{"report_id":"e97d8cea-353c-4af7-94c4-ca133b13448b","version":0,"status":"done","tags":[],"date":"2026-09-11T03:01:17Z","url":{"schema":"http","addr":"legalrequests-x.com/","fqdn":"legalrequests-x.com","domain":"legalrequests-x.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":0,"asn":397273,"as":"Render","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"legalrequests-x.com/","fqdn":"legalrequests-x.com","domain":"legalrequests-x.com","tld":"com"},"title":"Account Protection — X","dom":{"size":21823,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"54a6d2afb61f3731e8598b7f6d5d2ccd","sha1":"7f254c492d7d8d9cd68b70a5ed2cae0f2d598865","sha256":"2ef7638e4191bf78ff633e72cc4e36770f505856078aad31f08153fcd7cb17db","sha512":"a56928a086a915143e22d2e9ee99baba5856cd9387e33f770d91b6cd6e492089e75d8935a8f566fd15cc5098e3dd54cffb89ec373f17ddd2cec1c9974a8fc1cf","ssdeep":"192:JecLiBKH11Ft7GBtXEMrZZHuCKMIZRFJ/deWizX4rjcitFWCJCXC8+Va+DYpagqv:JeOs68yErOpLuJ8mu75","tlshash":"8ca2749ba2f311666d53a0707baa5b5b7664d047c50edc503fcca3888f85ba5cca378c","dom_hash":"domhasheb806bd80b9d8b4e855cb92411aed9b4","first_seen":"2026-09-11T03:01:20.954853Z","last_seen":"2026-09-11T03:01:20.954853Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"legalrequests-x.com/","fqdn":"legalrequests-x.com","domain":"legalrequests-x.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":0,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T03:01:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"legalrequests-x.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"legalrequests-x.com","ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":3,"request_count":3,"received_data":48364,"sent_data":1389,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Render","description":"Render is a cloud computing platform that provides a wide range of services, including web hosting, cloud computing, and application development. Render offers several hosting options, including static site hosting, web application hosting, and managed databases.","website":"https://render.com","common_platform_enumeration":"","icon":"Render.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"legalrequests-x.com/","fqdn":"legalrequests-x.com","domain":"legalrequests-x.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T03:00:39.112Z","timestamp":1789095639112,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legalrequests-x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 20:11:20 GMT","end":"Tue, 08 Dec 2026 21:11:18 GMT"},"fingerprint":{"sha1":"5C:2B:09:5E:1A:36:D9:F2:6A:27:87:A1:29:FB:CF:82:A1:F7:A4:8A","sha256":"97:B4:B0:88:62:A3:24:D6:5F:B1:4F:45:D2:20:EE:FC:1B:DF:F0:59:30:02:39:E0:CE:4B:88:CB:05:1E:AF:FC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: legalrequests-x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:00:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'self'; object-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://pbs.twimg.com https://abs.twimg.com; connect-src 'self'; font-src 'self'\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"554c-hzNKBbSAB3bW1RBkki52dFPFiNE\"\r\npermissions-policy: geolocation=(), microphone=(), camera=(), interest-cohort=()\r\nreferrer-policy: no-referrer\r\nrndr-id: 7c2862e3-05a5-4689\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-render-origin-server: Render\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3936c60ee8a0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Render","description":"Render is a cloud computing platform that provides a wide range of services, including web hosting, cloud computing, and application development. Render offers several hosting options, including static site hosting, web application hosting, and managed databases.","website":"https://render.com","common_platform_enumeration":"","icon":"Render.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21836,"size_decoded":6388,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"4f37470dac8cbeb8ab99f389ab110940","sha1":"f2933be46f1e2947b5756689764d4ab584c2d926","sha256":"538ced5b2e8bfc20394e65c0fa5b4840dbeaca1813e71de35e3b77b35abdbbf3","sha512":"1dbff0fb33ef638b1180e82300e2ce816ef13d8d81aa6a4010ac5efc063105a7a3c8e0dcf5c5789e8042f5801b67980b607fcd4736034478973c3f168dfe9cec","ssdeep":"192:jecAiBKH11Ft7GBtXEMrZZHuCKMIZRFJ/deWizX4rjcitFWCJCXC8+Va+DYpagqs:jeNs68yErOpLuJdmu79","tlshash":"85a2749ba2f311666d53a0707baa5b5b7664d047c50edc503fcca3888f85ba5cca378c","first_seen":"2026-09-11T03:01:20.958035Z","last_seen":"2026-09-11T03:01:20.958035Z","times_seen":1,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":60,"connect":2,"send":0,"wait":210,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"legalrequests-x.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legalrequests-x.com/css/panel.css","fqdn":"legalrequests-x.com","domain":"legalrequests-x.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://legalrequests-x.com/","date":"2026-09-11T03:00:39.597Z","timestamp":1789095639597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legalrequests-x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 20:11:20 GMT","end":"Tue, 08 Dec 2026 21:11:18 GMT"},"fingerprint":{"sha1":"5C:2B:09:5E:1A:36:D9:F2:6A:27:87:A1:29:FB:CF:82:A1:F7:A4:8A","sha256":"97:B4:B0:88:62:A3:24:D6:5F:B1:4F:45:D2:20:EE:FC:1B:DF:F0:59:30:02:39:E0:CE:4B:88:CB:05:1E:AF:FC"}}},"request":{"raw":"GET /css/panel.css HTTP/1.1\r\nHost: legalrequests-x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:00:39 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 2023\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'self'; object-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://pbs.twimg.com https://abs.twimg.com; connect-src 'self'; font-src 'self'\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"1ed8-1a08836d8f8\"\r\nlast-modified: Wed, 09 Sep 2026 22:08:11 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=(), interest-cohort=()\r\nreferrer-policy: no-referrer\r\nrndr-id: 06a2e87a-54db-4133\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-render-origin-server: Render\r\nx-robots-tag: noindex, nofollow, noarchive\r\npriority: u=2,i=?0\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3936c637a75b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Render","description":"Render is a cloud computing platform that provides a wide range of services, including web hosting, cloud computing, and application development. Render offers several hosting options, including static site hosting, web application hosting, and managed databases.","website":"https://render.com","common_platform_enumeration":"","icon":"Render.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7896,"size_decoded":3179,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"70ae5088042b8c0179f68b5a020676d3","sha1":"3b19f0d9175940e4c802bca5fd5784900b6b20ba","sha256":"f0fb8420adddd14d5bc243cb92a403e8030d0efc2c5834bc49e0860271714b72","sha512":"a2575a822c25f144b4e44c3429631f39d806dd4494ba27f0790e29f3c137a6e171f49572cccaa1572bd8d10290dfba48266daad923abe53ec90de21faa541c0c","ssdeep":"192:sdkIvKY+PXOJuXLuhaR2oJUX1g70Zzcr4nIapuGHm2e:sd3CUbgeXer+/S","tlshash":"52f1e0e22b785a28bc1be9543a96cb97b35c6483410edb7c5ff4205c4e8a3ed5473b48","first_seen":"2026-09-11T03:01:20.960496Z","last_seen":"2026-09-11T03:01:20.960496Z","times_seen":1,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"legalrequests-x.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legalrequests-x.com/favicon.ico","fqdn":"legalrequests-x.com","domain":"legalrequests-x.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legalrequests-x.com/","date":"2026-09-11T03:00:39.705Z","timestamp":1789095639705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legalrequests-x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 20:11:20 GMT","end":"Tue, 08 Dec 2026 21:11:18 GMT"},"fingerprint":{"sha1":"5C:2B:09:5E:1A:36:D9:F2:6A:27:87:A1:29:FB:CF:82:A1:F7:A4:8A","sha256":"97:B4:B0:88:62:A3:24:D6:5F:B1:4F:45:D2:20:EE:FC:1B:DF:F0:59:30:02:39:E0:CE:4B:88:CB:05:1E:AF:FC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: legalrequests-x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:00:39 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncache-control: public, max-age=0\r\ncontent-security-policy: default-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'self'; object-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://pbs.twimg.com https://abs.twimg.com; connect-src 'self'; font-src 'self'\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"3c2e-1a08836d8f8\"\r\nlast-modified: Wed, 09 Sep 2026 22:08:11 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=(), interest-cohort=()\r\nreferrer-policy: no-referrer\r\nrndr-id: 1529239e-944e-4ae0\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-render-origin-server: Render\r\nx-robots-tag: noindex, nofollow, noarchive\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a3936c642aacb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Render","description":"Render is a cloud computing platform that provides a wide range of services, including web hosting, cloud computing, and application development. Render offers several hosting options, including static site hosting, web application hosting, and managed databases.","website":"https://render.com","common_platform_enumeration":"","icon":"Render.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":3395,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"9aada01e17eda10db392168ba2952fd3","sha1":"f4760f51f8da1d5d9aa3d8c331786e8cfbcd6241","sha256":"288171e2ae1dada64736c51475556e0bd7acbb871591fd08950f9d676ee7e419","sha512":"89f98c36d216ca08c5bd784e22e906d1deee15e224d49233f9d64156052c9653ac81f5d1a0cdcf4b41ef0916e853600afd8864735ac1f7f5464f0d7f5f82c065","ssdeep":"48:+cLJfFgbDgDE2LhjbY9DPEwtPB8WXaDAXgKi47FfZXQ5WutPBIO3Zsf3t9XZieL5:+cugPED8W9StCHnufNo+5ZbQtAkt","tlshash":"ef6294009af65e15ca84973d0fc6c3316736ed8e86b7572a16d80c873fce3d72865a61","first_seen":"2026-09-11T03:01:20.964561Z","last_seen":"2026-09-11T03:01:20.964561Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":191,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"legalrequests-x.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}