{"report_id":"fc9b3921-7822-4734-b37e-64b1a5d9d745","version":0,"status":"done","tags":[],"date":"2026-10-07T12:24:09Z","url":{"schema":"http","addr":"portalmcss.com/privat/log.html","fqdn":"portalmcss.com","domain":"portalmcss.com","tld":"com"},"ip":{"addr":"107.6.142.186","port":0,"asn":32475,"as":"Internap Holding LLC","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"portalmcss.com/privat/log.html","fqdn":"portalmcss.com","domain":"portalmcss.com","tld":"com"},"title":"Login","dom":{"size":172704,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (23679)","md5":"ca59383b391cc408fffb32e876bd72fe","sha1":"d6873fe6ae40c85090542894edeb41d61c3ec5fb","sha256":"d3a7dd5b99dcea02343dfb4a4d2f9d6b283e183c88212a86419edb497b5a460b","sha512":"9b01e0ba2843cf792a18d09aaa3b6fab1bae3b574f2dab0117a2763b42ef07dbc8870da5691c9797e889c9253c0caf04917b8abd540389d94e8c94afa3386a76","ssdeep":"3072:ArSFRAb7eEDHp2vuWifhqW41AzcLQP6VDIT9:AbjDHAuhqW41Az5P6VDIZ","tlshash":"3af3bf7702a1013e291363bda3e764043ff8dc53e609dac4bfdc1568ef896e58466ac6","dom_hash":"domhashf4aaa7bc09d1f16de02eba94db468142","first_seen":"2026-01-23T17:16:04.597666Z","last_seen":"2026-10-08T05:28:57.81455Z","times_seen":9,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"portalmcss.com/privat/log.html","fqdn":"portalmcss.com","domain":"portalmcss.com","tld":"com"},"ip":{"addr":"107.6.142.186","port":0,"asn":32475,"as":"Internap Holding LLC","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T12:24:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"portalmcss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"portalmcss.com","ip":{"addr":"107.6.142.186","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-10-07","domain_rank":0,"first_seen":"2026-10-07T12:21:36.159604Z","last_seen":"2026-10-07T12:21:36.159604Z","alert_count":1,"request_count":1,"received_data":174292,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"SpeedyCache","description":"SpeedyCache is a WordPress plugin for optimizing page load times and caching efficiency.","website":"https://speedycache.com","common_platform_enumeration":"","icon":"SpeedyCache.svg","categories":["WordPress plugins","Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"portalmcss.com/privat/log.html","fqdn":"portalmcss.com","domain":"portalmcss.com","tld":"com"},"ip":{"addr":"107.6.142.186","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T12:23:40.762Z","timestamp":1791375820762,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.portalmcss.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 08:00:09 GMT","end":"Tue, 05 Jan 2027 08:00:08 GMT"},"fingerprint":{"sha1":"92:45:10:FD:48:EC:32:C1:4C:60:1A:18:51:58:46:6A:C5:2E:DD:6C","sha256":"19:10:71:8C:6D:58:3D:AC:90:02:A3:7D:7C:00:60:20:B1:78:42:C4:E4:8B:91:4C:9B:BC:16:5E:21:EA:34:38"}}},"request":{"raw":"GET /privat/log.html HTTP/1.1\r\nHost: portalmcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Wed, 07 Oct 2026 12:23:40 GMT\r\ncontent-type: text/html\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 87060\r\ndate: Wed, 07 Oct 2026 12:23:40 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-speedycache-source: Server\r\ncache-tag: portalmcss.com\r\ncdn-cache-control: max-age=1296000\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"SpeedyCache","description":"SpeedyCache is a WordPress plugin for optimizing page load times and caching efficiency.","website":"https://speedycache.com","common_platform_enumeration":"","icon":"SpeedyCache.svg","categories":["WordPress plugins","Caching"]}],"data":{"size":173756,"size_decoded":87596,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (23679), with CRLF line terminators","md5":"a72f29c48cbdf71caf3c6057d84398da","sha1":"32ee9e19d371c5ba4c21aff00af4c5300ef7686e","sha256":"99d65183f92fa199ba0533d16545bd0e40ec31be53656fa655cc2e4672f05b0b","sha512":"2128912d0ff2e6d303ab7abdd0df1fad52c710cb3e6a4c7022f385d7fba40df985e74b07dff39f5d521bbc30f87a4d3f120fa5769f86a3bf2ca315fd0e46a167","ssdeep":"3072:IrSFRA07eEDHp28uWifhqR41AzcZSbN49Xs2:IIjDHAnhqR41Az9bN49Xx","tlshash":"2a04ae374240117e993363bedbe3600cff9a6943e60453c4badc1a6aefb45548067e8e","first_seen":"2026-10-07T12:24:10.180253Z","last_seen":"2026-10-08T05:28:57.815736Z","times_seen":5,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":6,"connect":20,"send":0,"wait":39,"receive":20,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"portalmcss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}