{"report_id":"0601cbdd-daa0-4e2b-9e4c-50a35a1b68e4","version":6,"status":"done","tags":[],"date":"2025-12-27T12:00:47Z","url":{"schema":"http","addr":"ms.true-lovers.site/","fqdn":"ms.true-lovers.site","domain":"true-lovers.site","tld":"site"},"ip":{"addr":"104.21.34.54","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ms.true-lovers.site/","fqdn":"ms.true-lovers.site","domain":"true-lovers.site","tld":"site"},"title":"Anna is waiting...","dom":{"size":4748,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"454d18cddc9271890951fc111d5e98f7","sha1":"4afd86a61c780df35e521a385b7185acabc86e88","sha256":"5a6d2f3d5f8b33da41b4aa7f5ccb6c790af9c8a59193c3e8058652667901240a","sha512":"1dd38ed52ec60cbb12066239a08eb1f10b0b1bdb21760db5f22d3089ed7241be676430d90c025f66e38075b7bc34992103e4ad88935c4541f42395346ca4ee64","ssdeep":"48:jzHwUgorUmGJ6uzCYOjKJDx0Okokll6nzy6vUzKZJdw9CLVZfYmmCkwGmn8O:jbwoAnhOjKJDXkXMazKZJ69CRRzhGbO","tlshash":"71a1746745f3000963a390a6bfdfba063b70a047a90de904bedd97945fc6d93c4a728c","dom_hash":"domhash76d0064d7c002eba40065d29e02441f5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ms.true-lovers.site/","fqdn":"ms.true-lovers.site","domain":"true-lovers.site","tld":"site"},"ip":{"addr":"104.21.34.54","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-31T12:00:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"ms.true-lovers.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"ms.true-lovers.site","ip":{"addr":"104.21.34.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-31","domain_rank":0,"first_seen":"2025-11-19T12:01:12.603193Z","last_seen":"2025-11-19T12:01:12.603193Z","alert_count":5,"request_count":5,"received_data":71548,"sent_data":2403,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ms.true-lovers.site/","fqdn":"ms.true-lovers.site","domain":"true-lovers.site","tld":"site"},"ip":{"addr":"104.21.34.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b7c2df62dfbbd939fdbc25fffb50868","sha1":"888ca96ccd4752476a77c969a02ffa9db94222af","sha256":"f6fdab33dc0882be2cdeb94a734e6bc25c98c9fdf51d6e85f2e08ab3ac12fd54","sha512":"47ffa79792483894185fa3c4bc7dfc5552b7f84ff5bfcee749bf88c1ad47dead28439f67f4b137fdb93021daea1f5f4f97f46ddc22879d311aaf2ccbb7f37fc4","ssdeep":"","tlshash":"f321799f1363415916b370a4ef9f611874b6929b3848c904be6ce7900f1ae3a82b96cc","size":1410,"data":"","first_seen":"2025-10-10T16:48:06.913041Z","last_seen":"2026-01-12T12:01:04.971513Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"ms.true-lovers.site/img/video.MP4","fqdn":"ms.true-lovers.site","domain":"true-lovers.site","tld":"site"},"ip":{"addr":"104.21.34.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ms.true-lovers.site/","date":"2025-12-27T12:00:25.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"true-lovers.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 12:03:00 GMT","end":"Thu, 29 Jan 2026 13:01:48 GMT"},"fingerprint":{"sha1":"E9:7A:15:E0:90:CB:3F:98:4D:DA:2B:7D:A1:4C:22:B8:11:8B:56:82","sha256":"18:5C:20:28:91:BF:18:66:63:C7:5D:87:8A:11:4B:A2:10:C5:D1:6D:A0:09:7D:EA:C5:44:B1:54:0C:90:D7:8A"}}},"request":{"raw":"GET /img/video.MP4 HTTP/1.1\r\nHost: ms.true-lovers.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://ms.true-lovers.site/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 12:00:26 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 4677954\r\nlast-modified: Mon, 03 Nov 2025 10:41:41 GMT\r\nvary: Accept-Encoding\r\netag: \"690886e5-476142\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-range: bytes 0-4677953/4677954\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=41675qA3gDi6hwBBsFFGBJieX6ifRdlnqRE5poEJTtkKASX20ABHiD2JH2N%2BzCFL7DdKlzVCKZMpB7Vqa4byyShpw99V122nkGeoce4iytaP3Qo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b48a850793832fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32768,"size_decoded":0,"mime_type":"video/quicktime","magic":"ISO Media, Apple QuickTime movie, Apple QuickTime (.MOV/QT)","md5":"feb3245d9ffaedb20c6c350104d0f3ef","sha1":"f92a101b3cdb78f5b964aee6877bfb8270643bc2","sha256":"79fc11c47675367617066c885b80a49c46d1fd0e1134f9cd28eb0e75671eff37","sha512":"33f30c75c4f67375bd3146044bd5da77af3be53ceff55df90f1c210feb919c044b133944472c3a217b30aaa594ec1c524cdbcacf5e7b1e4e2d6c80fe80300929","ssdeep":"768:6XbLI7F6/BIGB5nbuRkj1EW/ke4Fta+W1lMDYHK7oXmpyb:2cKIGB5bX/ke4F4VvHK7Dpyb","tlshash":"26e2e159b2dd5d654978743142a77b0e3d60d7bf400aa828bd6c3e2b8074a74f2ee8b0","first_seen":"2025-10-10T16:48:06.902733Z","last_seen":"2026-01-04T12:00:59.880857Z","times_seen":8,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":384,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"ms.true-lovers.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ms.true-lovers.site/img/video.MP4","fqdn":"ms.true-lovers.site","domain":"true-lovers.site","tld":"site"},"ip":{"addr":"104.21.34.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ms.true-lovers.site/","date":"2025-12-27T12:00:26.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"true-lovers.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 12:03:00 GMT","end":"Thu, 29 Jan 2026 13:01:48 GMT"},"fingerprint":{"sha1":"E9:7A:15:E0:90:CB:3F:98:4D:DA:2B:7D:A1:4C:22:B8:11:8B:56:82","sha256":"18:5C:20:28:91:BF:18:66:63:C7:5D:87:8A:11:4B:A2:10:C5:D1:6D:A0:09:7D:EA:C5:44:B1:54:0C:90:D7:8A"}}},"request":{"raw":"GET /img/video.MP4 HTTP/1.1\r\nHost: ms.true-lovers.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://ms.true-lovers.site/\r\nRange: bytes=4653056-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 12:00:26 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 24898\r\nlast-modified: Mon, 03 Nov 2025 10:41:41 GMT\r\nvary: Accept-Encoding\r\netag: \"690886e5-476142\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 0\r\ncontent-range: bytes 4653056-4677953/4677954\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IEmLXcl26WzEsKMwlOE8NGoiOkDZZbKW0i608sQZzne8tDmWq02J6w%2FaePFGtKWBWdfwTM6nhZpb4u7BK09nHRbwMn%2ByeS4KaN3bqP5YbZbnNHI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b48a853b9ab32fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24898,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"7d27eb5b84d29755f5a9840d5ac5052a","sha1":"7c445cc17e99fe8caf0c0ee8915f421caea57342","sha256":"5d37962ab9d5bf5b67beec83ba75312141345964aa336dd4364671f4427555d3","sha512":"eb7a8632e2cc43648808d5fc1cb16462096ca1d1f1ffba2ee695f0c384c12e4cd90a309338e492225a12baf7b86bc341215a9c3c96cf26b020bb68fca79bd86b","ssdeep":"384:FfjjiMwnAjAl2iZBplphRAK7pbhcBENzliVP/UK9251FQYf:NKnn8Al2qxA+bhcBIRi5DCQYf","tlshash":"4bb2270e7397bcb9e4b9c4f99cfe72286b20d890678403267b8ba33d5c641643cd1d29","first_seen":"2025-10-10T16:48:06.907316Z","last_seen":"2026-01-04T12:00:59.881824Z","times_seen":8,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":815,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"ms.true-lovers.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ms.true-lovers.site/img/favicon.png","fqdn":"ms.true-lovers.site","domain":"true-lovers.site","tld":"site"},"ip":{"addr":"104.21.34.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ms.true-lovers.site/","date":"2025-12-27T12:00:26.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"true-lovers.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 12:03:00 GMT","end":"Thu, 29 Jan 2026 13:01:48 GMT"},"fingerprint":{"sha1":"E9:7A:15:E0:90:CB:3F:98:4D:DA:2B:7D:A1:4C:22:B8:11:8B:56:82","sha256":"18:5C:20:28:91:BF:18:66:63:C7:5D:87:8A:11:4B:A2:10:C5:D1:6D:A0:09:7D:EA:C5:44:B1:54:0C:90:D7:8A"}}},"request":{"raw":"GET /img/favicon.png HTTP/1.1\r\nHost: ms.true-lovers.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ms.true-lovers.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 12:00:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Nov 2025 10:41:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690886e4-1ec\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X8h%2FB3nHDDIq89YgRlmZZ4%2B5Wd%2FWQ8Gs6P84K4%2B7NbIW%2Fps1no7wEiV1uexxjKfEglUiANSTFPniWXRnSqvSWtYTbdU%2FNDe65YVBv2TGpDHrW1U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b48a85449c132fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":492,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, interlaced","md5":"deda6809142ff4b195aefd6c20158f40","sha1":"e432257676cc3e20e71c4aeb08f811cd678a466e","sha256":"038ffcf3a80c624067f10f1e995df7ecf6b0419937710407164d2fea50b1e33f","sha512":"af5ee8f94bc849e2144d49458a5c3caa3068de4a2a2ebf7173e0b0827fdc96a2fcec4b9a02459780438237c13d84de5381d6106f81da5bb9d03d80c3321fd964","ssdeep":"","tlshash":"8bf09ebaa8cd4c4cf62e03a23606281e5a63e7056abb82489113d77659791e099a424b","first_seen":"2025-10-10T16:48:06.88414Z","last_seen":"2026-01-04T12:00:59.882981Z","times_seen":16,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"ms.true-lovers.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ms.true-lovers.site/","fqdn":"ms.true-lovers.site","domain":"true-lovers.site","tld":"site"},"ip":{"addr":"104.21.34.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-27T12:00:25.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"true-lovers.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 12:03:00 GMT","end":"Thu, 29 Jan 2026 13:01:48 GMT"},"fingerprint":{"sha1":"E9:7A:15:E0:90:CB:3F:98:4D:DA:2B:7D:A1:4C:22:B8:11:8B:56:82","sha256":"18:5C:20:28:91:BF:18:66:63:C7:5D:87:8A:11:4B:A2:10:C5:D1:6D:A0:09:7D:EA:C5:44:B1:54:0C:90:D7:8A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ms.true-lovers.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Dec 2025 12:00:25 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 03 Nov 2025 10:42:01 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qy6DaZl4bbDWgxU8DVAWZMkxS6rWEUNgHw9inwdvuQVORTQorDIYLr4j8XZEmgekDNhjtu2FXmQmS3KP56O%2FY656592Qx4%2BiTvnVwgxX87bUWEM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b48a84cf92e8deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4795,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"44becc25b25b3bbcb7aa2b0332d3e13b","sha1":"7f562906f4fad6141752b09e56756044ec288b0e","sha256":"f5b869e2b23b9704714739f196b86f6f61904292f1a47ded0f9b4f58dc07a898","sha512":"751e794c4390bace14f492f3e343306bf75e24822fc2e6eb4bdd8daac63867a6dd061b0528ff8183b72e04ee7cf2b5abc04ef2cf717199953509a9dbe6398cb3","ssdeep":"96:/ploAnhOjKJDixkXCazKZJ69CRRzhGbMAM:/ploMOjKJ2/JqCHhGbMAM","tlshash":"70a1866745f3005923a390a6bfdfb6063f70a047a50ee904bedd97944fc7d5284a728c","first_seen":"2025-11-19T12:01:17.870303Z","last_seen":"2026-01-04T12:00:59.879241Z","times_seen":3,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":69,"dns":40,"connect":7,"send":0,"wait":400,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"ms.true-lovers.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ms.true-lovers.site/css/block.css","fqdn":"ms.true-lovers.site","domain":"true-lovers.site","tld":"site"},"ip":{"addr":"104.21.34.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ms.true-lovers.site/","date":"2025-12-27T12:00:25.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"true-lovers.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 12:03:00 GMT","end":"Thu, 29 Jan 2026 13:01:48 GMT"},"fingerprint":{"sha1":"E9:7A:15:E0:90:CB:3F:98:4D:DA:2B:7D:A1:4C:22:B8:11:8B:56:82","sha256":"18:5C:20:28:91:BF:18:66:63:C7:5D:87:8A:11:4B:A2:10:C5:D1:6D:A0:09:7D:EA:C5:44:B1:54:0C:90:D7:8A"}}},"request":{"raw":"GET /css/block.css HTTP/1.1\r\nHost: ms.true-lovers.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ms.true-lovers.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 12:00:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Nov 2025 10:41:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690886e4-125a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YRCBOJV4DedRMwcjIB9LtBFyARlkB%2FgPgKh85LTHyiqqzg6WEdguVrIlkcaq440fbGxipgnJN3644tMVwT9QmfEvIMqxNm4B%2FAJS0GKtQxiWZpA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b48a850593232fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4698,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1f29a11d222b77b74c5b44b945bdc10a","sha1":"f3a8b7d4db7437e89a5a62e5804ceb8ce8853fe6","sha256":"5bba20bceaeba1f0135c87e463ad52d84acf6de0e7fec2ef1af07b1de478d3f2","sha512":"3a83225d7fa12328318d140f77d693dca51d8489312facf3ff94d56e3f732b088bc824af1a12f8d71a15a48ac74ab9e75c3ac3bce36bd762753d0aed3bbf08f1","ssdeep":"96:MV7gPCiKHCxQ3VCsIRjtuCKv0Ycu36TH6/WX6/1N1flINaTtO2p:C7g6ivxAosCRYsG/L/LMaBJ","tlshash":"40a112a5157513a53623e398159f2a14b75ed002d20febad79e231cddfca3ba80e3385","first_seen":"2025-10-10T16:48:06.89488Z","last_seen":"2026-01-04T12:00:59.879908Z","times_seen":7,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"ms.true-lovers.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}