{"report_id":"ee7f1682-8273-4a18-a962-2034d80af8e3","version":6,"status":"done","tags":[],"date":"2026-03-17T22:00:03Z","url":{"schema":"http","addr":"ulltaaahosttt.click/","fqdn":"ulltaaahosttt.click","domain":"ulltaaahosttt.click","tld":"click"},"ip":{"addr":"172.67.156.81","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ulltaaahosttt.click/","fqdn":"ulltaaahosttt.click","domain":"ulltaaahosttt.click","tld":"click"},"title":"ulltaaahosttt.click - ulltaaahosttt Resources and Information.","dom":{"size":25185,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10764)","md5":"34caef97fa06847c37aa90fcb053afde","sha1":"3f1c23910bab5c355a40b3f3b6e6ed7f5afb3a0a","sha256":"f16a65118ca03530a8c4cc97c5c33ab81efca986a2ecc699e21f01fe25f69046","sha512":"1389875fb5788b7e94e0faf5a6d35bff89259239edfb9fd09ecd9fe42f74d8bb11651374d02ea1b95c997a3b393e24604d64ff3fd0d535fa05761b945b6fa24d","ssdeep":"768:fiJvTN1L6CjsqXp9iQ6XTTvTIul6yBN1KGBTuIOESPO:fO4U9WX0ulF/KGluBESPO","tlshash":"51b2fa326a843135b1b7865db191bb55b724c903da0279a9f458f3b4cbcac9706e2f09","dom_hash":"domhash63dce6a385e26bda7591010f48ab1d3e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ulltaaahosttt.click/","fqdn":"ulltaaahosttt.click","domain":"ulltaaahosttt.click","tld":"click"},"ip":{"addr":"172.67.156.81","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-21T22:00:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"ulltaaahosttt.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"img.sedoparking.com","ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"domain_registered":"2001-09-18","domain_rank":591238,"first_seen":"2013-04-22T22:23:29Z","last_seen":"2026-03-16T21:21:13.626045Z","alert_count":0,"request_count":3,"received_data":60005,"sent_data":1380,"comment":"","tags":null,"fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}]},{"fqdn":"ulltaaahosttt.click","ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-10","domain_rank":0,"first_seen":"2026-03-17T22:00:03.281803Z","last_seen":"2026-03-17T22:00:03.281803Z","alert_count":2,"request_count":2,"received_data":26897,"sent_data":1304,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"172.217.20.164","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-03-15T22:38:15.571587Z","alert_count":0,"request_count":1,"received_data":354,"sent_data":473,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ulltaaahosttt.click/","fqdn":"ulltaaahosttt.click","domain":"ulltaaahosttt.click","tld":"click"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3284de8529bee0e204adcdb7dfbadff1","sha1":"9be7ea5ad00f2d2bbd1e06293fa7b2c510a7c13f","sha256":"1e946e1815ee1bc3135d9540603c3aa2b0d1f5de7be8aacdf5107fc927a6cf39","sha512":"ddd75f139fd72239940d731796ae2fb039cd77e7e28db62f10441efbff8f2f5f06ae5cc56dfb033911ab534a819ed580c4b66a970d622f98fa1dce4cc318feee","ssdeep":"96:UxYUiE/BxdLvwrjswJR6073cRWTJV/pp7xRcRWTJV/ppxv4Sbg4Jl0UOOqY:UxbiQLvwXR6c3jTBJjTBX4Ag4Jl1bJ","tlshash":"6f914d199ed1e6fb486402868103fad1331ee543abc571fcdca9ae045bcf9cd1062117","size":4533,"data":"","first_seen":"2026-03-17T22:00:07.127754Z","last_seen":"2026-03-17T22:00:07.127754Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ulltaaahosttt.click/","fqdn":"ulltaaahosttt.click","domain":"ulltaaahosttt.click","tld":"click"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ddc86a1d8ae00753cc792ab72a58071","sha1":"b405fd8562e0d0582f25f4b7ac6d180d72e0e935","sha256":"4a5f92285fc4b884f74fbf249d3c256136ae5f4c387ba90230f0f357322a6d8d","sha512":"337f042898bb652dbf059bac436e37573e42862bee51cfb738b377bca7f38fa69cfd2b77116b2cf8e4835b42d4ee9d9c609073f9d5a75d49b42dcf50f35d2bda","ssdeep":"","tlshash":"86f00cb13a71034ac632eb1be1d70195be6cc017c041f86270be90200bdc9364aa0ba6","size":622,"data":"","first_seen":"2023-03-07T01:10:36Z","last_seen":"2026-03-17T22:00:07.128949Z","times_seen":34501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ulltaaahosttt.click/","fqdn":"ulltaaahosttt.click","domain":"ulltaaahosttt.click","tld":"click"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"978e89b89f929ebbd0a746295eafbcbe","sha1":"6b92ab60432c1e5a8aebc60ebc94f1f24c28cea6","sha256":"848eaac812a5c6ef9f75fc33f2bfbb7169bfea60bc4d4a28a7e77d1737ca42ac","sha512":"c7b6c342a6cc4121c889e38dc07ec85f7b3b1ff7811c0babb5f5abaf39a984424751eb1a7ff400e9bd45f0d49e96be85ff30023dfe9de0b3c0463e1d136e42d1","ssdeep":"96:zQIHrUsXy9Cp1OuKfIqT1M6BXXjgXnB9qPsBJaqJ4uSnx73CUnKVGSrbH:jrUs2nDxQqPJTuIRIESrbH","tlshash":"26c194723145347a4aff0751206f1f14b67ae8533a08b419b028b7e82bebd5744dbb6a","size":5888,"data":"","first_seen":"2024-05-23T11:11:38Z","last_seen":"2026-03-23T00:52:59.161451Z","times_seen":188504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"img.sedoparking.com/templates/bg/arrows.png","fqdn":"img.sedoparking.com","domain":"sedoparking.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ulltaaahosttt.click/","date":"2026-03-17T21:59:38.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.sedoparking.com","organization":"Cachenetworks, LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Dec 2025 17:51:08 GMT","end":"Wed, 13 Jan 2027 17:51:07 GMT"},"fingerprint":{"sha1":"74:3B:BB:7B:E9:10:1C:6D:DF:D2:6E:90:04:B2:1F:C3:E2:96:BF:65","sha256":"B8:FC:0C:CE:F4:8E:D5:26:D9:8B:19:39:E8:D0:38:CB:8A:13:98:FD:CE:CB:E4:0F:7E:9E:0E:50:AA:85:E7:C7"}}},"request":{"raw":"GET /templates/bg/arrows.png HTTP/1.1\r\nHost: img.sedoparking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ulltaaahosttt.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 21:59:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 12642\r\naccess-control-allow-origin: *\r\ncache-control: max-age=604800\r\nexpires: Tue, 24 Mar 2026 21:59:38 GMT\r\nx-cfhash: \"6dc0bad9aa452ff871b282dabd47131e\"\r\nx-cff: B\r\nlast-modified: Mon, 11 Oct 2021 05:39:44 GMT\r\nx-cf3: H\r\ncf4age: 99637\r\nx-cf-tsc: 1765518733\r\ncf4ttl: 31436362.000\r\nx-cf2: H\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf-reqid: 593c07a02f8e19a3d2152c11987f7382\r\nx-cf1: 11696:fC.arn1:cf:nom:cacheN.arn1-01:M\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}],"data":{"size":12642,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 426 x 475, 8-bit/color RGBA, non-interlaced","md5":"6dc0bad9aa452ff871b282dabd47131e","sha1":"01411e6726e033240caa3926141a6adbc18a2d73","sha256":"3059fbd6cd3550047483dca4071c93e5cf4cc79ce8bafc4388166fbc5279644b","sha512":"a8533391f3487677d739f950a4ec26a2ac46b345462aa9e2b087c3cb7b7cd4049b5eeea8c51a1687ba5193a1d5e8f8412a4226169d5e7991f8008666684b3467","ssdeep":"384:kDdVwWUly0UrhcAJcbPGpVyZaCzld7KNu:ydWU0UHyP2VyRMu","tlshash":"f842c0a0575188d7941fa5cb9b7ca93d56e662ea30c42750cfb8ccc9f4f4d09a3a9860","first_seen":"2023-04-07T02:44:40Z","last_seen":"2026-03-17T22:00:07.122203Z","times_seen":37861,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":55,"dns":1,"connect":7,"send":0,"wait":9,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.sedoparking.com/templates/bg/NameSiloLogo.png","fqdn":"img.sedoparking.com","domain":"sedoparking.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ulltaaahosttt.click/","date":"2026-03-17T21:59:38.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.sedoparking.com","organization":"Cachenetworks, LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Dec 2025 17:51:08 GMT","end":"Wed, 13 Jan 2027 17:51:07 GMT"},"fingerprint":{"sha1":"74:3B:BB:7B:E9:10:1C:6D:DF:D2:6E:90:04:B2:1F:C3:E2:96:BF:65","sha256":"B8:FC:0C:CE:F4:8E:D5:26:D9:8B:19:39:E8:D0:38:CB:8A:13:98:FD:CE:CB:E4:0F:7E:9E:0E:50:AA:85:E7:C7"}}},"request":{"raw":"GET /templates/bg/NameSiloLogo.png HTTP/1.1\r\nHost: img.sedoparking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ulltaaahosttt.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 21:59:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 30661\r\naccess-control-allow-origin: *\r\ncache-control: max-age=604800\r\nexpires: Tue, 24 Mar 2026 21:59:38 GMT\r\nx-cfhash: \"0f38d9d55d778a10b8a5bdeda9b1cf09\"\r\nx-cff: B\r\nlast-modified: Mon, 27 Feb 2023 08:54:36 GMT\r\nx-cf3: H\r\ncf4age: 217302\r\nx-cf-tsc: 1763763200\r\ncf4ttl: 31318698.000\r\nx-cf2: H\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf-reqid: f4b1df992714bcf11d2d6b75156639ed\r\nx-cf1: 11696:fC.arn1:cf:nom:cacheN.arn1-01:M\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}],"data":{"size":30661,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1756 x 390, 8-bit/color RGBA, non-interlaced","md5":"0f38d9d55d778a10b8a5bdeda9b1cf09","sha1":"edf6302e26c216765e2d9ae9625fb69f57379ff9","sha256":"4bbc784f1808bf25b1be7a0309b9e0b7ccd2c48e77ddcb270b67f18c7af55d9f","sha512":"069e4977000ef4734530fb982390d670e518fa0f819711deec4a2f1a2042be46fde1a58a23fdb5df3843565baadf94c9b5c8b5ad05835668329310aa2f7bc24a","ssdeep":"768:rfelR7dIDfTWG+8/nh4cwB9MhTLyz426IUtrVm:avdIT5+8/h4cwByfOOrg","tlshash":"06d2e1a4f5829cc5d1d918f9b86e8f4b33996c48a0aa039773778875e7d710805f8ef1","first_seen":"2023-04-08T17:28:33Z","last_seen":"2026-03-17T22:00:07.123875Z","times_seen":5884,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":92,"dns":0,"connect":7,"send":0,"wait":9,"receive":1,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ulltaaahosttt.click/search/tsc.php?ses=ogc1Kefmuxp87pFdqhYl9cqCzvYV7hCCdpOi-Yedwx_QVizu3W0vep7IdPCB-dAVWrUpRG2B1FMvOyj_RIX9ek2Kv0wGv_BkHQbbOiShsFk9sKJJ2UmxNlOnZjgbhwOCa6VX3eyQc-5zy-1ruRpJucDII68T_MLzlbp7QvPePCt9zj076Z7GlJRP0mVvfL1x4HXc67zF3NSy-_nU4H3_tafBKJ__Bw5fLWUnpEPhDVTDAxdpwl8EtfIhqMIZo2z83cEQWFFPjIh9V302MBohHxEVUwY3WhgH2AYiLuH4jIe_7nde7sKImzdpYhVSM4vIO6GMMArUHFkI1ZyGe4ivCQx-WRG7aVLzDBYK-6OkvLLW2psIfDTRW7Mc1XX432I\u0026cv=2","fqdn":"ulltaaahosttt.click","domain":"ulltaaahosttt.click","tld":"click"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ulltaaahosttt.click/","date":"2026-03-17T21:59:38.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ulltaaahosttt.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 15:13:45 GMT","end":"Fri, 12 Jun 2026 15:13:44 GMT"},"fingerprint":{"sha1":"AB:52:FC:4F:C4:E1:EB:E4:56:FC:58:F9:1B:09:A6:07:D3:F0:EC:41","sha256":"62:B5:99:D3:33:61:28:F1:BD:98:75:C4:8A:B0:A8:99:6C:DE:5E:C7:CD:A3:CC:67:1C:F8:3D:2F:43:7D:75:A6"}}},"request":{"raw":"GET /search/tsc.php?ses=ogc1Kefmuxp87pFdqhYl9cqCzvYV7hCCdpOi-Yedwx_QVizu3W0vep7IdPCB-dAVWrUpRG2B1FMvOyj_RIX9ek2Kv0wGv_BkHQbbOiShsFk9sKJJ2UmxNlOnZjgbhwOCa6VX3eyQc-5zy-1ruRpJucDII68T_MLzlbp7QvPePCt9zj076Z7GlJRP0mVvfL1x4HXc67zF3NSy-_nU4H3_tafBKJ__Bw5fLWUnpEPhDVTDAxdpwl8EtfIhqMIZo2z83cEQWFFPjIh9V302MBohHxEVUwY3WhgH2AYiLuH4jIe_7nde7sKImzdpYhVSM4vIO6GMMArUHFkI1ZyGe4ivCQx-WRG7aVLzDBYK-6OkvLLW2psIfDTRW7Mc1XX432I\u0026cv=2 HTTP/1.1\r\nHost: ulltaaahosttt.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ulltaaahosttt.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 17 Mar 2026 21:59:38 GMT\r\nserver: cloudflare\r\nx-cache-miss-from: parking-65d45fcbc7-hksdl\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GwQM7izph6skxVFZoBlOFKpWgCjMo6qlNHxNYKfPkgcxmBx4TtGdSKQYvtTo7Dua75pf3UqsdH2THDAQ8gFUz4wHI36AvrAOzJ1qZv%2FhFG2KddQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddf44121994ea57-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T01:47:03.978699Z","times_seen":13354468,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"ulltaaahosttt.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.sedoparking.com/templates/logos/sedo_logo.png","fqdn":"img.sedoparking.com","domain":"sedoparking.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ulltaaahosttt.click/","date":"2026-03-17T21:59:38.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.sedoparking.com","organization":"Cachenetworks, LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Dec 2025 17:51:08 GMT","end":"Wed, 13 Jan 2027 17:51:07 GMT"},"fingerprint":{"sha1":"74:3B:BB:7B:E9:10:1C:6D:DF:D2:6E:90:04:B2:1F:C3:E2:96:BF:65","sha256":"B8:FC:0C:CE:F4:8E:D5:26:D9:8B:19:39:E8:D0:38:CB:8A:13:98:FD:CE:CB:E4:0F:7E:9E:0E:50:AA:85:E7:C7"}}},"request":{"raw":"GET /templates/logos/sedo_logo.png HTTP/1.1\r\nHost: img.sedoparking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ulltaaahosttt.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 21:59:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 15086\r\naccess-control-allow-origin: *\r\ncache-control: max-age=604800\r\nexpires: Tue, 24 Mar 2026 21:59:38 GMT\r\nx-cfhash: \"def00c11b1596db4efee6a9fbe64fc27\"\r\nx-cff: B\r\nlast-modified: Mon, 11 Jan 2021 07:44:34 GMT\r\nx-cf3: H\r\ncf4age: 770657\r\nx-cf-tsc: 1763620768\r\ncf4ttl: 30765342.000\r\nx-cf2: H\r\nserver: CFS 1124\r\nx-cf-reqid: 199a97c9eda3782b40a5250f633c44bd\r\nx-cf1: 11696:fC.arn1:cf:nom:cacheN.arn1-01:H\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"def00c11b1596db4efee6a9fbe64fc27","sha1":"bd298981e6d8d7e4ffa18abcf687041f4246672d","sha256":"95c427fa3143b1896faf42a6406686ce7602cb39052081bb32d12b51c9e047e4","sha512":"c056e95dbfa1aab3a50dff18c6d577dbffea72c93316ffc53b6b7aa41dcc7707a810d563894589a7305de0b76610f88150b2034670de368773b2b356f14ad30f","ssdeep":"192:jiHSINqv0tJ30DezSfPAXTZwC3D2N2xp1Fd/ar/+zi3LHZNwkQH0iWpXDt3TN8rB:jzAnP9j","tlshash":"31623e0bfd4bc358ce50b23ae67c4bfb6361d8c1b090a7e257d9d51aafa7b014c9a011","first_seen":"2023-04-14T07:11:21Z","last_seen":"2026-04-05T01:44:48.806484Z","times_seen":220405,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ulltaaahosttt.click/","fqdn":"ulltaaahosttt.click","domain":"ulltaaahosttt.click","tld":"click"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-17T21:59:38.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ulltaaahosttt.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 15:13:45 GMT","end":"Fri, 12 Jun 2026 15:13:44 GMT"},"fingerprint":{"sha1":"AB:52:FC:4F:C4:E1:EB:E4:56:FC:58:F9:1B:09:A6:07:D3:F0:EC:41","sha256":"62:B5:99:D3:33:61:28:F1:BD:98:75:C4:8A:B0:A8:99:6C:DE:5E:C7:CD:A3:CC:67:1C:F8:3D:2F:43:7D:75:A6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ulltaaahosttt.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 21:59:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mFkLlBa2MgE14QYbCe%2BsGToqa684lQHMPLkbz8STiLaIMFWl%2Ft3Tu%2F5DXhY1t6zOGWGfuIz2zYbpzei1blRJtHO3kHBTkHa%2BTOhwKc6661rJSZ0%3D\"}]}\r\nexpires: Mon, 26 Jul 1997 05:00:00 GMT\r\nlast-modified: Tue, 17 Mar 2026 21:59:38 GMT\r\npragma: no-cache\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_FI64XxnCl2IapglnMIPjEdFaXDCZm77FO65sn808UhnF5bgl4GhSqZK54c721F+lGJwNDffgjXMrxPiY16aE9A==\r\nx-cache-miss-from: parking-65d45fcbc7-xvtg6\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ddf440f1a35f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25276,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10764)","md5":"cd1bba8628647ef120f8610d65b64da7","sha1":"6cb5f338f66ba09306d62359a8d27313817de50f","sha256":"c0f4b9d8ca01e12ad324061812d4de0b4e920bb5e7931abdfd4331250a3d74c0","sha512":"d0cb7dd99f41f66f24c95b18463eaaed9498ca471d6c8b735ea93ddf590c03f5244e02c493b15acd3feb2a232b484333dff09a9263b4c0c2a3b4d52630ec74c1","ssdeep":"768:5ipvTN1L6CjsqXp9iQ6XTTvTIulOyBXlKGBTuIOESPO:5c4U9WX0ulpVKGluBESPO","tlshash":"3cb2f9326a843135b1b7865db192bb55b724c903da0279a9f46cf364cfcac9706e2f09","first_seen":"2026-03-17T22:00:07.126439Z","last_seen":"2026-03-17T22:00:07.126439Z","times_seen":1,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":67,"dns":37,"connect":8,"send":0,"wait":141,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"ulltaaahosttt.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.20.164","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ulltaaahosttt.click/","date":"2026-03-17T21:59:38.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:39:05 GMT","end":"Mon, 13 Apr 2026 08:39:04 GMT"},"fingerprint":{"sha1":"AC:37:C7:AF:75:CB:27:69:D4:EC:B6:A6:68:E1:51:4A:A3:99:78:B0","sha256":"63:86:A6:69:FF:ED:40:2B:88:13:6E:3E:4F:01:08:AB:8D:96:19:72:D3:22:DD:14:05:79:8E:5D:58:1F:0D:39"}}},"request":{"raw":"GET /adsense/domains/caf.js?abp=1\u0026YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ulltaaahosttt.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\ncache-control: no-store, must-revalidate\r\ndate: Tue, 17 Mar 2026 21:59:38 GMT\r\nserver: sffe\r\ncontent-length: 1631\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T01:47:03.978699Z","times_seen":13354468,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":98,"dns":1,"connect":21,"send":0,"wait":31,"receive":1,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}