{"report_id":"efe76a80-4d45-43c9-98ac-b2505c44bb01","version":0,"status":"done","tags":[],"date":"2026-08-31T15:15:19Z","url":{"schema":"http","addr":"itau-unibancosa.solutions/","fqdn":"itau-unibancosa.solutions","domain":"itau-unibancosa.solutions","tld":"solutions"},"ip":{"addr":"185.30.32.129","port":0,"asn":48324,"as":"webgo GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"itau-unibancosa.solutions/","fqdn":"itau-unibancosa.solutions","domain":"itau-unibancosa.solutions","tld":"solutions"},"title":"Diese Domain wurde bei webgo für einen Kunden registriert | webgo GmbH","dom":{"size":18500,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7190)","md5":"dfeac8f1e8ef950e63ee59187dcbadbf","sha1":"ca1aafff2e63eaf18c47d7d0625f01310b5b3c6a","sha256":"3e4b3efe94979176c6b051933e5d7862abc52e1ea7dae6f23ee261cfa62b5504","sha512":"f4bb0cd56f570afec4d7bc2b7ae1b460402bb919e1b29841a0f698a896948b0db11f3ea4acb495b2a482b740ebc1e8b12122bb42173065f04a9d938dbafe81d4","ssdeep":"192:RtbqaRu+2WBD5+VAVZk7DXtyR1q+dCKyJ+tRnBku63/oRNfXEVH/6piOn6Ixit:RtqaRpdjDk7DDAtRu3/oRNfUVSpio6","tlshash":"63820963488eb0156232afaea6da32156524dcc39946ca747c9c9f54cfcdb90358f3dc","dom_hash":"domhash8b242a123f94f767fe66f7bb51898a9c","first_seen":"2026-08-31T14:50:44.154543Z","last_seen":"2026-08-31T15:15:20.317449Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"itau-unibancosa.solutions/","fqdn":"itau-unibancosa.solutions","domain":"itau-unibancosa.solutions","tld":"solutions"},"ip":{"addr":"185.30.32.129","port":0,"asn":48324,"as":"webgo GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T15:15:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"itau-unibancosa.solutions","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"itau-unibancosa.solutions","ip":{"addr":"185.30.32.129","port":443,"asn":48324,"as":"webgo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-31T14:50:40.082023Z","last_seen":"2026-08-31T14:50:40.082023Z","alert_count":1,"request_count":1,"received_data":18735,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"itau-unibancosa.solutions/","fqdn":"itau-unibancosa.solutions","domain":"itau-unibancosa.solutions","tld":"solutions"},"ip":{"addr":"185.30.32.129","port":443,"asn":48324,"as":"webgo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3bf45e3867865907d1b1e88fdfae2931","sha1":"e1b8888492b6fc797185cd98f13460133e5a99e8","sha256":"14da73cb6def6c12f2f0538feae8d5ab9d68321c8e0cb1575cb53d0e30886021","sha512":"3f2e4d2c7d2992558706cd8ab3bef1c4bd9b943be7ebc0970f6e6378acf36934cfa9d44b65d95025405fc5ece09de5195a318a3d2bf9844040097704770ae7f1","ssdeep":"","tlshash":"dea011eb20080a202aea222baa033308302280a22802a8220c8c080000a0b0b823aac8","size":80,"data":"","first_seen":"2026-06-07T17:56:54.898768Z","last_seen":"2026-08-31T15:15:20.320324Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"itau-unibancosa.solutions/","fqdn":"itau-unibancosa.solutions","domain":"itau-unibancosa.solutions","tld":"solutions"},"ip":{"addr":"185.30.32.129","port":443,"asn":48324,"as":"webgo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T15:14:51.097Z","timestamp":1788189291097,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itau-unibancosa.solutions","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 22:29:41 GMT","end":"Thu, 26 Nov 2026 22:29:40 GMT"},"fingerprint":{"sha1":"C5:CD:D7:3A:CE:3B:D8:D6:8D:55:C1:5E:E7:5C:A6:F0:9F:94:FE:96","sha256":"70:88:21:D1:E9:59:DC:F7:6E:1E:77:9B:BA:E6:A9:63:3A:6F:6E:41:9C:12:C8:F1:71:12:F2:3C:EC:80:1C:94"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: itau-unibancosa.solutions\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 15:14:51 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 28 Aug 2026 14:59:40 GMT\r\netag: W/\"4844-65a1cb3acf6c5\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18500,"size_decoded":8643,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7190)","md5":"db786dd0a24a6c8b2b65744bd4d26fd4","sha1":"8de83b479e5e826e404203fda15a16f7f7b73390","sha256":"9ba20b29a940f8d872d794fe60f27aca8a583d12611ff99edb3f4f2a3d157376","sha512":"15324d2bbceef21886f1fdb1dfd0351d2a3e55125916947357630edca83d2acce5fed7b66de343296ed706bca9b79003215c1384ab43235456fadeef34eac944","ssdeep":"192:PtbqaRu+ZWBD5+VPVZk7DXtkR1q+dCKyJ+tRnBku63/oRNfXEVH/6piOn6IxV3:PtqaRpkjSk7DRAtRu3/oRNfUVSpiof","tlshash":"4f820963488eb0156232afaea6da32156524dcc39942ca747c9c9f54cfcdb90358f3dc","first_seen":"2025-11-23T07:48:33.406956Z","last_seen":"2026-08-31T15:15:20.318427Z","times_seen":17,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":4,"connect":31,"send":0,"wait":35,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"itau-unibancosa.solutions","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
