{"report_id":"f6e173ef-40c1-4936-98ca-6ae47feaf957","version":0,"status":"done","tags":["coinbase","crypto","phishing"],"date":"2026-08-03T12:35:42Z","url":{"schema":"http","addr":"bangandloop.com/","fqdn":"bangandloop.com","domain":"bangandloop.com","tld":"com"},"ip":{"addr":"142.93.2.145","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"rejectkyc-reviewunder.142-93-2-145.cpanel.site/signin?c_ds_na=ArGUwBXXFd2rC2pY9WL2yXv4deIOPaFur1rlCmcaMF\u0026c_ds_no=text%2Fhtml%2Capplication%2Fxhtml%2Bxml%2Capplication%2Fxml%3Bq%3D0.9%2C%2A%2F%2A%3Bq%3D0.8","fqdn":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","domain":"142-93-2-145.cpanel.site","tld":"cpanel.site"},"title":"Coinbase - Sign In","dom":{"size":47978,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1834)","md5":"dbbd2e2edafa954b6d79ad54fe2be5a4","sha1":"7b94b97aa3b244e997a51aeab953b66bf4132767","sha256":"d4b44d6aa18ff5bc831ca609437974f8725de49ccbb3f7c021e9b082c7aa5460","sha512":"8cece7df80ea806a051dab81b8a6445223f85603a11f54deea5b28430fb4144379100b806fe080f87e5396cc0c35c22ea68f54e30e7024c740e7764a9f825543","ssdeep":"384:x6i/zpz+FBlgGRev9sedeIQ5noe40QJHZgWkjwYAJOja1ez4r18EFrxe5MLJq:x6i1zOwcemedW+e40fW8qi+l3e5MFq","tlshash":"cf23d6aa92b324353407c6f056b4569a7740c0139f19cde4bbdd16a0af8bde8c8f79e4","dom_hash":"domhash993a3618d0f0dea6de081833691755ed","first_seen":"2026-06-18T11:38:56.74645Z","last_seen":"2026-08-03T15:32:35.723083Z","times_seen":16,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bangandloop.com/","fqdn":"bangandloop.com","domain":"bangandloop.com","tld":"com"},"ip":{"addr":"142.93.2.145","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-07T12:35:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"bangandloop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]},"summary":[{"fqdn":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","ip":{"addr":"142.93.2.145","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"domain_registered":"2024-09-05","domain_rank":0,"first_seen":"2026-08-03T12:35:42.518132Z","last_seen":"2026-08-03T12:35:42.518132Z","alert_count":39,"request_count":13,"received_data":509358,"sent_data":9053,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"bangandloop.com","ip":{"addr":"142.93.2.145","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"domain_registered":"2026-08-02","domain_rank":0,"first_seen":"2026-08-03T12:29:44.517554Z","last_seen":"2026-08-03T12:29:44.517554Z","alert_count":2,"request_count":2,"received_data":242,"sent_data":884,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"http","addr":"bangandloop.com/","fqdn":"bangandloop.com","domain":"bangandloop.com","tld":"com"},"ip":{"addr":"142.93.2.145","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"214671e144f868b2f71c6b02ec401b56","sha1":"6cfe49a371cc25207638687fcdc7055099fa113d","sha256":"89c7239ac158dd61910f921b90026600ffe33569d8aec770b963fe58595e1fbe","sha512":"30a1d19eae047fabe4866018aff0cec8e7bdd6bd27fd6348ed8ffb91ccf3070012eb5096a3729d3f070b7ffca414c1068ea8164dadd6c1124de1b34e53ca2a56","ssdeep":"","tlshash":"b9b012bf30548559965281064f60a50aa097648ca4c112034701d104905c14f391b6cd","size":91,"data":"","first_seen":"2026-08-03T12:35:44.703627Z","last_seen":"2026-08-03T15:32:35.730879Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rejectkyc-reviewunder.142-93-2-145.cpanel.site/?signin2","fqdn":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","domain":"142-93-2-145.cpanel.site","tld":"cpanel.site"},"ip":{"addr":"142.93.2.145","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-03T12:35:15.871Z","timestamp":1785760515871,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rejectkyc-reviewunder.142-93-2-145.cpanel.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 15:46:58 GMT","end":"Wed, 28 Oct 2026 15:46:57 GMT"},"fingerprint":{"sha1":"6C:99:A5:89:35:BE:A6:4E:FD:F6:7E:B0:42:A9:4F:B4:79:CD:55:DB","sha256":"9F:AE:64:FD:43:1B:7A:4D:03:13:A8:D8:5C:C0:F3:D0:3C:6D:10:94:6B:A9:AA:DC:1F:99:A0:4A:F2:8B:60:27"}}},"request":{"raw":"GET /?signin2 HTTP/1.1\r\nHost: rejectkyc-reviewunder.142-93-2-145.cpanel.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://bangandloop.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Mon, 03 Aug 2026 12:35:16 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nSet-Cookie: PHPSESSID=fc43dcbeb3a8a4e0c045425275323998; path=/\r\nX-Robots-Tag: noindex, nofollow\r\nLocation: signin?c_ds_na=ArGUwBXXFd2rC2pY9WL2yXv4deIOPaFur1rlCmcaMF\u0026c_ds_no=text%2Fhtml%2Capplication%2Fxhtml%2Bxml%2Capplication%2Fxml%3Bq%3D0.9%2C%2A%2F%2A%3Bq%3D0.8\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T18:30:15.702548Z","times_seen":17694294,"resource_available":true,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":138,"connect":109,"send":0,"wait":210,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"rejectkyc-reviewunder.142-93-2-145.cpanel.site/signin?c_ds_na=ArGUwBXXFd2rC2pY9WL2yXv4deIOPaFur1rlCmcaMF\u0026c_ds_no=text%2Fhtml%2Capplication%2Fxhtml%2Bxml%2Capplication%2Fxml%3Bq%3D0.9%2C%2A%2F%2A%3Bq%3D0.8","fqdn":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","domain":"142-93-2-145.cpanel.site","tld":"cpanel.site"},"ip":{"addr":"142.93.2.145","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-03T12:35:16.449Z","timestamp":1785760516449,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rejectkyc-reviewunder.142-93-2-145.cpanel.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 15:46:58 GMT","end":"Wed, 28 Oct 2026 15:46:57 GMT"},"fingerprint":{"sha1":"6C:99:A5:89:35:BE:A6:4E:FD:F6:7E:B0:42:A9:4F:B4:79:CD:55:DB","sha256":"9F:AE:64:FD:43:1B:7A:4D:03:13:A8:D8:5C:C0:F3:D0:3C:6D:10:94:6B:A9:AA:DC:1F:99:A0:4A:F2:8B:60:27"}}},"request":{"raw":"GET /signin?c_ds_na=ArGUwBXXFd2rC2pY9WL2yXv4deIOPaFur1rlCmcaMF\u0026c_ds_no=text%2Fhtml%2Capplication%2Fxhtml%2Bxml%2Capplication%2Fxml%3Bq%3D0.9%2C%2A%2F%2A%3Bq%3D0.8 HTTP/1.1\r\nHost: rejectkyc-reviewunder.142-93-2-145.cpanel.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://bangandloop.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=fc43dcbeb3a8a4e0c045425275323998\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 12:35:16 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nX-Robots-Tag: noindex, nofollow\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":56250,"size_decoded":10582,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1834), with CRLF line terminators","md5":"690c347673c567c9de3868732e5397e6","sha1":"a428afd36509c6053efd0915361c60052795c278","sha256":"ced435c5eee5778fd80ff1ad3a891be450784a96ce10b51501c1652dc8924ab6","sha512":"ac6e27b5e1af5be2f5cc9078c49afcc65d91769b79ab56db1a47a6943c3bc952f2e80e0cf001e7dd1b4f15925216e4e1b0209ed7b3b5e375fa232b4536a7e842","ssdeep":"384:HBIBiDgrRegFARev9se7eIl5noeU0LM6AFQwFAJOja1zr/N1IEFrxeNERJH:HBZgdzmeme7X+eU0pAxqfnZ3eNEPH","tlshash":"f443a479d25224353037c7b09ab05689fb4180139b0585e4bbdd27a26fbb8edc4b7ee4","first_seen":"2024-09-02T14:31:27Z","last_seen":"2026-08-03T15:32:35.727356Z","times_seen":120,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"rejectkyc-reviewunder.142-93-2-145.cpanel.site/assets/font/502b733210ea3fdd4bf8.woff2","fqdn":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","domain":"142-93-2-145.cpanel.site","tld":"cpanel.site"},"ip":{"addr":"142.93.2.145","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/signin?c_ds_na=ArGUwBXXFd2rC2pY9WL2yXv4deIOPaFur1rlCmcaMF\u0026c_ds_no=text%2Fhtml%2Capplication%2Fxhtml%2Bxml%2Capplication%2Fxml%3Bq%3D0.9%2C%2A%2F%2A%3Bq%3D0.8","date":"2026-08-03T12:35:17.325Z","timestamp":1785760517325,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rejectkyc-reviewunder.142-93-2-145.cpanel.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 15:46:58 GMT","end":"Wed, 28 Oct 2026 15:46:57 GMT"},"fingerprint":{"sha1":"6C:99:A5:89:35:BE:A6:4E:FD:F6:7E:B0:42:A9:4F:B4:79:CD:55:DB","sha256":"9F:AE:64:FD:43:1B:7A:4D:03:13:A8:D8:5C:C0:F3:D0:3C:6D:10:94:6B:A9:AA:DC:1F:99:A0:4A:F2:8B:60:27"}}},"request":{"raw":"GET /assets/font/502b733210ea3fdd4bf8.woff2 HTTP/1.1\r\nHost: rejectkyc-reviewunder.142-93-2-145.cpanel.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/assets/css/styles.d87df576ff25e358663e.css\r\nCookie: PHPSESSID=fc43dcbeb3a8a4e0c045425275323998\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 12:35:17 GMT\r\nServer: Apache\r\nX-Robots-Tag: noindex, nofollow\r\nLast-Modified: Sun, 24 May 2026 16:23:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 40016\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":40016,"size_decoded":40293,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40016, version 1.2097","md5":"b54c6aeed882bdf66df4e5fac9c2340e","sha1":"b483fbe25190262b648b390c11e6bdf9fea33edb","sha256":"81368223143520415fe7fbdc3792d2d52ad7e422d8b214661ff932afe577b779","sha512":"3afc93e98b6a5a756a0e0adfc5d04da8258cbf9065fe4a90673d3193baefce1fb9867fc235dd953a4dce5a2b033b3d1f4280f20270db913baa0f72a3a73bf804","ssdeep":"768:acqYNePjaM2LJWNjCEa18ryDLCIZJFxucAMXM9tcrYecoNj46FSc3Xy6mjLk:a2NePjaMG3CIVxu3cMj1ebx4aSc3Xnm0","tlshash":"8603f1e3a36799e3dfaf54a575c21eac1a1044d765a3afa9d5f2024730d2d0d54031ec","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-08-03T15:32:35.728354Z","times_seen":1507,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"rejectkyc-reviewunder.142-93-2-145.cpanel.site/assets/font/2a5dafc68ca015ca866a.woff2","fqdn":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","domain":"142-93-2-145.cpanel.site","tld":"cpanel.site"},"ip":{"addr":"142.93.2.145","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/signin?c_ds_na=ArGUwBXXFd2rC2pY9WL2yXv4deIOPaFur1rlCmcaMF\u0026c_ds_no=text%2Fhtml%2Capplication%2Fxhtml%2Bxml%2Capplication%2Fxml%3Bq%3D0.9%2C%2A%2F%2A%3Bq%3D0.8","date":"2026-08-03T12:35:17.332Z","timestamp":1785760517332,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rejectkyc-reviewunder.142-93-2-145.cpanel.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 15:46:58 GMT","end":"Wed, 28 Oct 2026 15:46:57 GMT"},"fingerprint":{"sha1":"6C:99:A5:89:35:BE:A6:4E:FD:F6:7E:B0:42:A9:4F:B4:79:CD:55:DB","sha256":"9F:AE:64:FD:43:1B:7A:4D:03:13:A8:D8:5C:C0:F3:D0:3C:6D:10:94:6B:A9:AA:DC:1F:99:A0:4A:F2:8B:60:27"}}},"request":{"raw":"GET /assets/font/2a5dafc68ca015ca866a.woff2 HTTP/1.1\r\nHost: rejectkyc-reviewunder.142-93-2-145.cpanel.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/assets/css/styles.d87df576ff25e358663e.css\r\nCookie: PHPSESSID=fc43dcbeb3a8a4e0c045425275323998\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 03 Aug 2026 12:35:17 GMT\r\nServer: Apache\r\nX-Robots-Tag: noindex, nofollow\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":588,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-03T18:35:19.640945Z","times_seen":53710,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":98,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"rejectkyc-reviewunder.142-93-2-145.cpanel.site/assets/font/868eaaa6850959ed2ab9.woff2","fqdn":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","domain":"142-93-2-145.cpanel.site","tld":"cpanel.site"},"ip":{"addr":"142.93.2.145","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/signin?c_ds_na=ArGUwBXXFd2rC2pY9WL2yXv4deIOPaFur1rlCmcaMF\u0026c_ds_no=text%2Fhtml%2Capplication%2Fxhtml%2Bxml%2Capplication%2Fxml%3Bq%3D0.9%2C%2A%2F%2A%3Bq%3D0.8","date":"2026-08-03T12:35:17.334Z","timestamp":1785760517334,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rejectkyc-reviewunder.142-93-2-145.cpanel.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 15:46:58 GMT","end":"Wed, 28 Oct 2026 15:46:57 GMT"},"fingerprint":{"sha1":"6C:99:A5:89:35:BE:A6:4E:FD:F6:7E:B0:42:A9:4F:B4:79:CD:55:DB","sha256":"9F:AE:64:FD:43:1B:7A:4D:03:13:A8:D8:5C:C0:F3:D0:3C:6D:10:94:6B:A9:AA:DC:1F:99:A0:4A:F2:8B:60:27"}}},"request":{"raw":"GET /assets/font/868eaaa6850959ed2ab9.woff2 HTTP/1.1\r\nHost: rejectkyc-reviewunder.142-93-2-145.cpanel.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/assets/css/styles.d87df576ff25e358663e.css\r\nCookie: PHPSESSID=fc43dcbeb3a8a4e0c045425275323998\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 12:35:17 GMT\r\nServer: Apache\r\nX-Robots-Tag: noindex, nofollow\r\nLast-Modified: Sun, 24 May 2026 16:23:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 119476\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":119476,"size_decoded":119754,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 119476, version 1.0","md5":"9e0f57e68d93938ef40f5e5f31b48c5f","sha1":"7b6819eb284ea4f535669c692b80fad250015395","sha256":"31a55a060d59db48cab5fab57e607d844e5e4a97b75afa281cac1e5f09461341","sha512":"9261c343108d2cc0914e925fc0ffb149c177300ee53c93560252f93bbc62ec8b031c03e0f93a0970caf1ce15300d17fc54adfb87632ed1d5365f387c04e75c21","ssdeep":"3072:g7iDCZrmYlHPCAoEcEOZz0VrxQ24NL5eBFvXB5BwM:5CtX5qA3cEOZotxoU0M","tlshash":"45c312351d5e9627aa7ca77e30ad60e3f03f1045ca6e646033f82c61ce2cd2651eea49","first_seen":"2024-08-16T20:00:07Z","last_seen":"2026-08-03T15:32:35.724055Z","times_seen":131,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":108,"send":0,"wait":102,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"bangandloop.com/","fqdn":"bangandloop.com","domain":"bangandloop.com","tld":"com"},"ip":{"addr":"142.93.2.145","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-03T12:35:15.565Z","timestamp":1785760515565,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: bangandloop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 12:35:15 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 02 Aug 2026 20:12:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 560\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T18:30:15.702548Z","times_seen":17694294,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"bangandloop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rejectkyc-reviewunder.142-93-2-145.cpanel.site/assets/css/styles.d87df576ff25e358663e.css","fqdn":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","domain":"142-93-2-145.cpanel.site","tld":"cpanel.site"},"ip":{"addr":"142.93.2.145","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/signin?c_ds_na=ArGUwBXXFd2rC2pY9WL2yXv4deIOPaFur1rlCmcaMF\u0026c_ds_no=text%2Fhtml%2Capplication%2Fxhtml%2Bxml%2Capplication%2Fxml%3Bq%3D0.9%2C%2A%2F%2A%3Bq%3D0.8","date":"2026-08-03T12:35:16.751Z","timestamp":1785760516751,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rejectkyc-reviewunder.142-93-2-145.cpanel.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 15:46:58 GMT","end":"Wed, 28 Oct 2026 15:46:57 GMT"},"fingerprint":{"sha1":"6C:99:A5:89:35:BE:A6:4E:FD:F6:7E:B0:42:A9:4F:B4:79:CD:55:DB","sha256":"9F:AE:64:FD:43:1B:7A:4D:03:13:A8:D8:5C:C0:F3:D0:3C:6D:10:94:6B:A9:AA:DC:1F:99:A0:4A:F2:8B:60:27"}}},"request":{"raw":"GET /assets/css/styles.d87df576ff25e358663e.css HTTP/1.1\r\nHost: rejectkyc-reviewunder.142-93-2-145.cpanel.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/signin?c_ds_na=ArGUwBXXFd2rC2pY9WL2yXv4deIOPaFur1rlCmcaMF\u0026c_ds_no=text%2Fhtml%2Capplication%2Fxhtml%2Bxml%2Capplication%2Fxml%3Bq%3D0.9%2C%2A%2F%2A%3Bq%3D0.8\r\nCookie: PHPSESSID=fc43dcbeb3a8a4e0c045425275323998\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 12:35:16 GMT\r\nServer: Apache\r\nX-Robots-Tag: noindex, nofollow\r\nLast-Modified: Sun, 24 May 2026 16:23:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 124426\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":124426,"size_decoded":124702,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"32c33077b10498cf40aa15d0668ace92","sha1":"481f9711579c25f99c14886fcb7dfa9420ceef2e","sha256":"f47de1b7f7de1c4e73d6ea89cf7a15fce2df5c45a8e42132399701421d21ffbc","sha512":"5c0245de99107cc8457be6d653bf664ccc9525cc68c7978a308112a76fb82cf37f92c17475a2ce1a2196a6a99f7706f26890d75c97b5d45102217c5fa571445a","ssdeep":"1536:9PxU/wTVUUhSxxhomwKhEJLX3dULxglIZZ1z3FcSt:9PxUWJKhaq7","tlshash":"d2c3db5119229138593b6bfee7ea2a0ff71130278a1191dcbdcd50824fb66b9d132f8d","first_seen":"2024-09-02T14:31:27Z","last_seen":"2026-08-03T15:32:35.729811Z","times_seen":128,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"rejectkyc-reviewunder.142-93-2-145.cpanel.site/assets/css/styles.43cdd765c2fa35b596d4.css","fqdn":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","domain":"142-93-2-145.cpanel.site","tld":"cpanel.site"},"ip":{"addr":"142.93.2.145","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/signin?c_ds_na=ArGUwBXXFd2rC2pY9WL2yXv4deIOPaFur1rlCmcaMF\u0026c_ds_no=text%2Fhtml%2Capplication%2Fxhtml%2Bxml%2Capplication%2Fxml%3Bq%3D0.9%2C%2A%2F%2A%3Bq%3D0.8","date":"2026-08-03T12:35:16.752Z","timestamp":1785760516752,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rejectkyc-reviewunder.142-93-2-145.cpanel.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 15:46:58 GMT","end":"Wed, 28 Oct 2026 15:46:57 GMT"},"fingerprint":{"sha1":"6C:99:A5:89:35:BE:A6:4E:FD:F6:7E:B0:42:A9:4F:B4:79:CD:55:DB","sha256":"9F:AE:64:FD:43:1B:7A:4D:03:13:A8:D8:5C:C0:F3:D0:3C:6D:10:94:6B:A9:AA:DC:1F:99:A0:4A:F2:8B:60:27"}}},"request":{"raw":"GET /assets/css/styles.43cdd765c2fa35b596d4.css HTTP/1.1\r\nHost: rejectkyc-reviewunder.142-93-2-145.cpanel.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/signin?c_ds_na=ArGUwBXXFd2rC2pY9WL2yXv4deIOPaFur1rlCmcaMF\u0026c_ds_no=text%2Fhtml%2Capplication%2Fxhtml%2Bxml%2Capplication%2Fxml%3Bq%3D0.9%2C%2A%2F%2A%3Bq%3D0.8\r\nCookie: PHPSESSID=fc43dcbeb3a8a4e0c045425275323998\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 12:35:17 GMT\r\nServer: Apache\r\nX-Robots-Tag: noindex, nofollow\r\nLast-Modified: Sun, 24 May 2026 16:23:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2822\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2822,"size_decoded":3097,"mime_type":"text/css","magic":"ASCII text, with very long lines (2822), with no line terminators","md5":"4ca04530702667f3b1e41fa68787f98a","sha1":"26668ae81d746df65e44daf91433bfe23916dded","sha256":"73773da73980988a58070676b0f2477e94069c87d938ed063377c71de49474a2","sha512":"c06e2c6f22cb6a91f1d9d4432b1f17980f124213263af1e636f333d600d4dba0f025b5bd511374a727a3153648ecbf849eb4b4296cdc25b7c3a38891d43d7568","ssdeep":"","tlshash":"f6518b779a912244c013ca44abd827bc963cc166b7320ded77063b37c787ada16a568b","first_seen":"2024-06-19T23:59:20Z","last_seen":"2026-08-03T15:32:35.726238Z","times_seen":129,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":109,"send":0,"wait":109,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"rejectkyc-reviewunder.142-93-2-145.cpanel.site/assets/images/captcha.png","fqdn":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","domain":"142-93-2-145.cpanel.site","tld":"cpanel.site"},"ip":{"addr":"142.93.2.145","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/signin?c_ds_na=ArGUwBXXFd2rC2pY9WL2yXv4deIOPaFur1rlCmcaMF\u0026c_ds_no=text%2Fhtml%2Capplication%2Fxhtml%2Bxml%2Capplication%2Fxml%3Bq%3D0.9%2C%2A%2F%2A%3Bq%3D0.8","date":"2026-08-03T12:35:17.287Z","timestamp":1785760517287,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rejectkyc-reviewunder.142-93-2-145.cpanel.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 15:46:58 GMT","end":"Wed, 28 Oct 2026 15:46:57 GMT"},"fingerprint":{"sha1":"6C:99:A5:89:35:BE:A6:4E:FD:F6:7E:B0:42:A9:4F:B4:79:CD:55:DB","sha256":"9F:AE:64:FD:43:1B:7A:4D:03:13:A8:D8:5C:C0:F3:D0:3C:6D:10:94:6B:A9:AA:DC:1F:99:A0:4A:F2:8B:60:27"}}},"request":{"raw":"GET /assets/images/captcha.png HTTP/1.1\r\nHost: rejectkyc-reviewunder.142-93-2-145.cpanel.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/assets/css/styles__ltr.css\r\nCookie: PHPSESSID=fc43dcbeb3a8a4e0c045425275323998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 12:35:17 GMT\r\nServer: Apache\r\nX-Robots-Tag: noindex, nofollow\r\nLast-Modified: Sun, 24 May 2026 16:23:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2228\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2228,"size_decoded":2503,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-08-03T18:22:50.082503Z","times_seen":701326,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"rejectkyc-reviewunder.142-93-2-145.cpanel.site/assets/font/8a6a40a08f92d9a9b3e5.woff2","fqdn":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","domain":"142-93-2-145.cpanel.site","tld":"cpanel.site"},"ip":{"addr":"142.93.2.145","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/signin?c_ds_na=ArGUwBXXFd2rC2pY9WL2yXv4deIOPaFur1rlCmcaMF\u0026c_ds_no=text%2Fhtml%2Capplication%2Fxhtml%2Bxml%2Capplication%2Fxml%3Bq%3D0.9%2C%2A%2F%2A%3Bq%3D0.8","date":"2026-08-03T12:35:17.327Z","timestamp":1785760517327,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rejectkyc-reviewunder.142-93-2-145.cpanel.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 15:46:58 GMT","end":"Wed, 28 Oct 2026 15:46:57 GMT"},"fingerprint":{"sha1":"6C:99:A5:89:35:BE:A6:4E:FD:F6:7E:B0:42:A9:4F:B4:79:CD:55:DB","sha256":"9F:AE:64:FD:43:1B:7A:4D:03:13:A8:D8:5C:C0:F3:D0:3C:6D:10:94:6B:A9:AA:DC:1F:99:A0:4A:F2:8B:60:27"}}},"request":{"raw":"GET /assets/font/8a6a40a08f92d9a9b3e5.woff2 HTTP/1.1\r\nHost: rejectkyc-reviewunder.142-93-2-145.cpanel.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/assets/css/styles.d87df576ff25e358663e.css\r\nCookie: PHPSESSID=fc43dcbeb3a8a4e0c045425275323998\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 12:35:17 GMT\r\nServer: Apache\r\nX-Robots-Tag: noindex, nofollow\r\nLast-Modified: Sun, 24 May 2026 16:23:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 40076\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":40076,"size_decoded":40353,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40076, version 1.2097","md5":"88e532b2f6f58aac7f1dbbd3b4731e92","sha1":"e95841b0fe50b87199b4abbfd2d10563896e0688","sha256":"a1f75e7f702059493bb74cfcb3178d095b3f6da4d313e92b3ceabc3e63eb914c","sha512":"0c5a54e3bcc57152391a87ddfe4fb3bd13271f2bb0a2aaa605da649f86b301d9ba603c359315bde13420c83651b5e266d6269f51eb5c1ab43823f8851d09b574","ssdeep":"768:UZJnqiM79PCLTjpjMz6R1T1laTnl+rNvatafqvM7B1XOv:UbQ7kly6R1ScQ4iYvev","tlshash":"3e0302b7d657282df92f5fbd6e4c81187840491770f787528a8f2066c162cb8f56fd09","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-08-03T15:32:35.728848Z","times_seen":1167,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"rejectkyc-reviewunder.142-93-2-145.cpanel.site/assets/font/71371380d08a07cda58a.woff2","fqdn":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","domain":"142-93-2-145.cpanel.site","tld":"cpanel.site"},"ip":{"addr":"142.93.2.145","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/signin?c_ds_na=ArGUwBXXFd2rC2pY9WL2yXv4deIOPaFur1rlCmcaMF\u0026c_ds_no=text%2Fhtml%2Capplication%2Fxhtml%2Bxml%2Capplication%2Fxml%3Bq%3D0.9%2C%2A%2F%2A%3Bq%3D0.8","date":"2026-08-03T12:35:17.329Z","timestamp":1785760517329,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rejectkyc-reviewunder.142-93-2-145.cpanel.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 15:46:58 GMT","end":"Wed, 28 Oct 2026 15:46:57 GMT"},"fingerprint":{"sha1":"6C:99:A5:89:35:BE:A6:4E:FD:F6:7E:B0:42:A9:4F:B4:79:CD:55:DB","sha256":"9F:AE:64:FD:43:1B:7A:4D:03:13:A8:D8:5C:C0:F3:D0:3C:6D:10:94:6B:A9:AA:DC:1F:99:A0:4A:F2:8B:60:27"}}},"request":{"raw":"GET /assets/font/71371380d08a07cda58a.woff2 HTTP/1.1\r\nHost: rejectkyc-reviewunder.142-93-2-145.cpanel.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/assets/css/styles.d87df576ff25e358663e.css\r\nCookie: PHPSESSID=fc43dcbeb3a8a4e0c045425275323998\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 12:35:17 GMT\r\nServer: Apache\r\nX-Robots-Tag: noindex, nofollow\r\nLast-Modified: Sun, 24 May 2026 16:23:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 40480\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":40480,"size_decoded":40757,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40480, version 1.2097","md5":"c9a6e887656f7b1014db3f1a07247ee2","sha1":"371f6e5792cff6d3bf6122392d2403f05f1ca445","sha256":"5db56ddf9ab991fc7a3a5b188b6b0c92331213ec4991b71d9821c36dcbcdb687","sha512":"8544191d90eb82b7ed77b813bebb04c918677dd206f37d151db7ee5f34feef64afee26b0ea94398a64a8aea0d8c6d8613dd1b106eb49142a485235e6e19e2710","ssdeep":"768:Czw/1p285wfUizBtYzRe195L9i980ZzsDTdPALCNVb872CEzwZfkAYl:tI85WBtd195xi980Cn6IbT9ws","tlshash":"810301d9265d774ed88b863709c227308ce889d6720be1872bb4a18371e6ec8c625fd5","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-08-03T15:32:35.72931Z","times_seen":1603,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"rejectkyc-reviewunder.142-93-2-145.cpanel.site/assets/css/styles__ltr.css","fqdn":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","domain":"142-93-2-145.cpanel.site","tld":"cpanel.site"},"ip":{"addr":"142.93.2.145","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/signin?c_ds_na=ArGUwBXXFd2rC2pY9WL2yXv4deIOPaFur1rlCmcaMF\u0026c_ds_no=text%2Fhtml%2Capplication%2Fxhtml%2Bxml%2Capplication%2Fxml%3Bq%3D0.9%2C%2A%2F%2A%3Bq%3D0.8","date":"2026-08-03T12:35:16.758Z","timestamp":1785760516758,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rejectkyc-reviewunder.142-93-2-145.cpanel.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 15:46:58 GMT","end":"Wed, 28 Oct 2026 15:46:57 GMT"},"fingerprint":{"sha1":"6C:99:A5:89:35:BE:A6:4E:FD:F6:7E:B0:42:A9:4F:B4:79:CD:55:DB","sha256":"9F:AE:64:FD:43:1B:7A:4D:03:13:A8:D8:5C:C0:F3:D0:3C:6D:10:94:6B:A9:AA:DC:1F:99:A0:4A:F2:8B:60:27"}}},"request":{"raw":"GET /assets/css/styles__ltr.css HTTP/1.1\r\nHost: rejectkyc-reviewunder.142-93-2-145.cpanel.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/signin?c_ds_na=ArGUwBXXFd2rC2pY9WL2yXv4deIOPaFur1rlCmcaMF\u0026c_ds_no=text%2Fhtml%2Capplication%2Fxhtml%2Bxml%2Capplication%2Fxml%3Bq%3D0.9%2C%2A%2F%2A%3Bq%3D0.8\r\nCookie: PHPSESSID=fc43dcbeb3a8a4e0c045425275323998\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 12:35:17 GMT\r\nServer: Apache\r\nX-Robots-Tag: noindex, nofollow\r\nLast-Modified: Sun, 24 May 2026 16:23:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 64932\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":64932,"size_decoded":65208,"mime_type":"text/css","magic":"ASCII text, with very long lines (19534), with CRLF line terminators","md5":"d25667ceda900ff1e7423b079021364f","sha1":"995da8f1ac514c40b5e69ef7a48182d0ccc6f0b4","sha256":"da0f41e5e49d2fcdddc204da77d0966d5a382b59801110137bd31eb95f3d4ad0","sha512":"6c249fb9fe33ed90a5daedb673dfde058957b5a3281b391b1d5a36e8c26a1237b2785f9721d1fa02d603ac800624cc1a9c9f64046b6cb17267d23695cdb77668","ssdeep":"768:rUmmAWTe2uXYp8Mi+yKwzWooZeI70UOYdSGdXXwWfwChS:rUcW6v+M/OhXwWfo","tlshash":"7e53086696022a0777339b6837aa0b44f62d5033ef01767977ca76484ff9478c0a1f9e","first_seen":"2024-09-02T14:31:27Z","last_seen":"2026-08-03T15:32:35.726848Z","times_seen":128,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":102,"send":0,"wait":103,"receive":203,"ssl":106},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"bangandloop.com/","fqdn":"bangandloop.com","domain":"bangandloop.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-03T12:35:15.328Z","timestamp":1785760515328,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: bangandloop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T18:30:15.702548Z","times_seen":17694294,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"bangandloop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rejectkyc-reviewunder.142-93-2-145.cpanel.site/assets/css/styles.babae8c0eccf7b247500.css","fqdn":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","domain":"142-93-2-145.cpanel.site","tld":"cpanel.site"},"ip":{"addr":"142.93.2.145","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/signin?c_ds_na=ArGUwBXXFd2rC2pY9WL2yXv4deIOPaFur1rlCmcaMF\u0026c_ds_no=text%2Fhtml%2Capplication%2Fxhtml%2Bxml%2Capplication%2Fxml%3Bq%3D0.9%2C%2A%2F%2A%3Bq%3D0.8","date":"2026-08-03T12:35:16.754Z","timestamp":1785760516754,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rejectkyc-reviewunder.142-93-2-145.cpanel.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 15:46:58 GMT","end":"Wed, 28 Oct 2026 15:46:57 GMT"},"fingerprint":{"sha1":"6C:99:A5:89:35:BE:A6:4E:FD:F6:7E:B0:42:A9:4F:B4:79:CD:55:DB","sha256":"9F:AE:64:FD:43:1B:7A:4D:03:13:A8:D8:5C:C0:F3:D0:3C:6D:10:94:6B:A9:AA:DC:1F:99:A0:4A:F2:8B:60:27"}}},"request":{"raw":"GET /assets/css/styles.babae8c0eccf7b247500.css HTTP/1.1\r\nHost: rejectkyc-reviewunder.142-93-2-145.cpanel.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/signin?c_ds_na=ArGUwBXXFd2rC2pY9WL2yXv4deIOPaFur1rlCmcaMF\u0026c_ds_no=text%2Fhtml%2Capplication%2Fxhtml%2Bxml%2Capplication%2Fxml%3Bq%3D0.9%2C%2A%2F%2A%3Bq%3D0.8\r\nCookie: PHPSESSID=fc43dcbeb3a8a4e0c045425275323998\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 12:35:17 GMT\r\nServer: Apache\r\nX-Robots-Tag: noindex, nofollow\r\nLast-Modified: Sun, 24 May 2026 16:23:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 13736\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13736,"size_decoded":14012,"mime_type":"text/css","magic":"ASCII text, with very long lines (13736), with no line terminators","md5":"128da45bc7847546ec0dd0009af8875c","sha1":"7b4a130119aec33954de860faa4c63cd73a54c99","sha256":"63769174d2d68475a5cbd39a703b5f876f675486c64a903768dd52ec231b1f81","sha512":"a349848b07e8b0d68d355b5eadc27a2b66f0eac8247decbbc8d6f1224a5bc6f40a42261215e02491161f4567c8dbee4f86eb4b0e2675234dc23a68bada5006b5","ssdeep":"192:lGuuwFM4DgPn9DXrmsbsiotaxTjcJozSkR+8DEFsc0AEqE:lGulkPn9DbmsbsiWaxI6p48A0AEp","tlshash":"e25232a96610a77c6463fded63dc6fdb4000b0018b310ae6e453633247cbee76a765c6","first_seen":"2024-09-02T14:31:27Z","last_seen":"2026-08-03T15:32:35.727863Z","times_seen":128,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":108,"send":0,"wait":109,"receive":108,"ssl":114},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"rejectkyc-reviewunder.142-93-2-145.cpanel.site/assets/images/favicon.ico","fqdn":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","domain":"142-93-2-145.cpanel.site","tld":"cpanel.site"},"ip":{"addr":"142.93.2.145","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/signin?c_ds_na=ArGUwBXXFd2rC2pY9WL2yXv4deIOPaFur1rlCmcaMF\u0026c_ds_no=text%2Fhtml%2Capplication%2Fxhtml%2Bxml%2Capplication%2Fxml%3Bq%3D0.9%2C%2A%2F%2A%3Bq%3D0.8","date":"2026-08-03T12:35:17.657Z","timestamp":1785760517657,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rejectkyc-reviewunder.142-93-2-145.cpanel.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 15:46:58 GMT","end":"Wed, 28 Oct 2026 15:46:57 GMT"},"fingerprint":{"sha1":"6C:99:A5:89:35:BE:A6:4E:FD:F6:7E:B0:42:A9:4F:B4:79:CD:55:DB","sha256":"9F:AE:64:FD:43:1B:7A:4D:03:13:A8:D8:5C:C0:F3:D0:3C:6D:10:94:6B:A9:AA:DC:1F:99:A0:4A:F2:8B:60:27"}}},"request":{"raw":"GET /assets/images/favicon.ico HTTP/1.1\r\nHost: rejectkyc-reviewunder.142-93-2-145.cpanel.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/signin?c_ds_na=ArGUwBXXFd2rC2pY9WL2yXv4deIOPaFur1rlCmcaMF\u0026c_ds_no=text%2Fhtml%2Capplication%2Fxhtml%2Bxml%2Capplication%2Fxml%3Bq%3D0.9%2C%2A%2F%2A%3Bq%3D0.8\r\nCookie: PHPSESSID=fc43dcbeb3a8a4e0c045425275323998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 12:35:17 GMT\r\nServer: Apache\r\nX-Robots-Tag: noindex, nofollow\r\nLast-Modified: Sun, 24 May 2026 16:23:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 557\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/x-icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":557,"size_decoded":834,"mime_type":"image/x-icon","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"52bad1d125e93b0235a76b87996a82d0","sha1":"b2a650a251ddb79c24160958c649de3209ee2f1c","sha256":"b90cdcbe9e842bf371d9c5e7dd13359fde26879a4642ad6f752e86a65fab4fb5","sha512":"2dff26e6083fc1fa70283e407e205201d5694de361a925f4e64360cce56d2f94b690bcb075ca6f02b9b380b7e9e1f2c2d0da6f606e6a4380fc981f4ec55ef0f0","ssdeep":"","tlshash":"9df020d74e609b5c5c5e6b3e53ae882482510d9c1c14694fc442781a3c3429d05f6316","first_seen":"2023-05-01T23:35:47Z","last_seen":"2026-08-03T15:32:35.724626Z","times_seen":705,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-03","alert":"Sinkholed","trigger":"rejectkyc-reviewunder.142-93-2-145.cpanel.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}}]}