","dom":{"size":27920,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (26626)","md5":"4640692d375d5751749d8482ccfba46a","sha1":"c57d05874c1b0648d3562445ffd8afbe6b0944be","sha256":"55b98e4dd175eaf76ff2fc9187742a4c4ed653d1fd15cd0e1412dc43c0524125","sha512":"3262b801d7a06dcb7e304ccf863d6fdb63dc5f00280250ac98ce662b7c9b5d9bfa3b2ce7e51ef8c80afb2c2ea0b436f96df40ccec18e1dced34dccaef749995d","ssdeep":"384:BXqaRSz03qRoCh7A9FMEhe+UA+PTNNGfOxXk5es9J88baRE2ImcJKsZWUtW:sBT3BxXk5eqcPIm5sZWUtW","tlshash":"3dc2e897091ba3618c293e6b529a3b083004f2938f538bd4f1bf5de8d7af954588d36c","dom_hash":"domhashd69cd4d522b8b218f50ab017898eb3bb","first_seen":"2025-12-18T16:10:45.823292Z","last_seen":"2025-12-18T16:10:45.823292Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www-bonkplus.top/","fqdn":"www-bonkplus.top","domain":"www-bonkplus.top","tld":"top"},"ip":{"addr":"144.31.244.50","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-22T16:10:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13","referer":"www.bing.com","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-18","alert":"Sinkholed","trigger":"www-bonkplus.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"www-bonkplus.top","ip":{"addr":"144.31.244.50","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-12-16","domain_rank":0,"first_seen":"2025-12-18T16:10:41.899987Z","last_seen":"2025-12-18T16:10:41.899987Z","alert_count":2,"request_count":2,"received_data":32041,"sent_data":1030,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www-bonkplus.top/","fqdn":"www-bonkplus.top","domain":"www-bonkplus.top","tld":"top"},"ip":{"addr":"144.31.244.50","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf224dd4ba11556d58550222386bbf78","sha1":"ef149ace86d864ae8a2e9a9ee7bda17261933b7c","sha256":"8f1257781ccf17f2318ae588bc8792c564272a64a0b663788d732d586d4b61ce","sha512":"a4a3e653ee2e3ce38c3263f5fc351b0390279f3f65a23847979407622ac7249700cab456f8feb675afbe2807133a4e1345b3bc25a7cce50798a38ea7ce886843","ssdeep":"","tlshash":"3cb012ff301c8530e3cf0817a45263ca3871010e3805b8014c8c05024070f4474bbd80","size":102,"data":"","first_seen":"2023-03-07T12:08:05Z","last_seen":"2026-06-04T04:45:48.690682Z","times_seen":362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www-bonkplus.top/","fqdn":"www-bonkplus.top","domain":"www-bonkplus.top","tld":"top"},"ip":{"addr":"144.31.244.50","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-18T16:10:20.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www-bonkplus.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 19:42:31 GMT","end":"Mon, 16 Mar 2026 19:42:30 GMT"},"fingerprint":{"sha1":"90:67:B1:E2:E2:37:A8:3F:56:40:9D:6E:01:18:93:7C:4B:A0:E0:C0","sha256":"8B:E6:D9:69:6F:ED:7D:EA:E5:F5:03:EC:F8:63:92:3C:7E:D7:3E:FE:59:45:BA:C1:0E:7D:84:28:C6:E4:BA:6C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www-bonkplus.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Thu, 18 Dec 2025 16:10:20 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 10290\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27939,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (26628)","md5":"7c5abe0163cd5d05919b3da44b682c99","sha1":"44bece316e08d498c9c75fdfd070b372d8f24b2d","sha256":"5840d23b4b4a06536fe7d77b207778741d19d243d0ea724ddd493a041cd02475","sha512":"32e36bf1008026dace4750f5de59c5136d59263d98d6f43b6a7d4d0fe51df17276e35be41d7976727e786935a75982070dab06519c7fae56d195d017b10962a2","ssdeep":"384:CXqaRSz03qRoCh7A9FMEhe+UA+PTNNGfOxXk5es9J88baRE2ImcJKsZWUtE:9BT3BxXk5eqcPIm5sZWUtE","tlshash":"ddc2e997091ba3618d293e6b529a3b083000f2938f5387d4f1bf5de8d7af954588d36c","first_seen":"2023-04-08T14:46:05Z","last_seen":"2026-08-01T18:14:18.650097Z","times_seen":413,"resource_available":true,"data":null}},"time_used":855,"timings":{"blocked":399,"dns":53,"connect":46,"send":0,"wait":52,"receive":0,"ssl":302},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-18","alert":"Sinkholed","trigger":"www-bonkplus.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www-bonkplus.top/favicon.ico","fqdn":"www-bonkplus.top","domain":"www-bonkplus.top","tld":"top"},"ip":{"addr":"144.31.244.50","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www-bonkplus.top/","date":"2025-12-18T16:10:21.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www-bonkplus.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 19:42:31 GMT","end":"Mon, 16 Mar 2026 19:42:30 GMT"},"fingerprint":{"sha1":"90:67:B1:E2:E2:37:A8:3F:56:40:9D:6E:01:18:93:7C:4B:A0:E0:C0","sha256":"8B:E6:D9:69:6F:ED:7D:EA:E5:F5:03:EC:F8:63:92:3C:7E:D7:3E:FE:59:45:BA:C1:0E:7D:84:28:C6:E4:BA:6C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www-bonkplus.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-bonkplus.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Thu, 18 Dec 2025 16:10:21 GMT\r\nContent-Type: image/x-icon\r\nLast-Modified: Tue, 18 Mar 2025 21:03:27 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"67d9df9f-e36\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3638,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32x32","md5":"a1138dac351f08477af1d69e3ee0fa94","sha1":"2a35e38d5eede2f20c07d30d2d1db1ff8a232236","sha256":"e4fdf2026eedb6311286bf746080e663897c76d8073952ef82494b194170b84e","sha512":"2da35b469ce1fee9a4d886b93ed1d7c09a922353cbf3a7ca7c58172ac19d7e8063a188e1d628ac924dac1c9842e53fe5fd062095f4fafc90a51db3443b168a6a","ssdeep":"","tlshash":"bb717f443b179a73c0e88f30ce8e3b980aedb250a450618b23a9487cf804603ef75904","first_seen":"2025-09-10T14:09:42.64254Z","last_seen":"2026-05-04T12:15:36.712627Z","times_seen":9,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-18","alert":"Sinkholed","trigger":"www-bonkplus.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}