{"report_id":"05b74ab7-9e41-4321-b615-87b1f3bf1b73","version":0,"status":"done","tags":[],"date":"2026-09-14T19:15:30Z","url":{"schema":"http","addr":"oilzero.nl/","fqdn":"oilzero.nl","domain":"oilzero.nl","tld":"nl"},"ip":{"addr":"185.98.60.138","port":0,"asn":201064,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"final":{"url":{"schema":"https","addr":"oilzero.nl/","fqdn":"oilzero.nl","domain":"oilzero.nl","tld":"nl"},"title":"Oil Zero ™ | De officiële en bijgewerkte website 2025 🥇","dom":{"size":63600,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3748)","md5":"88446cb62a724121e105a76b50bd1344","sha1":"1a8d83f6e7d70e90287c9ccc6249f292761d7e9b","sha256":"d731988ec1844174efb53ff47910ba31c07c7f949e57cb53021ba52cb41bd79e","sha512":"d36538a31fa59632adf5797d133baaa61a0b4f5401fbac0803a2088f64a694cc9ef7d0852440a5c8bc5f0f40b19853d6184f5cfd13076a5b270b4842bc166c17","ssdeep":"1536:BZcYbTrNqbBvaCbc16SDmB5I/g4yNLqgbN93G0yPXXohpkyNY:BRrNqbBv616SDAp5tjXYapkyNY","tlshash":"6253e82394e8123f11939387a2500e5bff6ad20fc75ad5acb4edc2a40fd3d69889759c","dom_hash":"domhash3af64cfb80accb61a806ae5df256a1b6","first_seen":"2026-09-14T19:03:41.62429Z","last_seen":"2026-09-14T19:15:32.282281Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"oilzero.nl/","fqdn":"oilzero.nl","domain":"oilzero.nl","tld":"nl"},"ip":{"addr":"185.98.60.138","port":0,"asn":201064,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-19T19:15:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"oilzero.nl","ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"domain_registered":"2023-04-03","domain_rank":0,"first_seen":"2026-09-14T19:03:37.152563Z","last_seen":"2026-09-14T19:03:37.152563Z","alert_count":56,"request_count":14,"received_data":768438,"sent_data":7202,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":3,"received_data":25976,"sent_data":1655,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":6677,"sent_data":526,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"oilzero.nl/","fqdn":"oilzero.nl","domain":"oilzero.nl","tld":"nl"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"eventHandler","is_inline":false,"md5":"d340024e4734e72c0555fc2a541e74a1","sha1":"995e53f4089e42f677947a6f48e5ff2a25ed9ab0","sha256":"8a04e32acd55cec723824bb94592371f3dc9ab66e579560075bd3c8e54efb9a6","sha512":"86a412db921513f86162b7864a0002032b11a6e4514b079ea5a81bc8299c46b5d1a1feaf8199b976b9a8b24257322822fed38cdffbc32c1575a242bcc39854a3","ssdeep":"","tlshash":"537000cc003c000000330300c03f00300c000c3f000cf30cfc0cc0c000cc0000030c00","size":19,"data":"","first_seen":"2023-07-02T07:28:12Z","last_seen":"2026-09-14T19:15:32.294938Z","times_seen":740,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oilzero.nl/static/assets/app-6256b172.js","fqdn":"oilzero.nl","domain":"oilzero.nl","tld":"nl"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e2d482771a47ba9b3a2bce1db19e0d2","sha1":"3509e9194d4a793ffd94a62ff64826a7591d35b9","sha256":"b1dc3a468eb8949e17762628c68205ee4ffad52ec1cdbe48e3456bf96c1c9603","sha512":"1036b1306e9b1233246ad2247e7573fa7c9831e7115445cb42e48c8c60b6eb5085170e0aa0d435ea3b6aaf93219657e494b0d554c58da6cebdd509693c5eb953","ssdeep":"384:uKWwubIJr3oQIrcUZhTnJ4NjEgcMq1Ta39F54Z/+w2fSX8BASBx72Lb43+KDYSlO:uKWwubIJrYQIrc4nJojEgg1aX4Zr2fSr","tlshash":"7672d5d6728174b20bae20dd407a5547f2281899f44ad06cf62d9dfd3d29c8a21b3f7c","size":16786,"data":"","first_seen":"2023-08-05T11:28:13Z","last_seen":"2026-09-14T19:15:32.286447Z","times_seen":451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oilzero.nl/","fqdn":"oilzero.nl","domain":"oilzero.nl","tld":"nl"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0da5d9353c2cc7939173530cf009920","sha1":"59126b6d6c41f3557b0b089b8d012271d29ca375","sha256":"b5e28bcf7ba444ebcb6c7a44e194eadacd48564fb25d4c71ad1ac0fa6ed6cb49","sha512":"d9eb2ba3ac97c833a778260db1f62d693cb44f4a9338a82491b8a15d36078a0b1c2bb7b07a70efdaec7022b281fcdbbd5e6b815157a5c84dba286a1171609819","ssdeep":"","tlshash":"05f0e94446fd10e0034fb27faaab5f863130408f60040e0a3e2c4fa47f65c755ac56a8","size":553,"data":"","first_seen":"2026-05-26T00:02:24.478642Z","last_seen":"2026-09-14T19:15:32.295651Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oilzero.nl/form.js","fqdn":"oilzero.nl","domain":"oilzero.nl","tld":"nl"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"57222cd559e3a912092239fcdb6706de","sha1":"d65d9e06d224a9a7e22916dc04eae83d1f26d6c7","sha256":"81a17cfaf5731292df919a903727b86550d2a57e1ad29893dc693ef9c2013113","sha512":"2960f1e3b8cf8e96b65fb4875f6241db594a7862c5fe1cad5e5d859df03b780c49293e4f4bca9b89db0070bb6ad7556674ec1b8bb3672c23619cd10c1cf5c232","ssdeep":"3072:CtjnGnbliOU03o4PwjRSBZTLqstc3ikgKc0Njv1BfEQ3j:C56bliXR4ZT1toJgK5jv1BcQT","tlshash":"f1542cb7b5407b2b33b53a98aa27914fab8c4c52dc8dd09ca9efdcdf585041160bdb18","size":279475,"data":"","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-14T19:15:32.289339Z","times_seen":465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"oilzero.nl/action/click","fqdn":"oilzero.nl","domain":"oilzero.nl","tld":"nl"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://oilzero.nl/","date":"2026-09-14T19:15:00.748Z","timestamp":1789413300748,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oilzero.nl","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 18:36:50 GMT","end":"Sun, 18 Oct 2026 18:36:49 GMT"},"fingerprint":{"sha1":"11:BB:5D:EF:BC:BE:BB:51:FF:86:79:EA:4E:DE:DF:2A:5F:50:D5:EC","sha256":"32:AE:A7:15:79:16:BA:68:CB:FB:33:1F:F6:64:5D:13:A8:17:4F:B9:05:FB:71:AE:BE:FC:C9:E1:B2:72:BB:97"}}},"request":{"raw":"POST /action/click HTTP/1.1\r\nHost: oilzero.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://oilzero.nl\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oilzero.nl/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Mon, 14 Sep 2026 19:15:01 GMT\r\nContent-Type: application/json\r\nContent-Length: 66\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66,"size_decoded":252,"mime_type":"application/json","magic":"JSON text data","md5":"770635517a26f1c83aa6e19fad4f0fc3","sha1":"455471543abfcfbb2e387bde313dd83e3f9ad65d","sha256":"38dfd2251e501c05dcede1116afe2eb39e11feb227f4d1a8f2a46096d224f97b","sha512":"cfe6354575c3dc04ac0b69e746b3a474cdcb19cb07556ab507b7fc99284094917fa6a165482ed786ab66e76fedf95945a18bc15ec3b8dae40867000de4f51571","ssdeep":"","tlshash":"a4a0026b2eec49210f48b1d78b882268df2473755fb4152b985144a4487e9f71172b68","first_seen":"2026-09-14T19:15:32.283533Z","last_seen":"2026-09-14T19:15:32.283533Z","times_seen":1,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oilzero.nl/action/click","fqdn":"oilzero.nl","domain":"oilzero.nl","tld":"nl"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://oilzero.nl/","date":"2026-09-14T19:15:00.756Z","timestamp":1789413300756,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oilzero.nl","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 18:36:50 GMT","end":"Sun, 18 Oct 2026 18:36:49 GMT"},"fingerprint":{"sha1":"11:BB:5D:EF:BC:BE:BB:51:FF:86:79:EA:4E:DE:DF:2A:5F:50:D5:EC","sha256":"32:AE:A7:15:79:16:BA:68:CB:FB:33:1F:F6:64:5D:13:A8:17:4F:B9:05:FB:71:AE:BE:FC:C9:E1:B2:72:BB:97"}}},"request":{"raw":"POST /action/click HTTP/1.1\r\nHost: oilzero.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://oilzero.nl\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oilzero.nl/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Mon, 14 Sep 2026 19:15:01 GMT\r\nContent-Type: application/json\r\nContent-Length: 66\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66,"size_decoded":252,"mime_type":"application/json","magic":"JSON text data","md5":"80ca07ff0ec36aad63dac14bf18d448b","sha1":"b32d06a61d3d0c3406507362f497e71a09ef5c21","sha256":"ba695ccad947217f08979e6a50c6c70e66143ea56cdc6497f3f982796680118a","sha512":"9fd73688899003041f18505df6bca0f760912bb0ddcb9e9ae89ea6fc0181e3b14bf56b645b19a6cb587c9e30113fa47c11ddbf899b44ab661fffe61018d947a3","ssdeep":"","tlshash":"38a022330ca202820cccc8c2080800380a802ec28eb0a0032ca2cc0200af0a0b00ab08","first_seen":"2026-09-14T19:15:32.284681Z","last_seen":"2026-09-14T19:15:32.284681Z","times_seen":1,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oilzero.nl/static/assets/index-80aeac3d.css","fqdn":"oilzero.nl","domain":"oilzero.nl","tld":"nl"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oilzero.nl/","date":"2026-09-14T19:15:00.447Z","timestamp":1789413300447,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oilzero.nl","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 18:36:50 GMT","end":"Sun, 18 Oct 2026 18:36:49 GMT"},"fingerprint":{"sha1":"11:BB:5D:EF:BC:BE:BB:51:FF:86:79:EA:4E:DE:DF:2A:5F:50:D5:EC","sha256":"32:AE:A7:15:79:16:BA:68:CB:FB:33:1F:F6:64:5D:13:A8:17:4F:B9:05:FB:71:AE:BE:FC:C9:E1:B2:72:BB:97"}}},"request":{"raw":"GET /static/assets/index-80aeac3d.css HTTP/1.1\r\nHost: oilzero.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oilzero.nl/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Mon, 14 Sep 2026 19:15:00 GMT\r\nContent-Type: text/css\r\nContent-Length: 155134\r\nLast-Modified: Fri, 10 Jan 2025 14:53:08 GMT\r\nConnection: keep-alive\r\nETag: \"67813454-25dfe\"\r\nExpires: Fri, 13 Nov 2026 19:15:00 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":155134,"size_decoded":155456,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d3a35488c0d1fd37aa9e385f200ffe1d","sha1":"06f40be23907ff5db00776afbe707c265a41f7ae","sha256":"80aeac3d09e16b39cdd4449abd33a5f06f39748a8c33143218388ae087c75e72","sha512":"495529ce14f28c2cc6df5f5d8c8854f687630493d797b811d4a3097f6f3d334f90d66bd1ed38478ae06bec9e674c2fc49dd29e80779eb05802f486bd3fc26d63","ssdeep":"1536:TtFvK9Df/vkFIVj7TzsYJ6lb4Vmpz600I4xBu:Tt49Df9K4Vmpz600I4xBu","tlshash":"3ae36ed7f5913428e8a681999591bffc497f6848cb115daaf0037bb84789bd30c62dcc","first_seen":"2024-09-20T21:35:38.958905Z","last_seen":"2026-09-14T19:15:32.285854Z","times_seen":191,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oilzero.nl/static/assets/app-6256b172.js","fqdn":"oilzero.nl","domain":"oilzero.nl","tld":"nl"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oilzero.nl/","date":"2026-09-14T19:15:00.448Z","timestamp":1789413300448,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oilzero.nl","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 18:36:50 GMT","end":"Sun, 18 Oct 2026 18:36:49 GMT"},"fingerprint":{"sha1":"11:BB:5D:EF:BC:BE:BB:51:FF:86:79:EA:4E:DE:DF:2A:5F:50:D5:EC","sha256":"32:AE:A7:15:79:16:BA:68:CB:FB:33:1F:F6:64:5D:13:A8:17:4F:B9:05:FB:71:AE:BE:FC:C9:E1:B2:72:BB:97"}}},"request":{"raw":"GET /static/assets/app-6256b172.js HTTP/1.1\r\nHost: oilzero.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oilzero.nl/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Mon, 14 Sep 2026 19:15:00 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 16786\r\nLast-Modified: Fri, 10 Jan 2025 14:53:08 GMT\r\nConnection: keep-alive\r\nETag: \"67813454-4192\"\r\nExpires: Fri, 13 Nov 2026 19:15:00 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16786,"size_decoded":17120,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3636)","md5":"3e2d482771a47ba9b3a2bce1db19e0d2","sha1":"3509e9194d4a793ffd94a62ff64826a7591d35b9","sha256":"b1dc3a468eb8949e17762628c68205ee4ffad52ec1cdbe48e3456bf96c1c9603","sha512":"1036b1306e9b1233246ad2247e7573fa7c9831e7115445cb42e48c8c60b6eb5085170e0aa0d435ea3b6aaf93219657e494b0d554c58da6cebdd509693c5eb953","ssdeep":"384:uKWwubIJr3oQIrcUZhTnJ4NjEgcMq1Ta39F54Z/+w2fSX8BASBx72Lb43+KDYSlO:uKWwubIJrYQIrc4nJojEgg1aX4Zr2fSr","tlshash":"7672d5d6728174b20bae20dd407a5547f2281899f44ad06cf62d9dfd3d29c8a21b3f7c","first_seen":"2023-08-05T11:28:13Z","last_seen":"2026-09-14T19:15:32.286447Z","times_seen":451,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":56,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oilzero.nl/media/580/conversions/484_1450__1450_655c9addc70a2_bg-phone.webp","fqdn":"oilzero.nl","domain":"oilzero.nl","tld":"nl"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oilzero.nl/","date":"2026-09-14T19:15:00.581Z","timestamp":1789413300581,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oilzero.nl","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 18:36:50 GMT","end":"Sun, 18 Oct 2026 18:36:49 GMT"},"fingerprint":{"sha1":"11:BB:5D:EF:BC:BE:BB:51:FF:86:79:EA:4E:DE:DF:2A:5F:50:D5:EC","sha256":"32:AE:A7:15:79:16:BA:68:CB:FB:33:1F:F6:64:5D:13:A8:17:4F:B9:05:FB:71:AE:BE:FC:C9:E1:B2:72:BB:97"}}},"request":{"raw":"GET /media/580/conversions/484_1450__1450_655c9addc70a2_bg-phone.webp HTTP/1.1\r\nHost: oilzero.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oilzero.nl/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Mon, 14 Sep 2026 19:15:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 27600\r\nLast-Modified: Fri, 10 Jan 2025 14:53:08 GMT\r\nConnection: keep-alive\r\nETag: \"67813454-6bd0\"\r\nExpires: Fri, 13 Nov 2026 19:15:00 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27600,"size_decoded":27922,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"99d96e95dbc72ea762436699708bd7db","sha1":"b9b452031a3ee54fa61c3d1cbef31b62b3bc141e","sha256":"77689de6cd8433108f9b8267ffbf0ab7c18a3fe915c6122ed281809d86721699","sha512":"d569f5c2b31784ce941282ca84b0cf78dc46ba15017fcf972df5eec0481b55fc22b6afa61ddd3feec32b15c65181479f0076c0902c0391249d9ab8a129270f98","ssdeep":"768:bfmunfvJmoEyY3HYm3QkNA0loZAmPoZQQE:K6fRmotXkN/2tgZ9E","tlshash":"57c2d0468ae06bdce5e34eb9b982472627607536713314c3e2c1fe7c1128576b89d35d","first_seen":"2024-02-05T22:46:50Z","last_seen":"2026-09-14T19:15:32.287147Z","times_seen":236,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oilzero.nl/","date":"2026-09-14T19:15:00.618Z","timestamp":1789413300618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://oilzero.nl\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 02:57:31 GMT\r\nexpires: Fri, 10 Sep 2027 02:57:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 404249\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":8696,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-09-14T22:46:08.605276Z","times_seen":403724,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oilzero.nl/media/568/conversions/32_32_655c83022680d_Bitcoin%20favicon.png","fqdn":"oilzero.nl","domain":"oilzero.nl","tld":"nl"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oilzero.nl/","date":"2026-09-14T19:15:01.044Z","timestamp":1789413301044,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oilzero.nl","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 18:36:50 GMT","end":"Sun, 18 Oct 2026 18:36:49 GMT"},"fingerprint":{"sha1":"11:BB:5D:EF:BC:BE:BB:51:FF:86:79:EA:4E:DE:DF:2A:5F:50:D5:EC","sha256":"32:AE:A7:15:79:16:BA:68:CB:FB:33:1F:F6:64:5D:13:A8:17:4F:B9:05:FB:71:AE:BE:FC:C9:E1:B2:72:BB:97"}}},"request":{"raw":"GET /media/568/conversions/32_32_655c83022680d_Bitcoin%20favicon.png HTTP/1.1\r\nHost: oilzero.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oilzero.nl/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Mon, 14 Sep 2026 19:15:01 GMT\r\nContent-Type: image/png\r\nContent-Length: 2900\r\nLast-Modified: Fri, 10 Jan 2025 14:53:08 GMT\r\nConnection: keep-alive\r\nETag: \"67813454-b54\"\r\nExpires: Fri, 13 Nov 2026 19:15:01 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2900,"size_decoded":3219,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"31d20ca51f659cb17b0d4bd9e1a5ea2d","sha1":"4bbf3b3af1e3ef7a83071b84b65627d22eb886e0","sha256":"9a816f981183551e635bc42040d384db1bc50def169b6eb56370628c2ef88c83","sha512":"c3fe53f12f4594b5e42b498f872f5663da3ad460ccd9a844857c80ee13bf28b6c697e2f6cac6c6dce173476b963aa377c7edd0762f1741a515040342a0efb164","ssdeep":"","tlshash":"50515b1f52071703c16c669fc630ada8f8724c126af01f8740f0f2af5748d14c6ae022","first_seen":"2026-09-14T19:03:41.662257Z","last_seen":"2026-09-14T19:15:32.288279Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oilzero.nl/form.js","fqdn":"oilzero.nl","domain":"oilzero.nl","tld":"nl"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oilzero.nl/","date":"2026-09-14T19:15:00.450Z","timestamp":1789413300450,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oilzero.nl","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 18:36:50 GMT","end":"Sun, 18 Oct 2026 18:36:49 GMT"},"fingerprint":{"sha1":"11:BB:5D:EF:BC:BE:BB:51:FF:86:79:EA:4E:DE:DF:2A:5F:50:D5:EC","sha256":"32:AE:A7:15:79:16:BA:68:CB:FB:33:1F:F6:64:5D:13:A8:17:4F:B9:05:FB:71:AE:BE:FC:C9:E1:B2:72:BB:97"}}},"request":{"raw":"GET /form.js HTTP/1.1\r\nHost: oilzero.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oilzero.nl/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Mon, 14 Sep 2026 19:15:00 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=0, must-revalidate\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vjc5DRukcpHtC7k8PNhixBfOuERoKVhau%2Fm5amK7Ymt3ISoMfLwAIbr9A9IX2WZ66dvoIxc%2BHjQZyE1JAAP2Aw3JS9SY6BIVeTenoL%2FW9YDULQXXobcdwX2jgQ7o25aDPxbS%2BlqFnPHQgNL0\"}]}\r\nETag: W/\"2706931c9edd6c7804715d81a4fd3a4a\"\r\nContent-Encoding: br\r\nCF-RAY: a3b1b7c86b0db0f7-CDG\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":279475,"size_decoded":90888,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"57222cd559e3a912092239fcdb6706de","sha1":"d65d9e06d224a9a7e22916dc04eae83d1f26d6c7","sha256":"81a17cfaf5731292df919a903727b86550d2a57e1ad29893dc693ef9c2013113","sha512":"2960f1e3b8cf8e96b65fb4875f6241db594a7862c5fe1cad5e5d859df03b780c49293e4f4bca9b89db0070bb6ad7556674ec1b8bb3672c23619cd10c1cf5c232","ssdeep":"3072:CtjnGnbliOU03o4PwjRSBZTLqstc3ikgKc0Njv1BfEQ3j:C56bliXR4ZT1toJgK5jv1BcQT","tlshash":"f1542cb7b5407b2b33b53a98aa27914fab8c4c52dc8dd09ca9efdcdf585041160bdb18","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-14T19:15:32.289339Z","times_seen":465,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":111,"receive":55,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oilzero.nl/media/567/conversions/45__655c82f90cd75_Bitcoin%20logo.png","fqdn":"oilzero.nl","domain":"oilzero.nl","tld":"nl"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oilzero.nl/","date":"2026-09-14T19:15:00.455Z","timestamp":1789413300455,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oilzero.nl","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 18:36:50 GMT","end":"Sun, 18 Oct 2026 18:36:49 GMT"},"fingerprint":{"sha1":"11:BB:5D:EF:BC:BE:BB:51:FF:86:79:EA:4E:DE:DF:2A:5F:50:D5:EC","sha256":"32:AE:A7:15:79:16:BA:68:CB:FB:33:1F:F6:64:5D:13:A8:17:4F:B9:05:FB:71:AE:BE:FC:C9:E1:B2:72:BB:97"}}},"request":{"raw":"GET /media/567/conversions/45__655c82f90cd75_Bitcoin%20logo.png HTTP/1.1\r\nHost: oilzero.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oilzero.nl/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Mon, 14 Sep 2026 19:15:00 GMT\r\nContent-Type: image/png\r\nContent-Length: 4700\r\nLast-Modified: Fri, 10 Jan 2025 14:53:08 GMT\r\nConnection: keep-alive\r\nETag: \"67813454-125c\"\r\nExpires: Fri, 13 Nov 2026 19:15:00 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4700,"size_decoded":5020,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"507b5ec757569eb48013ad9ae80f8c70","sha1":"dd589a2a84c6be0a5929aedf8db072aebd2266ac","sha256":"ce14253638243d40b6e8b99b3c2e1e1e4897e849653a18c9b94f03e0cfe56db3","sha512":"50beab1bde195d4ef8e5546f2f96f09d7d5ac607d2e333cf63538be92ee5fbfef91426e1faf58b3d424dea6b5fc81b8441a2a6f0d6265b0a19290f9b7a3710c8","ssdeep":"96:+9p+OFK0aZviI04AgVOyhSEJ9QUeaMcA8X6vTo5zy:MwOFsppPPJ9QULc8EQzy","tlshash":"0fa18eefca4f0252671dc1f7245cb5fe9d7098d658e22e5a502c904e6e6632090db36c","first_seen":"2026-09-14T19:03:41.647182Z","last_seen":"2026-09-14T19:15:32.290012Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":77,"dns":0,"connect":28,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oilzero.nl/media/579/conversions/1280_1920__1920_655c94bfd886c_banner-digits.webp","fqdn":"oilzero.nl","domain":"oilzero.nl","tld":"nl"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oilzero.nl/","date":"2026-09-14T19:15:00.580Z","timestamp":1789413300580,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oilzero.nl","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 18:36:50 GMT","end":"Sun, 18 Oct 2026 18:36:49 GMT"},"fingerprint":{"sha1":"11:BB:5D:EF:BC:BE:BB:51:FF:86:79:EA:4E:DE:DF:2A:5F:50:D5:EC","sha256":"32:AE:A7:15:79:16:BA:68:CB:FB:33:1F:F6:64:5D:13:A8:17:4F:B9:05:FB:71:AE:BE:FC:C9:E1:B2:72:BB:97"}}},"request":{"raw":"GET /media/579/conversions/1280_1920__1920_655c94bfd886c_banner-digits.webp HTTP/1.1\r\nHost: oilzero.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oilzero.nl/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Mon, 14 Sep 2026 19:15:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 52548\r\nLast-Modified: Fri, 10 Jan 2025 14:53:08 GMT\r\nConnection: keep-alive\r\nETag: \"67813454-cd44\"\r\nExpires: Fri, 13 Nov 2026 19:15:00 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52548,"size_decoded":52870,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c98afd8c475b991fbe975c2f4f9bedde","sha1":"adb9b3cddca25a3b35598bad7af536b9dec9e57a","sha256":"4e324a236a44498b2916d8f15f80935c8863b694f91195c4fb32c8675cdb7e4a","sha512":"f8a4a12a126bfdca01a72a24c4435a9e75c8810b075622f196e33b14771a35d6ab8e93abcce3f0d7a4d07ad770d9181b9e96fa00eeac46ca6535aa70bf136292","ssdeep":"1536:+kFp5T2HjL+8uP1zVcxEnoublwhdMXBBDarZ:+wp+jWVcxtP6EZ","tlshash":"2e33024bd8813b7bf2d534793a30929562152cfd9a1715326f13e9a62bf8cd1608bcc6","first_seen":"2024-02-05T22:46:50Z","last_seen":"2026-09-14T19:15:32.290778Z","times_seen":240,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oilzero.nl/","fqdn":"oilzero.nl","domain":"oilzero.nl","tld":"nl"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://oilzero.nl/","date":"2026-09-14T19:15:00.751Z","timestamp":1789413300751,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oilzero.nl","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 18:36:50 GMT","end":"Sun, 18 Oct 2026 18:36:49 GMT"},"fingerprint":{"sha1":"11:BB:5D:EF:BC:BE:BB:51:FF:86:79:EA:4E:DE:DF:2A:5F:50:D5:EC","sha256":"32:AE:A7:15:79:16:BA:68:CB:FB:33:1F:F6:64:5D:13:A8:17:4F:B9:05:FB:71:AE:BE:FC:C9:E1:B2:72:BB:97"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: oilzero.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oilzero.nl/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Mon, 14 Sep 2026 19:15:00 GMT\r\nContent-Type: text/html\r\nContent-Length: 64364\r\nLast-Modified: Fri, 10 Jan 2025 14:53:08 GMT\r\nConnection: keep-alive\r\nETag: \"67813454-fb6c\"\r\nSet-Cookie: lang_fx=;Path=/;Max-Age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":[{"name":"lang_fx","value":"","quoted":false,"path":"/","max_age":2592000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"lang_fx=;Path=/;Max-Age=2592000"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64364,"size_decoded":64650,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3748)","md5":"750773561147c5fa06afc78b0abba902","sha1":"2ea631f447e7395365e03045265c9f5357cc9402","sha256":"ddc712e994deda3aec770296ff208187f4bee1e5bac4012699a05fd13f380f65","sha512":"dfc8ba2a2ab0c42d6f9a9172634e5c218eba1f873c82fe682a20eb871c310002dd3ec3405cea3fca976c601c16f7bdebbf038c38aa19a85fe08afbe7fc31169e","ssdeep":"1536:9ZcYbnrNMbBvICbc16SDmB5I/g4yNgevXZ3G0y7CXoSXky04:9JrNMbBvk16SDApjVXaQXky04","tlshash":"bf53d72294e8123f11939387a2501e1bff6ad20fc75ad5acb4edc2a40fd3d6988975dc","first_seen":"2026-09-14T19:03:41.64173Z","last_seen":"2026-09-14T19:15:32.291316Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oilzero.nl/","fqdn":"oilzero.nl","domain":"oilzero.nl","tld":"nl"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-14T19:14:59.878Z","timestamp":1789413299878,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oilzero.nl","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 18:36:50 GMT","end":"Sun, 18 Oct 2026 18:36:49 GMT"},"fingerprint":{"sha1":"11:BB:5D:EF:BC:BE:BB:51:FF:86:79:EA:4E:DE:DF:2A:5F:50:D5:EC","sha256":"32:AE:A7:15:79:16:BA:68:CB:FB:33:1F:F6:64:5D:13:A8:17:4F:B9:05:FB:71:AE:BE:FC:C9:E1:B2:72:BB:97"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: oilzero.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Mon, 14 Sep 2026 19:15:00 GMT\r\nContent-Type: text/html\r\nContent-Length: 64364\r\nLast-Modified: Fri, 10 Jan 2025 14:53:08 GMT\r\nConnection: keep-alive\r\nETag: \"67813454-fb6c\"\r\nSet-Cookie: lang_fx=;Path=/;Max-Age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":[{"name":"lang_fx","value":"","quoted":false,"path":"/","max_age":2592000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"lang_fx=;Path=/;Max-Age=2592000"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64364,"size_decoded":64650,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3748)","md5":"750773561147c5fa06afc78b0abba902","sha1":"2ea631f447e7395365e03045265c9f5357cc9402","sha256":"ddc712e994deda3aec770296ff208187f4bee1e5bac4012699a05fd13f380f65","sha512":"dfc8ba2a2ab0c42d6f9a9172634e5c218eba1f873c82fe682a20eb871c310002dd3ec3405cea3fca976c601c16f7bdebbf038c38aa19a85fe08afbe7fc31169e","ssdeep":"1536:9ZcYbnrNMbBvICbc16SDmB5I/g4yNgevXZ3G0y7CXoSXky04:9JrNMbBvk16SDApjVXaQXky04","tlshash":"bf53d72294e8123f11939387a2501e1bff6ad20fc75ad5acb4edc2a40fd3d6988975dc","first_seen":"2026-09-14T19:03:41.64173Z","last_seen":"2026-09-14T19:15:32.291316Z","times_seen":2,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":60,"connect":28,"send":0,"wait":56,"receive":28,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oilzero.nl/","date":"2026-09-14T19:15:00.619Z","timestamp":1789413300619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://oilzero.nl\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 12 Sep 2026 03:20:00 GMT\r\nexpires: Sun, 12 Sep 2027 03:20:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 230100\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":8628,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-09-14T22:46:52.207923Z","times_seen":311707,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oilzero.nl/","date":"2026-09-14T19:15:00.620Z","timestamp":1789413300620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://oilzero.nl\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7840\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 13 Sep 2026 10:11:33 GMT\r\nexpires: Mon, 13 Sep 2027 10:11:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 119007\r\nlast-modified: Mon, 15 Sep 2025 16:35:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7840,"size_decoded":8652,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7840, version 1.0","md5":"8d91ec1ca2d8b56640a47117e313a3e9","sha1":"a9e9bafe64666f4595051a0e895b47a5fa39e67e","sha256":"78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb","sha512":"bd3a864bd45f39ee83ee79ba4469a156ad8ff3dd33d8aae11e3edd97b29c2ef7f610ac851726041251e34b0108f618a2f945038bf6c0de9a7982e0d643cdfcfb","ssdeep":"192:S5upwnqrBHPLA3J73KAQDPh50uFdXrnpjDS7LjvQnRb:S5ELrBvLA3J76AIPhi+vXwzQnRb","tlshash":"68f19de0200937e4f73d5feee6276b7f2e2edb05e25305aa7556014c69de39310d21a2","first_seen":"2023-04-06T21:42:41Z","last_seen":"2026-09-14T22:16:38.03173Z","times_seen":83465,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oilzero.nl/","fqdn":"oilzero.nl","domain":"oilzero.nl","tld":"nl"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://oilzero.nl/","date":"2026-09-14T19:15:00.760Z","timestamp":1789413300760,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oilzero.nl","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 18:36:50 GMT","end":"Sun, 18 Oct 2026 18:36:49 GMT"},"fingerprint":{"sha1":"11:BB:5D:EF:BC:BE:BB:51:FF:86:79:EA:4E:DE:DF:2A:5F:50:D5:EC","sha256":"32:AE:A7:15:79:16:BA:68:CB:FB:33:1F:F6:64:5D:13:A8:17:4F:B9:05:FB:71:AE:BE:FC:C9:E1:B2:72:BB:97"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: oilzero.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oilzero.nl/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Mon, 14 Sep 2026 19:15:00 GMT\r\nContent-Type: text/html\r\nContent-Length: 64364\r\nLast-Modified: Fri, 10 Jan 2025 14:53:08 GMT\r\nConnection: keep-alive\r\nETag: \"67813454-fb6c\"\r\nSet-Cookie: lang_fx=;Path=/;Max-Age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":[{"name":"lang_fx","value":"","quoted":false,"path":"/","max_age":2592000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"lang_fx=;Path=/;Max-Age=2592000"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64364,"size_decoded":64650,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3748)","md5":"750773561147c5fa06afc78b0abba902","sha1":"2ea631f447e7395365e03045265c9f5357cc9402","sha256":"ddc712e994deda3aec770296ff208187f4bee1e5bac4012699a05fd13f380f65","sha512":"dfc8ba2a2ab0c42d6f9a9172634e5c218eba1f873c82fe682a20eb871c310002dd3ec3405cea3fca976c601c16f7bdebbf038c38aa19a85fe08afbe7fc31169e","ssdeep":"1536:9ZcYbnrNMbBvICbc16SDmB5I/g4yNgevXZ3G0y7CXoSXky04:9JrNMbBvk16SDApjVXaQXky04","tlshash":"bf53d72294e8123f11939387a2501e1bff6ad20fc75ad5acb4edc2a40fd3d6988975dc","first_seen":"2026-09-14T19:03:41.64173Z","last_seen":"2026-09-14T19:15:32.291316Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oilzero.nl/countries/gb.svg","fqdn":"oilzero.nl","domain":"oilzero.nl","tld":"nl"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oilzero.nl/","date":"2026-09-14T19:15:00.814Z","timestamp":1789413300814,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oilzero.nl","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 18:36:50 GMT","end":"Sun, 18 Oct 2026 18:36:49 GMT"},"fingerprint":{"sha1":"11:BB:5D:EF:BC:BE:BB:51:FF:86:79:EA:4E:DE:DF:2A:5F:50:D5:EC","sha256":"32:AE:A7:15:79:16:BA:68:CB:FB:33:1F:F6:64:5D:13:A8:17:4F:B9:05:FB:71:AE:BE:FC:C9:E1:B2:72:BB:97"}}},"request":{"raw":"GET /countries/gb.svg HTTP/1.1\r\nHost: oilzero.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oilzero.nl/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Mon, 14 Sep 2026 19:15:00 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 527\r\nLast-Modified: Fri, 10 Jan 2025 14:53:08 GMT\r\nConnection: keep-alive\r\nETag: \"67813454-20f\"\r\nExpires: Fri, 13 Nov 2026 19:15:00 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":527,"size_decoded":849,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c39480d514fe1af4c7e5f62a3ac53b67","sha1":"80a3f070bc7a8b0a8edafa1927ee65b2a3a30b42","sha256":"910e4fa63fb7a23d30d59dee2feb08da51a405eb06b38a7e12d18d9b504d13b5","sha512":"353e7893f13756905ec7612d0c2411231450b2d11781131794c45668f281a7c092acb8cdbfaf8e5809cb5bdfe89860ccdc339a54cad35544ce58e28403abb479","ssdeep":"","tlshash":"4af0b45d22695966e21b8364dfbc74b4013f24dd2288204db8453378c51a37f79bbae8","first_seen":"2023-09-12T12:51:11Z","last_seen":"2026-09-14T22:58:14.997755Z","times_seen":2704,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins:300,400,600,700,800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oilzero.nl/","date":"2026-09-14T19:15:00.445Z","timestamp":1789413300445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Poppins:300,400,600,700,800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oilzero.nl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 14 Sep 2026 19:15:00 GMT\r\ndate: Mon, 14 Sep 2026 19:15:00 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5993,"size_decoded":1246,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d7d29ea911af499896323784c8522aa7","sha1":"86bb132382fa34e5006449a1a3f931b4303ac8f9","sha256":"78d2c9cef0124ba439a1e22e904b3083970db19d9d5adc9f940404d81d2352cf","sha512":"0ad15a0432c96cd093bfa631285ee158ce5c54b114d9ddf08a89616d4805d238e572faf86699d518d5c96f3e8feb2e6849cc64e207927e96d55ee47c9d0e7d36","ssdeep":"96:SO1arO1aTJc+ukO1aaN3OEanOEaCJc+ukOEauN3OxMacOxMaUJc+ukOxMarN3OpE:4hHdPgKQFVwa3RzJ/apsn","tlshash":"05c1add1087be114ab871cc123ce7d37ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-19T15:46:09.974384Z","last_seen":"2026-09-14T19:15:32.293673Z","times_seen":500,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":35,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oilzero.nl/media/569/conversions/309_459__459_655c85e7b17fc_Bitcoin-21.webp","fqdn":"oilzero.nl","domain":"oilzero.nl","tld":"nl"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://oilzero.nl/","date":"2026-09-14T19:15:00.639Z","timestamp":1789413300639,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oilzero.nl","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 18:36:50 GMT","end":"Sun, 18 Oct 2026 18:36:49 GMT"},"fingerprint":{"sha1":"11:BB:5D:EF:BC:BE:BB:51:FF:86:79:EA:4E:DE:DF:2A:5F:50:D5:EC","sha256":"32:AE:A7:15:79:16:BA:68:CB:FB:33:1F:F6:64:5D:13:A8:17:4F:B9:05:FB:71:AE:BE:FC:C9:E1:B2:72:BB:97"}}},"request":{"raw":"GET /media/569/conversions/309_459__459_655c85e7b17fc_Bitcoin-21.webp HTTP/1.1\r\nHost: oilzero.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oilzero.nl/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Mon, 14 Sep 2026 19:15:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 30936\r\nLast-Modified: Fri, 10 Jan 2025 14:53:08 GMT\r\nConnection: keep-alive\r\nETag: \"67813454-78d8\"\r\nExpires: Fri, 13 Nov 2026 19:15:00 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30936,"size_decoded":31258,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d23d75e996ca3d314736cfc8e85495f3","sha1":"a42a28a35688fd7d69a9ad4655b3eab02cb1d403","sha256":"8a75d282faeaf85fc11f5fc7b3ea3d7bddac22b57bba6735abd9589b5415c780","sha512":"a2698add1a0b8dd4dff255d4d7c4ec0abc7418513b425fc98e19dda9afcfb1513fc8ce238f1c5216ca07ca3e27a6e1df9d468e0545fc428946aeef2938c620a5","ssdeep":"768:gw/vsMub+MrWiN2Jp8bqiFhmqoZF4QCeVgEjEmicZ:1Ib+MDOGqiGq+JJjQcZ","tlshash":"0ed2f18bd5b80544966e8e341cfa08eb2a630dad6dcad136c1a9932e94101e5f41afc2","first_seen":"2024-02-14T09:49:00Z","last_seen":"2026-09-14T19:15:32.29421Z","times_seen":23,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oilzero.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}