{"report_id":"fee54b9d-4398-48fa-a7d9-53831c088beb","version":6,"status":"done","tags":[],"date":"2026-03-10T12:16:38Z","url":{"schema":"http","addr":"s3.hmstorage.net","fqdn":"s3.hmstorage.net","domain":"hmstorage.net","tld":"net"},"ip":{"addr":"166.1.227.81","port":0,"asn":55286,"as":"SERVER-MANIA","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"s3.hmstorage.net/","fqdn":"s3.hmstorage.net","domain":"hmstorage.net","tld":"net"},"title":"s3.hmstorage.net/","dom":{"size":154,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"1f470b91c4f2a6a4044a12efe8225c8b","sha1":"24bcf0d6b241cd96a6a7a505cea75c8a8e3a3602","sha256":"91b4d9e24a5a8f9bd8229dd7fb4114555318548f87403d35ee2d40d419d9b154","sha512":"c9d7aab312279999c0ea0752c1fea4601856bf4c450010e557679104bf7e8a8851c18d409555f9f650de7a42dfd046d006e66c1405d502fab380eba99a30644c","ssdeep":"","tlshash":"30c08c858c6824b4dfb1902885e812e8385871f220ac03c06c3dc74a24108f660004a0","dom_hash":"domhashaf0ad2c8dac42ec1ca7786f48d46f863","first_seen":"2025-11-11T07:10:01.03525Z","last_seen":"2026-07-25T02:29:26.88952Z","times_seen":32,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"s3.hmstorage.net","fqdn":"s3.hmstorage.net","domain":"hmstorage.net","tld":"net"},"ip":{"addr":"166.1.227.81","port":0,"asn":55286,"as":"SERVER-MANIA","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-14T12:16:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"s3.hmstorage.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"s3.hmstorage.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"s3.hmstorage.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"s3.hmstorage.net","ip":{"addr":"166.1.227.81","port":443,"asn":55286,"as":"SERVER-MANIA","country":"United States","country_code":"US"},"domain_registered":"2025-11-11","domain_rank":0,"first_seen":"2025-12-11T17:25:43.031286Z","last_seen":"2025-12-11T17:25:43.031286Z","alert_count":6,"request_count":2,"received_data":912,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"s3.hmstorage.net/","fqdn":"s3.hmstorage.net","domain":"hmstorage.net","tld":"net"},"ip":{"addr":"166.1.227.81","port":443,"asn":55286,"as":"SERVER-MANIA","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-10T12:16:16.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.hmstorage.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 20:55:46 GMT","end":"Mon, 13 Apr 2026 20:55:45 GMT"},"fingerprint":{"sha1":"9F:F9:E2:EF:7A:5A:42:64:31:55:48:FD:90:36:64:7D:EF:62:ED:97","sha256":"76:F8:72:E8:9F:45:58:09:A1:C0:98:17:D7:35:CF:91:92:89:C5:7A:27:E6:EE:05:FC:09:01:E1:21:D0:6A:9E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: s3.hmstorage.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 10 Mar 2026 12:16:17 GMT\r\ncontent-type: application/xml\r\nvary: Accept-Encoding\r\nx-amz-request-id: tx00000eae1960ed502d066-0069b00b91-2d295-us-1\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":214,"size_decoded":0,"mime_type":"application/xml","magic":"XML 1.0 document, ASCII text, with no line terminators","md5":"a4a8d0eda31cf91486c8156e7ddeea1c","sha1":"fd0a1e4a5436b7f9caaaa90af771ae28baddebae","sha256":"21d2130be1a447b38a6ac672d0c3002db6adb08f2a18ff85b92d40056fabe9e6","sha512":"6116637944ee0601b3de587898555836d37bb647b37847306840e3acf82389717216d5c76e0912e07c61cb664f8ec92194bd16ba21a089b37094a2d308cb100f","ssdeep":"","tlshash":"02d02288cd2838f0cff0e60846fce2883170f2b620ec23c0acbddfca29218e611000a0","first_seen":"2023-07-18T09:12:27Z","last_seen":"2026-07-25T02:29:26.891944Z","times_seen":67,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":221,"dns":7,"connect":102,"send":0,"wait":103,"receive":0,"ssl":108},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"s3.hmstorage.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"s3.hmstorage.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"s3.hmstorage.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.hmstorage.net/favicon.ico","fqdn":"s3.hmstorage.net","domain":"hmstorage.net","tld":"net"},"ip":{"addr":"166.1.227.81","port":443,"asn":55286,"as":"SERVER-MANIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s3.hmstorage.net/","date":"2026-03-10T12:16:17.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.hmstorage.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 20:55:46 GMT","end":"Mon, 13 Apr 2026 20:55:45 GMT"},"fingerprint":{"sha1":"9F:F9:E2:EF:7A:5A:42:64:31:55:48:FD:90:36:64:7D:EF:62:ED:97","sha256":"76:F8:72:E8:9F:45:58:09:A1:C0:98:17:D7:35:CF:91:92:89:C5:7A:27:E6:EE:05:FC:09:01:E1:21:D0:6A:9E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: s3.hmstorage.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s3.hmstorage.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Tue, 10 Mar 2026 12:16:17 GMT\r\ncontent-type: application/xml\r\ncontent-length: 231\r\nx-amz-request-id: tx00000a3f7c5a4afc5046d-0069b00b91-2d295-us-1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/xml","magic":"XML 1.0 document, ASCII text, with no line terminators","md5":"acf21d472fb2f6164bd81335cd80802d","sha1":"0f83e4bb1483db673cd23bd303b8e7fd03d96d1f","sha256":"7d989aeb25185702b7d9649a9e2f174400850ab2436f1a1bea50892ac0d6b01c","sha512":"1ff1b283d7de56aa7c950af537bee4de0c5d46502df3cf70a2e01563069295061d5977097d51c9f978632600359f23b18935a4018ead402f743c32b9b4727124","ssdeep":"","tlshash":"0ed0971422602a289378041d2ebbe11277a0e0352be074317ca502430ba00414d20071","first_seen":"2026-03-10T12:16:38.410233Z","last_seen":"2026-03-10T12:16:38.410233Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"s3.hmstorage.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"s3.hmstorage.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"s3.hmstorage.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}