{"report_id":"e08fbf79-3679-4b1e-8d29-18cd5f9debc9","version":0,"status":"done","tags":[],"date":"2026-07-14T19:37:48Z","url":{"schema":"https","addr":"palchknosp.com","fqdn":"palchknosp.com","domain":"palchknosp.com","tld":"com"},"ip":{"addr":"172.67.193.149","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"palchknosp.com/","fqdn":"palchknosp.com","domain":"palchknosp.com","tld":"com"},"title":"Palchknosp - Architectural Stone Solutions","dom":{"size":4625,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"5a9edb8de5af90f28fb2d5bff846dc80","sha1":"e7c048c6e72de9e301c6e5ae4be4ae75407166bb","sha256":"eafcf1808d1032890ef4e9d0f4da93c695065c9cae5f87a01e15d233e496e113","sha512":"da00fabb86c53daa07c587e60e2913c0a18de113e32843fc1df370686a714191bd75d6181375700ecb0bb0860e13d0e50f13a981e112748e616ce9df086441f3","ssdeep":"96:ncq8Zyt4lf9hA6KR46lEeXG4ei8MD/zJz596FQzwcU5utKgMst:Ldt4bhA6KRVSe24ei8MD/zJzwb5/Zst","tlshash":"bd91602736a30623758b90997be353567b24c117ca0bc9687a4d23c4cfd58c6c5bb30e","dom_hash":"domhash370ae14cc6c89d9104c4260ecb618344","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"palchknosp.com","fqdn":"palchknosp.com","domain":"palchknosp.com","tld":"com"},"ip":{"addr":"172.67.193.149","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-18T19:37:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"palchknosp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"palchknosp.com","ip":{"addr":"104.21.41.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-27","domain_rank":0,"first_seen":"2026-07-14T19:37:25.026096Z","last_seen":"2026-07-14T19:37:25.026096Z","alert_count":3,"request_count":3,"received_data":13042,"sent_data":1462,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"palchknosp.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"palchknosp.com","domain":"palchknosp.com","tld":"com"},"ip":{"addr":"104.21.41.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-14T22:19:09.163164Z","times_seen":396101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"palchknosp.com/","fqdn":"palchknosp.com","domain":"palchknosp.com","tld":"com"},"ip":{"addr":"104.21.41.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe72a6949ce7f91f156c8a415abe28fa","sha1":"4e7d5743c3df860af3d42f2c390160cff20f4b5c","sha256":"0d9c20d7a53f20d71461e8c1c483f39f242c3e4763ee8fa6fbc8e69521592daa","sha512":"a12c9cd987686dcc413ea01dd59d4ad479abca42eb1c21f8d9ac8aa4db774104cf35e66c18dd7aac0abfe896a85e0f9f0e9ece11c1421b31ff96164f57a678a2","ssdeep":"","tlshash":"71014573370b06211a9f625b66dd63b43438c0422e45e808b84c124a8ff0b8551fbb9a","size":833,"data":"","first_seen":"2026-07-01T06:06:05.95351Z","last_seen":"2026-07-14T19:58:14.372122Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"palchknosp.com/","fqdn":"palchknosp.com","domain":"palchknosp.com","tld":"com"},"ip":{"addr":"104.21.41.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-14T19:37:22.016Z","timestamp":1784057842016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"palchknosp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:00:06 GMT","end":"Wed, 23 Sep 2026 02:00:05 GMT"},"fingerprint":{"sha1":"F1:76:DE:6E:C3:6A:8E:C7:A5:71:57:95:76:AB:CB:7A:C3:ED:EA:0F","sha256":"94:66:EE:37:80:7A:CB:DD:E6:83:36:35:3B:22:14:D9:DA:CE:59:DE:BD:3F:4A:4F:A2:CF:79:69:F1:5D:22:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: palchknosp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 19:37:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-disposition: inline; filename=index.html\r\nlast-modified: Wed, 24 Jun 2026 08:18:42 GMT\r\ncache-control: no-cache\r\nvary: accept-encoding\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L35sXPgdaZMXTE9M40yCcCCpoEGDdXns6hYefGSVu7oplCPDKdhdHjr5tpagVoWNbD8SdFZoR%2BElMrtUYtoogoPbPFOXFzn1TnBbDNoUisxL3peaHzgf%2BtzthXixc6lZYw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b2fb496cc90daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4849,"size_decoded":2613,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"72b68c0b7582b2107d009e06afb07efe","sha1":"a08d62a5e07396d69e6d9c9822c06c03f6ccc6de","sha256":"29c78f48b398f9ab51ec4eede3616c20760dcdf0081941d685b842532dab26a7","sha512":"8c68312cbc0b45863e3b1154fa30df4191ce8319d64f7bf755c9e03db37ab94004728c95ec510c88192b568d6ae7f0c5657c7e28b09156ed2ed045e1b5a67557","ssdeep":"96:r/uyt4lf9hA6KR46lEeXG4ei8MD/zJRsFQzwcU5ul0znZdsx:r3t4bhA6KRVSe24ei8MD/zJDwb5s0zZa","tlshash":"1aa1732336b20227255b90997be2539a7774c103ca0bd9687a9d23c8cfc5cd6c5bb30e","first_seen":"2026-07-14T19:36:11.268746Z","last_seen":"2026-07-14T19:37:49.518134Z","times_seen":2,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":102,"connect":21,"send":0,"wait":181,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"palchknosp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"palchknosp.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"palchknosp.com","domain":"palchknosp.com","tld":"com"},"ip":{"addr":"104.21.41.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://palchknosp.com/","date":"2026-07-14T19:37:22.612Z","timestamp":1784057842612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"palchknosp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:00:06 GMT","end":"Wed, 23 Sep 2026 02:00:05 GMT"},"fingerprint":{"sha1":"F1:76:DE:6E:C3:6A:8E:C7:A5:71:57:95:76:AB:CB:7A:C3:ED:EA:0F","sha256":"94:66:EE:37:80:7A:CB:DD:E6:83:36:35:3B:22:14:D9:DA:CE:59:DE:BD:3F:4A:4F:A2:CF:79:69:F1:5D:22:F5"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: palchknosp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://palchknosp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 16 Jul 2026 19:37:22 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ty6cJo2oW7G4lKOzc0ZYylK2lhNDdtK4vBxIV38fW2VBnDActNWFUEhIjEZzzJIW%2BZ6t6KH0G1RyOFKt72RsQWA%2FTUcpRTOeFWUsUq7vrmL5ww8CwjSnH7rKG7EAFr%2FmVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Tue, 14 Jul 2026 19:37:22 GMT\r\nserver: cloudflare\r\ncf-ray: a1b2fb4c5de70daa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1292,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-14T22:19:09.163164Z","times_seen":396101,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"palchknosp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"palchknosp.com/favicon.ico","fqdn":"palchknosp.com","domain":"palchknosp.com","tld":"com"},"ip":{"addr":"104.21.41.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://palchknosp.com/","date":"2026-07-14T19:37:22.644Z","timestamp":1784057842644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"palchknosp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:00:06 GMT","end":"Wed, 23 Sep 2026 02:00:05 GMT"},"fingerprint":{"sha1":"F1:76:DE:6E:C3:6A:8E:C7:A5:71:57:95:76:AB:CB:7A:C3:ED:EA:0F","sha256":"94:66:EE:37:80:7A:CB:DD:E6:83:36:35:3B:22:14:D9:DA:CE:59:DE:BD:3F:4A:4F:A2:CF:79:69:F1:5D:22:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: palchknosp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://palchknosp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 19:37:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-disposition: inline; filename=index.html\r\nlast-modified: Wed, 24 Jun 2026 08:18:42 GMT\r\ncache-control: max-age=14400\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IXAr645wuJsvjmtqQ3%2BWbrDgcMwLre07IjdbHtbtLwVY2vQrxffEVGQutemXksiSJX1%2BPXK2HiH6ldCGe6s1BHTHjx97EAeWOpI9xckarKJpeR87TTEDWNbT0QeubNHFHA%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b2fb4c8df00daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4849,"size_decoded":2627,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"38e2c10f69a98e9ca1123062918e0eae","sha1":"78a9df2062f02f91a82f83c1ace4da337f7699b6","sha256":"9a217967a4c6470032cb4eebb23da7efa257ee335fa36e2d128e204c3c39e091","sha512":"5f8ba30e2600ced36cc7b1970dc291aafff52c31045cf00ebb449d21c80545d07de49ba6a750a28331abb4d2ac8a936a0f0de3cf275190971f6150086b3f0db6","ssdeep":"96:r/uyt4lf9hA6KR46lEeXG4ei8MD/zJRsFQzwcU5ul0zZdsx:r3t4bhA6KRVSe24ei8MD/zJDwb5s0zZa","tlshash":"b0a1732736a30227355b90897be2539a7774c103ca0bd9687a9d22c8cfd5cd6c5bb30e","first_seen":"2026-07-14T19:37:49.520135Z","last_seen":"2026-07-14T19:37:49.520135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"palchknosp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}