{"report_id":"fd105b34-c530-4232-acb3-bce3812d7553","version":6,"status":"done","tags":[],"date":"2026-01-02T23:53:06Z","url":{"schema":"http","addr":"hoimesai.xyz","fqdn":"hoimesai.xyz","domain":"hoimesai.xyz","tld":"xyz"},"ip":{"addr":"86.54.25.52","port":0,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"hoimesai.xyz/","fqdn":"hoimesai.xyz","domain":"hoimesai.xyz","tld":"xyz"},"title":"HolmesAI: AI Agent Service Platform","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hoimesai.xyz","fqdn":"hoimesai.xyz","domain":"hoimesai.xyz","tld":"xyz"},"ip":{"addr":"86.54.25.52","port":0,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-06T23:53:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hoimesai.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"hoimesai.xyz","ip":{"addr":"86.54.25.52","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"domain_registered":"2025-12-22","domain_rank":0,"first_seen":"2026-01-02T23:53:07.180966Z","last_seen":"2026-01-02T23:53:07.180966Z","alert_count":4,"request_count":4,"received_data":34917970,"sent_data":1686,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hoimesai.xyz/dark_8dokd1ma.php","fqdn":"hoimesai.xyz","domain":"hoimesai.xyz","tld":"xyz"},"ip":{"addr":"86.54.25.52","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"70e957b51077a661691fb4f6af862da6","sha1":"183e208164d641a1cd83f317e3bd5bdb1d37e576","sha256":"6be0dc2a75a4cbbedd5ba3563ad3098942881748118e4bba4bf00bbaac7dc7d6","sha512":"878cbe5ad0d9f5c31df4170f772776337f9e8b649076461220bc01e9e72d32482cbdfdb1114a102f60e4d6b099d15e169387fe9a2b2eee82c86a013f06af58c6","ssdeep":"768:7vH3EgcV6kGEjdzlx47MXj8v3XHlulK4ReSwl5c+ckrYnri0gbI9+L0lgr0tWsLv:7vkjjdRxwPUgb3tL0dSIEec7Dmx","tlshash":"629384da2817d4d98e5260ded473e819e4244e23ceacf1a3e92cddc0756df6281871bb","size":92060,"data":"","first_seen":"2026-01-02T23:53:11.334838Z","last_seen":"2026-01-02T23:53:11.334838Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoimesai.xyz/2478755d-2b66-4faf-a9dd-14b9adbec3a5","fqdn":"hoimesai.xyz","domain":"hoimesai.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-06-13T15:26:27.778147Z","times_seen":5085,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hoimesai.xyz/assets/css/app.css","fqdn":"hoimesai.xyz","domain":"hoimesai.xyz","tld":"xyz"},"ip":{"addr":"86.54.25.52","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hoimesai.xyz/","date":"2026-01-02T23:52:40.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoimesai.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 18:36:34 GMT","end":"Sun, 22 Mar 2026 18:36:33 GMT"},"fingerprint":{"sha1":"00:EE:74:9E:10:6F:A9:61:A2:14:45:62:E7:A1:E5:EA:9C:79:24:37","sha256":"42:95:D1:BF:BB:1F:DA:8C:4E:96:DE:B7:3E:1C:41:DA:E9:C6:4C:7D:E3:A0:F2:2B:3D:2A:2B:7B:B3:2B:CF:23"}}},"request":{"raw":"GET /assets/css/app.css HTTP/1.1\r\nHost: hoimesai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoimesai.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 23:52:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 22 Dec 2025 15:08:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69495f08-1618a06\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23169542,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (41102)","md5":"a3ac26fb5ff7042924d9bd8873c70104","sha1":"4a90d2bf38f34c9ee94a2b6a008fd7501a73e315","sha256":"b63434caad0433583bf49d16f9139d4a357d5296b8199b9e2bb3ac517c135253","sha512":"a746e75079b00e78f4e2c320571a6b0d030ff7bbbbd66dce6328af8ff602ef9aa267b7aa97915f39d784ed047b9ee5e82e43a36a07fc84af46b12e714556a87f","ssdeep":"12288:i3wrh5YNDpnVT2wS9JEuUorRdRyWVEMmmRZatZ1IaOZjnz7bRXYiBGfqpahQe:i3IoNRIrRdC0/atZ6vHZBGfqpaJ","tlshash":"3d2512352256b8af6f367cf9f45c2a027cd44d1f9059dac865ca06d02bf95a09e3ec38","first_seen":"2026-01-02T23:53:11.3313Z","last_seen":"2026-01-02T23:53:11.3313Z","times_seen":1,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hoimesai.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoimesai.xyz/dark_8dokd1ma.php","fqdn":"hoimesai.xyz","domain":"hoimesai.xyz","tld":"xyz"},"ip":{"addr":"86.54.25.52","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoimesai.xyz/","date":"2026-01-02T23:52:40.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoimesai.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 18:36:34 GMT","end":"Sun, 22 Mar 2026 18:36:33 GMT"},"fingerprint":{"sha1":"00:EE:74:9E:10:6F:A9:61:A2:14:45:62:E7:A1:E5:EA:9C:79:24:37","sha256":"42:95:D1:BF:BB:1F:DA:8C:4E:96:DE:B7:3E:1C:41:DA:E9:C6:4C:7D:E3:A0:F2:2B:3D:2A:2B:7B:B3:2B:CF:23"}}},"request":{"raw":"GET /dark_8dokd1ma.php HTTP/1.1\r\nHost: hoimesai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 23:52:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 23048\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=3600\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92060,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"70e957b51077a661691fb4f6af862da6","sha1":"183e208164d641a1cd83f317e3bd5bdb1d37e576","sha256":"6be0dc2a75a4cbbedd5ba3563ad3098942881748118e4bba4bf00bbaac7dc7d6","sha512":"878cbe5ad0d9f5c31df4170f772776337f9e8b649076461220bc01e9e72d32482cbdfdb1114a102f60e4d6b099d15e169387fe9a2b2eee82c86a013f06af58c6","ssdeep":"768:7vH3EgcV6kGEjdzlx47MXj8v3XHlulK4ReSwl5c+ckrYnri0gbI9+L0lgr0tWsLv:7vkjjdRxwPUgb3tL0dSIEec7Dmx","tlshash":"629384da2817d4d98e5260ded473e819e4244e23ceacf1a3e92cddc0756df6281871bb","first_seen":"2026-01-02T23:53:11.334838Z","last_seen":"2026-01-02T23:53:11.334838Z","times_seen":1,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hoimesai.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoimesai.xyz/dark_8dokd1ma.php?m=2945663","fqdn":"hoimesai.xyz","domain":"hoimesai.xyz","tld":"xyz"},"ip":{"addr":"86.54.25.52","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoimesai.xyz/","date":"2026-01-02T23:52:42.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoimesai.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 18:36:34 GMT","end":"Sun, 22 Mar 2026 18:36:33 GMT"},"fingerprint":{"sha1":"00:EE:74:9E:10:6F:A9:61:A2:14:45:62:E7:A1:E5:EA:9C:79:24:37","sha256":"42:95:D1:BF:BB:1F:DA:8C:4E:96:DE:B7:3E:1C:41:DA:E9:C6:4C:7D:E3:A0:F2:2B:3D:2A:2B:7B:B3:2B:CF:23"}}},"request":{"raw":"GET /dark_8dokd1ma.php?m=2945663 HTTP/1.1\r\nHost: hoimesai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 23:52:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=300\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4194106,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0b264b1cba1dc2edc7550b41bffb24d2","sha1":"8507938a8423dc9370d71ded6c51dcf64b690130","sha256":"9d06a627371174c6b85f1aca232058a24b1213a72cb299803a58358fa2aa4130","sha512":"993a90fdcd9d593104e3acf00a7ac7f817c59517896f0d9fd7d6f851753f63041d87e98f3d4081664ad004071d12b4158b36f2b5d394eb3a92c9239bfcfbd588","ssdeep":"24576:IvlLmIev9oojoUFeam2y+2FqWSgqynUcMFigZ56klMMHs5PPv:clRevMGVy+2Ecciw56klMMHUPPv","tlshash":"f22523d4f472f1e13b119764f3d82fdc262890edaec422393920f8d4919a1a9d79ced2","first_seen":"2026-01-02T23:53:11.338295Z","last_seen":"2026-01-02T23:53:11.338295Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hoimesai.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoimesai.xyz/","fqdn":"hoimesai.xyz","domain":"hoimesai.xyz","tld":"xyz"},"ip":{"addr":"86.54.25.52","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-02T23:52:39.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoimesai.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 18:36:34 GMT","end":"Sun, 22 Mar 2026 18:36:33 GMT"},"fingerprint":{"sha1":"00:EE:74:9E:10:6F:A9:61:A2:14:45:62:E7:A1:E5:EA:9C:79:24:37","sha256":"42:95:D1:BF:BB:1F:DA:8C:4E:96:DE:B7:3E:1C:41:DA:E9:C6:4C:7D:E3:A0:F2:2B:3D:2A:2B:7B:B3:2B:CF:23"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hoimesai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 23:52:40 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 22 Dec 2025 17:31:12 GMT\r\netag: \"71d851-6468dcb18d800-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}],"data":{"size":7460945,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (40416)","md5":"caf0b284d802e2f2d3ab242ff81aca4e","sha1":"e43d9dac96772bc72fd40e3f156dadc0243cbae1","sha256":"b949a587db8edd951c2b170dc0210184f44da600bd27cf2cebf98e2e273c1e9c","sha512":"78b282d055591d18348695db6b1ff45cc7e8476a6430027878643935f79df04216e02cf6d5d04d0cca660e95c93b9974ba2cdcbd91bd3f763179cc84b860459b","ssdeep":"24576:rZJR8swOWDkwIw1cvtcVX9bORcRYKgLd5x0ib2OZ3GMp1:rrR8sRkYJ4LYL5SibGU","tlshash":"8c25237171776d764e8427bfa07a3d083cb2aae75b01f746b14ce5c0af9aac02c57458","first_seen":"2026-01-02T23:53:11.341081Z","last_seen":"2026-01-02T23:53:11.341081Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":85,"dns":43,"connect":13,"send":0,"wait":30,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hoimesai.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}