{"report_id":"e3a7b133-756b-46f7-9bdd-823ffb9bb106","version":0,"status":"done","tags":[],"date":"2026-08-28T13:32:09Z","url":{"schema":"http","addr":"velodromefinance.at/","fqdn":"velodromefinance.at","domain":"velodromefinance.at","tld":"at"},"ip":{"addr":"217.60.195.241","port":0,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"velodromefinance.at/","fqdn":"velodromefinance.at","domain":"velodromefinance.at","tld":"at"},"title":"Velodrome Finance: Optimism's Native Liquidity Hub \u0026 DeFi Guide","dom":{"size":28929,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15135)","md5":"ca625e03e15363ff3c69ec1a75235bcd","sha1":"268db975608dbfd93455e98c404010a1be291c71","sha256":"802dba83ad89431ed3ef05a96213b6270e384096c95f0ad22d8adfcab7055f25","sha512":"a25eadaa090edb2e6277f98a45f97aeaa7a043cfd25d2eb86088098ed9045c79917c25013a196f10f135cb864272c4283163eecb208823124890443e379515db","ssdeep":"384:mIb4L4e7msgvtwo4UOjad97R1BoZWAXLsgqwA3lDUuhKd83thJhsDe0msiNvtwod:mXh2l3ToZk1l1ZCIlT","tlshash":"88d29607675007b60a620440359e13eb8b5cd46df3564ae9367ec2b82bc99e5c27bfce","dom_hash":"domhashb9729766f70cdf28664b36d18aaab3e5","first_seen":"2026-08-28T13:20:36.213515Z","last_seen":"2026-08-28T13:32:10.929446Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"velodromefinance.at/","fqdn":"velodromefinance.at","domain":"velodromefinance.at","tld":"at"},"ip":{"addr":"217.60.195.241","port":0,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T13:32:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"velodromefinance.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"velodromefinance.at","ip":{"addr":"217.60.195.241","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-28T13:20:32.437429Z","last_seen":"2026-08-28T13:20:32.437429Z","alert_count":2,"request_count":2,"received_data":29848,"sent_data":1017,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"velodromefinance.at/","fqdn":"velodromefinance.at","domain":"velodromefinance.at","tld":"at"},"ip":{"addr":"217.60.195.241","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3ab15ea211c7040eb0e08c4a3537e23a","sha1":"c8a2f2e85dec1d23ecf6b71c2edce9ff560cee6d","sha256":"dad59865c8024de08fd6584c53dac2ada4c432f2bc45d8001a68cb257a076954","sha512":"872eb1f4e883a473142f8dfe92177804abca892cca06e9cb21ba9a95628d956a9914045b8efefc20394f6292bbf0339ef4aae1f30183516465b51c4e32477467","ssdeep":"","tlshash":"83e07d5d30c2103912b354a623b7410a2122270bc44ecb12796fc4965f24c51064220c","size":314,"data":"","first_seen":"2026-08-28T13:20:36.224154Z","last_seen":"2026-08-28T13:32:10.932541Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"velodromefinance.at/","fqdn":"velodromefinance.at","domain":"velodromefinance.at","tld":"at"},"ip":{"addr":"217.60.195.241","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T13:31:42.993Z","timestamp":1787923902993,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"velodromefinance.at","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 09:53:10 GMT","end":"Tue, 03 Nov 2026 09:53:09 GMT"},"fingerprint":{"sha1":"96:CB:C0:39:3F:63:D7:E8:6F:E5:9F:B9:8B:74:27:A4:68:5A:70:AD","sha256":"5A:9F:A1:CB:B3:79:23:6A:5B:11:37:55:9A:13:CC:AB:08:ED:34:6F:D9:5A:7D:76:9A:24:72:C0:26:4A:37:33"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: velodromefinance.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.31.1.1\r\nDate: Fri, 28 Aug 2026 13:31:57 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Thu, 13 Aug 2026 18:36:52 GMT\r\nETag: W/\"6a7e0ec4-7092\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28818,"size_decoded":9088,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15107)","md5":"bff440b482fe2a1f1149ad7aab8889ef","sha1":"28818077cc10f5d2d8e98d1d2f23612bc26e4b0c","sha256":"47dda9c93587d05874a1792d734f6affe643a9454c0948a2db3dc92e032bbacc","sha512":"1605175b370c50e8cc18ae67c903b9993300b0ceefc62c8b262b002b8d21f6db840097e2491def4c62f10c6c8560d6f9808fa96d1af4e487a82ef8ce28f6eb77","ssdeep":"384:ZXhsL4e7msgvtwo40Ojad97R1BoZWAXLsgqwA3lDUuhKd83thJxsDe0msiNvtwop:ZCh2lTToZkdl1JCIlH","tlshash":"acd29707675007b60a620440359e13eb8b5cd46df3564ae93a7ec1782bc99e9c27bfce","first_seen":"2026-08-28T13:20:36.220618Z","last_seen":"2026-08-28T13:32:10.931059Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":6,"connect":28,"send":0,"wait":85,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"velodromefinance.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"velodromefinance.at/assets/favicon/favicon.png","fqdn":"velodromefinance.at","domain":"velodromefinance.at","tld":"at"},"ip":{"addr":"217.60.195.241","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://velodromefinance.at/","date":"2026-08-28T13:31:43.574Z","timestamp":1787923903574,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"velodromefinance.at","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 09:53:10 GMT","end":"Tue, 03 Nov 2026 09:53:09 GMT"},"fingerprint":{"sha1":"96:CB:C0:39:3F:63:D7:E8:6F:E5:9F:B9:8B:74:27:A4:68:5A:70:AD","sha256":"5A:9F:A1:CB:B3:79:23:6A:5B:11:37:55:9A:13:CC:AB:08:ED:34:6F:D9:5A:7D:76:9A:24:72:C0:26:4A:37:33"}}},"request":{"raw":"GET /assets/favicon/favicon.png HTTP/1.1\r\nHost: velodromefinance.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://velodromefinance.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.31.1.1\r\nDate: Fri, 28 Aug 2026 13:31:57 GMT\r\nContent-Type: image/png\r\nContent-Length: 530\r\nConnection: keep-alive\r\nLast-Modified: Tue, 04 Aug 2026 16:11:48 GMT\r\nETag: \"6a720f44-212\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":530,"size_decoded":774,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGB, non-interlaced","md5":"aeacd9b2c638a58757685cc4e149056d","sha1":"4e89f097e56565c20485a2818be8676f68087dda","sha256":"42a1386633b44a353e20486e41e7559a317395add7dc371e75cc2bb95d0d68c8","sha512":"b4edda35d92fbbb87662012f4ad36c2fbbeca22a53360abf9a9dd0a06a1678f1a5f49db8753f6e1941804aa3e98b5b62187a6be88adc1d8e66b2d9392cc51564","ssdeep":"","tlshash":"aff020e89f24b32ef9877784c2adc0c2b012204b0c806a5cb27785c0102dc5b9403cbe","first_seen":"2026-08-28T13:20:36.217692Z","last_seen":"2026-08-28T13:32:10.931814Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"velodromefinance.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}