{"report_id":"02a26ddf-c88a-43a5-9478-9177531404f7","version":6,"status":"done","tags":[],"date":"2026-01-09T23:43:26Z","url":{"schema":"https","addr":"12acr.online/","fqdn":"12acr.online","domain":"12acr.online","tld":"online"},"ip":{"addr":"163.61.188.5","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"12acr.online/verify","fqdn":"12acr.online","domain":"12acr.online","tld":"online"},"title":"Web3 Chat DApp - Decentralized Messaging","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"12acr.online/","fqdn":"12acr.online","domain":"12acr.online","tld":"online"},"ip":{"addr":"163.61.188.5","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-13T23:43:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"12acr.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"12acr.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"12acr.online","ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-10-24","domain_rank":0,"first_seen":"2025-12-08T13:41:33.615034Z","last_seen":"2025-12-08T13:41:33.615034Z","alert_count":18,"request_count":9,"received_data":7981641,"sent_data":4099,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"12acr.online/","fqdn":"12acr.online","domain":"12acr.online","tld":"online"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"206dc596db8c6ee88cdc101a1929d416","sha1":"78f0b487dd98f379d3c26efb71ae7c5bea529401","sha256":"3d87d43145aa91013cbe327255ec7da0a9bf61edbce48a45dbfd93db83a32d3d","sha512":"7add3cd8984110a3839c32cddd531aeab8bdfc1743c7f642ebfd8ae06610374e84f24d6f861d314cf56198efe0b755041aa2daf445e9303dce8e3508c7bfea45","ssdeep":"768:ZRVT4cPS0JCGLJCGIpeC7JgruOSlDMgwEJue5V5Q9CGYpTCc1McJcVYOHg8cgXcD:/7aJgoVJtQ9GTmYOOzEMMxe","tlshash":"c853b5d61906d4d94e5228dde4b7e88ae8244e53ceadf263da2cdcc0741dfa6c48713b","size":65310,"data":"","first_seen":"2026-01-07T08:11:38.174127Z","last_seen":"2026-01-09T23:43:31.95567Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"12acr.online/ad8401c7-0fd9-473b-93e3-b670d6daabcd","fqdn":"12acr.online","domain":"12acr.online","tld":"online"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-07-13T02:30:59.780646Z","times_seen":5081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"12acr.online/09b08583-5f19-4d2a-a43c-ca5a67211b88","fqdn":"12acr.online","domain":"12acr.online","tld":"online"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-06-28T16:47:47.454007Z","times_seen":5087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"12acr.online/assets/index-D4pHXG-X.js","fqdn":"12acr.online","domain":"12acr.online","tld":"online"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1da15b9097ef690ecb0383db5f59e757","sha1":"39f586d8c4bc36182159d0fdcc6ce15e3db483e0","sha256":"2757f3b5e7467409e1b8799e6bed0b332c9d4b82a18b44029a745b6e6e7436ac","sha512":"2ed584876592be6bcb2555e7b664a36d61db70646e434eeaadc44ffd13eb5cfa905a55f43ea63b5109e2a1e876544cfd4acb7a54b82a3cca2dd2f32178a95745","ssdeep":"96:jDax8yCaWayrHmOoq2u2cJ+BPARYX4AVs00vw8aEOa2YhmwxONqX+TWwmfztavkE:nef2doN5cJ+ZpVL048alYIwxONO+T1mM","tlshash":"ccb197e471ae44f462c91d4c78231a04412845a9e40dc06dbfa95dfee6af742cb8ffa2","size":5450,"data":"","first_seen":"2026-01-07T08:11:38.167714Z","last_seen":"2026-03-23T15:33:09.519559Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"12acr.online/owl.carousel-2.3.4.min.js","fqdn":"12acr.online","domain":"12acr.online","tld":"online"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48871ed3b9e54edb4e162c8c14076370","sha1":"973a81ba54190a0efc23e66970d5c0f603d59452","sha256":"c9ba298bff10b04ffe1589e901b3de8c736b16a8d9a4529cca9a22cafed5294b","sha512":"63dc319fe9d52a69a93f29db61b0e3714a2d5eb8fffde4750049ce4354b76881c4698220928d94a4ff4137bfb88d5656da5db86a4cf79f067ea97142a49fb0e5","ssdeep":"768:GJdTkc9eYJCGrJCGU0cLtvpkMda0rdCaO9+55j+LRYnjIcRicTc9GKJgKcg7cBFZ:eb3c8Mg6sIr+LGj2GKkl6qExc","tlshash":"c563a0d61905d4d94e1128dde4b7e88ee8280a93cdacf153da6cdcc6b41efa6c44723b","size":68152,"data":"","first_seen":"2026-01-07T08:11:38.160278Z","last_seen":"2026-01-09T23:43:31.921575Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"12acr.online/assets/index-Ba4nPpbF.js","fqdn":"12acr.online","domain":"12acr.online","tld":"online"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b20d393fec912a8085fe83c029824c0","sha1":"aaf7fb1dfa9aff405c3b14b5f4de92b3b6c92ce3","sha256":"d373d7ba4e05d4be51a519eaa1903ce6f525ea156120463bce62e29cc899636c","sha512":"776308597fd5c1ebb5e518fc9a395b60e46349585c7987b5afe6e494d1c12f375b6e373070f65fae0ebf44ee9d79a2c7d2e29ac6e60fd3234c589baf67eaa68c","ssdeep":"49152:RDlHXHkMtkV0axzS+O0D6xowGYtNtmgdGujhIJP6k4yBr/+JGVIf1GnkSKSxfvXu:8I+AdGudryBrGJGVFxnd8","tlshash":"66b56b8472a5b035539745e4503b1102f238a856700dc0bcf7ace9f7afa99898abff75","size":2375721,"data":"","first_seen":"2026-01-07T08:11:38.179393Z","last_seen":"2026-03-23T15:33:09.531998Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"12acr.online/","fqdn":"12acr.online","domain":"12acr.online","tld":"online"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-09T23:43:02.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"12acr.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 21:57:40 GMT","end":"Tue, 24 Mar 2026 21:57:39 GMT"},"fingerprint":{"sha1":"67:F8:65:2B:2E:70:F1:02:33:70:71:84:AF:13:3D:5D:15:D9:58:82","sha256":"3B:D4:8A:9F:EA:F5:C9:18:2E:41:F6:DA:CA:62:43:DE:9D:70:80:04:6B:B7:0A:0E:08:D7:B7:25:0B:3E:4F:65"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 12acr.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Sun, 28 Dec 2025 10:00:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 361\r\ndate: Fri, 09 Jan 2026 23:43:02 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":1090,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"06217f0546497d216625cc5750a65621","sha1":"fdd4f6081b83abb1b56b8d48db5ba39225e6fda5","sha256":"55baf02df04ae6da8d1377d07a37884a13a35f0197667802462528fdc5e2d112","sha512":"9e03ef873331121d4ab45b46db0ea5947175a5c7233b0e5733e5eebe239f01b028ed2b2140e68e74b4efa8de4389fa32e27207a1a96fb66e0e8ffd8231baba68","ssdeep":"","tlshash":"8111bb4799a0ce0442208a1e29d1f0c85935d11fdb40ac1cb6eeb0ae4fc9ad5cbd7b55","first_seen":"2026-01-07T08:11:38.143861Z","last_seen":"2026-01-09T23:43:31.91834Z","times_seen":3,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":224,"dns":13,"connect":103,"send":0,"wait":107,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"12acr.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"12acr.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"12acr.online/owl.carousel-2.3.4.min.js","fqdn":"12acr.online","domain":"12acr.online","tld":"online"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://12acr.online/","date":"2026-01-09T23:43:03.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"12acr.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 21:57:40 GMT","end":"Tue, 24 Mar 2026 21:57:39 GMT"},"fingerprint":{"sha1":"67:F8:65:2B:2E:70:F1:02:33:70:71:84:AF:13:3D:5D:15:D9:58:82","sha256":"3B:D4:8A:9F:EA:F5:C9:18:2E:41:F6:DA:CA:62:43:DE:9D:70:80:04:6B:B7:0A:0E:08:D7:B7:25:0B:3E:4F:65"}}},"request":{"raw":"GET /owl.carousel-2.3.4.min.js HTTP/1.1\r\nHost: 12acr.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://12acr.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 10:00:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17321\r\ndate: Fri, 09 Jan 2026 23:43:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":68152,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"48871ed3b9e54edb4e162c8c14076370","sha1":"973a81ba54190a0efc23e66970d5c0f603d59452","sha256":"c9ba298bff10b04ffe1589e901b3de8c736b16a8d9a4529cca9a22cafed5294b","sha512":"63dc319fe9d52a69a93f29db61b0e3714a2d5eb8fffde4750049ce4354b76881c4698220928d94a4ff4137bfb88d5656da5db86a4cf79f067ea97142a49fb0e5","ssdeep":"768:GJdTkc9eYJCGrJCGU0cLtvpkMda0rdCaO9+55j+LRYnjIcRicTc9GKJgKcg7cBFZ:eb3c8Mg6sIr+LGj2GKkl6qExc","tlshash":"c563a0d61905d4d94e1128dde4b7e88ee8280a93cdacf153da6cdcc6b41efa6c44723b","first_seen":"2026-01-07T08:11:38.160278Z","last_seen":"2026-01-09T23:43:31.921575Z","times_seen":3,"resource_available":true,"data":null}},"time_used":570,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"12acr.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"12acr.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"12acr.online/secureproxy.php?e=jscdn/getFile","fqdn":"12acr.online","domain":"12acr.online","tld":"online"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://12acr.online/","date":"2026-01-09T23:43:04.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"12acr.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 21:57:40 GMT","end":"Tue, 24 Mar 2026 21:57:39 GMT"},"fingerprint":{"sha1":"67:F8:65:2B:2E:70:F1:02:33:70:71:84:AF:13:3D:5D:15:D9:58:82","sha256":"3B:D4:8A:9F:EA:F5:C9:18:2E:41:F6:DA:CA:62:43:DE:9D:70:80:04:6B:B7:0A:0E:08:D7:B7:25:0B:3E:4F:65"}}},"request":{"raw":"POST /secureproxy.php?e=jscdn/getFile HTTP/1.1\r\nHost: 12acr.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://12acr.online/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://12acr.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"69ygayrqd3k2qwstnr7h\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.1.33\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Jan 2026 23:43:05 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 09 Jan 2026 23:43:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5406727,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f7a71bbcce6d295fdbddde614b199a08","sha1":"79303c464e237652b232d9c623cff2bd754f9b27","sha256":"126907b19af1ad2c3c233f6b9457eaa793cf1667535d10bfb3e2d4f2e86bf728","sha512":"052bea841228b6918e34b8bc8e05b3e14cfd44b9070c8bfaf0f3b7093a5fd70e9723062d6435d7faeac4177485c64489a206664320a98e6dedcf78ac888a2662","ssdeep":"24576:l7M0RTLNgthN6i8sGY/3nNiDNu2iS3FWikIDmwci6pmB:l5T5gDlNY8lCB","tlshash":"312502941d4a9450ce5cdeadacf26e49d4d88822fb9ea44ad909fc41fc39fb040c65fe","first_seen":"2026-01-09T23:43:31.936413Z","last_seen":"2026-01-09T23:43:31.936413Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1949,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1250,"receive":699,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"12acr.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"12acr.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"12acr.online/favicon.png","fqdn":"12acr.online","domain":"12acr.online","tld":"online"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://12acr.online/","date":"2026-01-09T23:43:04.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"12acr.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 21:57:40 GMT","end":"Tue, 24 Mar 2026 21:57:39 GMT"},"fingerprint":{"sha1":"67:F8:65:2B:2E:70:F1:02:33:70:71:84:AF:13:3D:5D:15:D9:58:82","sha256":"3B:D4:8A:9F:EA:F5:C9:18:2E:41:F6:DA:CA:62:43:DE:9D:70:80:04:6B:B7:0A:0E:08:D7:B7:25:0B:3E:4F:65"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: 12acr.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://12acr.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 09 Jan 2026 23:43:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-14T00:20:13.735176Z","times_seen":140480,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"12acr.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"12acr.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"12acr.online/assets/index-Ba4nPpbF.js","fqdn":"12acr.online","domain":"12acr.online","tld":"online"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://12acr.online/","date":"2026-01-09T23:43:03.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"12acr.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 21:57:40 GMT","end":"Tue, 24 Mar 2026 21:57:39 GMT"},"fingerprint":{"sha1":"67:F8:65:2B:2E:70:F1:02:33:70:71:84:AF:13:3D:5D:15:D9:58:82","sha256":"3B:D4:8A:9F:EA:F5:C9:18:2E:41:F6:DA:CA:62:43:DE:9D:70:80:04:6B:B7:0A:0E:08:D7:B7:25:0B:3E:4F:65"}}},"request":{"raw":"GET /assets/index-Ba4nPpbF.js HTTP/1.1\r\nHost: 12acr.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://12acr.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 01:21:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 643495\r\ndate: Fri, 09 Jan 2026 23:43:03 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2375721,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (37598)","md5":"058edf9487c46093c563fcd1e2280aa5","sha1":"c49e86953518166eed2cb12cb9eb5068ac0f1189","sha256":"d8ae43ee4aac4e438a77dedecd429803a94c3776f51e68145e90166fcd969272","sha512":"174dbf9c3e7566688e925f459e7105383de9a821730620776f30f7faa0bdc229d5c187e7f68d2c7ebc800a3311b5f9bb330ff194e83aeaa8bbe8b2f3bbdd503e","ssdeep":"24576:RDlHBlHkgFtkV0aUOzS+q90D6xowGYtNtmg8mGuTPhIJPxCX:RDlHXHkMtkV0axzS+O0D6xowGYtNtmgN","tlshash":"b0256cd472a5b07157a745d4107b1103f2386852700d80e4f2acddfbbafa98a86bbf79","first_seen":"2026-01-07T08:11:38.148766Z","last_seen":"2026-03-23T15:33:09.522788Z","times_seen":5,"resource_available":false,"data":null}},"time_used":707,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":603,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"12acr.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"12acr.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"12acr.online/assets/index-BL8FKEBC.css","fqdn":"12acr.online","domain":"12acr.online","tld":"online"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://12acr.online/","date":"2026-01-09T23:43:03.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"12acr.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 21:57:40 GMT","end":"Tue, 24 Mar 2026 21:57:39 GMT"},"fingerprint":{"sha1":"67:F8:65:2B:2E:70:F1:02:33:70:71:84:AF:13:3D:5D:15:D9:58:82","sha256":"3B:D4:8A:9F:EA:F5:C9:18:2E:41:F6:DA:CA:62:43:DE:9D:70:80:04:6B:B7:0A:0E:08:D7:B7:25:0B:3E:4F:65"}}},"request":{"raw":"GET /assets/index-BL8FKEBC.css HTTP/1.1\r\nHost: 12acr.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://12acr.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Jan 2026 23:43:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Dec 2025 01:21:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12265\r\ndate: Fri, 09 Jan 2026 23:43:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74605,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"72fd834dc0d3b3b8e2147a3100989c3d","sha1":"0dab9373623112943514d2c8e2969703f51a003b","sha256":"63760fede2a7e2cfff2b1f7413812665a6569dbc9b59dc58308f83c86682b9f5","sha512":"7951ba80aa63a2c6876da9457da61e7082a2cd890e4e50902b0781a776a7d78d0666b7e69e10a4bc81298562f61412a26c29ec988fb36060f455a5d706e8e2ca","ssdeep":"1536:6q5a/dbgHhD47IYSkW6/UkaGtCH378VQZkt5FNCox7:TPhD47mknUkaGtCH378VQZkt5Ffx7","tlshash":"6a73a519b919607e3c2790e883ccb9ec611df0c0de3b06b9be9a41216bd37f619b7558","first_seen":"2026-01-07T08:11:38.164451Z","last_seen":"2026-03-23T15:33:09.517605Z","times_seen":5,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"12acr.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"12acr.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"12acr.online/secureproxy?e=jscdn/getFile","fqdn":"12acr.online","domain":"12acr.online","tld":"online"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://12acr.online/","date":"2026-01-09T23:43:04.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"12acr.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 21:57:40 GMT","end":"Tue, 24 Mar 2026 21:57:39 GMT"},"fingerprint":{"sha1":"67:F8:65:2B:2E:70:F1:02:33:70:71:84:AF:13:3D:5D:15:D9:58:82","sha256":"3B:D4:8A:9F:EA:F5:C9:18:2E:41:F6:DA:CA:62:43:DE:9D:70:80:04:6B:B7:0A:0E:08:D7:B7:25:0B:3E:4F:65"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: 12acr.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://12acr.online/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://12acr.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"69ygayrqd3k2qwstnr7h\"}"}},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 09 Jan 2026 23:43:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-14T00:20:13.735176Z","times_seen":140480,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"12acr.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"12acr.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"12acr.online/assets/index-D4pHXG-X.js","fqdn":"12acr.online","domain":"12acr.online","tld":"online"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://12acr.online/","date":"2026-01-09T23:43:04.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"12acr.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 21:57:40 GMT","end":"Tue, 24 Mar 2026 21:57:39 GMT"},"fingerprint":{"sha1":"67:F8:65:2B:2E:70:F1:02:33:70:71:84:AF:13:3D:5D:15:D9:58:82","sha256":"3B:D4:8A:9F:EA:F5:C9:18:2E:41:F6:DA:CA:62:43:DE:9D:70:80:04:6B:B7:0A:0E:08:D7:B7:25:0B:3E:4F:65"}}},"request":{"raw":"GET /assets/index-D4pHXG-X.js HTTP/1.1\r\nHost: 12acr.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://12acr.online/assets/index-Ba4nPpbF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 01:21:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1839\r\ndate: Fri, 09 Jan 2026 23:43:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5450,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5087)","md5":"1da15b9097ef690ecb0383db5f59e757","sha1":"39f586d8c4bc36182159d0fdcc6ce15e3db483e0","sha256":"2757f3b5e7467409e1b8799e6bed0b332c9d4b82a18b44029a745b6e6e7436ac","sha512":"2ed584876592be6bcb2555e7b664a36d61db70646e434eeaadc44ffd13eb5cfa905a55f43ea63b5109e2a1e876544cfd4acb7a54b82a3cca2dd2f32178a95745","ssdeep":"96:jDax8yCaWayrHmOoq2u2cJ+BPARYX4AVs00vw8aEOa2YhmwxONqX+TWwmfztavkE:nef2doN5cJ+ZpVL048alYIwxONO+T1mM","tlshash":"ccb197e471ae44f462c91d4c78231a04412845a9e40dc06dbfa95dfee6af742cb8ffa2","first_seen":"2026-01-07T08:11:38.167714Z","last_seen":"2026-03-23T15:33:09.519559Z","times_seen":5,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"12acr.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"12acr.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"12acr.online/assets/logo-DIhmsSmT.png","fqdn":"12acr.online","domain":"12acr.online","tld":"online"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://12acr.online/","date":"2026-01-09T23:43:04.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"12acr.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 21:57:40 GMT","end":"Tue, 24 Mar 2026 21:57:39 GMT"},"fingerprint":{"sha1":"67:F8:65:2B:2E:70:F1:02:33:70:71:84:AF:13:3D:5D:15:D9:58:82","sha256":"3B:D4:8A:9F:EA:F5:C9:18:2E:41:F6:DA:CA:62:43:DE:9D:70:80:04:6B:B7:0A:0E:08:D7:B7:25:0B:3E:4F:65"}}},"request":{"raw":"GET /assets/logo-DIhmsSmT.png HTTP/1.1\r\nHost: 12acr.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://12acr.online/verify\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Jan 2026 23:43:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 28 Dec 2025 01:21:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 44640\r\ndate: Fri, 09 Jan 2026 23:43:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44640,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 697 x 440, 8-bit/color RGBA, non-interlaced","md5":"34b569dca94c970ab6e59072e66b045a","sha1":"63201a13e14fc48b3972031fdc6c1fddb4682865","sha256":"d506191fe5e04062ce5def9bd31c1df561ecc8d1c8e3d3b5b24cff5287fac226","sha512":"fa99a2b0cfafa5d20ace13e4b13ee4dbbd90f4f86c812fdf14c8489f70ed2dc0ab301e4cccea88ab8d4b2f0cb519cf9d399d8254a97b999f19b4d35647965510","ssdeep":"768:ZokodP9uAQu3+/6VQ8wt4IZ6pbK98CQb/ilBDjyVQqGHs98Fj/5:67cAQ6+/6VvwSk1cGIUMG/5","tlshash":"2c137b77d3b85837ca715b3456920b90917e1eeeea3e311456c33ea1973d7eeb12200a","first_seen":"2026-01-07T08:11:38.15547Z","last_seen":"2026-03-23T15:33:09.527959Z","times_seen":5,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"12acr.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"12acr.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}