{"report_id":"054ffd35-4cdf-46b4-9ed2-8e56f2f289b3","version":6,"status":"done","tags":[],"date":"2026-05-19T19:41:52Z","url":{"schema":"https","addr":"dnstats.net/site/flugsvamp/","fqdn":"dnstats.net","domain":"dnstats.net","tld":"net"},"ip":{"addr":"104.21.15.99","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dnstats.net/site/flugsvamp/","fqdn":"dnstats.net","domain":"dnstats.net","tld":"net"},"title":"Flugsvamp - The Swedish drug marketplace - Flugsvamp Market","dom":{"size":13586,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3411)","md5":"72302a88dd607bfe99868fcf9266ca03","sha1":"0dafcecf438e1de4655c0a2dde527998c5dcefcc","sha256":"3a56dcb45ec2e66f293fd2843f62506f1bab7bd6f42f6f32fcef003f47f77515","sha512":"bbed1c153d24eb6f18ade82e8b5a0c474cc818c8598f049b2753c243b25ea10d0f67c188e56f27aa495c6c27ff310fdef2e9a136acb78254e6c8e1d6ceea1b9d","ssdeep":"192:mV5syaN7HdeqQsgMkSkocxBLSGlVhua2jAqkmnyn4zSzSaCFVxcFFkfCXZI80vyo:cVSZcxBaa1qkmAuT21i","tlshash":"23520a3bc12123b609574a55bf242fc8d31dc1ebd2d04afa36ed0298ef41765953794d","dom_hash":"domhash8d094599bb6ce76f3cd20eacbe039f85","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"dnstats.net/site/flugsvamp/","fqdn":"dnstats.net","domain":"dnstats.net","tld":"net"},"ip":{"addr":"104.21.15.99","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-23T19:41:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"dnstats.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dnstats.net","ip":{"addr":"172.67.162.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-04-23","domain_rank":7240925,"first_seen":"2014-05-11T18:46:22Z","last_seen":"2025-08-13T05:29:54.132953Z","alert_count":5,"request_count":5,"received_data":124539,"sent_data":2355,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-05-17T22:48:39.617247Z","alert_count":0,"request_count":1,"received_data":33601,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v833ccba57c9e4d2798f2e76cebdd09a11778172276447","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ec2f610910f9dfd8e87975604e5e34c","sha1":"10d61ee41e8fe816ca08616159d7b6b8294a2011","sha256":"aca73fc574e12740e3368860b88a284d01b643456f3ed6a06322ecb47750563f","sha512":"e7b30399c71c25762d3671fe662070cc2e236f6aef815084a2460df8bfe72e598ef2b7d84ff808a56d80e7af6227fddbfb45046ac8218ee647fe66b7c08b3f11","ssdeep":"384:qVCILwCiUg1IX33sDycq+AgMXUQKxrhxIZOGNG620vbgZLTE5egwolSV0yuuokwz:AwCiUqHmcd/5xdKZdt8Z3Cer2yuuDPQB","tlshash":"6ce219e9b595713613f350b2406f220bb33a7562588e8018e22bd7c16c78eded267f6d","size":33228,"data":"","first_seen":"2026-05-07T16:46:10.96487Z","last_seen":"2026-07-21T04:55:29.875263Z","times_seen":31881,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dnstats.net/favicon.ico","fqdn":"dnstats.net","domain":"dnstats.net","tld":"net"},"ip":{"addr":"172.67.162.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dnstats.net/site/flugsvamp/","date":"2026-05-19T19:41:31.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dnstats.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 03:03:36 GMT","end":"Thu, 09 Jul 2026 04:03:27 GMT"},"fingerprint":{"sha1":"FD:A8:7F:76:3D:2A:AF:59:31:DB:72:2C:CB:44:11:1D:60:0E:77:9E","sha256":"3A:94:51:65:24:DB:05:84:91:16:3A:78:32:2F:58:D4:53:F2:4E:02:D8:AB:47:F1:A6:91:12:F4:47:E2:E8:41"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dnstats.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dnstats.net/site/flugsvamp/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=6,i=?0\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncontent-type: image/vnd.microsoft.icon\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=691200, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eLitIYwKPIh%2FMXz96UeY7mbFvwEYS7LRn0bKLJXCYM3GHhkEC74XvC1DB9Op1NcvAmHdLeCzWzZ0WVXBF8lbpv7EYFEXAF%2BiwJPp3qMRcyKm7PtnVUNBYZ%2BKkLScHqaNvFR%2FFXtjT%2FxuAQ%3D%3D\"}]}\r\netag: W/\"e419c73256b374a60c11fbecf5592b3e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Tue, 19 May 2026 19:41:31 GMT\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9fe5945fbc7e56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"000bf649cc8f6bf27cfb04d1bcdcd3c7","sha1":"d73d2f6d74ec6cdcbae07955592962e77d8ae814","sha256":"6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0","sha512":"73d2ea5ffc572c1ae73f37f8f0ff25e945afee8e077b6ee42ce969e575cdc2d8444f90848ea1cb4d1c9ee4bd725aee2b4576afc25f17d7295a90e1cbfe6edfd5","ssdeep":"96:h3bdWfcmTY+aRF1pXWZL2+42HGhIUc8KeLEd:hgXTY+as02mOB8XLEd","tlshash":"00814b63df38c566e66a2b189ff6bca56b290fd50ca1194c0eecb025632c06d1065089","first_seen":"2023-04-08T12:31:37Z","last_seen":"2026-07-21T20:47:50.346878Z","times_seen":71493,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"dnstats.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dnstats.net/site/flugsvamp/","fqdn":"dnstats.net","domain":"dnstats.net","tld":"net"},"ip":{"addr":"172.67.162.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-19T19:41:30.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dnstats.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 03:03:36 GMT","end":"Thu, 09 Jul 2026 04:03:27 GMT"},"fingerprint":{"sha1":"FD:A8:7F:76:3D:2A:AF:59:31:DB:72:2C:CB:44:11:1D:60:0E:77:9E","sha256":"3A:94:51:65:24:DB:05:84:91:16:3A:78:32:2F:58:D4:53:F2:4E:02:D8:AB:47:F1:A6:91:12:F4:47:E2:E8:41"}}},"request":{"raw":"GET /site/flugsvamp/ HTTP/1.1\r\nHost: dnstats.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 May 2026 19:41:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"MISS\", cfEdge;dur=127,cfOrigin;dur=0\r\ncf-ray: 9fe5945bbc985691-OSL\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=691200, must-revalidate\r\nlast-modified: Tue, 19 May 2026 19:41:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0LnyCfBVaRRXf5fSsXMW8aU7TwFAocFZZV5%2FVVtPZPi%2BbEOWgC35n1mceHJRSSmzY755xZjS3XPidpY%2Fgo0RuWTmHy0XLoELbpLg0K0sklCitBucz%2Bz9uYPFsmBYzA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncf-apo-via: origin,miss\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":13469,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3429)","md5":"c48a7ad6d5a719792b4979f04e5cdf56","sha1":"ad4eba441c23ecf3b07f3b521c058af9fe8a69e9","sha256":"242c3f6b3eed38878d0314044ad26e0fe43cd5e694c80247732f6b37a15f7a47","sha512":"fe2c2c7f191f37605629eb1298f78a62b9c486bb65fe8e77d96dca4cf4e5ed8bb10a2fa27b9846544800ea245d45ffa5531a2c89d7fc29f3397d95d3022cea19","ssdeep":"192:2V5syaN7HdeqQTWkSkocxBLSGlVhua2jAqkmnyn4zSzSauFVxcFFkfCXZI80vy0a:sSZcxBaa1qkmAunD4","tlshash":"8f52fa3b921123b609578aa97f242fc8d31cc0ebd1c48aa636ed0398ff41b65963795d","first_seen":"2026-05-19T19:41:53.490312Z","last_seen":"2026-05-19T19:41:53.490312Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":57,"dns":37,"connect":1,"send":0,"wait":135,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"dnstats.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dnstats.net/global.css","fqdn":"dnstats.net","domain":"dnstats.net","tld":"net"},"ip":{"addr":"172.67.162.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dnstats.net/site/flugsvamp/","date":"2026-05-19T19:41:31.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dnstats.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 03:03:36 GMT","end":"Thu, 09 Jul 2026 04:03:27 GMT"},"fingerprint":{"sha1":"FD:A8:7F:76:3D:2A:AF:59:31:DB:72:2C:CB:44:11:1D:60:0E:77:9E","sha256":"3A:94:51:65:24:DB:05:84:91:16:3A:78:32:2F:58:D4:53:F2:4E:02:D8:AB:47:F1:A6:91:12:F4:47:E2:E8:41"}}},"request":{"raw":"GET /global.css HTTP/1.1\r\nHost: dnstats.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dnstats.net/site/flugsvamp/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 May 2026 19:41:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=691200, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7wZODVJZNgn0DzOEYNp1f4nkJObx035nl63Ixzt3Wwdt9ZQhuBRmMbqJrNJ%2B4C4GvWynzAfyzJqEpmr6bfojOazAwSdlM5wnhLW4boFlKXGZO6cPz0cgd9cGlvgeJABy45e9Z5aFhZFRCA%3D%3D\"}]}\r\netag: W/\"7e6edfa1cc1c9f1afeb4a3cf5af66f1c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: REVALIDATED\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9fe5945e98525691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2805,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c1c830513684bdc20fa93e23cc7626d5","sha1":"272876e0fcdf00d963e3a03e63d855a1ce973274","sha256":"cea0d2a5bef559f1b2a7d535f41839aa0e8290cc80655eca2241312930395824","sha512":"8b5b23f713b6078c946987d6c76657f1b55da68746643ac4676b06451e53531654c716543fc6db1a5e796d218fda4f956aa9c3c9dbfa29abe112f2939956a127","ssdeep":"","tlshash":"34511d9467b46a71e8278194b581abe877cc60084c4dcebc2efa440cadcd2f1a4a1b8d","first_seen":"2026-05-19T19:41:53.492122Z","last_seen":"2026-05-19T19:41:53.492122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"dnstats.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v833ccba57c9e4d2798f2e76cebdd09a11778172276447","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dnstats.net/site/flugsvamp/","date":"2026-05-19T19:41:31.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 18:57:25 GMT","end":"Thu, 16 Jul 2026 19:57:22 GMT"},"fingerprint":{"sha1":"AB:25:45:8F:55:B6:2B:26:B5:B1:EF:90:E0:60:64:9C:56:47:0F:B5","sha256":"47:83:31:CC:5E:02:0E:51:A7:52:AC:83:1B:8A:A8:4C:74:11:A5:F1:61:8D:C5:6D:29:3C:9D:6A:C9:29:AF:7F"}}},"request":{"raw":"GET /beacon.min.js/v833ccba57c9e4d2798f2e76cebdd09a11778172276447 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dnstats.net/\r\nOrigin: https://dnstats.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 May 2026 19:41:31 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.5.0\"\r\nlast-modified: Thu, 07 May 2026 16:44:36 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9fe5945ecbbfb503-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33228,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (33228), with no line terminators","md5":"3ec2f610910f9dfd8e87975604e5e34c","sha1":"10d61ee41e8fe816ca08616159d7b6b8294a2011","sha256":"aca73fc574e12740e3368860b88a284d01b643456f3ed6a06322ecb47750563f","sha512":"e7b30399c71c25762d3671fe662070cc2e236f6aef815084a2460df8bfe72e598ef2b7d84ff808a56d80e7af6227fddbfb45046ac8218ee647fe66b7c08b3f11","ssdeep":"384:qVCILwCiUg1IX33sDycq+AgMXUQKxrhxIZOGNG620vbgZLTE5egwolSV0yuuokwz:AwCiUqHmcd/5xdKZdt8Z3Cer2yuuDPQB","tlshash":"6ce219e9b595713613f350b2406f220bb33a7562588e8018e22bd7c16c78eded267f6d","first_seen":"2026-05-07T16:46:10.96487Z","last_seen":"2026-07-21T04:55:29.875263Z","times_seen":31881,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":18,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dnstats.net/site/flugsvamp/images/site-flugsvamp-01.webp","fqdn":"dnstats.net","domain":"dnstats.net","tld":"net"},"ip":{"addr":"172.67.162.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dnstats.net/site/flugsvamp/","date":"2026-05-19T19:41:31.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dnstats.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 03:03:36 GMT","end":"Thu, 09 Jul 2026 04:03:27 GMT"},"fingerprint":{"sha1":"FD:A8:7F:76:3D:2A:AF:59:31:DB:72:2C:CB:44:11:1D:60:0E:77:9E","sha256":"3A:94:51:65:24:DB:05:84:91:16:3A:78:32:2F:58:D4:53:F2:4E:02:D8:AB:47:F1:A6:91:12:F4:47:E2:E8:41"}}},"request":{"raw":"GET /site/flugsvamp/images/site-flugsvamp-01.webp HTTP/1.1\r\nHost: dnstats.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dnstats.net/site/flugsvamp/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 99582\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=691200, must-revalidate\r\netag: \"ccf447b5ca1888abca04e968092113d8\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZcOb2iS41oKPLxQtnZC%2BGltcTXj%2Fs5ymhxSr1heSbYk3mrxhy373%2F8z8xtHJqFYrEr2hAV5buCMYsx0rwxL%2BehBOjwdj1Tp7sg3q%2BL%2Blm0x4YTusGADaAvXBsqILJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ndate: Tue, 19 May 2026 19:41:31 GMT\r\naccept-ranges: bytes\r\ncf-ray: 9fe5945f2c6f56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99582,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1192x1037, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4fdfc8f02c47d173b97fb7006068c48f","sha1":"c23c25bca36f52946aec8decdf61cdb3f78b32df","sha256":"1158fac6a8330fa20a3b8ed076e44ec2ff401b818093d17ea4148734b07024ae","sha512":"92daf3c277f70c410bb85e10648faa9233ea72f44d1da351fda299a3f7f11b22d03643040bc643e500d7eb015ee0c2d7c63008559ba5ea650dc1bcacf9385229","ssdeep":"3072:omz7/Y5kYy39x4AOpegDk65+9f4BCeUaWoR:omz7/YiYK6regg65PCeUCR","tlshash":"90a302b62c792130a1dea8b15fbb0676b21c1dc22f05eb656846649386b239c1d94eec","first_seen":"2026-05-19T19:41:53.494632Z","last_seen":"2026-05-19T19:41:53.494632Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"dnstats.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dnstats.net/cdn-cgi/rum?","fqdn":"dnstats.net","domain":"dnstats.net","tld":"net"},"ip":{"addr":"172.67.162.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dnstats.net/site/flugsvamp/","date":"2026-05-19T19:41:31.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dnstats.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 03:03:36 GMT","end":"Thu, 09 Jul 2026 04:03:27 GMT"},"fingerprint":{"sha1":"FD:A8:7F:76:3D:2A:AF:59:31:DB:72:2C:CB:44:11:1D:60:0E:77:9E","sha256":"3A:94:51:65:24:DB:05:84:91:16:3A:78:32:2F:58:D4:53:F2:4E:02:D8:AB:47:F1:A6:91:12:F4:47:E2:E8:41"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: dnstats.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dnstats.net/site/flugsvamp/\r\ncontent-type: application/json\r\nContent-Length: 646\r\nOrigin: https://dnstats.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":646,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":610,\"startTime\":1779219690779,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.5.0\",\"timings\":2},\"pageloadId\":\"a3082256-eca5-405d-be20-48e6a954f395\",\"location\":\"https://dnstats.net/site/flugsvamp/\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"domainLookupStart\":9,\"domainLookupEnd\":46,\"connectStart\":47,\"connectEnd\":69,\"requestStart\":69,\"responseStart\":205,\"responseEnd\":206,\"domInteractive\":502,\"domComplete\":632,\"loadEventStart\":632,\"loadEventEnd\":632,\"transferSize\":5828,\"decodedBodySize\":13469},\"siteToken\":\"174503bffd2042079c08d97af3a07925\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://dnstats.net\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GzWn0YYO78exnCFs0LeaNhs7nlZCylFTD7qgar0QGF0oMndUPv2B5TTs2Y3DgykNOYA8mOzuXO01vzcg4%2Fe1ROTbKNXWektlnS%2B63hrX3l23QcOekAWPgQFLtiemNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 19 May 2026 19:41:31 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9fe5945f5c7656bd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"dnstats.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}