{"report_id":"0910916f-eedd-4b78-9030-b2c403049447","version":6,"status":"done","tags":[],"date":"2026-02-24T16:02:43Z","url":{"schema":"http","addr":"petareol.com","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"172.67.155.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"petareol.com/#/sign-in","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"title":"TM","dom":{"size":6700,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2661)","md5":"a908ecb3234c88778179f711b94e4a31","sha1":"9f3a97779948f852085e6e5261d0a546a74e2b3a","sha256":"1e8bd24bdbde307835939e7e145868772c29596c52fc591711c5398e123776d8","sha512":"2da9640154e883924454ee28ab5c86c8060ce36539abdd996e07abf961cbf7aeb9296981872ff0509c62023c1098aa60a55a3d6e69a11f976d9da2e30c9f0e7f","ssdeep":"96:er858rpBuj7y/QSDvZl1/B7d2mUsGKAiowGJszA+yLwWeVFR/JeuNwB:epm7y/312nfD3bu37BvwB","tlshash":"cad1627a681064272323d685dae1be1a6b53e30e800b9454b69e42e48ff3ef5d0f7734","dom_hash":"domhash01f88b41ab25bb4a8ef29695ba282dbf","first_seen":"2026-02-24T16:02:50.133242Z","last_seen":"2026-02-24T16:02:50.133242Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"petareol.com","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"172.67.155.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-31T16:02:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-24T16:02:23Z","timestamp":1771948943,"ip_dst":{"addr":"47.79.82.125","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":45220,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-24T16:02:23.663842+0000\",\"flow_id\":849449162060379,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.51\",\"src_port\":45220,\"dest_ip\":\"47.79.82.125\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"fajiaorder.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2026-02-24T16:02:23.143963+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-24T16:02:23Z","timestamp":1771948943,"ip_dst":{"addr":"47.79.82.125","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":45222,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-24T16:02:23.953218+0000\",\"flow_id\":2175885386908920,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.51\",\"src_port\":45222,\"dest_ip\":\"47.79.82.125\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"fajiaorder.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":908,\"bytes_toclient\":6401,\"start\":\"2026-02-24T16:02:23.394488+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"petareol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fajiaorder.oss-ap-northeast-1.aliyuncs.com","ip":{"addr":"47.79.82.125","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2024-12-02T22:13:06.298311Z","last_seen":"2026-02-24T15:43:43.588969Z","alert_count":0,"request_count":1,"received_data":287501,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"petareol.com","ip":{"addr":"104.21.80.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-06","domain_rank":0,"first_seen":"2026-02-24T16:02:45.631911Z","last_seen":"2026-02-24T16:02:45.631911Z","alert_count":14,"request_count":14,"received_data":4465647,"sent_data":5891,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"h5-api.tcmu567.top","ip":{"addr":"104.21.38.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-04","domain_rank":0,"first_seen":"2026-02-24T16:02:45.633667Z","last_seen":"2026-02-24T16:02:45.633668Z","alert_count":0,"request_count":8,"received_data":58673,"sent_data":3943,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"petareol.com/#/sign-in","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9c4db5777435c5cf26f8647815c08d4b","sha1":"b0675cc33ef08e216299ff4a265f55291f9e81bc","sha256":"d064f4e75c0a1cbecfe8fd6ec84642786b596b50ea7ecf32c7ad9053bed42e96","sha512":"6b6b6f476966db9d6111da7768b2249250b120427060a294028fad0662bed66f60412e09ec9d9ab88feb679e644598f2b6571da635dae225fab16afd6cfd9839","ssdeep":"","tlshash":"97c08ccce0c2ae022b4268556cbf26f8d024c02b70482b07ded8dc883e630f49233ed8","size":160,"data":"","first_seen":"2026-02-24T16:02:50.166498Z","last_seen":"2026-07-15T21:34:05.227046Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/#/sign-in","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a83b08e17f61e1dddfc69fb7761f5640","sha1":"89fc73f2f65ce565b8c9561086edbe9f0867edff","sha256":"639d5da1cf88e2e4447bbb9acc77eb71220c55976ee46f95290e182c82d92570","sha512":"84c2f7ee62ef97e50773f0215dcbc28528a81f2cd8189dfcb8d8de29c795d5e688e6da2ab2b346a7b22696a3810e1c094ae5b43499613bee165c0985033cd7da","ssdeep":"","tlshash":"27c08ccca0c32d002607aa1068af38f4a034846b704c1f038eb8ec6d3e734f49233e98","size":159,"data":"","first_seen":"2023-08-10T22:05:17Z","last_seen":"2026-08-04T11:59:59.085002Z","times_seen":204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/assets/en-CxpnqFUP.js","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"104.21.80.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbabef4c8b18f4658b16d1dc00cb8288","sha1":"1974dbc67592f73b2649a338cda4be76a6edc245","sha256":"29de4633264eb9002b128c1f54f1022fc466769b4eb06febff65baa82369318f","sha512":"ae7b65fd83dd50c478c103a8d81ced2ac0a843ec9a9988dfb4a7233a9e8060e42580b8acda7bbb7cdc2190cd49fd492774d8101bbd7c854f06df26539f6e59df","ssdeep":"384:ZVyqfr3syebzZzUeMT4kEf6D8ntoM3bSsnPvco5R:DpsNQeun2toMOScyR","tlshash":"b0d2cb4da33224a3ee91577a3f993f7408ea07850a91c44be4bc1da823d66f53b7f514","size":28364,"data":"","first_seen":"2026-02-24T16:02:50.137507Z","last_seen":"2026-03-10T14:18:47.49365Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/#/sign-in","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1236c9810e95a0b8ffdda40e2d5cf9b4","sha1":"db9ac403ccdd6bfdbb9f0ba5ad05e315ed6a9de4","sha256":"bd2b7705edc061b76a66f131d905a9af7cbfb841e6d5feeacaecd9cbaacb9f78","sha512":"087614145325a6fc03aff4e1fca2b6bc75298fcdb837949a71a7bd6e0ec591035da8e64368d53a2ca41c789fde27f2fc3b2ee2b02c9bd6ca2c4649db7b8b6258","ssdeep":"","tlshash":"d3c08cc5b0c32e103602645450af25e49024802770489f128c94ec497ea20b58233eac","size":147,"data":"","first_seen":"2025-09-02T04:34:57.951053Z","last_seen":"2026-07-15T21:34:05.22933Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/#/sign-in","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bbdcff399fdea9a5e6ba7b76e99cd25c","sha1":"9598c321977767c3375f0c256e29a2aa8ad93f75","sha256":"7759b1a1f9531da032ecee7bc448de9f497aa3d73fb2f5b7adda8e085f395752","sha512":"56d90dee46144b3a2b2b9b2bb807a812210213514507ecaf1d000a57164c9a2f9bde6dc066a144da213d921984629679a174a5cc0ad15217286e9cc295d03cfe","ssdeep":"","tlshash":"8cc08cc8a0c22d101602a45020af26e4a034882b70481b128c94d8482e220b08233e98","size":139,"data":"","first_seen":"2023-04-15T19:29:39Z","last_seen":"2026-08-04T12:33:49.910069Z","times_seen":1767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/#/sign-in","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"34cbc41b0086fe874d04609e28ae3270","sha1":"020d83bc0a45ee54310b163f12f9d4b24b50b5d9","sha256":"d80412740eb63aab1c8bb741675f50c6f3f3c0f18d6502c0b7fe43dced11d00e","sha512":"553668b1c79e681cc3c7471ff4117e0fd0597bc9bd0f48776031ff27afbc8310e6ad0e869ec213028f25ed91701ac375c98d6f08efaf642968668af72a07a8ae","ssdeep":"","tlshash":"eec08cc4b0c2ad011612692110bf24e490244026b48c2b028de4d8682e230b49233e98","size":145,"data":"","first_seen":"2024-07-18T01:10:46Z","last_seen":"2026-07-19T20:37:51.695029Z","times_seen":190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/ac-chat.js?2.0.1771925147122","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"104.21.80.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd7691f620fb4e6f190e75b7c361260a","sha1":"b22512d5ad36767066f9070f3bebdc6fd08aa6ed","sha256":"2059f1b2a41a7d1c5b9e166eddb15ce83b6741539dfa4a11c59d4fc8c6306e31","sha512":"4ecad0b2f363f5983e063ea806508683e0c834f03449d94b57a5201eb10ae29b5e3930837bab219389e3b4be6708ff118e9606adf201cf4343bddf1b1430b654","ssdeep":"","tlshash":"a0418aab43294614c17a13b2ad4b5198f632a02fae46003879fc60d4afb6a7550b1ffd","size":2389,"data":"","first_seen":"2024-12-02T22:13:11.386289Z","last_seen":"2026-02-24T16:02:50.150798Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"104.21.80.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca375763b1570943e8748710b010f6c1","sha1":"28ce90f44791262c30a2d30c42b72790ddb048f0","sha256":"05eeafa8a6c843432e8a25acc8ce8f086d21148f5206ceb3cc1084fde7819c1e","sha512":"2ece722773285efa71f3fcb48b5a83f5f6237426c18ec71a83608ac8a0c63b6a2ed91038213c292ba32b97d7e5e848782beb7944d67da9aae36f32a5cdaffc7c","ssdeep":"","tlshash":"2c11abfe191aa0296303404e976b7801652290b9000a284177ccab9dbb9ab7de0cfb8c","size":1048,"data":"","first_seen":"2026-02-24T16:02:50.169976Z","last_seen":"2026-02-24T16:02:50.169976Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/assets/vendor-DJa-CVJn.js","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"104.21.80.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d20d287cab32cae997fd2941139e52c7","sha1":"872ad519b59569d0f58db3da2490d55fc6b24aac","sha256":"eb62fcf3eea84f2e0756018b5134ceffea50b2a78f3052dc8b7d99d729e5963d","sha512":"9e32737dddfa2d99049d9e56fc2fb1d825d12910ec724791bb5c2d38692d9aae10084334a8284fb2634f2802d603b4dc87ee7caa38ae817ecfb8a5baa3d008d1","ssdeep":"12288:+VqsYEZ/GX3G7s7sz/u9P4hGy6wIF17o6fvfE/0bNYUnwPZNXS:+VqsYEZ/GX27zz/u9Pg1417o6fvs+wPe","tlshash":"03e408d8b2d2f06243a764a5407f040bf23e6e59740e84d0f2a9e8d67c7994a917bf3d","size":715997,"data":"","first_seen":"2026-02-24T16:02:50.134956Z","last_seen":"2026-02-24T16:02:50.134956Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/assets/index-UzCOfw7k.js","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"104.21.80.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"be2f69526f47a91ce546e3b6e7a2e074","sha1":"029f26dc91c7ab4f9a1edc11c728f6105af18623","sha256":"5bde28b25c04e2d4a58105d36b260206e481f8051309fdeb04d98630cac395c2","sha512":"96d5ad0c44065a6a53ee36a5cbba9bd421883b48d5ff7468850858f7634ca8bbb3ed23003bbb692f82e6458cf198e701baf2a7d69512cc8b104a1044e46f3c83","ssdeep":"3072:DlEMqKho9XrgXvXo9lTz5EjAyAfv3loftWIeBAKS:Dl0EoeXv6EjpjjeBAD","tlshash":"5ff3f781f02aa53efbb31878184e1550611d2fdad54084a7f1fcae162796cf52b6fb28","size":164472,"data":"","first_seen":"2026-02-24T16:02:50.146065Z","last_seen":"2026-02-24T16:02:50.146065Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/#/sign-in","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a2a94ff311734983a49206e6863c01a7","sha1":"24fb4ee8c93b3e8f2a85e639403cd7e808a6cb8c","sha256":"41c502d8d00f5b1a907ba900d95fca1e0c80f2f2f9bea88aeb703fc1b9aec0aa","sha512":"c6ec458213d9e3792d8283c34d5f0b13f7c6c87f45ac3ad6e490ebc36cdafa071950c135ca35018bc800247345821752f8d3086d24ea00d2971db137e5c99a5c","ssdeep":"","tlshash":"62c08cc5a0c26d102642685410af35e49024802a70489b92cc94dc882e630b49233ebc","size":145,"data":"","first_seen":"2026-02-24T15:43:51.403217Z","last_seen":"2026-07-15T21:34:05.221377Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"petareol.com/assets/vendor-DJa-CVJn.js","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"104.21.80.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://petareol.com/","date":"2026-02-24T16:02:20.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"petareol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:43:29 GMT","end":"Fri, 03 Apr 2026 00:39:54 GMT"},"fingerprint":{"sha1":"1F:CE:D6:E7:0A:86:3F:CF:27:96:C0:FC:E9:F3:9E:BF:20:BD:28:F2","sha256":"36:DE:4C:4B:EA:DA:47:13:4B:55:C6:99:BB:44:70:55:A7:B7:B4:31:90:1C:C2:9B:8E:66:41:15:AA:AF:0C:19"}}},"request":{"raw":"GET /assets/vendor-DJa-CVJn.js HTTP/1.1\r\nHost: petareol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 16:02:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Feb 2026 17:25:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699ddf1a-aecdd\"\r\nexpires: Wed, 25 Feb 2026 04:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YWzZWdsynysd8GkUrnbR47NiItlS%2F1BfEt0QfpHtg27UpeAlg9X%2FQKJn3repjdM4cC7PtwCf4MN6S%2Bg4p1YGp1iDuS9j3UFoU9i3Cw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d302fd11f043017-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":715997,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26574)","md5":"d20d287cab32cae997fd2941139e52c7","sha1":"872ad519b59569d0f58db3da2490d55fc6b24aac","sha256":"eb62fcf3eea84f2e0756018b5134ceffea50b2a78f3052dc8b7d99d729e5963d","sha512":"9e32737dddfa2d99049d9e56fc2fb1d825d12910ec724791bb5c2d38692d9aae10084334a8284fb2634f2802d603b4dc87ee7caa38ae817ecfb8a5baa3d008d1","ssdeep":"12288:+VqsYEZ/GX3G7s7sz/u9P4hGy6wIF17o6fvfE/0bNYUnwPZNXS:+VqsYEZ/GX27zz/u9Pg1417o6fvs+wPe","tlshash":"03e408d8b2d2f06243a764a5407f040bf23e6e59740e84d0f2a9e8d67c7994a917bf3d","first_seen":"2026-02-24T16:02:50.134956Z","last_seen":"2026-02-24T16:02:50.134956Z","times_seen":1,"resource_available":true,"data":null}},"time_used":858,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":496,"receive":362,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"petareol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.tcmu567.top/api/common/getAllSetting","fqdn":"h5-api.tcmu567.top","domain":"tcmu567.top","tld":"top"},"ip":{"addr":"104.21.38.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://petareol.com/","date":"2026-02-24T16:02:22.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tcmu567.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 11:37:09 GMT","end":"Tue, 31 Mar 2026 12:34:34 GMT"},"fingerprint":{"sha1":"49:32:BD:C7:75:4A:25:A2:F6:98:DC:E9:3B:23:9B:C1:AD:A4:28:79","sha256":"01:A0:97:55:77:F6:CB:1C:1F:87:62:F2:56:49:EA:3F:BD:EA:E4:2E:99:1C:AB:06:42:8E:57:35:09:99:3D:36"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.tcmu567.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://petareol.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 16:02:22 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://petareol.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FUlx6f1E1TRWMWUqcDpdZ1rsiy7Oh6zevXzMN02ltIYHcT0IzbEdEFbu7EQVk4G%2BlR8%2B841JkU0%2BXQG0xXZUeKg0aPX%2BVY4znFa1GGsViwc7UQ%3D%3D\"}]}\r\ncf-ray: 9d302fdacd3da0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18625,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0fd46a9c72801c9ada1cc13582861f35","sha1":"a9c5827c20666f9d0981d8f49418398b143362d1","sha256":"e7e34704ca8a5b67cecb0ffa382297d45897d00a2cfd01c1931e438e124ce896","sha512":"69babb5b01adb3b98ec3133177830d8fa3ebdc9d21c3d107b9cd053b3351119cb619b88c7bb23b84eee3e0339d5cad325ad58f82d32d2ca84729959bf5597f51","ssdeep":"384:SkHFPl3DgZ9pWNbqur+nMJzcpwD9gU6Vj8Ji8fL:SuFPl3DgZ9pWNV+43996Vmi8fL","tlshash":"f38262abf658c018c9814ced353e6fbf252d50de77518dc939e5d870e0868bb683a8c2","first_seen":"2026-02-24T16:02:50.136047Z","last_seen":"2026-02-24T16:02:50.136047Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/assets/en-CxpnqFUP.js","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"104.21.80.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://petareol.com/","date":"2026-02-24T16:02:22.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"petareol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:43:29 GMT","end":"Fri, 03 Apr 2026 00:39:54 GMT"},"fingerprint":{"sha1":"1F:CE:D6:E7:0A:86:3F:CF:27:96:C0:FC:E9:F3:9E:BF:20:BD:28:F2","sha256":"36:DE:4C:4B:EA:DA:47:13:4B:55:C6:99:BB:44:70:55:A7:B7:B4:31:90:1C:C2:9B:8E:66:41:15:AA:AF:0C:19"}}},"request":{"raw":"GET /assets/en-CxpnqFUP.js HTTP/1.1\r\nHost: petareol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 16:02:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Feb 2026 17:25:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699ddf1a-6ecc\"\r\nexpires: Wed, 25 Feb 2026 04:02:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uGXQjoXYwDFmJX506J6lsvbr%2BpwC8l0x2zdVLUZ5OjequW3bIasJ6A4T7hzzFnawAP1BytXuirzab6wxGHnX7kxeJRSmMJgjPH7KZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d302fdbd91e3017-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28364,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (28363)","md5":"cbabef4c8b18f4658b16d1dc00cb8288","sha1":"1974dbc67592f73b2649a338cda4be76a6edc245","sha256":"29de4633264eb9002b128c1f54f1022fc466769b4eb06febff65baa82369318f","sha512":"ae7b65fd83dd50c478c103a8d81ced2ac0a843ec9a9988dfb4a7233a9e8060e42580b8acda7bbb7cdc2190cd49fd492774d8101bbd7c854f06df26539f6e59df","ssdeep":"384:ZVyqfr3syebzZzUeMT4kEf6D8ntoM3bSsnPvco5R:DpsNQeun2toMOScyR","tlshash":"b0d2cb4da33224a3ee91577a3f993f7408ea07850a91c44be4bc1da823d66f53b7f514","first_seen":"2026-02-24T16:02:50.137507Z","last_seen":"2026-03-10T14:18:47.49365Z","times_seen":3,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"petareol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/resource/images/orange/buing.png?2.0.1771925147122","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"104.21.80.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petareol.com/","date":"2026-02-24T16:02:23.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"petareol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:43:29 GMT","end":"Fri, 03 Apr 2026 00:39:54 GMT"},"fingerprint":{"sha1":"1F:CE:D6:E7:0A:86:3F:CF:27:96:C0:FC:E9:F3:9E:BF:20:BD:28:F2","sha256":"36:DE:4C:4B:EA:DA:47:13:4B:55:C6:99:BB:44:70:55:A7:B7:B4:31:90:1C:C2:9B:8E:66:41:15:AA:AF:0C:19"}}},"request":{"raw":"GET /resource/images/orange/buing.png?2.0.1771925147122 HTTP/1.1\r\nHost: petareol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 16:02:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 17:18:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699ddd72-8a804\"\r\nexpires: Thu, 26 Mar 2026 16:02:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4aU%2Fz6xHhja1DGqWWsemgkTVrQ6WiuBV3b%2Fd71jktkN1SgOqWI4WHn%2BbHGYablYUGq2vbXodhKLSKJn1EonyJVhRz%2FUeaUZM5g96GQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d302fde79c03017-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":567300,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 680, 8-bit/color RGBA, non-interlaced","md5":"7ea5d8f58dce22dfe58ef8de4392d991","sha1":"7ca2029dc900dcae819d4aef39e852f3878d7bb9","sha256":"aa8c5bec2eea5396a131e6419b165df1efef98a70832935e43635f285f15ce46","sha512":"0d780975b822e2b69879dc51b5f1a13dc231b392f4ab0cac7d43002dc59d4211f51043d59e0082d3a1c40b0534253c8c04059f88894a824278153bf6e5f3c1c4","ssdeep":"12288:S/zjWQbrS74MWJqzPa/0dxbvfHMkPLkCtLtHRYprP4c6dxvj:6zby7pzPoKMkPLzRRYprP4c6Hj","tlshash":"21c4237bcdc867b74a71af417f92c35a120002da2ac03fe96906bd7873eca56539f560","first_seen":"2026-02-24T16:02:50.139243Z","last_seen":"2026-03-24T14:03:56.967733Z","times_seen":7,"resource_available":false,"data":null}},"time_used":978,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":497,"receive":481,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"petareol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fajiaorder.oss-ap-northeast-1.aliyuncs.com/order/temu/75108043ffa14b1aaf56399ccc880ddd.png","fqdn":"fajiaorder.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.125","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petareol.com/","date":"2026-02-24T16:02:23.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /order/temu/75108043ffa14b1aaf56399ccc880ddd.png HTTP/1.1\r\nHost: fajiaorder.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 24 Feb 2026 16:02:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 286925\r\nConnection: keep-alive\r\nx-oss-request-id: 699DCB9070C1143833E683BD\r\nAccept-Ranges: bytes\r\nETag: \"0D264DF52BB65068A155AB61BF720375\"\r\nLast-Modified: Sun, 07 Sep 2025 09:03:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2667634577530821720\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: DSZN9Su2UGihVathv3IDdQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":286925,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"0d264df52bb65068a155ab61bf720375","sha1":"7b295cdfce7d712e1d729d19d7dc53d6787e2915","sha256":"38eb31f959b2fc9382a5595182624832995986c081be98eeec31ec4cc821c75e","sha512":"a51eb4604fbfb57196cde612a2e01314095084c99f3cf416beb29bf95b42b87150f713e918ae1cab101a49451602195d290e0cac1f6e9ed0a4df022c12b71df8","ssdeep":"6144:4M7DgpAv9MEOiwdvZP+W311IBpFx1ZRNxuhfUx84:4MnHGEOiCx37opFxHZsfK","tlshash":"1d5412494cb98d63ee8984f4c2ab0b266b15447242941f0f6771f044ac8b7ec7f8b6b7","first_seen":"2026-02-24T16:02:50.140384Z","last_seen":"2026-03-24T14:03:56.988098Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2524,"timings":{"blocked":811,"dns":31,"connect":258,"send":0,"wait":268,"receive":633,"ssl":520},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/resource/images/orange/eye-c.png?2.0.1771925147122","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"104.21.80.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petareol.com/","date":"2026-02-24T16:02:23.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"petareol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:43:29 GMT","end":"Fri, 03 Apr 2026 00:39:54 GMT"},"fingerprint":{"sha1":"1F:CE:D6:E7:0A:86:3F:CF:27:96:C0:FC:E9:F3:9E:BF:20:BD:28:F2","sha256":"36:DE:4C:4B:EA:DA:47:13:4B:55:C6:99:BB:44:70:55:A7:B7:B4:31:90:1C:C2:9B:8E:66:41:15:AA:AF:0C:19"}}},"request":{"raw":"GET /resource/images/orange/eye-c.png?2.0.1771925147122 HTTP/1.1\r\nHost: petareol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 16:02:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 17:18:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699ddd72-bc0\"\r\nexpires: Thu, 26 Mar 2026 16:02:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sAM%2Fo9klbNRdav1XTFiufXFQYDZHLFV11UhXRClP5T1x9J33k1A6peUuRJZxrzGPUm3Xc5rIuftj5%2BvA6dGNHUryQrCosP2DaxMwWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d302fdec9ca3017-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"9fe3f12501d7a22821baaeab63a2e1e7","sha1":"ce909e7455b3e0112fc381efefab25c52bdfdc7b","sha256":"4a73ee60acf6c62557230e66e89e40d6708e0efecaf136a6373d7154f568cc21","sha512":"3b6b40236911305a5d8e4c7092e624c5a06c64f0ce3f6cf67ab96f28f9f85e50fd32f7c073cb413078ae46012857929542961694d3ef50938ace47c877422e82","ssdeep":"","tlshash":"88512aa189bb0d18ed5d485fbe28160840e171b563b30c5f4f199c87f141a69f3edb2e","first_seen":"2026-02-24T16:02:50.144405Z","last_seen":"2026-03-24T14:03:56.992219Z","times_seen":7,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"petareol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.tcmu567.top/api/common/getAllSetting","fqdn":"h5-api.tcmu567.top","domain":"tcmu567.top","tld":"top"},"ip":{"addr":"104.21.38.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://petareol.com/","date":"2026-02-24T16:02:23.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tcmu567.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 11:37:09 GMT","end":"Tue, 31 Mar 2026 12:34:34 GMT"},"fingerprint":{"sha1":"49:32:BD:C7:75:4A:25:A2:F6:98:DC:E9:3B:23:9B:C1:AD:A4:28:79","sha256":"01:A0:97:55:77:F6:CB:1C:1F:87:62:F2:56:49:EA:3F:BD:EA:E4:2E:99:1C:AB:06:42:8E:57:35:09:99:3D:36"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.tcmu567.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://petareol.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 16:02:23 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://petareol.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DLBxndQ0AEJ8rCzSV1lI6KoI4iAMxtJkuV%2Fr8E3zC1Ipgv%2BGKdP0WoEPnQUlQU%2F5GbARuTb2zwbovn1fBGinUlj0chLBlTStj6MQB8myOWzqhQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d302fdfb98f56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18625,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0fd46a9c72801c9ada1cc13582861f35","sha1":"a9c5827c20666f9d0981d8f49418398b143362d1","sha256":"e7e34704ca8a5b67cecb0ffa382297d45897d00a2cfd01c1931e438e124ce896","sha512":"69babb5b01adb3b98ec3133177830d8fa3ebdc9d21c3d107b9cd053b3351119cb619b88c7bb23b84eee3e0339d5cad325ad58f82d32d2ca84729959bf5597f51","ssdeep":"384:SkHFPl3DgZ9pWNbqur+nMJzcpwD9gU6Vj8Ji8fL:SuFPl3DgZ9pWNV+43996Vmi8fL","tlshash":"f38262abf658c018c9814ced353e6fbf252d50de77518dc939e5d870e0868bb683a8c2","first_seen":"2026-02-24T16:02:50.136047Z","last_seen":"2026-02-24T16:02:50.136047Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/assets/index-UzCOfw7k.js","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"104.21.80.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://petareol.com/","date":"2026-02-24T16:02:20.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"petareol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:43:29 GMT","end":"Fri, 03 Apr 2026 00:39:54 GMT"},"fingerprint":{"sha1":"1F:CE:D6:E7:0A:86:3F:CF:27:96:C0:FC:E9:F3:9E:BF:20:BD:28:F2","sha256":"36:DE:4C:4B:EA:DA:47:13:4B:55:C6:99:BB:44:70:55:A7:B7:B4:31:90:1C:C2:9B:8E:66:41:15:AA:AF:0C:19"}}},"request":{"raw":"GET /assets/index-UzCOfw7k.js HTTP/1.1\r\nHost: petareol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 16:02:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Feb 2026 17:25:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699ddf1a-28278\"\r\nexpires: Wed, 25 Feb 2026 04:02:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FC0ifraIeTQlzGeRgoyUasHnKNdEnqfcTXKHD8WZQdu7T%2BwvJTZsx3bY4%2FgEQ3KCZAcQTZCbYjs67pMZAstUN5ws2jIr4XOm90n8Pg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d302fce7ea73017-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":164472,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65356)","md5":"be2f69526f47a91ce546e3b6e7a2e074","sha1":"029f26dc91c7ab4f9a1edc11c728f6105af18623","sha256":"5bde28b25c04e2d4a58105d36b260206e481f8051309fdeb04d98630cac395c2","sha512":"96d5ad0c44065a6a53ee36a5cbba9bd421883b48d5ff7468850858f7634ca8bbb3ed23003bbb692f82e6458cf198e701baf2a7d69512cc8b104a1044e46f3c83","ssdeep":"3072:DlEMqKho9XrgXvXo9lTz5EjAyAfv3loftWIeBAKS:Dl0EoeXv6EjpjjeBAD","tlshash":"5ff3f781f02aa53efbb31878184e1550611d2fdad54084a7f1fcae162796cf52b6fb28","first_seen":"2026-02-24T16:02:50.146065Z","last_seen":"2026-02-24T16:02:50.146065Z","times_seen":1,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"petareol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/ac-chat.js?2.0.1771925147122","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"104.21.80.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://petareol.com/","date":"2026-02-24T16:02:20.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"petareol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:43:29 GMT","end":"Fri, 03 Apr 2026 00:39:54 GMT"},"fingerprint":{"sha1":"1F:CE:D6:E7:0A:86:3F:CF:27:96:C0:FC:E9:F3:9E:BF:20:BD:28:F2","sha256":"36:DE:4C:4B:EA:DA:47:13:4B:55:C6:99:BB:44:70:55:A7:B7:B4:31:90:1C:C2:9B:8E:66:41:15:AA:AF:0C:19"}}},"request":{"raw":"GET /ac-chat.js?2.0.1771925147122 HTTP/1.1\r\nHost: petareol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 16:02:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 08 Dec 2025 15:36:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6936f098-955\"\r\nexpires: Wed, 25 Feb 2026 04:02:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oVuFHBHL3WphHwZgufHx%2B51JvLfv5S%2F0jyNoWqrRAIvBFZBLcSIJ%2BweXhNgGmSq5DP7Zp9YdMjAFAGPoQv7Ncx49A%2BokIiP%2BhC4OGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d302fce7eaa3017-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2389,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"cd7691f620fb4e6f190e75b7c361260a","sha1":"b22512d5ad36767066f9070f3bebdc6fd08aa6ed","sha256":"2059f1b2a41a7d1c5b9e166eddb15ce83b6741539dfa4a11c59d4fc8c6306e31","sha512":"4ecad0b2f363f5983e063ea806508683e0c834f03449d94b57a5201eb10ae29b5e3930837bab219389e3b4be6708ff118e9606adf201cf4343bddf1b1430b654","ssdeep":"","tlshash":"a0418aab43294614c17a13b2ad4b5198f632a02fae46003879fc60d4afb6a7550b1ffd","first_seen":"2024-12-02T22:13:11.386289Z","last_seen":"2026-02-24T16:02:50.150798Z","times_seen":4,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"petareol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/assets/vendor-DJa-CVJn.js","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"104.21.80.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://petareol.com/","date":"2026-02-24T16:02:22.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"petareol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:43:29 GMT","end":"Fri, 03 Apr 2026 00:39:54 GMT"},"fingerprint":{"sha1":"1F:CE:D6:E7:0A:86:3F:CF:27:96:C0:FC:E9:F3:9E:BF:20:BD:28:F2","sha256":"36:DE:4C:4B:EA:DA:47:13:4B:55:C6:99:BB:44:70:55:A7:B7:B4:31:90:1C:C2:9B:8E:66:41:15:AA:AF:0C:19"}}},"request":{"raw":"GET /assets/vendor-DJa-CVJn.js HTTP/1.1\r\nHost: petareol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 16:02:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Feb 2026 17:25:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699ddf1a-aecdd\"\r\nexpires: Wed, 25 Feb 2026 04:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rX%2BQqjQ0ocD50JW%2F5szVqhSs4McaBzNuz1qDrFsd6VOPAze0ESuEEVuXFC2XYu6Fni9Pt0qZDBsS8Wnw8lGy7TskNzR4Q3WKCTP70Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d302fd7886f3017-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":715997,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26574)","md5":"d20d287cab32cae997fd2941139e52c7","sha1":"872ad519b59569d0f58db3da2490d55fc6b24aac","sha256":"eb62fcf3eea84f2e0756018b5134ceffea50b2a78f3052dc8b7d99d729e5963d","sha512":"9e32737dddfa2d99049d9e56fc2fb1d825d12910ec724791bb5c2d38692d9aae10084334a8284fb2634f2802d603b4dc87ee7caa38ae817ecfb8a5baa3d008d1","ssdeep":"12288:+VqsYEZ/GX3G7s7sz/u9P4hGy6wIF17o6fvfE/0bNYUnwPZNXS:+VqsYEZ/GX27zz/u9Pg1417o6fvs+wPe","tlshash":"03e408d8b2d2f06243a764a5407f040bf23e6e59740e84d0f2a9e8d67c7994a917bf3d","first_seen":"2026-02-24T16:02:50.134956Z","last_seen":"2026-02-24T16:02:50.134956Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"petareol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/platform/TM/logo_144.png?2.0.1771925147122","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"104.21.80.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petareol.com/","date":"2026-02-24T16:02:22.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"petareol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:43:29 GMT","end":"Fri, 03 Apr 2026 00:39:54 GMT"},"fingerprint":{"sha1":"1F:CE:D6:E7:0A:86:3F:CF:27:96:C0:FC:E9:F3:9E:BF:20:BD:28:F2","sha256":"36:DE:4C:4B:EA:DA:47:13:4B:55:C6:99:BB:44:70:55:A7:B7:B4:31:90:1C:C2:9B:8E:66:41:15:AA:AF:0C:19"}}},"request":{"raw":"GET /platform/TM/logo_144.png?2.0.1771925147122 HTTP/1.1\r\nHost: petareol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 16:02:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 17:18:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699ddd72-51f3e\"\r\nexpires: Thu, 26 Mar 2026 16:02:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vtVPKsnWLigiD6%2B%2BOX2cZedKSfbCEriIPz%2BqMsCrsfXO0wzYZK4cv5y6HK7bWHXEPTk5BdLz28WG67m0U41md3shUum3O65fesevmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d302fd9a8c03017-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":335678,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1278 x 1278, 8-bit/color RGBA, non-interlaced","md5":"9785080ea545a2f98876dc0fb5f742df","sha1":"cd8cacaaf30a301bbac1be039de6c8b81c9a7c3d","sha256":"c770474b78ccbbd51a6007be270832a6869209ff643007d1476ee94d23979474","sha512":"ec20612f36a0400152cad3001629daec68133ea6dcac26a7d4d98899364479d44cc6b508f15022ed502af4c2f6f69f17a59bf26a0103c3b76f28a2bcb171e299","ssdeep":"6144:Sw+rU7FeKDx9s335/srNduD1rjk9JjNZbn2x2QeUzfP5Edq56c9VU:Sw+Ae8s335kRdKVAXNN0eU7PA2VU","tlshash":"2964127ec1dbdc82cc6f700818b6258623592134d6d32cf6a6faa8cece1493e75665dc","first_seen":"2026-02-24T16:02:50.151946Z","last_seen":"2026-03-24T14:03:56.965865Z","times_seen":7,"resource_available":false,"data":null}},"time_used":866,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":505,"receive":361,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"petareol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.tcmu567.top/api/bussiness/user/easyGenerateCode?codeType=LOGIN","fqdn":"h5-api.tcmu567.top","domain":"tcmu567.top","tld":"top"},"ip":{"addr":"104.21.38.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://petareol.com/","date":"2026-02-24T16:02:23.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tcmu567.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 11:37:09 GMT","end":"Tue, 31 Mar 2026 12:34:34 GMT"},"fingerprint":{"sha1":"49:32:BD:C7:75:4A:25:A2:F6:98:DC:E9:3B:23:9B:C1:AD:A4:28:79","sha256":"01:A0:97:55:77:F6:CB:1C:1F:87:62:F2:56:49:EA:3F:BD:EA:E4:2E:99:1C:AB:06:42:8E:57:35:09:99:3D:36"}}},"request":{"raw":"GET /api/bussiness/user/easyGenerateCode?codeType=LOGIN HTTP/1.1\r\nHost: h5-api.tcmu567.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://petareol.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 16:02:23 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://petareol.com\r\naccess-control-allow-credentials: true\r\npragma: No-cache\r\ncache-control: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nset-cookie: JSESSIONID=13A3DB31CFD880054F5B9173288698DE; Path=/; HttpOnly\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lfcVbuRvj0K1YmEg%2BvDiOP7SOgqn6rT9SzVVoIzQuBlxNEF4W1bros1ixJCPV3PciSI7%2F6DuBEIQYS2YXL1JZsSkve3XniHPONRlF78cnwgHZw%3D%3D\"}]}\r\ncf-ray: 9d302fdeaf76a0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":3640,"size_decoded":0,"mime_type":"image/gif","magic":"PNG image data, 130 x 48, 8-bit/color RGB, non-interlaced","md5":"1a5a5b960e0359cd9ab1080266f04a97","sha1":"cee808d33663228f1323ec7bf7f907b833392ce3","sha256":"f5ca1041257a5f3ddf4389c03f91e0dc1620a2bcda79f8872415e5011c0f7055","sha512":"6e177522265d15c1dfe141fbf16286dc3c598ddb47ee13246caa2156d45e6ec57352fe2f1b16d2b69da2b500aca1cd2ba5b49671346970d88a8c9b11d929e13c","ssdeep":"","tlshash":"41716efd95c6cd72250610a384f762108d9d65bd34d43781113dda9bd4d5b4c602ddc7","first_seen":"2026-02-24T16:02:50.156782Z","last_seen":"2026-02-24T16:02:50.156782Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/assets/icon-user-CBJx3c0D.png","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"104.21.80.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petareol.com/","date":"2026-02-24T16:02:23.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"petareol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:43:29 GMT","end":"Fri, 03 Apr 2026 00:39:54 GMT"},"fingerprint":{"sha1":"1F:CE:D6:E7:0A:86:3F:CF:27:96:C0:FC:E9:F3:9E:BF:20:BD:28:F2","sha256":"36:DE:4C:4B:EA:DA:47:13:4B:55:C6:99:BB:44:70:55:A7:B7:B4:31:90:1C:C2:9B:8E:66:41:15:AA:AF:0C:19"}}},"request":{"raw":"GET /assets/icon-user-CBJx3c0D.png HTTP/1.1\r\nHost: petareol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 16:02:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 920\r\nlast-modified: Tue, 24 Feb 2026 17:25:46 GMT\r\netag: \"699ddf1a-398\"\r\nexpires: Thu, 26 Mar 2026 16:02:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dLJBrccOdVK0ZpthYJEqm%2BCCR0tg%2B%2FRZhtunhlMoZC0jaUZ%2BjRvT07r3xgelstA5kl79utbo9vBv78wD04PPh4B5Knq5fMHSN%2BAYfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d302fdeb9c93017-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":920,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"cd07252e3000e95b42383bdbad4bcbdf","sha1":"7d29ec2adf67ca91a414682a76abcbad2a9e6934","sha256":"b48ce5e4aee423cb751a30bd8f124ecb70a045c892a4339a13d6e0bdd139636f","sha512":"f4d5b50d8557f1e88387bd01808be39b20b06c403b1fb82bd41765d1f8fbd7e11032d11863207024e47732373a288a48a286d577af80c4fd9124842c7d439b3b","ssdeep":"","tlshash":"e211b7f0a2d7e0b9efb42376a27c0d0cad23135c9159831e5876cc2ca202f05d992941","first_seen":"2026-02-24T16:02:50.157687Z","last_seen":"2026-03-24T14:03:56.991262Z","times_seen":7,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"petareol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.tcmu567.top/api/common/getAllSetting","fqdn":"h5-api.tcmu567.top","domain":"tcmu567.top","tld":"top"},"ip":{"addr":"104.21.38.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://petareol.com/","date":"2026-02-24T16:02:23.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tcmu567.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 11:37:09 GMT","end":"Tue, 31 Mar 2026 12:34:34 GMT"},"fingerprint":{"sha1":"49:32:BD:C7:75:4A:25:A2:F6:98:DC:E9:3B:23:9B:C1:AD:A4:28:79","sha256":"01:A0:97:55:77:F6:CB:1C:1F:87:62:F2:56:49:EA:3F:BD:EA:E4:2E:99:1C:AB:06:42:8E:57:35:09:99:3D:36"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.tcmu567.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://petareol.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 16:02:23 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://petareol.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cu4OJfiRE4Vwxw3rAZa5yDZBnXbdD8DYRvZM9RVp6pUW9DEhRA1ekdprFSUX010Q5jnPhd67kJm2IVdRdASk5o64e49l2zoq0Xkbss2cUBBD0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d302fded96e56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":1,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/assets/vendor-CRlxYSiP.css","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"104.21.80.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://petareol.com/","date":"2026-02-24T16:02:20.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"petareol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:43:29 GMT","end":"Fri, 03 Apr 2026 00:39:54 GMT"},"fingerprint":{"sha1":"1F:CE:D6:E7:0A:86:3F:CF:27:96:C0:FC:E9:F3:9E:BF:20:BD:28:F2","sha256":"36:DE:4C:4B:EA:DA:47:13:4B:55:C6:99:BB:44:70:55:A7:B7:B4:31:90:1C:C2:9B:8E:66:41:15:AA:AF:0C:19"}}},"request":{"raw":"GET /assets/vendor-CRlxYSiP.css HTTP/1.1\r\nHost: petareol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 16:02:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 24 Feb 2026 17:25:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699ddf1a-1bee1\"\r\nexpires: Wed, 25 Feb 2026 04:02:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HPk%2FWLwtBHQ9ou9GzFV5jH8xbUr%2BthG1woAcm2a9HmhFpOWWL6JQDxG6RnKmuhtNBuBgD00%2FijXluYSPlfDkyrSAvthhnCIb%2BvFeDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d302fce7ea83017-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":114401,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"7e6fae47da5a244d41335edadd588098","sha1":"1d9b222d493de62e0bb406f2f2a7b8fcbbece8a1","sha256":"24b1c0775ceb8f6609c52397e9d4a564770843ca199040cb57cb64617035ec2c","sha512":"1fae4d3ddf141b29321a67ea3eda807482a4aca58141a3b446d6d2a6849f7a46f11a8d37c6700ae4d60499d1f64349c1ffc8db1c22fe58d01ba81d28d137d2e7","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8DW7U:BnNIClDsIxuVS8KI","tlshash":"63b3d6a5aac461fd6f2af2759b8766dcf13cf961cc01daa0f10551180fc7bf50623a2a","first_seen":"2026-02-24T16:02:50.161854Z","last_seen":"2026-02-24T16:02:50.161854Z","times_seen":1,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"petareol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/resource/fonts/Arial.ttf","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"104.21.80.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://petareol.com/","date":"2026-02-24T16:02:21.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"petareol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:43:29 GMT","end":"Fri, 03 Apr 2026 00:39:54 GMT"},"fingerprint":{"sha1":"1F:CE:D6:E7:0A:86:3F:CF:27:96:C0:FC:E9:F3:9E:BF:20:BD:28:F2","sha256":"36:DE:4C:4B:EA:DA:47:13:4B:55:C6:99:BB:44:70:55:A7:B7:B4:31:90:1C:C2:9B:8E:66:41:15:AA:AF:0C:19"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: petareol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petareol.com/assets/index-By1zQn1y.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 16:02:21 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Mon, 08 Dec 2025 15:36:56 GMT\r\netag: \"6936f098-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FI7PfB6nNVIczoY%2Brgjj6dFQa82HdD4C6s2He8077Gx4f0Fkdlh0Xhv8gPlPIiY010rsLcnqMYtWnIpIzEj4rs9ud3ewZte9j%2BeSSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d302fd2df5b3017-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-07-30T19:44:59.556937Z","times_seen":2202,"resource_available":false,"data":null}},"time_used":1125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":381,"receive":744,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"petareol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.tcmu567.top/api/common/getLanguage","fqdn":"h5-api.tcmu567.top","domain":"tcmu567.top","tld":"top"},"ip":{"addr":"104.21.38.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://petareol.com/","date":"2026-02-24T16:02:22.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tcmu567.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 11:37:09 GMT","end":"Tue, 31 Mar 2026 12:34:34 GMT"},"fingerprint":{"sha1":"49:32:BD:C7:75:4A:25:A2:F6:98:DC:E9:3B:23:9B:C1:AD:A4:28:79","sha256":"01:A0:97:55:77:F6:CB:1C:1F:87:62:F2:56:49:EA:3F:BD:EA:E4:2E:99:1C:AB:06:42:8E:57:35:09:99:3D:36"}}},"request":{"raw":"GET /api/common/getLanguage HTTP/1.1\r\nHost: h5-api.tcmu567.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://petareol.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 16:02:22 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://petareol.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=91gSx5Uz%2B4SZaMjBCWZ2icmTXI1ker3WciwrdtmHqlofuouujeVn%2FH2YZ0g2oK7vJKuFaxkPLdzTCflZryM1IzcgXjUSdmBobnDG6PdNjmKVQw%3D%3D\"}]}\r\ncf-ray: 9d302fd86f05a0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5470,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5d230eaa5b420d0986d93402e9c394d8","sha1":"9058d717b1140718246ad746d5adabffc08d4cd7","sha256":"00edb4353d6b6e4d471e93e093c55925e472b4bca6e9cd5ef33e95a5f8230ab4","sha512":"7a0a1e07f98358f457e21b137895aeeecec2990c0d952702f733b019bb652dda6b8357cece6b9029c8d0a3cb23083c60245d38d7356de0aadb6bdd2ba68fcdcf","ssdeep":"96:KDnqLH1S9cW1eNZW1ixqNEW1EPUeWsAo1ds+UWQKUgLoA8gG2EMMYdo:KDqz1y91G01Qq71EsDg1+WPRUA872EMg","tlshash":"32b18a023a68dcbb19af6cd754baac046fcc932f84a0dc05895b9f5c9de587a346e14c","first_seen":"2026-02-24T16:02:50.163254Z","last_seen":"2026-03-24T14:03:56.980488Z","times_seen":5,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":92,"dns":58,"connect":9,"send":0,"wait":385,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.tcmu567.top/api/common/getAllSetting","fqdn":"h5-api.tcmu567.top","domain":"tcmu567.top","tld":"top"},"ip":{"addr":"104.21.38.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://petareol.com/","date":"2026-02-24T16:02:22.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tcmu567.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 11:37:09 GMT","end":"Tue, 31 Mar 2026 12:34:34 GMT"},"fingerprint":{"sha1":"49:32:BD:C7:75:4A:25:A2:F6:98:DC:E9:3B:23:9B:C1:AD:A4:28:79","sha256":"01:A0:97:55:77:F6:CB:1C:1F:87:62:F2:56:49:EA:3F:BD:EA:E4:2E:99:1C:AB:06:42:8E:57:35:09:99:3D:36"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.tcmu567.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://petareol.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 16:02:22 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://petareol.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XZThfi2rb%2BeE%2Fp3hY0WyiPRc3EEfK%2Fr490D4UYyid%2FGg8ng2bEwSUHc7nuwbUNlDDjubtA%2Fa6owMlXdIbir%2BBJ1MliZpsIEyL4TqZqydartFow%3D%3D\"}]}\r\ncf-ray: 9d302fd86f08a0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":568,"timings":{"blocked":91,"dns":57,"connect":9,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/platform/TM/favicon.ico?2.0.1771925147122","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"104.21.80.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petareol.com/","date":"2026-02-24T16:02:22.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"petareol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:43:29 GMT","end":"Fri, 03 Apr 2026 00:39:54 GMT"},"fingerprint":{"sha1":"1F:CE:D6:E7:0A:86:3F:CF:27:96:C0:FC:E9:F3:9E:BF:20:BD:28:F2","sha256":"36:DE:4C:4B:EA:DA:47:13:4B:55:C6:99:BB:44:70:55:A7:B7:B4:31:90:1C:C2:9B:8E:66:41:15:AA:AF:0C:19"}}},"request":{"raw":"GET /platform/TM/favicon.ico?2.0.1771925147122 HTTP/1.1\r\nHost: petareol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 16:02:22 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Tue, 24 Feb 2026 17:18:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699ddd72-51f3e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VWembcotDZBJKVwhjsJvZAc8dNf3jLH3LMAj7Wk34LFjj2HWVGSyGNYOyfne2Uf0CMGN18tbuLdcQm3AhgtQzQDM7dROkMCrFNYIkg%3D%3D\"}]}\r\ncf-ray: 9d302fd9a8c13017-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":335678,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 1278 x 1278, 8-bit/color RGBA, non-interlaced","md5":"9785080ea545a2f98876dc0fb5f742df","sha1":"cd8cacaaf30a301bbac1be039de6c8b81c9a7c3d","sha256":"c770474b78ccbbd51a6007be270832a6869209ff643007d1476ee94d23979474","sha512":"ec20612f36a0400152cad3001629daec68133ea6dcac26a7d4d98899364479d44cc6b508f15022ed502af4c2f6f69f17a59bf26a0103c3b76f28a2bcb171e299","ssdeep":"6144:Sw+rU7FeKDx9s335/srNduD1rjk9JjNZbn2x2QeUzfP5Edq56c9VU:Sw+Ae8s335kRdKVAXNN0eU7PA2VU","tlshash":"2964127ec1dbdc82cc6f700818b6258623592134d6d32cf6a6faa8cece1493e75665dc","first_seen":"2026-02-24T16:02:50.151946Z","last_seen":"2026-03-24T14:03:56.965865Z","times_seen":7,"resource_available":false,"data":null}},"time_used":866,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":485,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"petareol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.tcmu567.top/api/common/getLanguage","fqdn":"h5-api.tcmu567.top","domain":"tcmu567.top","tld":"top"},"ip":{"addr":"104.21.38.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://petareol.com/","date":"2026-02-24T16:02:23.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tcmu567.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 11:37:09 GMT","end":"Tue, 31 Mar 2026 12:34:34 GMT"},"fingerprint":{"sha1":"49:32:BD:C7:75:4A:25:A2:F6:98:DC:E9:3B:23:9B:C1:AD:A4:28:79","sha256":"01:A0:97:55:77:F6:CB:1C:1F:87:62:F2:56:49:EA:3F:BD:EA:E4:2E:99:1C:AB:06:42:8E:57:35:09:99:3D:36"}}},"request":{"raw":"OPTIONS /api/common/getLanguage HTTP/1.1\r\nHost: h5-api.tcmu567.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://petareol.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 16:02:23 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://petareol.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lyLuv8p7%2FICgp3LGInLHFkRvk1P5lCYOkbv8Dx5UTb11tcJeT7B%2F%2BfcPAtiYs9JceS4Kj4ttrPS63MCQt3EnBBK0rQagZIi0hc%2FWloYBCTlWvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d302fded96f56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.tcmu567.top/api/common/getLanguage","fqdn":"h5-api.tcmu567.top","domain":"tcmu567.top","tld":"top"},"ip":{"addr":"104.21.38.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://petareol.com/","date":"2026-02-24T16:02:23.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tcmu567.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 11:37:09 GMT","end":"Tue, 31 Mar 2026 12:34:34 GMT"},"fingerprint":{"sha1":"49:32:BD:C7:75:4A:25:A2:F6:98:DC:E9:3B:23:9B:C1:AD:A4:28:79","sha256":"01:A0:97:55:77:F6:CB:1C:1F:87:62:F2:56:49:EA:3F:BD:EA:E4:2E:99:1C:AB:06:42:8E:57:35:09:99:3D:36"}}},"request":{"raw":"GET /api/common/getLanguage HTTP/1.1\r\nHost: h5-api.tcmu567.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://petareol.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 16:02:23 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://petareol.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4BmI21zC0FEOEj9kPc5TmMQP20S%2BECgrOT5QGrjeJ1rWfOSfyUENikZd0CBEwhKzCjyf0RPRvyx2LjPaNwDQ0xoFKvkkwEfD17mbClYlXN4pFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d302fdfb98e56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5470,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5d230eaa5b420d0986d93402e9c394d8","sha1":"9058d717b1140718246ad746d5adabffc08d4cd7","sha256":"00edb4353d6b6e4d471e93e093c55925e472b4bca6e9cd5ef33e95a5f8230ab4","sha512":"7a0a1e07f98358f457e21b137895aeeecec2990c0d952702f733b019bb652dda6b8357cece6b9029c8d0a3cb23083c60245d38d7356de0aadb6bdd2ba68fcdcf","ssdeep":"96:KDnqLH1S9cW1eNZW1ixqNEW1EPUeWsAo1ds+UWQKUgLoA8gG2EMMYdo:KDqz1y91G01Qq71EsDg1+WPRUA872EMg","tlshash":"32b18a023a68dcbb19af6cd754baac046fcc932f84a0dc05895b9f5c9de587a346e14c","first_seen":"2026-02-24T16:02:50.163254Z","last_seen":"2026-03-24T14:03:56.980488Z","times_seen":5,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"104.21.80.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-24T16:02:19.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"petareol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:43:29 GMT","end":"Fri, 03 Apr 2026 00:39:54 GMT"},"fingerprint":{"sha1":"1F:CE:D6:E7:0A:86:3F:CF:27:96:C0:FC:E9:F3:9E:BF:20:BD:28:F2","sha256":"36:DE:4C:4B:EA:DA:47:13:4B:55:C6:99:BB:44:70:55:A7:B7:B4:31:90:1C:C2:9B:8E:66:41:15:AA:AF:0C:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: petareol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 16:02:20 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Feb 2026 17:25:46 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bwoDBcHw3%2Bod0vf%2FVg2YsZFy58g29bu%2FCuQ7snJVEcZCDT1GxnyZ%2Fe1WXZ%2Fr%2FXn2TXPNiDqsTKV1%2F1VOHZac01zGx8%2B1OtYhDRHVCg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d302fcadc37c8cb-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3934,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1996), with CRLF, CR, LF line terminators","md5":"ad22db231301346355f02ab8607aded4","sha1":"134b43251a24b76b7cd989f394e2a7e970d8a41e","sha256":"8d9347cc7a1930f586f77637858e9da25833b2f2afaf1fba0a8e2fbaa3253447","sha512":"146e92f057ca9ca62e495c1f0841029993cd3005fba36197f7333fe3ce39e661276c406376856850bb88b95bed990477024c0fe541a17fe404ed05c70608375b","ssdeep":"","tlshash":"238110e71851981923720229dfd3b01ccb21a157811a6d68f48c21ef9fe2fe5c4eb73a","first_seen":"2026-02-24T16:02:50.164293Z","last_seen":"2026-02-24T16:02:50.164293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":32,"dns":1,"connect":8,"send":0,"wait":380,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"petareol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"petareol.com/assets/index-By1zQn1y.css","fqdn":"petareol.com","domain":"petareol.com","tld":"com"},"ip":{"addr":"104.21.80.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://petareol.com/","date":"2026-02-24T16:02:20.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"petareol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:43:29 GMT","end":"Fri, 03 Apr 2026 00:39:54 GMT"},"fingerprint":{"sha1":"1F:CE:D6:E7:0A:86:3F:CF:27:96:C0:FC:E9:F3:9E:BF:20:BD:28:F2","sha256":"36:DE:4C:4B:EA:DA:47:13:4B:55:C6:99:BB:44:70:55:A7:B7:B4:31:90:1C:C2:9B:8E:66:41:15:AA:AF:0C:19"}}},"request":{"raw":"GET /assets/index-By1zQn1y.css HTTP/1.1\r\nHost: petareol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 16:02:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 24 Feb 2026 17:25:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699ddf1a-668b6\"\r\nexpires: Wed, 25 Feb 2026 04:02:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MmkmZt5D6GR6D9iH0Ue9kr64HDvQ9X6g9%2FwUeeUuDm8k%2FhzroN55N7rTkcYt4GJxOG3dQPHzVfFcAi%2BmPSN5em2mJHP3WHsFjN2uvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d302fce7ea93017-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":420022,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"f7e95e6999da8b5a68149c554a2909c3","sha1":"342043b7efbe0580aef79adf430df3e46816d1bf","sha256":"b7405bfce47063800b84b22f558af735c57ac9ac64452e2e10e982f6bfc82a00","sha512":"377436dbb2c8828290c16c0dfdd83468c80d8e66b49a04ef58e981a39097570c8ae6853c2068c621f8cb7349927c22d537085343f33dcc256aa30cad0e6157d4","ssdeep":"12288:E/1zBjZ8w71ZACkFDS3vyf58rBeV05TCAT:E/1zBjZ8w71ZACkFDS3vyf58rBeV05TD","tlshash":"c494f969a594103c6f33d661abce5adcb23ce662dc42cde5b203651a4ec77fb2213217","first_seen":"2026-02-24T16:02:50.16515Z","last_seen":"2026-02-24T16:02:50.16515Z","times_seen":1,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"petareol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}