198.46.226.210

{
  "ip": 3324961490,
  "http": {
    "status": 404,
    "robots_hash": null,
    "redirects": [],
    "title_hash": null,
    "securitytxt": null,
    "title": null,
    "sitemap_hash": null,
    "robots": null,
    "dom_hash": 0,
    "components_hash": 0,
    "headers_hash": 2129120964,
    "host": "198.46.226.210",
    "html": "",
    "server_hash": null,
    "location": "/",
    "components": {},
    "securitytxt_hash": null,
    "headers": {
      "date": "Sun, 30 Aug 2026 03:32:35 GMT",
      "content-length": "0",
      "content-type": "text/plain"
    },
    "server": null,
    "sitemap": null,
    "html_hash": 0
  },
  "port": 443,
  "transport": "tcp",
  "cpe23_hash": -527748401,
  "location": {
    "city": "Dallas",
    "region_code": "TX",
    "area_code": null,
    "longitude": -96.80667,
    "latitude": 32.78306,
    "country_code": "US",
    "country_name": "United States"
  },
  "product": "Cobalt Strike Beacon",
  "hash": 1280581169,
  "tags": [
    "self-signed"
  ],
  "timestamp": "2026-08-30T03:33:04.479626",
  "ssl": {
    "chain_sha256": [
      "f2a45362789e10b5f5ec27da2763f45882c623e2d468d83754396d969f654b2c"
    ],
    "jarm": "07d14d16d21d21d00042d41d00041d47e4e0ae17960b2a5b4fd6107fbb0926",
    "tlsext": [
      {
        "id": 43,
        "name": "supported_versions"
      },
      {
        "id": 44,
        "name": "unknown"
      },
      {
        "id": 51,
        "name": "key_share"
      },
      {
        "id": 43,
        "name": "supported_versions"
      },
      {
        "id": 51,
        "name": "key_share"
      },
      {
        "id": 10,
        "name": "supported_groups"
      }
    ],
    "chain": [
      "-----BEGIN CERTIFICATE-----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\nyuMa39Y=\n-----END CERTIFICATE-----\n"
    ],
    "versions": [
      "-TLSv1",
      "-SSLv2",
      "-SSLv3",
      "-TLSv1.1",
      "TLSv1.2",
      "TLSv1.3"
    ],
    "acceptable_cas": [],
    "alpn": [],
    "cert": {
      "sig_alg": "sha256WithRSAEncryption",
      "issued": "20260818023844Z",
      "expires": "20270818023844Z",
      "pubkey": {
        "bits": 2048,
        "type": "rsa"
      },
      "version": 2,
      "extensions": [
        {
          "data": "\\x04\\x14b/\\x08\\x87*\\x8fJ\\xfdn\\xe7\\x10\\xa5\\xdf\\x88\\x1f\\xeej[\\xa4\\x90",
          "name": "subjectKeyIdentifier"
        }
      ],
      "fingerprint": {
        "sha256": "f2a45362789e10b5f5ec27da2763f45882c623e2d468d83754396d969f654b2c",
        "sha1": "0b1071cb8c79268bfd7a740237666e96c4287ea0"
      },
      "serial": 390762340,
      "issuer": {
        "C": "KZ",
        "CN": "foren.zik",
        "L": "",
        "O": "NN Fern Sub",
        "ST": "KZ",
        "OU": "NN Fern"
      },
      "expired": false,
      "subject": {
        "C": "KZ",
        "CN": "foren.zik",
        "L": "",
        "O": "NN Fern Sub",
        "ST": "KZ",
        "OU": "NN Fern"
      }
    },
    "cipher": {
      "version": "TLSv1.3",
      "bits": 256,
      "name": "TLS_AES_256_GCM_SHA384"
    },
    "trust": {
      "revoked": false,
      "browser": null
    },
    "handshake_states": [
      "before SSL initialization",
      "SSLv3/TLS write client hello",
      "SSLv3/TLS read server hello",
      "SSLv3/TLS write change cipher spec",
      "SSLv3/TLS write client hello",
      "SSLv3/TLS read server hello",
      "TLSv1.3 read encrypted extensions",
      "SSLv3/TLS read server certificate",
      "TLSv1.3 read server certificate verify",
      "SSLv3/TLS read finished",
      "SSLv3/TLS write finished",
      "SSL negotiation finished successfully"
    ],
    "ja3s": "fef5599f0a3662839aeb1f3c854eba06",
    "ocsp": {}
  },
  "hostnames": [
    "cruset.becausalem.us"
  ],
  "org": "RackNerd LLC",
  "data": "HTTP/1.1 404 Not Found\r\nDate: Sun, 30 Aug 2026 03:32:35 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\n\r\n",
  "asn": "AS36352",
  "cpe23": [
    "cpe:2.3:a:helpsystems:cobalt_strike"
  ],
  "isp": "HostPapa",
  "cpe": [
    "cpe:/a:helpsystems:cobalt_strike"
  ],
  "domains": [
    "becausalem.us"
  ],
  "ip_str": "198.46.226.210",
  "os": null,
  "_shodan": {
    "region": "na",
    "module": "https",
    "ptr": true,
    "options": {},
    "id": "2aa9d33b-bc2b-4372-a0c0-7021b2dcb09e",
    "crawler": "6d3ed9d6b8f837a126ee7cc6b0653be94de51626"
  }
}