{"report_id":"e5fe2b8d-2ba1-4b0f-a8bb-8a701a76e7ab","version":6,"status":"done","tags":[],"date":"2025-10-09T11:18:40Z","url":{"schema":"http","addr":"etrdstocks.net","fqdn":"etrdstocks.net","domain":"etrdstocks.net","tld":"net"},"ip":{"addr":"176.56.39.174","port":0,"asn":21859,"as":"ZEN-ECN","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"etrdstocks.net/","fqdn":"etrdstocks.net","domain":"etrdstocks.net","tld":"net"},"title":"502"},"submit":{"url":{"schema":"http","addr":"etrdstocks.net","fqdn":"etrdstocks.net","domain":"etrdstocks.net","tld":"net"},"ip":{"addr":"176.56.39.174","port":0,"asn":21859,"as":"ZEN-ECN","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-13T11:18:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"etrdstocks.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"etrdstocks.net","ip":{"addr":"176.56.39.174","port":443,"asn":21859,"as":"ZEN-ECN","country":"United Kingdom","country_code":"GB"},"domain_registered":"2025-03-14","domain_rank":0,"first_seen":"2025-08-06T15:05:14.127842Z","last_seen":"2025-08-06T15:05:14.127842Z","alert_count":4,"request_count":4,"received_data":58725,"sent_data":1968,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"etrdstocks.net/","fqdn":"etrdstocks.net","domain":"etrdstocks.net","tld":"net"},"ip":{"addr":"176.56.39.174","port":443,"asn":21859,"as":"ZEN-ECN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-09T11:18:20.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etrdstocks.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 09:00:24 GMT","end":"Tue, 09 Dec 2025 09:00:23 GMT"},"fingerprint":{"sha1":"37:E6:77:FD:34:E5:09:DD:3B:1C:5F:F3:13:80:69:67:01:08:00:81","sha256":"8E:CD:A2:88:D7:B2:FD:32:8E:CA:6A:38:5B:2C:CC:CA:68:6A:39:00:48:84:15:B8:AC:16:2D:BC:E5:64:F3:DA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: etrdstocks.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=bd63641d-ad73-4755caf113484665c38659949be21b8e644f\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Thu, 09 Oct 2025 11:18:20 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: ccc27d29070424d9d27384380f2d3c78\r\nServer: ****\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14375,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2772)","md5":"b39948b27fe8f8490b0f8a374a891a1f","sha1":"4a9fa4499f8f58d7b00e8a6f565c45ca9ff93a59","sha256":"bd0a79d0cff73d325117882e9c78e3146308714507d9138a1e83a9393bb1457f","sha512":"34606a04c2855cf50c815903331268fb2b4be7dd6e13342e37765d14cf51350134fd8b5fab67218b277ed67dd5827af9aa2ddfc1b2575d57c49f3ea522fe3fcf","ssdeep":"384:xSrhGFuFh82p0G0D69m82CUG0DSSC0+TlF10Ji8M:6GFuFh8R09kDsSC0+KJW","tlshash":"11526b3515e31227458a80ec3eb8278a3e92d947cd4faa2dfd9c5b414fc7a51ad932cc","first_seen":"2025-10-09T11:18:43.612619Z","last_seen":"2025-10-09T11:18:43.612619Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"etrdstocks.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etrdstocks.net/favicon.ico","fqdn":"etrdstocks.net","domain":"etrdstocks.net","tld":"net"},"ip":{"addr":"176.56.39.174","port":443,"asn":21859,"as":"ZEN-ECN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://etrdstocks.net/","date":"2025-10-09T11:18:21.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etrdstocks.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 09:00:24 GMT","end":"Tue, 09 Dec 2025 09:00:23 GMT"},"fingerprint":{"sha1":"37:E6:77:FD:34:E5:09:DD:3B:1C:5F:F3:13:80:69:67:01:08:00:81","sha256":"8E:CD:A2:88:D7:B2:FD:32:8E:CA:6A:38:5B:2C:CC:CA:68:6A:39:00:48:84:15:B8:AC:16:2D:BC:E5:64:F3:DA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: etrdstocks.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etrdstocks.net/\r\nCookie: session_sslproxy_server=bd63641d-ad73-4755caf113484665c38659949be21b8e644f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Thu, 09 Oct 2025 11:18:21 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: ****\r\nX-Cache: BYPASS\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: 6a853b1de346292cd90369bdc20fdb3f\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14375,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2772)","md5":"49d0804a1b6464b14635b93b17e1137f","sha1":"797867f67c2ebd1f42f10c8682f8cbf50eafa0d3","sha256":"17e347d8c6f2be644df7c37a3c00d53c65643438aa6b0baa0db74cbf13135ad9","sha512":"0a017ccf44b05375fe8a89f59d3d2554d9127ffa68347567a504cecffe74eb34ff6f53a42f4ded9198305236c9b531d2abc8aa7d8a291aef1c2dd1dde2acd343","ssdeep":"384:xSrhGFuFh82p0G0D69m82CUG0DSSC0+TlF10JiIM:6GFuFh8R09kDsSC0+KJK","tlshash":"05526c3915e31227558680ec3eb8224a3e92d947cd4faa2dfd9c5b814fc7a51ed932cc","first_seen":"2025-10-09T11:18:43.618305Z","last_seen":"2025-10-09T11:18:43.618305Z","times_seen":1,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":489,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"etrdstocks.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etrdstocks.net/","fqdn":"etrdstocks.net","domain":"etrdstocks.net","tld":"net"},"ip":{"addr":"176.56.39.174","port":443,"asn":21859,"as":"ZEN-ECN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-09T11:18:18.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etrdstocks.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 09:00:24 GMT","end":"Tue, 09 Dec 2025 09:00:23 GMT"},"fingerprint":{"sha1":"37:E6:77:FD:34:E5:09:DD:3B:1C:5F:F3:13:80:69:67:01:08:00:81","sha256":"8E:CD:A2:88:D7:B2:FD:32:8E:CA:6A:38:5B:2C:CC:CA:68:6A:39:00:48:84:15:B8:AC:16:2D:BC:E5:64:F3:DA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: etrdstocks.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Thu, 09 Oct 2025 11:18:20 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: session_sslproxy_server=bd63641d-ad73-4755caf113484665c38659949be21b8e644f; Expires=1760015899; Path=/; Secure; HttpOnly\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: 8c7438fde719e0f8cd1a5e0f87a9e00d\r\nServer: ****\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14375,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2772)","md5":"dbc9010d9af18fe23a544081aef6f88c","sha1":"fd3148389440020d9a82b0c91f403da8b0fae05c","sha256":"e0dffb1fcec3608bcc71616cf737be098a3aec72d711e0998273a2c00bc53542","sha512":"84f98dc97f25a21080aab5a88c7527bacca746ac5825f118751c37ec4a3d431f383dcdd46c36365091430e4af151226aa646623b855aef200cc9ea2cc53f1f20","ssdeep":"384:xSrhGFuFh82p0G0D69m82CUG0DSSC0+TlF10JiyM:6GFuFh8R09kDsSC0+KJo","tlshash":"35526c3915e31227558680ec3eb8224a3e92d947cd4faa2dfc9c5b414fc7a51ad932dc","first_seen":"2025-10-09T11:18:43.622042Z","last_seen":"2025-10-09T11:18:43.622042Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3006,"timings":{"blocked":1302,"dns":752,"connect":23,"send":0,"wait":400,"receive":1,"ssl":526},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"etrdstocks.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"etrdstocks.net/","fqdn":"etrdstocks.net","domain":"etrdstocks.net","tld":"net"},"ip":{"addr":"176.56.39.174","port":80,"asn":21859,"as":"ZEN-ECN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-09T11:18:20.338Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: etrdstocks.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Thu, 09 Oct 2025 11:18:20 GMT\r\nContent-Type: text/html\r\nContent-Length: 160\r\nConnection: keep-alive\r\nLocation: https://etrdstocks.net:443/\r\nX-Request-Id: 82fc1da130a14f8db2b231a784b44bb3\r\nServer: ****\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":14375,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T14:56:16.902508Z","times_seen":17581573,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":22,"dns":1,"connect":23,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"etrdstocks.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}