{"report_id":"e6c4515b-e2da-45f5-9829-474a250822e0","version":6,"status":"done","tags":[],"date":"2025-03-07T17:37:20Z","url":{"schema":"http","addr":"ggnwixhtkt.com/","fqdn":"ggnwixhtkt.com","domain":"ggnwixhtkt.com","tld":"com"},"ip":{"addr":"157.119.7.29","port":0,"asn":2516,"as":"KDDI CORPORATION","country":"Japan","country_code":"JP"},"final":{"url":{"schema":"https","addr":"reveur-voyance.jp/","fqdn":"reveur-voyance.jp","domain":"reveur-voyance.jp","tld":"jp"},"title":"レヴール ～福音が導く幸運な未来～"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-16T17:37:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"reveur-voyance.jp","ip":{"addr":"128.22.140.76","port":443,"asn":17511,"as":"OPTAGE Inc.","country":"Japan","country_code":"JP"},"domain_registered":"2024-06-11","domain_rank":0,"first_seen":"2025-03-04T22:16:56.773965Z","last_seen":"2025-03-04T22:16:56.773965Z","alert_count":0,"request_count":7,"received_data":27756,"sent_data":3185,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ggnwixhtkt.com","ip":{"addr":"157.119.7.29","port":443,"asn":2516,"as":"KDDI CORPORATION","country":"Japan","country_code":"JP"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":3413,"sent_data":991,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-07","alert":"Sinkholed","trigger":"ggnwixhtkt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-07","alert":"Sinkholed","trigger":"ggnwixhtkt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"reveur-voyance.jp/assets/d1w2r3-reveur/js/common.js?1725352773","fqdn":"reveur-voyance.jp","domain":"reveur-voyance.jp","tld":"jp"},"ip":{"addr":"128.22.140.76","port":443,"asn":17511,"as":"OPTAGE Inc.","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"11f7d201de7325ca60ee2c954eeb716d","sha1":"8a225935869ac0b4755a4f2ebd94ebb4c619b1f5","sha256":"f09a783f28c4ebeefd384ed0700ebfb7df14672d988bd612ee462caa4b1b0a2e","sha512":"dea6a9c6faf53a6976d5a6ad8d6dd7ae7fcc14c54d42fd49380444e9d2a2939a0dfa535f532c703d4ea6f5bfff8c68a33ddf82a5099608d4e55927f230901c33","ssdeep":"","tlshash":"3541f238b79ee832407f3d23591b414e227e4a49340379b6ccec5cad08f5e1d7a16ea9","size":1923,"data":"","first_seen":"2024-06-08T04:38:34Z","last_seen":"2025-09-25T19:14:08.191524Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"reveur-voyance.jp/assets/d1w2r3-reveur/css/design.css?1725352773","fqdn":"reveur-voyance.jp","domain":"reveur-voyance.jp","tld":"jp"},"ip":{"addr":"128.22.140.76","port":443,"asn":17511,"as":"OPTAGE Inc.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"","requested_by":"https://reveur-voyance.jp/","date":"2025-03-07T17:37:04.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reveur-voyance.jp","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jan 2025 18:02:08 GMT","end":"Sat, 12 Apr 2025 18:02:07 GMT"},"fingerprint":{"sha1":"68:D5:EC:6C:23:B8:0E:23:D3:28:90:62:FA:D1:5A:14:22:B6:6C:E8","sha256":"B4:F2:58:56:CE:B7:E3:D1:47:CB:50:1D:F5:99:8F:4F:1C:A9:C5:31:64:F7:04:F9:77:B9:FD:58:59:8F:D0:B2"}}},"request":{"raw":"GET /assets/d1w2r3-reveur/css/design.css?1725352773 HTTP/1.1\r\nHost: reveur-voyance.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reveur-voyance.jp/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Fri, 07 Mar 2025 17:37:04 GMT\r\nContent-Type: text/css\r\nContent-Length: 12303\r\nConnection: keep-alive\r\nUpgrade: h2,h2c\r\nLast-Modified: Tue, 03 Sep 2024 08:39:33 GMT\r\nETag: \"300f-62132ff26d42c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12303,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-24T06:27:33.786986Z","times_seen":18629927,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reveur-voyance.jp/assets/d1w2r3-reveur/js/common.js?1725352773","fqdn":"reveur-voyance.jp","domain":"reveur-voyance.jp","tld":"jp"},"ip":{"addr":"128.22.140.76","port":443,"asn":17511,"as":"OPTAGE Inc.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"","requested_by":"https://reveur-voyance.jp/","date":"2025-03-07T17:37:04.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reveur-voyance.jp","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jan 2025 18:02:08 GMT","end":"Sat, 12 Apr 2025 18:02:07 GMT"},"fingerprint":{"sha1":"68:D5:EC:6C:23:B8:0E:23:D3:28:90:62:FA:D1:5A:14:22:B6:6C:E8","sha256":"B4:F2:58:56:CE:B7:E3:D1:47:CB:50:1D:F5:99:8F:4F:1C:A9:C5:31:64:F7:04:F9:77:B9:FD:58:59:8F:D0:B2"}}},"request":{"raw":"GET /assets/d1w2r3-reveur/js/common.js?1725352773 HTTP/1.1\r\nHost: reveur-voyance.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reveur-voyance.jp/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Fri, 07 Mar 2025 17:37:05 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1923\r\nConnection: keep-alive\r\nUpgrade: h2,h2c\r\nLast-Modified: Tue, 03 Sep 2024 08:39:33 GMT\r\nETag: \"783-62132ff27be8c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1923,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2072), with no line terminators","md5":"c4835ded5e4b6d2752661e1a5be4252b","sha1":"17b735757f07993dfa34366c1dcbddf1e23a4760","sha256":"11305a0a7f73714d08f35f2155a592ced2c365eb236452f8d59946968f567f3c","sha512":"4c26d7462de98efcdc00be0c1ab5b9df6dcf6842362cfd43f8cde00a2c4f7c170ea0434d7e80bef7a8f1983658fabcb8ce84fb90a10ed06be986aa8e0fee3a21","ssdeep":"","tlshash":"c0417a3835b7d43a104abf66612a451e213bcd4d702372b1d8ecfc9904bce45ee46dae","first_seen":"2025-03-04T20:16:26.027158Z","last_seen":"2025-04-04T19:46:04.710802Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1386,"timings":{"blocked":547,"dns":1,"connect":269,"send":0,"wait":284,"receive":1,"ssl":281},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ggnwixhtkt.com/redirect/?param1=\u0026param2=","fqdn":"ggnwixhtkt.com","domain":"ggnwixhtkt.com","tld":"com"},"ip":{"addr":"157.119.7.29","port":443,"asn":2516,"as":"KDDI CORPORATION","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-03-07T17:37:01.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fijw8cg53e.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Feb 2025 10:12:38 GMT","end":"Mon, 12 May 2025 10:12:37 GMT"},"fingerprint":{"sha1":"AF:B5:C5:EC:C3:AA:0E:8B:5D:B4:00:31:6C:E6:F4:7A:0E:4F:B0:E0","sha256":"4C:0E:3D:B1:77:68:91:A1:A3:D4:31:49:48:40:07:BB:67:FA:9B:0C:96:31:FD:3E:35:F0:70:4B:03:34:10:C7"}}},"request":{"raw":"GET /redirect/?param1=\u0026param2= HTTP/1.1\r\nHost: ggnwixhtkt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Fri, 07 Mar 2025 17:37:01 GMT\r\nServer: Apache/2.4.57 (Debian)\r\nLocation: http://reveur-voyance.jp/\r\nContent-Length: 303\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":1448,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-24T06:27:33.786986Z","times_seen":18629927,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-07","alert":"Sinkholed","trigger":"ggnwixhtkt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"reveur-voyance.jp/","fqdn":"reveur-voyance.jp","domain":"reveur-voyance.jp","tld":"jp"},"ip":{"addr":"128.22.140.76","port":80,"asn":17511,"as":"OPTAGE Inc.","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-03-07T17:37:02.148Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: reveur-voyance.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":544,"data":"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"}},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx/1.14.1\r\nDate: Fri, 07 Mar 2025 17:37:02 GMT\r\nContent-Type: text/html\r\nContent-Length: 185\r\nConnection: keep-alive\r\nLocation: https://reveur-voyance.jp/\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":1448,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-24T06:27:33.786986Z","times_seen":18629927,"resource_available":true,"data":null}},"time_used":1379,"timings":{"blocked":550,"dns":271,"connect":276,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reveur-voyance.jp/assets/d1w2r3-reveur/css/reset.css?1725352773","fqdn":"reveur-voyance.jp","domain":"reveur-voyance.jp","tld":"jp"},"ip":{"addr":"128.22.140.76","port":443,"asn":17511,"as":"OPTAGE Inc.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"","requested_by":"https://reveur-voyance.jp/","date":"2025-03-07T17:37:04.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reveur-voyance.jp","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jan 2025 18:02:08 GMT","end":"Sat, 12 Apr 2025 18:02:07 GMT"},"fingerprint":{"sha1":"68:D5:EC:6C:23:B8:0E:23:D3:28:90:62:FA:D1:5A:14:22:B6:6C:E8","sha256":"B4:F2:58:56:CE:B7:E3:D1:47:CB:50:1D:F5:99:8F:4F:1C:A9:C5:31:64:F7:04:F9:77:B9:FD:58:59:8F:D0:B2"}}},"request":{"raw":"GET /assets/d1w2r3-reveur/css/reset.css?1725352773 HTTP/1.1\r\nHost: reveur-voyance.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reveur-voyance.jp/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Fri, 07 Mar 2025 17:37:04 GMT\r\nContent-Type: text/css\r\nContent-Length: 1057\r\nConnection: keep-alive\r\nUpgrade: h2,h2c\r\nLast-Modified: Tue, 03 Sep 2024 08:39:33 GMT\r\nETag: \"421-62132ff26d42c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1057,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1110), with no line terminators","md5":"707e45caae8a2467899544b4b34da095","sha1":"5380f9ff746e55dd2780e2209dd1b95902e93818","sha256":"cb552f74b68543125c4495b6910b437796d714e8eeb22c277a4ec190e5b26be1","sha512":"b9b13a958cd3c38c0652cede26ee08fc6caf24fbb39f1adab4987dea389a5dc231b2717bb951cdfd1852114a8956237532eb5675225b72347d8ff868f0e7af5c","ssdeep":"","tlshash":"9611201eb56001a88f91ccf4f616ce35e73c4300099052b6f0dbe74a490e038c9e378d","first_seen":"2025-03-04T05:55:09.178508Z","last_seen":"2025-04-05T15:46:51.36433Z","times_seen":40,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reveur-voyance.jp/assets/d1w2r3-reveur/css/btn.css?1725352773","fqdn":"reveur-voyance.jp","domain":"reveur-voyance.jp","tld":"jp"},"ip":{"addr":"128.22.140.76","port":443,"asn":17511,"as":"OPTAGE Inc.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"","requested_by":"https://reveur-voyance.jp/","date":"2025-03-07T17:37:04.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reveur-voyance.jp","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jan 2025 18:02:08 GMT","end":"Sat, 12 Apr 2025 18:02:07 GMT"},"fingerprint":{"sha1":"68:D5:EC:6C:23:B8:0E:23:D3:28:90:62:FA:D1:5A:14:22:B6:6C:E8","sha256":"B4:F2:58:56:CE:B7:E3:D1:47:CB:50:1D:F5:99:8F:4F:1C:A9:C5:31:64:F7:04:F9:77:B9:FD:58:59:8F:D0:B2"}}},"request":{"raw":"GET /assets/d1w2r3-reveur/css/btn.css?1725352773 HTTP/1.1\r\nHost: reveur-voyance.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reveur-voyance.jp/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":776,"data":"{\"service\":\"track\",\"name\":\"page_loaded\",\"data\":{},\"projectId\":1001,\"uid\":\"7303831023266037760\",\"user\":{\"ts\":1741369014766,\"tz\":\"GMT\",\"tzo\":0},\"page\":{\"title\":\"MOSTBET\",\"ref\":\"\",\"url\":\"https://betmstluck.com/sport/promo/bd/aviator4/?cid=6429274698\u0026pid=126904\u0026sip=0\u0026h=fli5z0p.com\u0026mphost=mostbet.partners\"},\"sess\":{\"pageNum\":2,\"eventNum\":1,\"type\":\"direct\",\"marks\":{},\"hasMarks\":false,\"num\":1,\"start\":1741369014748},\"char\":{\"ls\":true,\"pr\":true,\"ae\":true,\"sb\":true,\"wp\":false},\"browser\":{\"if1\":0,\"if2\":0,\"w\":1280,\"h\":1024,\"tw\":1280,\"th\":1024,\"aw\":1280,\"ah\":1024,\"sopr\":1000,\"soa\":-1,\"sot\":\"landscape-primary\",\"plt\":\"Linux x86_64\",\"prd\":\"Gecko\"},\"lib\":{\"id\":\"web-sdk\",\"v\":4001000,\"sv\":4000000},\"perf\":{\"cs\":0,\"ce\":70,\"scs\":24,\"rqs\":71,\"rss\":95,\"rse\":96,\"dl\":270,\"di\":336,\"dc\":1132}}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Fri, 07 Mar 2025 17:37:05 GMT\r\nContent-Type: text/css\r\nContent-Length: 6457\r\nConnection: keep-alive\r\nUpgrade: h2,h2c\r\nLast-Modified: Tue, 03 Sep 2024 08:39:33 GMT\r\nETag: \"1939-62132ff26d42c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6457,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (6391), with no line terminators","md5":"75479efb0a7f5b5488a0e8ffd286f084","sha1":"09e19f9d6b54530db023516d9188d25b2be00003","sha256":"f56e02c061dd87423e8970daf6750f6d3556f5ac58a8e8c94b06f6d1a83f1415","sha512":"7a5c37197f8ef0352b0760c2defb05087dbc8a8b6259d2cbc31bfa2f33851e2ea731f252f7d045743ceeb3cf0d5d241c896dcfd1c526320140d28230b6a5224e","ssdeep":"96:lyv70KbtTrtFEoLwHw3uKM8Ds/Bm1INvZXBJf8Wshv6gHW5ccB6s:ly3RBSoLwHwmmGlZXBJf8WKWacD","tlshash":"84d14eaf654201445e330fe153ef1b60663c6d16a4329eacb342a8cf8709bdc2399a77","first_seen":"2025-03-04T05:55:09.180444Z","last_seen":"2025-04-05T15:46:51.361671Z","times_seen":40,"resource_available":false,"data":null}},"time_used":1380,"timings":{"blocked":545,"dns":1,"connect":265,"send":0,"wait":284,"receive":1,"ssl":281},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reveur-voyance.jp/favicon.ico","fqdn":"reveur-voyance.jp","domain":"reveur-voyance.jp","tld":"jp"},"ip":{"addr":"128.22.140.76","port":443,"asn":17511,"as":"OPTAGE Inc.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"","requested_by":"https://reveur-voyance.jp/","date":"2025-03-07T17:37:05.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reveur-voyance.jp","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jan 2025 18:02:08 GMT","end":"Sat, 12 Apr 2025 18:02:07 GMT"},"fingerprint":{"sha1":"68:D5:EC:6C:23:B8:0E:23:D3:28:90:62:FA:D1:5A:14:22:B6:6C:E8","sha256":"B4:F2:58:56:CE:B7:E3:D1:47:CB:50:1D:F5:99:8F:4F:1C:A9:C5:31:64:F7:04:F9:77:B9:FD:58:59:8F:D0:B2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reveur-voyance.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reveur-voyance.jp/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Fri, 07 Mar 2025 17:37:05 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 1448\r\nConnection: keep-alive\r\nUpgrade: h2,h2c\r\nX-Powered-By: PHP/7.1.33\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1448,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1313), with no line terminators","md5":"ac7e05ab0d3b9e10984e00e98110b831","sha1":"7f77ebcce2ece2dde603f58ae3b322448d7feccc","sha256":"a2bf60683e32a06e8b7d3b05d5aa759ac4e7e6904eeac92336dff5edc1ce7636","sha512":"91d7fdd806cc8db75d6f9a87eedb8bae5e9b04fad1124460612fe2cce0b82888238399b953537e6ef2ce06583aab1eeb3398b8fe2cf86ea2661970af047b5ce9","ssdeep":"","tlshash":"1e31000f51a48419dc50a5a523343b7b88a9e9dd4d55cea532d8e07c5bcc8d4c937eb0","first_seen":"2025-03-04T20:16:26.025913Z","last_seen":"2025-04-04T19:46:04.710123Z","times_seen":3,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":409,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ggnwixhtkt.com/","fqdn":"ggnwixhtkt.com","domain":"ggnwixhtkt.com","tld":"com"},"ip":{"addr":"157.119.7.29","port":443,"asn":2516,"as":"KDDI CORPORATION","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-03-07T17:37:00.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fijw8cg53e.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Feb 2025 10:12:38 GMT","end":"Mon, 12 May 2025 10:12:37 GMT"},"fingerprint":{"sha1":"AF:B5:C5:EC:C3:AA:0E:8B:5D:B4:00:31:6C:E6:F4:7A:0E:4F:B0:E0","sha256":"4C:0E:3D:B1:77:68:91:A1:A3:D4:31:49:48:40:07:BB:67:FA:9B:0C:96:31:FD:3E:35:F0:70:4B:03:34:10:C7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ggnwixhtkt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Fri, 07 Mar 2025 17:37:01 GMT\r\nServer: Apache/2.4.57 (Debian)\r\nLocation: https://ggnwixhtkt.com/redirect/?param1=\u0026param2=\r\nContent-Length: 317\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":1448,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-24T06:27:33.786986Z","times_seen":18629927,"resource_available":true,"data":null}},"time_used":2413,"timings":{"blocked":1063,"dns":300,"connect":284,"send":0,"wait":286,"receive":0,"ssl":477},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-07","alert":"Sinkholed","trigger":"ggnwixhtkt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reveur-voyance.jp/","fqdn":"reveur-voyance.jp","domain":"reveur-voyance.jp","tld":"jp"},"ip":{"addr":"128.22.140.76","port":443,"asn":17511,"as":"OPTAGE Inc.","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-03-07T17:37:02.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reveur-voyance.jp","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jan 2025 18:02:08 GMT","end":"Sat, 12 Apr 2025 18:02:07 GMT"},"fingerprint":{"sha1":"68:D5:EC:6C:23:B8:0E:23:D3:28:90:62:FA:D1:5A:14:22:B6:6C:E8","sha256":"B4:F2:58:56:CE:B7:E3:D1:47:CB:50:1D:F5:99:8F:4F:1C:A9:C5:31:64:F7:04:F9:77:B9:FD:58:59:8F:D0:B2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: reveur-voyance.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":259,"data":"{\"bucket\":{\"start\":\"2025-03-07T17:36:55.401Z\",\"stop\":\"2025-03-07T17:36:58.239Z\",\"toggles\":{\"mercury.conversionCards\":{\"yes\":6,\"no\":0,\"variants\":{}},\"mercury.otterImageLoader\":{\"yes\":236,\"no\":0,\"variants\":{}}}},\"appName\":\"owner-mercury\",\"instanceId\":\"browser\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Fri, 07 Mar 2025 17:37:04 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 1448\r\nConnection: keep-alive\r\nUpgrade: h2,h2c\r\nX-Powered-By: PHP/7.1.33\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1448,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1313), with no line terminators","md5":"ac7e05ab0d3b9e10984e00e98110b831","sha1":"7f77ebcce2ece2dde603f58ae3b322448d7feccc","sha256":"a2bf60683e32a06e8b7d3b05d5aa759ac4e7e6904eeac92336dff5edc1ce7636","sha512":"91d7fdd806cc8db75d6f9a87eedb8bae5e9b04fad1124460612fe2cce0b82888238399b953537e6ef2ce06583aab1eeb3398b8fe2cf86ea2661970af047b5ce9","ssdeep":"","tlshash":"1e31000f51a48419dc50a5a523343b7b88a9e9dd4d55cea532d8e07c5bcc8d4c937eb0","first_seen":"2025-03-04T20:16:26.025913Z","last_seen":"2025-04-04T19:46:04.710123Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2028,"timings":{"blocked":803,"dns":1,"connect":278,"send":0,"wait":424,"receive":0,"ssl":519},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}