{"report_id":"05bd1e58-8fab-4d5f-b549-808ce20e2255","version":6,"status":"done","tags":[],"date":"2025-10-19T01:26:04Z","url":{"schema":"http","addr":"cchallenger.world","fqdn":"cchallenger.world","domain":"cchallenger.world","tld":"world"},"ip":{"addr":"94.156.232.181","port":0,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"cchallenger.world/","fqdn":"cchallenger.world","domain":"cchallenger.world","tld":"world"},"title":"Global | eSports and Gaming Community"},"submit":{"url":{"schema":"http","addr":"cchallenger.world","fqdn":"cchallenger.world","domain":"cchallenger.world","tld":"world"},"ip":{"addr":"94.156.232.181","port":0,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-23T01:26:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":10}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-19T01:25:42Z","timestamp":1760837142,"ip_dst":{"addr":"64.188.91.38","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.6","port":56970,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2025-10-19T01:25:42.366335+0000\",\"flow_id\":1550671066607003,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":56970,\"dest_ip\":\"64.188.91.38\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"zavod228.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":3647,\"start\":\"2025-10-19T01:25:42.306587+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cchallenger.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cchallenger.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"zavod228.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"zavod228.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"zavod228.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"zavod228.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"zavod228.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"zavod228.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"zavod228.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-19","alert":"Phishing Block","trigger":"zavod228.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":4,"received_data":124927,"sent_data":2176,"comment":"","tags":null,"fingerprints":null},{"fqdn":"imgur.com","ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":695,"first_seen":"2012-10-04T02:07:24Z","last_seen":"2025-10-14T06:17:51.108906Z","alert_count":0,"request_count":1,"received_data":18715,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.imgur.com","ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":3309,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2025-10-13T00:58:36.894522Z","alert_count":0,"request_count":1,"received_data":18935,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.esports.net","ip":{"addr":"104.21.6.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1999-09-29","domain_rank":1006755,"first_seen":"2015-09-28T09:25:47Z","last_seen":"2025-10-12T23:18:04.206602Z","alert_count":0,"request_count":1,"received_data":268560,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zavod228.icu","ip":{"addr":"64.188.91.38","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-09-17","domain_rank":0,"first_seen":"2025-10-05T18:24:57.023847Z","last_seen":"2025-10-12T23:18:04.381367Z","alert_count":8,"request_count":1,"received_data":403,"sent_data":551,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-10-12T22:16:17.088796Z","alert_count":0,"request_count":1,"received_data":90391,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"assets1.challengermode.com","ip":{"addr":"172.66.150.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-09-23","domain_rank":0,"first_seen":"2023-01-24T01:50:13Z","last_seen":"2025-10-16T08:26:38.936436Z","alert_count":0,"request_count":2,"received_data":1596039,"sent_data":1066,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"image1.challengermode.com","ip":{"addr":"172.66.150.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-09-23","domain_rank":0,"first_seen":"2022-11-08T23:52:39Z","last_seen":"2025-10-12T23:18:04.267621Z","alert_count":0,"request_count":2,"received_data":4871,"sent_data":958,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cchallenger.world","ip":{"addr":"94.156.232.181","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":16,"request_count":8,"received_data":4322238,"sent_data":3711,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-19T01:25:42Z","timestamp":1760837142,"ip_dst":{"addr":"64.188.91.38","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.6","port":56970,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2025-10-19T01:25:42.366335+0000\",\"flow_id\":1550671066607003,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":56970,\"dest_ip\":\"64.188.91.38\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"zavod228.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":3647,\"start\":\"2025-10-19T01:25:42.306587+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.4.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"641dd14370106e992d352166f5a07e99","sha1":"eda46747c71d38a880bee44f9a439c3858bb8f99","sha256":"a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af","sha512":"a6e981b23351186aa43f32879dd64c6801be6e2af7ef8b0e472cccdeeba52d5d7894de4bcb292a364f1e11e525524077534338140a72687ada4fae62849843a5","ssdeep":"1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH","tlshash":"d193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89795,"data":"","first_seen":"2023-03-26T04:59:07Z","last_seen":"2026-08-08T08:37:38.893749Z","times_seen":27244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cchallenger.world/assets/js/main.js","fqdn":"cchallenger.world","domain":"cchallenger.world","tld":"world"},"ip":{"addr":"94.156.232.181","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"45e050bc382350dd9dd6dff724d53647","sha1":"1d01df884ef6d3d7346dd18416433b82683fad5a","sha256":"0769d1022b0c16160cac2d5d6456a5669cf97ba6270c91b6a2a4536286281974","sha512":"cc4f6cdc286c2806c6d4b771422196af1dc9477f449c8b3fb277b3fe91aee811d75a3781cac0bbe9254e98406aa6dafea1482b2ffa1c7265b3111bd754327dec","ssdeep":"","tlshash":"1ff02b8565eb711006ba1dfa10db9475d777d163319a0b047c9c89a1cf25478a396878","size":639,"data":"","first_seen":"2024-08-19T17:48:05.026572Z","last_seen":"2026-06-01T20:19:34.600014Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cchallenger.world/assets/js/transformator.js","fqdn":"cchallenger.world","domain":"cchallenger.world","tld":"world"},"ip":{"addr":"94.156.232.181","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ff36a50763a6cb4daa722a9b6a735fb","sha1":"d9589e6504dcfc875020a4f7033765bad932999a","sha256":"25c234d228d48a7069884f0de5c45877529df68441795fff21bd36e23d64d185","sha512":"f1d22c91552dc82de02fe569436876f3d7590597f985ff5f58ecc0c5fbd69ba52f8b425eb0d607420f9a6f6252dc4432cf36e5ffe81b55ba5083e26175add4b1","ssdeep":"","tlshash":"98b012a7fdcc651842c33530ca37bd8c5a3334823c9d7409d41c18505419a2c1d53a4e","size":102,"data":"","first_seen":"2024-08-19T17:48:05.023543Z","last_seen":"2026-07-28T19:04:42.48417Z","times_seen":149,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cchallenger.world/kerr4rvvjju4.js","fqdn":"cchallenger.world","domain":"cchallenger.world","tld":"world"},"ip":{"addr":"94.156.232.181","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b89f6bb696cff1fb2a4e9fa4733224d","sha1":"f864bf298795b9b348fdc8e6fe4d73617f6d1f28","sha256":"d68aee4e6c625ad6ca563faea88fe8c0788c9b84758846407fc6201b61005d74","sha512":"d90576d6d9a7ae91b923386cbb4257ec96432c499d2c3862f5e85c789a256019db3690ab9fda8f1df24bf577f223ee44baabfc7aacfab1105f3fad527f22c1e7","ssdeep":"6144:ZMR/94/S1/p7MXkxoVUaCiaON4aWIwweThH/2rkbZwNMT/8Y:Zsl4/S1M3VUaCiIaWIwweThH/2rkbZwQ","tlshash":"a574a44127c0a94817a78fbb731fb4e5f96e092f3c540d9be600fd6065e5626fae2930","size":366622,"data":"","first_seen":"2025-10-05T18:25:02.563747Z","last_seen":"2025-11-01T17:48:54.549407Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cchallenger.world/assets/css/main.css","fqdn":"cchallenger.world","domain":"cchallenger.world","tld":"world"},"ip":{"addr":"94.156.232.181","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cchallenger.world/","date":"2025-10-19T01:25:41.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cchallenger.world","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Oct 2025 10:52:02 GMT","end":"Thu, 15 Jan 2026 10:52:01 GMT"},"fingerprint":{"sha1":"3D:1D:3C:34:B6:A2:79:98:D6:7D:87:38:50:B6:10:FB:1B:32:3E:8A","sha256":"2E:C2:AA:06:37:E0:04:AE:D4:61:56:9F:65:EC:E5:8A:9D:5E:4A:FC:7F:49:8F:A0:66:B5:05:6A:94:83:C4:B5"}}},"request":{"raw":"GET /assets/css/main.css HTTP/1.1\r\nHost: cchallenger.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cchallenger.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 19 Oct 2025 01:25:41 GMT\r\nContent-Type: text/css\r\nContent-Length: 27159\r\nLast-Modified: Fri, 17 Oct 2025 11:52:31 GMT\r\nConnection: keep-alive\r\nETag: \"68f22dff-6a17\"\r\nX-Frame-Options: SAMEORIGIN\r\nPermissions-Policy: geolocation=(), microphone=(), camera=()\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":27159,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27158)","md5":"8bcbc9dbc4a0e086ce91107a4fb0da18","sha1":"da642f61013112581fadf69009314df6bd38100d","sha256":"c9d486989ba34ffec2223e9597c308d2f3eba6fc92ae7a56138a145117ddfc65","sha512":"442a1db8732d4fd0533b61fc469eb4e29d349674c423315a7ca6e437174a0ded85f8bca08555e3fd96dc943485e4d310f2fbe667d343357b8984bed2d7b248b6","ssdeep":"384:Gwf2uIBHHcL9WJrft9cwkEClHiZFeE2ciHo8rt2egRK+lz25j2FZqw2o:5yIuft9cwku","tlshash":"23c2c672590a20086123cd2331cbf7563b5ea071d6566aa3f1293de4cdca5bf07b7b19","first_seen":"2024-12-05T19:56:07.833154Z","last_seen":"2026-06-01T20:19:34.595281Z","times_seen":145,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cchallenger.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cchallenger.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cchallenger.world/f.png","fqdn":"cchallenger.world","domain":"cchallenger.world","tld":"world"},"ip":{"addr":"94.156.232.181","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cchallenger.world/","date":"2025-10-19T01:25:41.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cchallenger.world","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Oct 2025 10:52:02 GMT","end":"Thu, 15 Jan 2026 10:52:01 GMT"},"fingerprint":{"sha1":"3D:1D:3C:34:B6:A2:79:98:D6:7D:87:38:50:B6:10:FB:1B:32:3E:8A","sha256":"2E:C2:AA:06:37:E0:04:AE:D4:61:56:9F:65:EC:E5:8A:9D:5E:4A:FC:7F:49:8F:A0:66:B5:05:6A:94:83:C4:B5"}}},"request":{"raw":"GET /f.png HTTP/1.1\r\nHost: cchallenger.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cchallenger.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 19 Oct 2025 01:25:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 692\r\nLast-Modified: Fri, 17 Oct 2025 11:52:14 GMT\r\nConnection: keep-alive\r\nETag: \"68f22dee-2b4\"\r\nX-Frame-Options: SAMEORIGIN\r\nPermissions-Policy: geolocation=(), microphone=(), camera=()\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":692,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"eeba43aa30fd4a79f8827fc116f8acb1","sha1":"08e9622c8b2e97b1244d1a3375a744cddab0dcc7","sha256":"9408a92c41ffc981009a6e1365e2cde0e3cfb4ca27344e358fda64881c1a0ee6","sha512":"7fa486f7f8da5d2bbbc11e3d631a915da723bdb4c2d1d74b2e4613c00c38ccd826771865d0ee9aa21b80ee190779b10a9296a86c68c66a8eda091ca9832b3e83","ssdeep":"","tlshash":"e90144ba3a651cd79c0f156fc9aa60e4ce7b9d944c33a416b128e75a280612504c5c90","first_seen":"2024-08-19T17:48:05.01247Z","last_seen":"2026-06-01T20:19:34.6016Z","times_seen":146,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":104,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cchallenger.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cchallenger.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cchallenger.world/kerr4rvvjju4.js","fqdn":"cchallenger.world","domain":"cchallenger.world","tld":"world"},"ip":{"addr":"94.156.232.181","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cchallenger.world/","date":"2025-10-19T01:25:41.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cchallenger.world","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Oct 2025 10:52:02 GMT","end":"Thu, 15 Jan 2026 10:52:01 GMT"},"fingerprint":{"sha1":"3D:1D:3C:34:B6:A2:79:98:D6:7D:87:38:50:B6:10:FB:1B:32:3E:8A","sha256":"2E:C2:AA:06:37:E0:04:AE:D4:61:56:9F:65:EC:E5:8A:9D:5E:4A:FC:7F:49:8F:A0:66:B5:05:6A:94:83:C4:B5"}}},"request":{"raw":"GET /kerr4rvvjju4.js HTTP/1.1\r\nHost: cchallenger.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cchallenger.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 19 Oct 2025 01:25:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 366622\r\nLast-Modified: Fri, 17 Oct 2025 11:52:15 GMT\r\nConnection: keep-alive\r\nETag: \"68f22def-5981e\"\r\nX-Frame-Options: SAMEORIGIN\r\nPermissions-Policy: geolocation=(), microphone=(), camera=()\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":366622,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3b89f6bb696cff1fb2a4e9fa4733224d","sha1":"f864bf298795b9b348fdc8e6fe4d73617f6d1f28","sha256":"d68aee4e6c625ad6ca563faea88fe8c0788c9b84758846407fc6201b61005d74","sha512":"d90576d6d9a7ae91b923386cbb4257ec96432c499d2c3862f5e85c789a256019db3690ab9fda8f1df24bf577f223ee44baabfc7aacfab1105f3fad527f22c1e7","ssdeep":"6144:ZMR/94/S1/p7MXkxoVUaCiaON4aWIwweThH/2rkbZwNMT/8Y:Zsl4/S1M3VUaCiIaWIwweThH/2rkbZwQ","tlshash":"a574a44127c0a94817a78fbb731fb4e5f96e092f3c540d9be600fd6065e5626fae2930","first_seen":"2025-10-05T18:25:02.563747Z","last_seen":"2025-11-01T17:48:54.549407Z","times_seen":25,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":57,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cchallenger.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cchallenger.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cchallenger.world/","date":"2025-10-19T01:25:41.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cchallenger.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cchallenger.world/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 00:02:37 GMT\r\nexpires: Fri, 16 Oct 2026 00:02:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 11 Jul 2022 20:54:46 GMT\r\ncontent-type: font/woff2\r\nage: 264184\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37924, version 1.0","md5":"e08be6d5d433944f7ad52902e4d24db5","sha1":"e2600c1d60d12d397b3ee44411a021231d71e974","sha256":"450f3ba4e47ee174bd9692b396f264b907d37d2528f53911760f3d0edb785f7e","sha512":"9c8de3a1e131cffd6ac63691e6a514d35d978570b9ce63a6861e1ccdb34d3621bfedcd2337ba3854df0f636e5b3d8c490f126e81641cffd20eaa23a976e39f06","ssdeep":"768:tbpjfMGDIjzNlfatl8U5N8ZXJHTXSA3ZOeWBHcmcgGYop2Q71e+go:tbl9DIHjaL13sGQLmcgGxDp","tlshash":"ff03f1d0e429659aed75cef805cab066285f3c433ad49d626f0dec85227e2ae01098c9","first_seen":"2023-04-06T21:06:35Z","last_seen":"2026-08-07T08:59:26.041338Z","times_seen":3761,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":105,"dns":1,"connect":8,"send":0,"wait":8,"receive":9,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cchallenger.world/","date":"2025-10-19T01:25:41.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cchallenger.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cchallenger.world/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 11:47:16 GMT\r\nexpires: Fri, 16 Oct 2026 11:47:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 221905\r\nlast-modified: Wed, 27 Apr 2022 16:11:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-08T09:25:27.214058Z","times_seen":294297,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":82,"dns":1,"connect":10,"send":0,"wait":10,"receive":1,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cchallenger.world/assets/img/dicki.mp4","fqdn":"cchallenger.world","domain":"cchallenger.world","tld":"world"},"ip":{"addr":"94.156.232.181","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://cchallenger.world/","date":"2025-10-19T01:25:41.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cchallenger.world","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Oct 2025 10:52:02 GMT","end":"Thu, 15 Jan 2026 10:52:01 GMT"},"fingerprint":{"sha1":"3D:1D:3C:34:B6:A2:79:98:D6:7D:87:38:50:B6:10:FB:1B:32:3E:8A","sha256":"2E:C2:AA:06:37:E0:04:AE:D4:61:56:9F:65:EC:E5:8A:9D:5E:4A:FC:7F:49:8F:A0:66:B5:05:6A:94:83:C4:B5"}}},"request":{"raw":"GET /assets/img/dicki.mp4 HTTP/1.1\r\nHost: cchallenger.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cchallenger.world/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 19 Oct 2025 01:25:41 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 12205287\r\nLast-Modified: Fri, 17 Oct 2025 11:52:56 GMT\r\nConnection: keep-alive\r\nETag: \"68f22e18-ba3ce7\"\r\nX-Frame-Options: SAMEORIGIN\r\nPermissions-Policy: geolocation=(), microphone=(), camera=()\r\nContent-Range: bytes 0-12205286/12205287\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1572864,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"b88cd377eb1486c993e6ec6b52e9c196","sha1":"6c8927bb11fd176200bd9acf1fb3971a6101cdd4","sha256":"ca26d7c57fbd50af839ca71d290f11dd356222945d635dcd6239c5ba4a4b5651","sha512":"4c439e513edc7e06642170efca141c98f31b49490b710517d41c7236d49c85ea338643e1332a29c93a498ac9ff932ab23fbcea89a8a56ee82ce91167dbdd4b53","ssdeep":"24576:PADytd6iUfS0r/qSDyYnmO27h+Kz3y0PiCbzTUXju7Xy:vIiUfd/j9mZzi0PiCbzowy","tlshash":"172533c1c9d19b3bfeda333d884b38eb341d820251e06b1d6d5c8746a995c52be78b72","first_seen":"2025-09-08T08:08:29.590461Z","last_seen":"2026-06-01T20:19:34.589952Z","times_seen":57,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":28,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cchallenger.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cchallenger.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cchallenger.world/","fqdn":"cchallenger.world","domain":"cchallenger.world","tld":"world"},"ip":{"addr":"94.156.232.181","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-19T01:25:40.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cchallenger.world","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Oct 2025 10:52:02 GMT","end":"Thu, 15 Jan 2026 10:52:01 GMT"},"fingerprint":{"sha1":"3D:1D:3C:34:B6:A2:79:98:D6:7D:87:38:50:B6:10:FB:1B:32:3E:8A","sha256":"2E:C2:AA:06:37:E0:04:AE:D4:61:56:9F:65:EC:E5:8A:9D:5E:4A:FC:7F:49:8F:A0:66:B5:05:6A:94:83:C4:B5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cchallenger.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 19 Oct 2025 01:25:41 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Frame-Options: SAMEORIGIN\r\nPermissions-Policy: geolocation=(), microphone=(), camera=()\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}],"data":{"size":2303010,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (15546)","md5":"7a85d510e5d4196912a4f0084894192a","sha1":"5210cb859226640ba965c8b4cd7cb2867f9081b8","sha256":"86e424bc6721c6294526035fe47cd04e54216dffcaf7b85e32d83788c6841e65","sha512":"63588bc21bb860e4620e74090820d09186ba72dbeddb1c869886b8fb189a941bdd24acf49e3e422747ab0d0e18b1ac7ce4f58e6ee7b4c9106bc50a29638acb23","ssdeep":"24576:HA8NEgmmAIMRxbqLPWvV+T0kVDJ+p5WbrkNdMesbv77E:HAP5Rxbk1J45kkX8Po","tlshash":"b225f16045ac143601ae41966a6f1a1b3b91f43bcd1adfc2f2bc3add4f8fd85ab47448","first_seen":"2025-10-05T18:25:02.569656Z","last_seen":"2025-11-01T17:48:54.556465Z","times_seen":24,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":95,"dns":30,"connect":26,"send":0,"wait":54,"receive":161,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cchallenger.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cchallenger.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.4.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cchallenger.world/","date":"2025-10-19T01:25:41.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.6.4.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cchallenger.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cchallenger.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15ec3\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 19 Oct 2025 01:25:41 GMT\r\nage: 4025920\r\nx-served-by: cache-lga21953-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 104614, 158847\r\nx-timer: S1760837141.348867,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 31011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89795,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"641dd14370106e992d352166f5a07e99","sha1":"eda46747c71d38a880bee44f9a439c3858bb8f99","sha256":"a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af","sha512":"a6e981b23351186aa43f32879dd64c6801be6e2af7ef8b0e472cccdeeba52d5d7894de4bcb292a364f1e11e525524077534338140a72687ada4fae62849843a5","ssdeep":"1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH","tlshash":"d193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-26T04:59:07Z","last_seen":"2026-08-08T08:37:38.893749Z","times_seen":27244,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":72,"dns":1,"connect":17,"send":0,"wait":15,"receive":6,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets1.challengermode.com/portal/videos/marketplace.mp4","fqdn":"assets1.challengermode.com","domain":"challengermode.com","tld":"com"},"ip":{"addr":"172.66.150.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://cchallenger.world/","date":"2025-10-19T01:25:42.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challengermode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 07:06:32 GMT","end":"Fri, 05 Dec 2025 08:06:29 GMT"},"fingerprint":{"sha1":"CC:90:49:45:F0:82:3C:2D:63:AE:8E:7D:39:E8:92:D8:56:87:15:0F","sha256":"EC:DB:6B:7D:3E:B0:23:75:37:AB:84:6A:66:45:32:61:82:2A:5E:A5:44:47:D1:4F:A7:BD:4E:99:BB:82:36:0C"}}},"request":{"raw":"GET /portal/videos/marketplace.mp4 HTTP/1.1\r\nHost: assets1.challengermode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=1966080-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cchallenger.world/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sun, 19 Oct 2025 01:25:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 21755\r\nstrict-transport-security: max-age=0\r\ncache-control: public,max-age=604800\r\ncontent-md5: Ltsa/gKjnQGiBmmLsniQlg==\r\netag: 0x8D7D6E89DB28086\r\nlast-modified: Thu, 02 Apr 2020 09:31:26 GMT\r\nx-cache-ttl: 604800\r\nx-ms-request-id: dbf1992d-601e-005c-6afc-3864f3000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 227258\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-range: bytes 1966080-1987834/1987835\r\ncf-ray: 990c7baa6f7656be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21755,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"a468d4ba7cb7871a6ecd667cad00dec6","sha1":"3748f501f2ca5437bbd9b86dd493a08c6faa4a99","sha256":"a30fc18a0b1e1674d73b78b3f5dad796aae7715dca3d085df1b07a9664105f59","sha512":"b38db993d83f1b4b5b78d35fc500ea226b7e9fe9decc3af94aa5bb99bc88197c5c80d9e126abaee07f146174254bd669f485d1ec5791bad482539bdd6d2889b1","ssdeep":"192:g/n+oJeGZE2G0rnfFRVG14uCjGPQBhCeZnyhEP4Sme3chVi+JiW:GveGvdrnfFRVJX/BsIyaw/HhVi+wW","tlshash":"c0a206ddef204506d740717cddd283117b30d8e86e87d78b1a802179ae763e42f9e6aa","first_seen":"2024-12-05T19:56:07.821757Z","last_seen":"2026-06-01T20:19:34.601112Z","times_seen":142,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgur.com/CGC5zsv.jpg","fqdn":"imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cchallenger.world/","date":"2025-10-19T01:25:42.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /CGC5zsv.jpg HTTP/1.1\r\nHost: imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cchallenger.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nretry-after: 0\r\nlocation: https://i.imgur.com/CGC5zsv.jpg\r\naccept-ranges: bytes\r\ndate: Sun, 19 Oct 2025 01:25:42 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1760837142.414821,VS0,VE0\r\nserver: cat factory 1.0\r\nstrict-transport-security: max-age=300\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nx-frame-options: DENY\r\naccess-control-allow-origin: https://imgur.com\r\naccess-control-allow-credentials: false\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18179,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T09:24:26.035056Z","times_seen":17776616,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":4,"dns":0,"connect":13,"send":0,"wait":14,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/CGC5zsv.jpg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cchallenger.world/","date":"2025-10-19T01:25:42.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /CGC5zsv.jpg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cchallenger.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Fri, 01 Sep 2023 17:06:22 GMT\r\netag: \"fd88fb39950901fff944d35e7e4777ff\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: b3PCyhBaeflvO8s-QodI_-J-oj1uMv7SVo6I1W1lPYgGtQsGsaof3Q==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1691088\r\ndate: Sun, 19 Oct 2025 01:25:42 GMT\r\nx-served-by: cache-iad-kcgs7200056-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 579, 0\r\nx-timer: S1760837142.441376,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 18179\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18179,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"fd88fb39950901fff944d35e7e4777ff","sha1":"61c9699b8f4d6a4b093b125c3cae6bbced332b98","sha256":"0bce929a051d6cb7dd04015f0671534fe21785aba34fa67b2ebfa3a08a777d02","sha512":"6db6fc01b441d482f71e6bd02b5660e22b2a8445b31c6c68d6b9f17013ac1ab62d610b3b3aa561721a3bbbd660d8388439a6195bc6fad75629ff81941702d41e","ssdeep":"384:cBPhq4lK2AjTHSIbU/VaaD19c0EpzDq2sUF4BNzld+S:cBPha2cgVv9+1DgW4rf+S","tlshash":"14823bf1e7dc2371956f9224d383091a5ef3d294a2f298c51742825de6eebec0467e88","first_seen":"2024-08-19T17:48:05.020539Z","last_seen":"2026-07-28T19:04:42.469803Z","times_seen":147,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":13,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.esports.net/wp-content/uploads/2023/10/Roobet-Cup-2023-2.jpg","fqdn":"www.esports.net","domain":"esports.net","tld":"net"},"ip":{"addr":"104.21.6.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cchallenger.world/","date":"2025-10-19T01:25:41.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esports.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 09:38:58 GMT","end":"Wed, 19 Nov 2025 10:37:33 GMT"},"fingerprint":{"sha1":"F7:56:FC:AC:FC:A9:4B:BD:88:9A:65:83:89:A2:8B:53:86:FC:0B:26","sha256":"64:CA:13:2A:66:76:97:C7:88:24:B1:C5:8A:79:F2:CF:9E:24:F4:49:11:49:8E:94:0A:08:9D:F5:BA:4A:53:D7"}}},"request":{"raw":"GET /wp-content/uploads/2023/10/Roobet-Cup-2023-2.jpg HTTP/1.1\r\nHost: www.esports.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cchallenger.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 01:25:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 267806\r\ncf-ray: 990c7ba55e01b4ff-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 233968\r\ncache-control: max-age=315360000\r\netag: \"67b4228a-4161e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 18 Feb 2025 06:02:50 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nreferrer-policy: unsafe-url\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=91UUuSjIZjnezcs3oafF5FULFf812z63wnntuN%2BUO0f4Leo6WCwCktJuL6qyu2F00tWy%2FAPJ6LhHqfPvVI2lyz1Fq4w%2FyXiS%2FIP3Lhs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":267806,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x450, components 3","md5":"4b0eae6b768ca5c0a830f9908a237223","sha1":"b5bd0f4ef0b36d531ee04c3630146def6088b7da","sha256":"70097deada0c5dee0c5c1508c05996b7389b4638e820f39769abdb7d9142ab33","sha512":"a2256f2111fbf601a17956107d1b3031a5eb8a9ee992ffd6b07bf74c1cd62abd1d04942c184adb98bcaa7fdf4bac0767ae1c1c2471d1568abb7968e01369bb64","ssdeep":"6144:M244vhhTMqaMXTZGz3nFDoJaIf1ptawqzzS3fwnVLbBcyaI:M2/vra6TZGywIf1pszEChaI","tlshash":"2c441215383b0772d2df8bba03019f956252172449d2e8be5603de8bc6f25d07cdbb8a","first_seen":"2025-08-28T10:50:47.270624Z","last_seen":"2026-07-28T19:04:42.481982Z","times_seen":145,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":60,"dns":15,"connect":7,"send":0,"wait":23,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cchallenger.world/assets/js/main.js","fqdn":"cchallenger.world","domain":"cchallenger.world","tld":"world"},"ip":{"addr":"94.156.232.181","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cchallenger.world/","date":"2025-10-19T01:25:41.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cchallenger.world","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Oct 2025 10:52:02 GMT","end":"Thu, 15 Jan 2026 10:52:01 GMT"},"fingerprint":{"sha1":"3D:1D:3C:34:B6:A2:79:98:D6:7D:87:38:50:B6:10:FB:1B:32:3E:8A","sha256":"2E:C2:AA:06:37:E0:04:AE:D4:61:56:9F:65:EC:E5:8A:9D:5E:4A:FC:7F:49:8F:A0:66:B5:05:6A:94:83:C4:B5"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: cchallenger.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cchallenger.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 19 Oct 2025 01:25:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 639\r\nLast-Modified: Fri, 17 Oct 2025 11:53:04 GMT\r\nConnection: keep-alive\r\nETag: \"68f22e20-27f\"\r\nX-Frame-Options: SAMEORIGIN\r\nPermissions-Policy: geolocation=(), microphone=(), camera=()\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":639,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"45e050bc382350dd9dd6dff724d53647","sha1":"1d01df884ef6d3d7346dd18416433b82683fad5a","sha256":"0769d1022b0c16160cac2d5d6456a5669cf97ba6270c91b6a2a4536286281974","sha512":"cc4f6cdc286c2806c6d4b771422196af1dc9477f449c8b3fb277b3fe91aee811d75a3781cac0bbe9254e98406aa6dafea1482b2ffa1c7265b3111bd754327dec","ssdeep":"","tlshash":"1ff02b8565eb711006ba1dfa10db9475d777d163319a0b047c9c89a1cf25478a396878","first_seen":"2024-08-19T17:48:05.026572Z","last_seen":"2026-06-01T20:19:34.600014Z","times_seen":146,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cchallenger.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cchallenger.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets1.challengermode.com/portal/videos/marketplace.mp4","fqdn":"assets1.challengermode.com","domain":"challengermode.com","tld":"com"},"ip":{"addr":"172.66.150.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://cchallenger.world/","date":"2025-10-19T01:25:41.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challengermode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 07:06:32 GMT","end":"Fri, 05 Dec 2025 08:06:29 GMT"},"fingerprint":{"sha1":"CC:90:49:45:F0:82:3C:2D:63:AE:8E:7D:39:E8:92:D8:56:87:15:0F","sha256":"EC:DB:6B:7D:3E:B0:23:75:37:AB:84:6A:66:45:32:61:82:2A:5E:A5:44:47:D1:4F:A7:BD:4E:99:BB:82:36:0C"}}},"request":{"raw":"GET /portal/videos/marketplace.mp4 HTTP/1.1\r\nHost: assets1.challengermode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cchallenger.world/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sun, 19 Oct 2025 01:25:41 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1987835\r\nstrict-transport-security: max-age=0\r\ncache-control: public,max-age=604800\r\ncontent-md5: Ltsa/gKjnQGiBmmLsniQlg==\r\netag: 0x8D7D6E89DB28086\r\nlast-modified: Thu, 02 Apr 2020 09:31:26 GMT\r\nx-cache-ttl: 604800\r\nx-ms-request-id: dbf1992d-601e-005c-6afc-3864f3000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 227257\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-range: bytes 0-1987834/1987835\r\ncf-ray: 990c7ba8ef7356be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1572864,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"1362ce944dbfc90713e5caea3fc19bd1","sha1":"7ecb47b5521bbdf0dfd0918d04adb96bc644947d","sha256":"56362ea920394a488ee3dd98a8823fc58703d7a917ef4ee59de16b2e6347d048","sha512":"11fa4a323111b9e356030b864a7c37724633ea23e65f38e00d6c578638bc970754f852253b52c2811838e23941fdc2772fc6beef84c0490e6f918788f6a418f9","ssdeep":"12288:DbQRGu02ni6lDWiFTKtoUbK/qBRmLnAIZBTCcsfHDc2PRipNF:PQRy6lDWqmto4eLVZhEjcORmNF","tlshash":"4f251398bf245da6d28124ba8d52d7200d213a26c9b4e9477ec479df06f8bc6df72307","first_seen":"2025-10-14T20:09:17.863059Z","last_seen":"2026-06-01T20:19:34.590749Z","times_seen":22,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":12,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image1.challengermode.com/28bd36fe-3706-4a64-a9a7-08d9bbf43f76_64_64","fqdn":"image1.challengermode.com","domain":"challengermode.com","tld":"com"},"ip":{"addr":"172.66.150.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cchallenger.world/","date":"2025-10-19T01:25:41.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challengermode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 07:06:32 GMT","end":"Fri, 05 Dec 2025 08:06:29 GMT"},"fingerprint":{"sha1":"CC:90:49:45:F0:82:3C:2D:63:AE:8E:7D:39:E8:92:D8:56:87:15:0F","sha256":"EC:DB:6B:7D:3E:B0:23:75:37:AB:84:6A:66:45:32:61:82:2A:5E:A5:44:47:D1:4F:A7:BD:4E:99:BB:82:36:0C"}}},"request":{"raw":"GET /28bd36fe-3706-4a64-a9a7-08d9bbf43f76_64_64 HTTP/1.1\r\nHost: image1.challengermode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cchallenger.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 01:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1846\r\nserver: cloudflare\r\ncache-control: public,max-age=2592000, public, max-age=2592000\r\ncf-bgj: imgq:85,h2pri\r\nstrict-transport-security: max-age=0\r\ncf-polished: origSize=2820\r\nvary: accept\r\ncontent-md5: dYG8Mg/de96wC8ACtRA4zA==\r\netag: 0x8D9C0A840E2B60B\r\nlast-modified: Thu, 16 Dec 2021 15:25:12 GMT\r\nx-cache-ttl: 2592000\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: d61be85e-f01e-0042-5204-3e9c3b000000\r\nx-ms-version: 2009-09-19\r\ncf-cache-status: HIT\r\nage: 283083\r\naccept-ranges: bytes\r\ncf-ray: 990c7ba6e8dca41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1846,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"fa912a43bc7c7fc6e2ce2130aea31661","sha1":"12b7d3752235b9eaecf1ada91d27b16083cac30c","sha256":"790e71884420d0ce55fe226959a3ccf4d8ad353fca66dfd6b83a09a0a2133411","sha512":"af354fe2a80d6dfbc184926a97d53de7c13663b6cccfda3030e77b8e0cd9696887ee2c6179b3cec78359288e07bce1fa0d6b29a366769a17fa36511847c3732a","ssdeep":"","tlshash":"b231f9bdfbf650ade1aa62b222990344432b1f06010f7f732db4caed221a465e291790","first_seen":"2025-08-02T23:32:33.944032Z","last_seen":"2026-06-01T20:19:34.59675Z","times_seen":74,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":313,"dns":5,"connect":1,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image1.challengermode.com/ed08e059-bfb1-4e7f-ab09-08db2f848527_64_64","fqdn":"image1.challengermode.com","domain":"challengermode.com","tld":"com"},"ip":{"addr":"172.66.150.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cchallenger.world/","date":"2025-10-19T01:25:41.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challengermode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 07:06:32 GMT","end":"Fri, 05 Dec 2025 08:06:29 GMT"},"fingerprint":{"sha1":"CC:90:49:45:F0:82:3C:2D:63:AE:8E:7D:39:E8:92:D8:56:87:15:0F","sha256":"EC:DB:6B:7D:3E:B0:23:75:37:AB:84:6A:66:45:32:61:82:2A:5E:A5:44:47:D1:4F:A7:BD:4E:99:BB:82:36:0C"}}},"request":{"raw":"GET /ed08e059-bfb1-4e7f-ab09-08db2f848527_64_64 HTTP/1.1\r\nHost: image1.challengermode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cchallenger.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 01:25:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1624\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public,max-age=2592000, public, max-age=2592000\r\ncf-bgj: imgq:85,h2pri\r\nstrict-transport-security: max-age=0\r\ncf-polished: degrade=85, origSize=1810\r\nvary: accept\r\ncontent-md5: 6zmz7FIHJHBD7WchBF/irw==\r\netag: 0x8DB31157336ED26\r\nlast-modified: Thu, 30 Mar 2023 11:54:00 GMT\r\nx-cache-ttl: 2592000\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: 0c4f50b4-901e-0019-35fc-38a500000000\r\nx-ms-version: 2009-09-19\r\ncf-cache-status: HIT\r\nage: 196871\r\ncf-ray: 990c7ba6e8dda41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1624,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3","md5":"7e094fe9d837aad1eec9932e011bdcbb","sha1":"eec4bbe18b7db79f1d32c59a7012bf5d53c872cf","sha256":"2fd72de620e35d9737b2865d6f15c0fd59574d8a875aac0b54f36bf40ee9e412","sha512":"636ff6a556ddadaa5fb80c3cdb671022baca40012fc56f590a7061f3b72f5c393753aa3afde4f59fde05fa8adf18dfcd5332c3a4da184d89dc2e7778325ceb5c","ssdeep":"","tlshash":"a431ea22d74be1d4ec2347f811203f9d2f866de61be5964406942526c3fb5921f103e4","first_seen":"2025-08-02T23:32:33.946155Z","last_seen":"2026-06-01T20:19:34.592763Z","times_seen":74,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":312,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cchallenger.world/assets/js/transformator.js","fqdn":"cchallenger.world","domain":"cchallenger.world","tld":"world"},"ip":{"addr":"94.156.232.181","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cchallenger.world/","date":"2025-10-19T01:25:41.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cchallenger.world","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Oct 2025 10:52:02 GMT","end":"Thu, 15 Jan 2026 10:52:01 GMT"},"fingerprint":{"sha1":"3D:1D:3C:34:B6:A2:79:98:D6:7D:87:38:50:B6:10:FB:1B:32:3E:8A","sha256":"2E:C2:AA:06:37:E0:04:AE:D4:61:56:9F:65:EC:E5:8A:9D:5E:4A:FC:7F:49:8F:A0:66:B5:05:6A:94:83:C4:B5"}}},"request":{"raw":"GET /assets/js/transformator.js HTTP/1.1\r\nHost: cchallenger.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cchallenger.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 19 Oct 2025 01:25:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 102\r\nLast-Modified: Fri, 17 Oct 2025 11:53:04 GMT\r\nConnection: keep-alive\r\nETag: \"68f22e20-66\"\r\nX-Frame-Options: SAMEORIGIN\r\nPermissions-Policy: geolocation=(), microphone=(), camera=()\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":102,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"9ff36a50763a6cb4daa722a9b6a735fb","sha1":"d9589e6504dcfc875020a4f7033765bad932999a","sha256":"25c234d228d48a7069884f0de5c45877529df68441795fff21bd36e23d64d185","sha512":"f1d22c91552dc82de02fe569436876f3d7590597f985ff5f58ecc0c5fbd69ba52f8b425eb0d607420f9a6f6252dc4432cf36e5ffe81b55ba5083e26175add4b1","ssdeep":"","tlshash":"98b012a7fdcc651842c33530ca37bd8c5a3334823c9d7409d41c18505419a2c1d53a4e","first_seen":"2024-08-19T17:48:05.023543Z","last_seen":"2026-07-28T19:04:42.48417Z","times_seen":149,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cchallenger.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cchallenger.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cchallenger.world/","date":"2025-10-19T01:25:41.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cchallenger.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cchallenger.world/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 00:02:37 GMT\r\nexpires: Fri, 16 Oct 2026 00:02:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 11 Jul 2022 20:54:46 GMT\r\ncontent-type: font/woff2\r\nage: 264184\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37924, version 1.0","md5":"e08be6d5d433944f7ad52902e4d24db5","sha1":"e2600c1d60d12d397b3ee44411a021231d71e974","sha256":"450f3ba4e47ee174bd9692b396f264b907d37d2528f53911760f3d0edb785f7e","sha512":"9c8de3a1e131cffd6ac63691e6a514d35d978570b9ce63a6861e1ccdb34d3621bfedcd2337ba3854df0f636e5b3d8c490f126e81641cffd20eaa23a976e39f06","ssdeep":"768:tbpjfMGDIjzNlfatl8U5N8ZXJHTXSA3ZOeWBHcmcgGYop2Q71e+go:tbl9DIHjaL13sGQLmcgGxDp","tlshash":"ff03f1d0e429659aed75cef805cab066285f3c433ad49d626f0dec85227e2ae01098c9","first_seen":"2023-04-06T21:06:35Z","last_seen":"2026-08-07T08:59:26.041338Z","times_seen":3761,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":103,"dns":1,"connect":20,"send":0,"wait":17,"receive":5,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cchallenger.world/","date":"2025-10-19T01:25:41.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cchallenger.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cchallenger.world/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 00:02:37 GMT\r\nexpires: Fri, 16 Oct 2026 00:02:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 11 Jul 2022 20:54:46 GMT\r\ncontent-type: font/woff2\r\nage: 264184\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37924, version 1.0","md5":"e08be6d5d433944f7ad52902e4d24db5","sha1":"e2600c1d60d12d397b3ee44411a021231d71e974","sha256":"450f3ba4e47ee174bd9692b396f264b907d37d2528f53911760f3d0edb785f7e","sha512":"9c8de3a1e131cffd6ac63691e6a514d35d978570b9ce63a6861e1ccdb34d3621bfedcd2337ba3854df0f636e5b3d8c490f126e81641cffd20eaa23a976e39f06","ssdeep":"768:tbpjfMGDIjzNlfatl8U5N8ZXJHTXSA3ZOeWBHcmcgGYop2Q71e+go:tbl9DIHjaL13sGQLmcgGxDp","tlshash":"ff03f1d0e429659aed75cef805cab066285f3c433ad49d626f0dec85227e2ae01098c9","first_seen":"2023-04-06T21:06:35Z","last_seen":"2026-08-07T08:59:26.041338Z","times_seen":3761,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":90,"dns":6,"connect":22,"send":0,"wait":26,"receive":2,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zavod228.icu/dqovoadhhoihvobpkxmkhjlqrmjavxnkthgkieouktyggn","fqdn":"zavod228.icu","domain":"zavod228.icu","tld":"icu"},"ip":{"addr":"64.188.91.38","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cchallenger.world/","date":"2025-10-19T01:25:42.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavod228.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 13:39:25 GMT","end":"Tue, 16 Dec 2025 13:39:24 GMT"},"fingerprint":{"sha1":"3D:50:4A:45:40:C7:44:E8:8D:9B:2C:F6:BF:78:F4:F0:85:87:68:C7","sha256":"BD:0C:C9:FF:E7:6D:E0:D8:2E:54:92:A1:E0:D0:C3:52:F5:B1:11:E5:96:99:A8:14:CD:36:50:34:70:72:2C:48"}}},"request":{"raw":"POST /dqovoadhhoihvobpkxmkhjlqrmjavxnkthgkieouktyggn HTTP/1.1\r\nHost: zavod228.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 155\r\nOrigin: https://cchallenger.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cchallenger.world/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 58\r\nETag: W/\"3a-mEzQGAqERL34d98i6ibCWIsDztI\"\r\nDate: Sun, 19 Oct 2025 01:25:42 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"20f44a84785a3df26eb74fe2d49c6282","sha1":"984cd0180a8444bdf877df22ea26c2588b03ced2","sha256":"a89ba47c5e5743ff39d5d906a66f995d7987204a8c3454ecbecbc7b2264a2d27","sha512":"bf44eea2407d5abdead14bff0fbb7eb1b4141ccda9aeab37c72e14842d512d3e1881150ed2e0c8865e68ba5bd54e599c6028cfcf087592453b430ca5ec980069","ssdeep":"","tlshash":"b7a00245551059fcdd574c0c834d3f000a7d056669c4604ff00c095891b101b4405133","first_seen":"2025-10-19T01:26:11.387584Z","last_seen":"2025-10-19T01:26:11.387584Z","times_seen":1,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":221,"dns":167,"connect":27,"send":0,"wait":221,"receive":42,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"zavod228.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"zavod228.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"zavod228.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"zavod228.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"zavod228.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"zavod228.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"zavod228.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-19","alert":"Phishing Block","trigger":"zavod228.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cchallenger.world/assets/img/dicki.mp4","fqdn":"cchallenger.world","domain":"cchallenger.world","tld":"world"},"ip":{"addr":"94.156.232.181","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://cchallenger.world/","date":"2025-10-19T01:25:42.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cchallenger.world","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Oct 2025 10:52:02 GMT","end":"Thu, 15 Jan 2026 10:52:01 GMT"},"fingerprint":{"sha1":"3D:1D:3C:34:B6:A2:79:98:D6:7D:87:38:50:B6:10:FB:1B:32:3E:8A","sha256":"2E:C2:AA:06:37:E0:04:AE:D4:61:56:9F:65:EC:E5:8A:9D:5E:4A:FC:7F:49:8F:A0:66:B5:05:6A:94:83:C4:B5"}}},"request":{"raw":"GET /assets/img/dicki.mp4 HTTP/1.1\r\nHost: cchallenger.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=12156928-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cchallenger.world/\r\nCookie: uv=mgx0yy7q-e1gcak37\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 19 Oct 2025 01:25:42 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 48359\r\nLast-Modified: Fri, 17 Oct 2025 11:52:56 GMT\r\nConnection: keep-alive\r\nETag: \"68f22e18-ba3ce7\"\r\nX-Frame-Options: SAMEORIGIN\r\nPermissions-Policy: geolocation=(), microphone=(), camera=()\r\nContent-Range: bytes 12156928-12205286/12205287\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":48359,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"0c473546241046088544201023584d0d","sha1":"d06b46671a90d95f1ab2597ea3c7e9b9cda56fbc","sha256":"0b8a63e67294510910555a219cb63926f674745257c498db3585cd3c1a3543b3","sha512":"c906b04582a10ccd255562ddd6fbda36693ef5afae050b56acd0576d825ecff690a495e2bf4dd1c593872a5f442b2f46dfab8839023676175eed8c9ccfd2eba5","ssdeep":"768:S1dLIsHfoPhACZ6JV1tGwiIFMabWUYcdJNB38YL/FeVeX6B+wYVt7EN6U6mdzNb:S1tIsMAA6JV1t9tb1HB38YLkVw6AwYbe","tlshash":"8b2348f6431f0605e2a23930e4c1a7306816f8b9a9d1879bd5d1e63f19750fdcb0aae3","first_seen":"2024-12-05T19:56:07.820422Z","last_seen":"2026-06-01T20:19:34.591323Z","times_seen":143,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cchallenger.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cchallenger.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}