{"report_id":"0ec372aa-7c99-4ab8-ac90-e634d7bdb674","version":6,"status":"done","tags":[],"date":"2025-09-01T04:11:07Z","url":{"schema":"http","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"title":"Stake SUSHI | Sushi"},"submit":{"url":{"schema":"http","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-06T04:11:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":9,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:38Z","timestamp":1756699838,"ip_dst":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":49458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-01T04:10:38.554091+0000\",\"flow_id\":508576149682089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":49458,\"dest_ip\":\"104.21.92.126\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.cowsushi.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.cowsushi.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":762,\"start\":\"2025-09-01T04:10:38.538537+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:52Z","timestamp":1756699852,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":35614,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-01T04:10:52.267640+0000\",\"flow_id\":1718867869892189,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":35614,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3439,\"start\":\"2025-09-01T04:10:52.261725+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:52Z","timestamp":1756699852,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":35624,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-01T04:10:52.273793+0000\",\"flow_id\":2197677266501433,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":35624,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3513,\"start\":\"2025-09-01T04:10:52.261945+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:52Z","timestamp":1756699852,"ip_dst":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":56050,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)","source":"{\"timestamp\":\"2025-09-01T04:10:52.289731+0000\",\"flow_id\":825942021523309,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":56050,\"dest_ip\":\"104.20.24.117\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058806,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-rpc.publicnode.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":924,\"bytes_toclient\":3529,\"start\":\"2025-09-01T04:10:52.280429+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:52Z","timestamp":1756699852,"ip_dst":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":56042,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)","source":"{\"timestamp\":\"2025-09-01T04:10:52.299730+0000\",\"flow_id\":671329641318071,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":56042,\"dest_ip\":\"104.20.24.117\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058806,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-rpc.publicnode.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":924,\"bytes_toclient\":3528,\"start\":\"2025-09-01T04:10:52.280247+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:52Z","timestamp":1756699852,"ip_dst":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.5","port":59386,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2025-09-01T04:10:52.367454+0000\",\"flow_id\":1585513430316249,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":59386,\"dest_ip\":\"216.119.155.40\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1584,\"start\":\"2025-09-01T04:10:52.324825+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:52Z","timestamp":1756699852,"ip_dst":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.5","port":59384,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2025-09-01T04:10:52.370165+0000\",\"flow_id\":1510965682959439,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":59384,\"dest_ip\":\"216.119.155.40\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1584,\"start\":\"2025-09-01T04:10:52.324687+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:52Z","timestamp":1756699852,"ip_dst":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.5","port":51178,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)","source":"{\"timestamp\":\"2025-09-01T04:10:52.800898+0000\",\"flow_id\":962564931209982,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":51178,\"dest_ip\":\"20.105.41.175\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058788,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"1rpc.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3435,\"start\":\"2025-09-01T04:10:52.740094+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:52Z","timestamp":1756699852,"ip_dst":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.5","port":51164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)","source":"{\"timestamp\":\"2025-09-01T04:10:52.803007+0000\",\"flow_id\":2063785955969643,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":51164,\"dest_ip\":\"20.105.41.175\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058788,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"1rpc.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":909,\"bytes_toclient\":3435,\"start\":\"2025-09-01T04:10:52.739947+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-08-27T15:27:14.649202Z","alert_count":0,"request_count":3,"received_data":319116,"sent_data":1316,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-08-27T23:37:17.518462Z","alert_count":0,"request_count":2,"received_data":939,"sent_data":866,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rpc.ankr.com","ip":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"domain_registered":"2007-04-23","domain_rank":541361,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2025-08-29T07:03:21.42272Z","alert_count":0,"request_count":2,"received_data":1405,"sent_data":1011,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bsc-rpc.publicnode.com","ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":2142410,"first_seen":"2024-05-08T23:22:55Z","last_seen":"2025-08-30T16:32:57.639644Z","alert_count":0,"request_count":4,"received_data":13530,"sent_data":2050,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"1rpc.io","ip":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"domain_registered":"2022-08-02","domain_rank":47066,"first_seen":"2022-08-18T07:06:26Z","last_seen":"2025-08-31T11:45:39.005394Z","alert_count":0,"request_count":2,"received_data":6935,"sent_data":1001,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.cowsushi.top","ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":32,"request_count":27,"received_data":4171689,"sent_data":19908,"comment":"","tags":null,"fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-08-27T15:20:49.600294Z","alert_count":0,"request_count":2,"received_data":798859,"sent_data":902,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2025-08-27T16:18:45.165697Z","alert_count":0,"request_count":7,"received_data":509792,"sent_data":4654,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"res.cloudinary.com","ip":{"addr":"104.16.79.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-24","domain_rank":21175,"first_seen":"2012-10-03T08:31:44Z","last_seen":"2025-08-29T01:03:19.039614Z","alert_count":0,"request_count":19,"received_data":25657,"sent_data":10420,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:38Z","timestamp":1756699838,"ip_dst":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":49458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-01T04:10:38.554091+0000\",\"flow_id\":508576149682089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":49458,\"dest_ip\":\"104.21.92.126\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.cowsushi.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.cowsushi.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":762,\"start\":\"2025-09-01T04:10:38.538537+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:52Z","timestamp":1756699852,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":35614,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-01T04:10:52.267640+0000\",\"flow_id\":1718867869892189,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":35614,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3439,\"start\":\"2025-09-01T04:10:52.261725+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:52Z","timestamp":1756699852,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":35624,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-01T04:10:52.273793+0000\",\"flow_id\":2197677266501433,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":35624,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3513,\"start\":\"2025-09-01T04:10:52.261945+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:52Z","timestamp":1756699852,"ip_dst":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":56050,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)","source":"{\"timestamp\":\"2025-09-01T04:10:52.289731+0000\",\"flow_id\":825942021523309,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":56050,\"dest_ip\":\"104.20.24.117\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058806,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-rpc.publicnode.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":924,\"bytes_toclient\":3529,\"start\":\"2025-09-01T04:10:52.280429+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:52Z","timestamp":1756699852,"ip_dst":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":56042,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)","source":"{\"timestamp\":\"2025-09-01T04:10:52.299730+0000\",\"flow_id\":671329641318071,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":56042,\"dest_ip\":\"104.20.24.117\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058806,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-rpc.publicnode.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":924,\"bytes_toclient\":3528,\"start\":\"2025-09-01T04:10:52.280247+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:52Z","timestamp":1756699852,"ip_dst":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.5","port":59386,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2025-09-01T04:10:52.367454+0000\",\"flow_id\":1585513430316249,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":59386,\"dest_ip\":\"216.119.155.40\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1584,\"start\":\"2025-09-01T04:10:52.324825+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:52Z","timestamp":1756699852,"ip_dst":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.5","port":59384,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2025-09-01T04:10:52.370165+0000\",\"flow_id\":1510965682959439,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":59384,\"dest_ip\":\"216.119.155.40\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1584,\"start\":\"2025-09-01T04:10:52.324687+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:52Z","timestamp":1756699852,"ip_dst":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.5","port":51178,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)","source":"{\"timestamp\":\"2025-09-01T04:10:52.800898+0000\",\"flow_id\":962564931209982,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":51178,\"dest_ip\":\"20.105.41.175\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058788,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"1rpc.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3435,\"start\":\"2025-09-01T04:10:52.740094+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:52Z","timestamp":1756699852,"ip_dst":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.5","port":51164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)","source":"{\"timestamp\":\"2025-09-01T04:10:52.803007+0000\",\"flow_id\":2063785955969643,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":51164,\"dest_ip\":\"20.105.41.175\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058788,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"1rpc.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":909,\"bytes_toclient\":3435,\"start\":\"2025-09-01T04:10:52.739947+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9781eb4a1a2335a6\u0026lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e840841333d97e8ad3f65c952836cb36","sha1":"6666abb39bfaf194290550ea684e2b362a645c51","sha256":"4ab38dbcb92c69cff0dd804518709df016a375dd3d791f01436bf8112c4e9bc8","sha512":"97a00f08f29ec74027a3b52c05c0341701d365bfb80f243fe300b6af1f2fbb281bc8950bcc015230b9acde7d17c61cb7b44b07610676b6c8aaa7cff2c35cba2e","ssdeep":"3072:ksA/n7pPTOOSWmGxH9VQfjOTQ+W040pJgWdbwm/Y:qpPTOOSYdqfyo03gWdbZY","tlshash":"25d3f9cf75ceb6458312b0608067b4eba2af7c4424586c5ce63198e879f436d65bbcb8","size":142886,"data":"","first_seen":"2025-09-01T04:11:19.062907Z","last_seen":"2025-09-01T04:11:19.062907Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9914b3b4d0adfeecb188d012186cb6e0","sha1":"dcb0b46bcf667d89e5733cafd0e2a5ad41d670fd","sha256":"bbd48654178ce26e725a9f36118dfeeb6f8b5d0deeb0748c065d220f47005d30","sha512":"dcafc8b9fb0dc371c069715f34d2df4fc3bd2a18bb468e8ec112db0541d077d4872eda653e3382599cd875974fd693fb6d0d7eebc2d3c907eb6f892c27d800d3","ssdeep":"96:ddO899cPrKWSHkcvzcvlcvbcvBcvYQcv1cv7cvqcvTcvPcv7cvHcvbcv/cvYQcvv:m5PujHxQqI2YN6oPwso0IcYNEFK","tlshash":"9402ac42ffa8a37474763ed80a7bb0019b741cb1db983f123f32169508d6b5474b69ae","size":8723,"data":"","first_seen":"2025-04-20T10:26:21.910219Z","last_seen":"2026-06-03T10:20:46.391181Z","times_seen":578,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-01T04:10:38Z","timestamp":1756699838,"ip_dst":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":49458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-01T04:10:38.554091+0000\",\"flow_id\":508576149682089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":49458,\"dest_ip\":\"104.21.92.126\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.cowsushi.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.cowsushi.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":762,\"start\":\"2025-09-01T04:10:38.538537+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/4710d66e8fda/api.js?onload=XaVFY8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49d515b98ccae9634aff66a4ca77af98","sha1":"bfa5462a4f47c2350dcd0b3000e9cb54bec63c21","sha256":"4ca696d2fb66b44648a8fd55bc9eeaa6958dd9e523c4a740365823c30d4fc087","sha512":"856b855e0662da94dc3d314080976df11b5cb203d5ac498bacd9d201013e82258ee66ba1c3bb948e0ea71dd319345d9988be765daa3a276f8571e1787a38cc39","ssdeep":"768:XC6BRV2fM4lLa+rnhPLy6PuR8u5jUjRFPlBMqfspV6q11AY13kep+ORWqxIrm3LW:J2E4lLa+rnhT/oj2P6V6GNI","tlshash":"8f231b583256793227e980e1617ba74373257939e94ccc50d423c86536bcecad233fba","size":48995,"data":"","first_seen":"2025-08-15T11:12:03.097811Z","last_seen":"2025-09-08T12:15:40.897517Z","times_seen":20901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"28508592a17a52d1fdc384fa320092e1","sha1":"4b44f76d2e04172c0ec43bf839c04f57e62dab9b","sha256":"af753680aaf87b2fdf219d0af86747d17153fa4f0500f574091295a8a9fb8220","sha512":"40b090a53cdfb2dca3241926692b2cf1c3c2f29c2889bb153792ccdbb28191f86ea7fd215a53b3a6fe07f7162c153cc6f547fcd9107b3f025bf4c594e6468df2","ssdeep":"3:N/BKL1XLT+n:eL13+n","tlshash":"175504d0544030700414c410d3543417744d541151154455f1dd04fc17301000010d70","size":1337359,"data":"","first_seen":"2025-09-01T04:11:19.121138Z","last_seen":"2025-09-01T04:11:19.121138Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-01T04:10:38Z","timestamp":1756699838,"ip_dst":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":49458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-01T04:10:38.554091+0000\",\"flow_id\":508576149682089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":49458,\"dest_ip\":\"104.21.92.126\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.cowsushi.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.cowsushi.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":762,\"start\":\"2025-09-01T04:10:38.538537+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ff03fc8f0c3179fb4dcf4389f88a1c16","sha1":"05ff911d7ddf2d7c14b4316a87fd08f42c618f9f","sha256":"025229ec6bb50e915572750c5045d22c5fe16851fd077f1411f41b19aa1dfece","sha512":"4acb3551ec49556a2a64f4a47e480df29f611f67d0ef4b2474e90f7b86caed3dedb0b56eba12e577f1401d4d701c9a4f0898a06eee8f6d7dbe3b4b5283a854e8","ssdeep":"","tlshash":"4f60000000c000000000030cc00300003cc0003300fc0300c30c003000cf3cc0000000","size":14,"data":"","first_seen":"2024-12-12T23:50:40.182598Z","last_seen":"2026-05-01T12:56:58.912641Z","times_seen":262850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"68966754437dda221fe35df47c68db9f","sha1":"9e402d3bade676cd36a3618245b5bc87d3b4bc73","sha256":"d5520dfb78d9219f9309c0cef01906a5eef879ea1581c569d47184c4fcf775c6","sha512":"038b6bc55f7c52a88aa58255a798fbaeb6ecea2b86fcbaaf0096169403fdbbb86cfcd9aeedabd986a61478850095c3fa78b60abc477bfe27190c2daa613f2e91","ssdeep":"3:N/BKL1XLTul:eL13Y","tlshash":"165504d054c030700454d400d3541415744f440314155c55f1dd04f417701000010d50","size":1337359,"data":"","first_seen":"2025-09-01T04:11:19.123722Z","last_seen":"2025-09-01T04:11:19.123722Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-01T04:10:38Z","timestamp":1756699838,"ip_dst":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":49458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-01T04:10:38.554091+0000\",\"flow_id\":508576149682089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":49458,\"dest_ip\":\"104.21.92.126\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.cowsushi.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.cowsushi.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":762,\"start\":\"2025-09-01T04:10:38.538537+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"276aa8b02439790e134855fd3c8e8891","sha1":"910a31422a74b1a1e40525ca725493851803613a","sha256":"e5f1af482099b908c7c7a516e2994cce5dc2b74fa8d42eca10505f3dcbaae603","sha512":"72c52081c52517052ea5bcaa4cbbe8fcedcd2b4ee252e85df0087d829b32929ab75f50c07b3daf258e6a9a070a26ac6a218da64297643957f7411c1bf1a138df","ssdeep":"3:N/BKL1XLTvVSn:eL13vVSn","tlshash":"d35504d054c030700414c400d3541415744d44013015445df1dd04f41f301000410dd1","size":1337359,"data":"","first_seen":"2025-09-01T04:11:19.125369Z","last_seen":"2025-09-01T04:11:19.125369Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"33ff6022e88df59f8dfc9eb546435e9c","sha1":"7f2ad96c0a1276fbc858c652a6e2d0b3c9d4d3e4","sha256":"a1c845cab782ea7dec04543ec72e0b354cb8e9aae23acc02ee02b1832e3acd9a","sha512":"99820974c649620d8dfd487054edee4863ca41025de5a87fcd6fddfafbecb53668799fdde6f7b809112fec178b18f28a9ff8e190d298aff5a29c6795ad639c25","ssdeep":"","tlshash":"0c600000c0303003000f3000f00000033cc000f0cccc3003030c00f000c000c0cc000c","size":14,"data":"","first_seen":"2024-12-12T23:50:40.556614Z","last_seen":"2026-05-01T12:56:58.96029Z","times_seen":264119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/48fb0727-588e-414a-a345-215415426481","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-08-07T23:31:49.839519Z","times_seen":5106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6741ba6eb4f03dfa31a97fcfe7d16369","sha1":"23c34a20d37ad43aa81f60026ca3b9c25a8b657a","sha256":"f8babd7f9ce04b88c65b8cc1b69382b1d8c83c59e55b26b34ed13ae4e09b0645","sha512":"247dd2fddba4f20e0a26d75cbb7ef20c3e01c2ccfa6a8e795ee6cfed0aa692a595a03c9aab886109c2e8f2544432a6ffec76f8711a2fdfaef6b307bcbf84e9a6","ssdeep":"","tlshash":"3ed02ea856ea0b310323a224160b93863b7040173080e8893e0e81d81fee8a040af8ab","size":272,"data":"","first_seen":"2025-04-20T10:26:21.911267Z","last_seen":"2025-11-16T03:48:59.197992Z","times_seen":584,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-01T04:10:38Z","timestamp":1756699838,"ip_dst":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":49458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-01T04:10:38.554091+0000\",\"flow_id\":508576149682089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":49458,\"dest_ip\":\"104.21.92.126\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.cowsushi.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.cowsushi.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":762,\"start\":\"2025-09-01T04:10:38.538537+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"498d8e615709a4d8c2d825f2847d6e6b","sha1":"4d445e3ff9b45b2c7e08dd411b7621c955126fa4","sha256":"846688d771d177cc0e779b0f8d1ff2e9940b26633b6634e10938a0f8bb281a54","sha512":"45df145bb99d0d06846b4de476ce626d0c4838c2d7339631c49017463829faf412be20b57202916a10d372fd2cbb32ee79baace2d52c8b6cae845a3b02a6abda","ssdeep":"3:N/BKL1XLTQT:eL13QT","tlshash":"205504d4544030f00c54dc14d3d71415540d0c43111544f5f1dd44d417301100010550","size":1337359,"data":"","first_seen":"2025-09-01T04:11:19.129813Z","last_seen":"2025-09-01T04:11:19.129813Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-01T04:10:38Z","timestamp":1756699838,"ip_dst":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":49458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-01T04:10:38.554091+0000\",\"flow_id\":508576149682089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":49458,\"dest_ip\":\"104.21.92.126\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.cowsushi.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.cowsushi.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":762,\"start\":\"2025-09-01T04:10:38.538537+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c6fd3e92aa6dd508573fe2a59a34e033","sha1":"32cbc0d2f7173cb64a87eee5734e84e404cbeb44","sha256":"9a870725b71ff5fee040527ddf5cd2bccb012432a122eafe4ea55800ff2ab576","sha512":"d9de495429fe95ae5e689beb0932f0e970cdf2a586fddf15e1658795f5fb781a15a5aa904ba0318e1fbcb23a84b1d7b528b111e5d21742d068dbb641d5fb3679","ssdeep":"","tlshash":"06b012403aa16001c71390345c4b8804f048074320994424649d53300f0001a4d795f8","size":87,"data":"","first_seen":"2025-06-08T01:05:26.948283Z","last_seen":"2026-04-22T04:14:09.943039Z","times_seen":4422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5542ef6c6bb9397a688eca23874212ac","sha1":"903f2f0d9a694582d4c516961f24031920f03792","sha256":"eba4f82b1d4c8fa57b123a429801224c8595990f2d108a92443aaa372bb76f35","sha512":"2463c7fd801b4f0ab3ef65d2285bb0a4e7bc2ad825b3fa8305068452542445be958acc305d023ed7daba6bfac1ea02edf82bd80b5ecf75d3e54b7a2000d287c4","ssdeep":"3:N/BKL1XLTV:eL13V","tlshash":"b15504d0544030f00414d410d3551415540d0401111554d5f1dd04d517343140030550","size":1337359,"data":"","first_seen":"2025-09-01T04:11:19.132147Z","last_seen":"2025-09-01T04:11:19.132147Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3e71e3473029459eb2c131fab90f327a","sha1":"d25a515d68167d4227464a5f2aa97eb3e36d17fe","sha256":"808e8bf89ac00ec194011a7f9f6d34efeb958d3663be74cc2b36134f4bbbf271","sha512":"843f1ce1c467d1f3e2b7ef2ce6588dc1c6f915d17fec5ae7cddf2b877d7c444e559f8b2025fc8feca888d69dff5d3beff3311e994fa48bf6e68a1e8f78bde927","ssdeep":"3:N/BKL1XLTydS:eL139","tlshash":"9f5504f1554030700514cc01d3545535fc5d44011015445df1dd05f417301040011d50","size":1337359,"data":"","first_seen":"2025-09-01T04:11:19.133645Z","last_seen":"2025-09-01T04:11:19.133645Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-01T04:10:38Z","timestamp":1756699838,"ip_dst":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":49458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-01T04:10:38.554091+0000\",\"flow_id\":508576149682089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":49458,\"dest_ip\":\"104.21.92.126\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.cowsushi.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.cowsushi.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":762,\"start\":\"2025-09-01T04:10:38.538537+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"62add4ec7fce751122fa251273790042","sha1":"90139e2df014b76774a996ea8dd3dfd41f032864","sha256":"e0f796528217619acfc7a35976e389eb22e42134d44a250e0f641b06d59ff271","sha512":"292e57bb93488b1a555866b5ce138336ec2f84a4a98f13a0649cc24135572204b4230d9fca4f403449eff1d29732c88f28a7ea92912807c92dcaa49e05b32eb3","ssdeep":"3:N/BKL1XLT4Wdn:eL13bdn","tlshash":"985504d0554130704d14cc10d3541535f44d444110154455f1dd04f417303000010d50","size":1337359,"data":"","first_seen":"2025-09-01T04:11:19.135201Z","last_seen":"2025-09-01T04:11:19.135201Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-01T04:10:38Z","timestamp":1756699838,"ip_dst":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":49458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-01T04:10:38.554091+0000\",\"flow_id\":508576149682089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":49458,\"dest_ip\":\"104.21.92.126\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.cowsushi.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.cowsushi.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":762,\"start\":\"2025-09-01T04:10:38.538537+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-09T17:40:23.28216Z","times_seen":237445,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-01T04:10:38Z","timestamp":1756699838,"ip_dst":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":49458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-01T04:10:38.554091+0000\",\"flow_id\":508576149682089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":49458,\"dest_ip\":\"104.21.92.126\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.cowsushi.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.cowsushi.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":762,\"start\":\"2025-09-01T04:10:38.538537+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/?__cf_chl_tk=OBPImIcYs6vXOaCkfu_ezDxyYMEdoOgY_S_mxf1TNF8-1756699838-1.0.1.1-M8p_XfBWi4_TIUBnsvfdAeh83WcB_aWZ7DjkYGU6tqI","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"96c3c5dd717ae93938848a8832ffd3c5","sha1":"a4004112b10edb9cfacc7eb0bbce7f282c7dac81","sha256":"558b3d1630184187b10bcd7acaa82c27320289de7ee47e7388a6ce05a9cb9ae8","sha512":"540135089071c754e4af0d52ca07d71ed82a6f1e42d97791bf757bc960418928e25fec36f071893d1f2a0ace45677d73f7ebfde39acb59621e919450351b850d","ssdeep":"3:N/BKL1XLTMn:eL13M","tlshash":"835504d0554030701414c400d3541415744dc40114154477f1dd14f417301000110d70","size":1337359,"data":"","first_seen":"2025-09-01T04:11:19.137874Z","last_seen":"2025-09-01T04:11:19.137874Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f47389d2f1abd47dbebeef3e2d3ae8a7","sha1":"dde5aa75f9a647e73d3e2d3fdda68898f850f72d","sha256":"30893b81b3c71cdbd5cf34b54fb52f8eef50b27d8a3f2498a28d2b89bd987fda","sha512":"3524a8ed2b83fe9d62a0708424707959d6cc8e89a918407da7c46540b5982fea9230792acffc47517cf5d009231375b00d5ec2ff5689bfb74ea6a3c926653318","ssdeep":"","tlshash":"56b0028869e5a404e21975a5495fd144f12cc802148a0515658885515f114294167868","size":94,"data":"","first_seen":"2024-12-12T23:50:40.522517Z","last_seen":"2026-05-01T12:56:59.043697Z","times_seen":261167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/static/js/bignumber.min.js","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"220b87873ab81287f915af82e3ba9a33","sha1":"ced2ebc27d644716effa64115643dd1770ba04eb","sha256":"266103c2cedfaf94d60f5a638555639fb2b86f2b66386660fd3d057715ebf463","sha512":"ddd12920edadffa6de43bed4fda62056a26999291cbd6b9314ee1684242b4a2dad49057753e938a65c122a554ec4a89bb2777a67fd1ebe60a5b0c9782d567b22","ssdeep":"384:W/NxaJsOM+a9fxrSZwieoa+gPIbMPzvP22niiXuB/CeTa4pLG950/GrVh:0xdxcZ9epPzP2/VlTDiX0/6","tlshash":"e582fcd875e3f09d62ff20e100e75443e17a9f0ba84c1976a2509496b831ddba2aff35","size":18565,"data":"","first_seen":"2023-03-07T12:03:15Z","last_seen":"2026-08-08T01:19:54.409199Z","times_seen":820,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/18b965ad-24d7-488e-92b3-29eef940ce6c","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-08-09T15:35:30.742044Z","times_seen":5092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"899d09df9bf4f13ca88b935c3e81cf02","sha1":"3a215a16bd9a468194fc7882850716ad3fef6d66","sha256":"c5c83cd0c77b48d87c75c2c58f4e8c887a94686477244d01fe989469843f4c74","sha512":"036c38f46d490badcccede882217b073565f5dbcceeed1129636427d5eb3db6f56b816f62d8958f0d32ee2960049e355b3bf27a286e37e47d23d8d0ffb136441","ssdeep":"3:N/BKL1XLTo:eL13o","tlshash":"565504d054c030740414c400d3541415744d450150154455f1dd14f41f311000510f50","size":1337359,"data":"","first_seen":"2025-09-01T04:11:19.141069Z","last_seen":"2025-09-01T04:11:19.141069Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-01T04:10:38Z","timestamp":1756699838,"ip_dst":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":49458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-01T04:10:38.554091+0000\",\"flow_id\":508576149682089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":49458,\"dest_ip\":\"104.21.92.126\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.cowsushi.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.cowsushi.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":762,\"start\":\"2025-09-01T04:10:38.538537+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f3b1c7f5e1162672eb00f85001fbed30","sha1":"3375cc3b153dd7b7b201d2f5c2ab561ce35e1f8f","sha256":"3881c65ee465d0fefd7c0fe84d316f34709cbb52a93012d563ffa57deeaff934","sha512":"f8aaadf9d18e9555c29c20bea66758afd5f73f48d5c7045c23127b13602ba2dbc4cda14cb3fa5d47ba35dac3ddde1ffdcd514b5f15ad8963d62ee4fb67855656","ssdeep":"","tlshash":"0f610adee35cd7af67be525c421b33557c7212e1122490f59fc2c40e276ea9342aae60","size":3189,"data":"","first_seen":"2025-09-01T04:11:19.142913Z","last_seen":"2025-09-01T04:11:19.142913Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/153cc5b6-10e5-4688-bfcc-8e8657d6be9c","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"05997da4a9c3d58ef33a7cf3d716af57","sha1":"3a7a7913c31aa2787a11dc6ba6fb5b5f2c525ac1","sha256":"e268ded9f58238c3885b4e0e83ddf10ea9552c488dd25538c8569ec2beff7eb9","sha512":"83413571115e6b39abe7e3b6573a81b3198125b35ae13e31d14c7cb3c81790b24a11cd81531a58922386bbf6e2d41ab6e449fc3206c8b7f20932820cdf58aefe","ssdeep":"49152:D+2KKNjyR5WP4CQjNn9GU6lCLsSPOnLUfJ8KZTcbQQqG7r8aQO/iSJNHoRO2sxSQ:RD8ew45JV","tlshash":"20f591496bf660358213f0795e6f8801b234a40b2949ed5c7e9c92f09f4953c8bf6fe9","size":3517001,"data":"","first_seen":"2025-07-12T22:38:09.134446Z","last_seen":"2026-08-09T15:35:30.742787Z","times_seen":4177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/static/js/jquery.i18n.properties-1.0.9.js","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf3466c221ea851913cdee4fa966c386","sha1":"4299bbb2c505780b927a1c61a25888ed0d2d49e3","sha256":"6baa624dc013c94e79f71f9af775848c574c995f88d0512370b3457f6cf1d60c","sha512":"d466e59d1c94a51f5462b461f4b25f154d2633a73983702991497351cbb3ce828d5cd346f4effb4954a11aa9168ee1d6338a975cd474e6844e22f6b946f25ff9","ssdeep":"192:c+oDJtkMWXZu2PclZbfXx85xiXwSUXdNE+qkid3tM65BtgcRyz/MWQIGs16SUJQX:cfqMWY2PqZmQooNsEA1IS9hv5jP","tlshash":"9482b6087a050d1e46b233b02abd2888da79c47b5521a0f5b8dc77543f7cda942e9ff9","size":18262,"data":"","first_seen":"2025-04-07T11:34:04.636019Z","last_seen":"2026-06-03T10:20:46.382475Z","times_seen":686,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"45ff2b70dcdcb374da6d521b76afc48e","sha1":"62350c6b0c04c9f1c8777261064da40d913517b2","sha256":"75b9e44a925c611a245d5609c438daad602c897388e1eedcae7a5e6383a8a6f2","sha512":"e854f0ea35e880efa76d600e8b0641fabebdd819d0aff1b8a219845eba6878903b05f26c601f665a307ab9eca6cbf5096405fae091a94cb16a0cc45efa0f3c94","ssdeep":"","tlshash":"6621eb9dbf69747a2b1071f4acff104a929bec824856394487d4c4c83ca9b1484abfbd","size":1143,"data":"","first_seen":"2025-09-01T04:11:19.151522Z","last_seen":"2025-09-01T04:49:12.497547Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9781eb46ff1d5688","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"594f22d8cb6f7850f7dcb76c8b5e2b08","sha1":"4a34034abe41d2bfe48dfa811810ee050f529cc1","sha256":"753002f730aa497082914e6a7bc5af2dcbdef4ef134bdfd7f3e51c9cc3112562","sha512":"d87dc7d7e4649e9ad060b9f5a5d90e8299c5933855c66f3dccb8fc37ac5a1a57306d65a255bb6f36272fbe6bcd85a62d3250ee08fc0834ccab19813d4e3cb80b","ssdeep":"1536:uwN2pkKJV6cOY8AS/JJvorxP0PcwvP0UTyISKdETPifxHMPzJkB5RJ7hAvGkMBZI:u9fCHo/AETPiJi07rA","tlshash":"4cb30ace79edb49943276431442ba1ebe2797c84301c4c1ce62199ec7ce936d7267eb8","size":112119,"data":"","first_seen":"2025-09-01T04:11:19.084089Z","last_seen":"2025-09-01T04:11:19.084089Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"48370d9625c05416c336f183a799c775","sha1":"a5ed8e61abf2d8239dc6896b838199d937ea7d3c","sha256":"1255b37c0d6b05727a0eb088a58738ea0086127fb8ccb3717e88c6a65530185d","sha512":"282de359c627fad4ed2cced2c948f3867b669a747c37c4d7fd4001cd64ab92cdc93046294a0a29f036bf4868cd98ee68cc4ee6701b89d1a1687bb217fabcfc78","ssdeep":"3:N/BKL1XLTrRV:eL13rRV","tlshash":"9c5504d054c03070041cc400d35414157c5d440110154c55f1dd0df417301000010d50","size":1337359,"data":"","first_seen":"2025-09-01T04:11:19.154098Z","last_seen":"2025-09-01T04:11:19.154098Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-01T04:10:38Z","timestamp":1756699838,"ip_dst":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":49458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-01T04:10:38.554091+0000\",\"flow_id\":508576149682089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":49458,\"dest_ip\":\"104.21.92.126\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.cowsushi.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.cowsushi.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":762,\"start\":\"2025-09-01T04:10:38.538537+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-09T17:44:42.391936Z","times_seen":740767,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-01T04:10:38Z","timestamp":1756699838,"ip_dst":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":49458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-01T04:10:38.554091+0000\",\"flow_id\":508576149682089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":49458,\"dest_ip\":\"104.21.92.126\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.cowsushi.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.cowsushi.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":762,\"start\":\"2025-09-01T04:10:38.538537+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ca897fb253cc8807c5aafc947eb02fb6","sha1":"25137d68712ada7d3ad424c80bc0d688a696f7bb","sha256":"57f9c536daa79c4d770534dbafbe2e7b2b2aa48b9eb2617b4e670b8a78a4a4ce","sha512":"187200763128b83b777932b28834f8a21adf5824c5b9f8635249168aaefcc2451885b26da07411ccd56a52146f9b8cc2524647ebf2df4c1474f80d219d893f64","ssdeep":"","tlshash":"d96000030c00cc300033000c0003003f30f00c3003cc300c033003f003c030c0000030","size":16,"data":"","first_seen":"2024-12-12T23:50:40.144885Z","last_seen":"2026-05-01T12:56:59.005936Z","times_seen":261656,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"495a10242d90ae6c8e08a5e5ae7f19f3","sha1":"7866a91e8736398df8f8f14bfb5c8ef06804bb75","sha256":"b3b24d4259d50bdacba65e8f05d8a4ac7e1919575c212c0e01aedc5e7170401a","sha512":"6289d83ed0ca8c08ead7f7b46c43120891bb3c3f940eac23c6b4e89228152e13db5e07c9d8bb4f17590c1d38a08206f56de680d2b31be2c3d2d431961ace766c","ssdeep":"","tlshash":"2a119ec078b4d042122e26fac12b74057c92dcbf83ac6090d56ddefc19b119c26d69ba","size":1000,"data":"","first_seen":"2025-04-07T11:34:31.004438Z","last_seen":"2026-06-01T09:40:57.107347Z","times_seen":1069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f24ae7cfb5c2ef2e5eb50b7712156ed0","sha1":"5bc88fac4d29b99b3378bfa54363776ea1d5b4ff","sha256":"d26808060b4e6c30cda5d61fa8c364963da273fe5fc12d209d35c3bbbd2ad063","sha512":"eef8f71df4d916a050ccae0c64e2f141db933e973c7dca4ddad6225f618bf9eec95ab3deed2fba5ff5c70599f2ec2813e4caa1fc914d912c1bea38566f5bc6cd","ssdeep":"3:N/BKL1XLTBWR:eL13U","tlshash":"bc5504d0544030701c1cc410d3551415541d050110154c55f1dd14d4173050410305d1","size":1337359,"data":"","first_seen":"2025-09-01T04:11:19.15901Z","last_seen":"2025-09-01T04:11:19.15901Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-01T04:10:38Z","timestamp":1756699838,"ip_dst":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":49458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-01T04:10:38.554091+0000\",\"flow_id\":508576149682089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":49458,\"dest_ip\":\"104.21.92.126\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.cowsushi.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.cowsushi.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":762,\"start\":\"2025-09-01T04:10:38.538537+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/b3a33100-f799-4bfd-87a4-46671dae8361","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"736a097e841af85cc77bf32e983d2ff2","sha1":"c435b56dd10ac3ff007eb8a449ae8fda59ac6f66","sha256":"517e1eac96df56e0b6b6273bdaf257583a597c0a6413a1d8995d37ab637e69a1","sha512":"170d94aeeaa4f76df8baf21b214d34450aaf8d673a8360f3cedce6a6ca4ae23bea2c8097a7f9e54843b806dedb4308081fa07781e8c8ea0a5a206d97d943729a","ssdeep":"24576:pEHJvkXvDvomsgR0mGICQx4DdA4RItHKWj:Cq46WMN","tlshash":"9f266340ba0e7c604dee02a5d53294e5dc2067c3d64c7be9bfbeecea734ca16c4a6415","size":4836414,"data":"","first_seen":"2025-08-23T09:12:18.869728Z","last_seen":"2025-09-08T08:56:07.823125Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/static/js/jquery.min.js","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"26aae2f13dc332df6e6f01e6657a03a0","sha1":"8cbb682f32cf5bf8702571399ccb57a77148f27b","sha256":"0108cf57a5359cdecc80699650b912a11731d0aeaec300d884a9d658ed96b295","sha512":"fb3c96f0ad4c712e1df1da8e8b3f687010e4722b4bea6c1f92270f03514aa6355e3fb48b0c15412423be1725c24dc5d1d2465eaf9f5c97436ec57c7d88219c9d","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98HrR:f+41hJiz6fhdlTqya98HrR","tlshash":"7883d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84347,"data":"","first_seen":"2023-03-07T12:04:04Z","last_seen":"2026-08-05T08:06:56.960568Z","times_seen":1093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"041ab31436977f9dec216551dae08e32","sha1":"e003d0f43e14db7006c3d83b9ac45a8abbfd1129","sha256":"8eb0d148742eef1e2ee719fc1ab35a91c2355b5557ca1e99cc76f6e278f8e67d","sha512":"acc3aa3163367f0c57ff70a4b32f9787ebf0f8da61bc579ec39719b275c524ee1132b4b1fc85afa87c66c586ef2e9b64c9b397247a60b591529bc20d4c52fdb8","ssdeep":"3:N/BKL1XLTZQn:eL13u","tlshash":"1a5504d054c430f4041cc411d3555415540d0401111554ddf1df04f417301100010550","size":1337359,"data":"","first_seen":"2025-09-01T04:11:19.171865Z","last_seen":"2025-09-01T04:11:19.171865Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-01T04:10:38Z","timestamp":1756699838,"ip_dst":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":49458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-01T04:10:38.554091+0000\",\"flow_id\":508576149682089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":49458,\"dest_ip\":\"104.21.92.126\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.cowsushi.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.cowsushi.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":762,\"start\":\"2025-09-01T04:10:38.538537+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8b51eb8692fa47e6a2c13bba3c703d22","sha1":"813523f7e7f9b756f4151fb0e7abcf96dca702f9","sha256":"cc39a2ece907758a188a81471641cdd3388a49b3c38118cd38015fb1691e1a99","sha512":"7a0b7e8b2421b7caad57e737b3f60be95cf31075420fec32a50f9f352582a03a6b9ca9cd40fc0f4c2bacdfdff132a30b80a0e86caaa0e7f02d10ef3a657d8889","ssdeep":"3:N/BKL1XLTWc:eL13Wc","tlshash":"d85504d454c430700414c440d3543415745d4d1110554455f1dd04f417301000410fd0","size":1337359,"data":"","first_seen":"2025-09-01T04:11:19.179415Z","last_seen":"2025-09-01T04:11:19.179415Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-01T04:10:38Z","timestamp":1756699838,"ip_dst":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":49458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-01T04:10:38.554091+0000\",\"flow_id\":508576149682089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":49458,\"dest_ip\":\"104.21.92.126\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.cowsushi.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.cowsushi.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":762,\"start\":\"2025-09-01T04:10:38.538537+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/?__cf_chl_rt_tk=OBPImIcYs6vXOaCkfu_ezDxyYMEdoOgY_S_mxf1TNF8-1756699838-1.0.1.1-M8p_XfBWi4_TIUBnsvfdAeh83WcB_aWZ7DjkYGU6tqI","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0133bc3ea4b186959f7cd0233356f941","sha1":"feeca9350d6805c6c0e40d105a487fbbddd8912d","sha256":"87042f70222e4f25ad53c5f1aec0c423745d3a8d9757e3e0fc133c96ebc3f7f1","sha512":"6626887e33ece3955f34d8d4c8f63485576c97fbb108d0fdb92b348c99508042d249466cb57d2dd622983d84a40bd87eb9fe4e9db1360a95f93dd8ffaad91998","ssdeep":"3:N/BKL1XLTTQn:eL13c","tlshash":"235504d0544430f4055cc411d3555415540d040111354cd5f1df04f417301100010550","size":1337359,"data":"","first_seen":"2025-09-01T04:11:19.181759Z","last_seen":"2025-09-01T04:11:19.181759Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-09T17:48:16.824607Z","times_seen":806789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a3448023ebf109adc0fb0b60a517dad","sha1":"fef3ed320f77cddf02116467d8b10cc8811a4ab9","sha256":"9205eb333f8440a775c4ab4e501d16e2f74e640eb7bbd4a2199bfc3741ffb761","sha512":"b64706a4ae7215b6ed1ee9b6978ae7fc68993193861cfe246b1251f25422bb9d5f097f80b45e2a07c49c55dc7f50377b1dbf4c41cae38a052dc5803299ae46d5","ssdeep":"96:tWVwti1iARaTKwwCuHkaq26dHoMe0sCwxW2nUP6eDi6DLKPhxmMRGPAcQmz71yAo:Fi1iAwTKFHkaqO0T7LaKnhJM","tlshash":"00b10275b65852a0f13b34f41bdfb0052932160fc909de9bb42c86d21f59e90b3abec6","size":5251,"data":"","first_seen":"2025-05-27T15:09:16.728575Z","last_seen":"2025-09-19T01:41:36.851775Z","times_seen":9,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-01T04:10:38Z","timestamp":1756699838,"ip_dst":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":49458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-01T04:10:38.554091+0000\",\"flow_id\":508576149682089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":49458,\"dest_ip\":\"104.21.92.126\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.cowsushi.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.cowsushi.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":762,\"start\":\"2025-09-01T04:10:38.538537+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/static/layer/layer.js","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2eb1aaf732c36835784d91a17cb33989","sha1":"0c299dbb6354cbcffb908c137d50ca482f3b068d","sha256":"49bead7cfddd71b31ef110e012c1e2c72b8a0e7ef6688145214610a0aa481a16","sha512":"032612493a4486453c78c2ea81846ea0bb2ebb5f704b6795bcf2a8cf9b03ef4664c0f05f540f95c4487a2b5a430193774fd4d71ea41fca7b5603d8de1c063648","ssdeep":"384:CJ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:CJtu8CfS793QODbcI","tlshash":"e392d85ab550359321639069911fa90f30f24d22eb078858f16bf1fd1ebcda562b3f0b","size":19832,"data":"","first_seen":"2023-04-25T14:30:41Z","last_seen":"2026-07-20T10:43:52.781445Z","times_seen":829,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","size":60819,"data":"","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-09T15:35:30.717535Z","times_seen":31886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","size":39,"data":"","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-09T17:47:20.048092Z","times_seen":1036614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-01T04:10:43.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.cowsushi.top/?__cf_chl_tk=OBPImIcYs6vXOaCkfu_ezDxyYMEdoOgY_S_mxf1TNF8-1756699838-1.0.1.1-M8p_XfBWi4_TIUBnsvfdAeh83WcB_aWZ7DjkYGU6tqI\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=BVZtwUTFO5ui1gzX4ARLEC_JToZBryE8bWXpzgwsOEA-1756699843-1.2.1.1-e6lVOptK2nxtqq2BQ61g7qbH9KiU0_IfTTAjoZfU.qxWAghyh4rlwhEpuhVa400wA2FX3.SvefoOnTX_T4oQ7ZKsX9prf4n0l2JV8Ync3A5nuOCrafHIBZ2fBI2fKXUT2rp9lHwDahr6VFrnhtUo8kjPDYOWC0fkhg1FhyO3JyRVPX2VAkrppsnA_xMOAb11O8OGCuUUo.nik3Noobot5mr3jjbzzL4W84h7YyoGpQE\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nlast-modified: Fri, 22 Aug 2025 04:50:26 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=W8%2FWqw6WjueM6P3L3z80tHivbkz6%2FbFJlIfycd8198Re%2BEfniDjjetr7WQ9GyNoFADc428ccw%2Bs67ZHUc9rFE4rGeRaMmXX5FsSklavBxsGvX9KXqZ4ztKXDBJHgad1QIdOO\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9781eb662dbb5688-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3526\u0026min_rtt=381\u0026rtt_var=5933\u0026sent=82\u0026recv=51\u0026lost=0\u0026retrans=1\u0026sent_bytes=80541\u0026recv_bytes=12080\u0026delivery_rate=24459459\u0026cwnd=255\u0026unsent_bytes=0\u0026cid=ee8a91e3354a4959\u0026ts=5813\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164561,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3706), with CRLF line terminators","md5":"c15fcd3130af7420f61611fc5c94ec25","sha1":"0d470b06fde784e2f136e8120bc5aeb36fabc418","sha256":"75c912738924289a1319fa2c395048a1dcc0416e12a0ab030f11fb553bf0d42e","sha512":"6b70637579dee4b5e21e6b3bd1c334991d97cfd928b9965c49ff49cf94e531be5b2ba19cecc93b96cf93760b7cd9d4c8e74cb59e5a21eb44a875a7252d703a43","ssdeep":"3072:u74aGfr5YmwL31eCkbtKftTdzPpfBXDvz0X2xVCWKf:Hf7","tlshash":"51f3c73132c0066f8177c6e0b9317769e6568617cba6d59cb7fd13a39b8f8009e33664","first_seen":"2025-09-01T04:11:19.039982Z","last_seen":"2025-09-01T04:11:19.039982Z","times_seen":1,"resource_available":false,"data":null}},"time_used":686,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":686,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:38Z","timestamp":1756699838,"ip_dst":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":49458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-01T04:10:38.554091+0000\",\"flow_id\":508576149682089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":49458,\"dest_ip\":\"104.21.92.126\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.cowsushi.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.cowsushi.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":762,\"start\":\"2025-09-01T04:10:38.538537+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/static/image/usdt.png","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET /static/image/usdt.png HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nCookie: cf_clearance=BVZtwUTFO5ui1gzX4ARLEC_JToZBryE8bWXpzgwsOEA-1756699843-1.2.1.1-e6lVOptK2nxtqq2BQ61g7qbH9KiU0_IfTTAjoZfU.qxWAghyh4rlwhEpuhVa400wA2FX3.SvefoOnTX_T4oQ7ZKsX9prf4n0l2JV8Ync3A5nuOCrafHIBZ2fBI2fKXUT2rp9lHwDahr6VFrnhtUo8kjPDYOWC0fkhg1FhyO3JyRVPX2VAkrppsnA_xMOAb11O8OGCuUUo.nik3Noobot5mr3jjbzzL4W84h7YyoGpQE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 831\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Aug 2022 15:11:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"630b85a0-33f\"\r\nexpires: Wed, 01 Oct 2025 04:10:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l8C8DDKVa4vcLEgVejMwMji8gVM7IFycSWWG3oMzAJicXlMumCBvNM0pZx4RnG9Nr0wD%2B7Pk%2BpIssWHc3qmFMX58DbRazIn9az0ALjdP\"}]}\r\ncf-ray: 9781eb6b1ff45688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":831,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 48x48, components 3","md5":"3f6bb112bffd54f9780ab93608235a90","sha1":"edbfa4f2d2e7db65a1382d8431e10df68888facb","sha256":"0bb95ff96b6753574ff160891c1159a8f5131e6cb4500d5c0279ee47c24472b4","sha512":"6d28fc8125e082b64644012fe27d1cdf41dc6b89bcd4da08b010ac22131b34456e0c6726366dd562227126382afa447d1bfcec25409475b578fa87d9230f5e13","ssdeep":"","tlshash":"ec01415fcf8ec21bf944bb35a47a432bcf0db219d483a6aa45d210f66476fd488518c6","first_seen":"2025-04-07T11:34:04.611203Z","last_seen":"2026-06-19T03:29:39.233724Z","times_seen":705,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:51.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 9781eb9a493eb518-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 351150\r\nexpires: Sat, 22 Aug 2026 04:10:51 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=orncIeXbMKcythzYlB730iBJdRrwq2RmkxldGwKHad5vkqwoHCg%2BOwP4PODL%2FRg6kNdnl5fXQEDx%2BWxwwmSvDGI0%2FyezAGGdW2ccV4BVmv8u5%2Fzw4wqbPfls%2FHF2EpWtvD9WaR3e\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-09T15:35:30.717535Z","times_seen":31886,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":11,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:52.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/sweetalert2@11 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.22.5\r\nx-jsd-version-type: version\r\netag: W/\"1328f-GQ5agwL5mMpqHc8PztfVMfUL1dw\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 01 Sep 2025 04:10:52 GMT\r\nage: 35848\r\nx-served-by: cache-fra-eddf8230029-FRA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 21055\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78479,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (47565)","md5":"4749028aa181acc87baa8f9fea2451fb","sha1":"190e5a8302f998ca6a1dcf0fced7d531f50bd5dc","sha256":"f85d3d3b08b750db64161d66c9a8b1f0caa5b7c6148923c215905bb6f803615d","sha512":"56aba3f80bf28c56b4603cf31e6b4da69665114b380c0035e6857bb36af3589d3235d0b905432b6db07cd20670f54924dbb1918efe9809ad2930f615bee7b956","ssdeep":"768:9zSRB5DI6wGsbJ/PWmM+ZEVxqFoRkme1LSrQogX5fRjYTYUhgC3X65Zx1+MmoeOP:9wk6mJ/PXZNYw3UyegJZZgyxxIYbRz","tlshash":"e673f9916a04f03776ab41ae65d1e3047af99505fcb34854f42cc8804fe7d4f2ab7aba","first_seen":"2025-08-26T13:17:04.37138Z","last_seen":"2026-04-02T23:36:33.985946Z","times_seen":266,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":77,"dns":32,"connect":13,"send":0,"wait":26,"receive":2,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/favicon.ico","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:38.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.cowsushi.top/?__cf_chl_rt_tk=OBPImIcYs6vXOaCkfu_ezDxyYMEdoOgY_S_mxf1TNF8-1756699838-1.0.1.1-M8p_XfBWi4_TIUBnsvfdAeh83WcB_aWZ7DjkYGU6tqI\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Mon, 01 Sep 2025 04:10:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"9781eb47bf7a5688\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ktnmeBpSfN%2BCrXXCcT7a8ESLd9if%2BNOv29ySakLmP%2BrQa4PSNFcuyegNyCGRORzNORZ7wx3msIJcLmcfIS0SvRtdU%2Blf1R0nwYuCCCPT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9781eb47bf7a5688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4759,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (4759), with no line terminators","md5":"08b1e210c3ba75c3fb3668753ee7e5c3","sha1":"5231fb0d6bbf48830831966d2739ecb5872a1f81","sha256":"0e800b3140a22ef53ab22bd4e958fd94749c23627219aa6e9b18c96137cf83c5","sha512":"7fc345cbdde67f769d23d47f798ac138935612cca686f0c150ec2f290a311e466d029634335a71c237e34d4c1b3f4e7e4e25258b549d14c8f12db0235486409d","ssdeep":"96:PNybXZtIEb0EFW87IhuwlbwlO33P8/qaZwKYiS8kNLJaaYzueh8ywlE9mw:PNadBsuebea30/qauKzShNdaHy0eEgw","tlshash":"0fa14db786161037a3fe26f2527bb3186465b299670080a9fbd1d50ccaedf4b446e1dc","first_seen":"2025-09-01T04:11:19.04788Z","last_seen":"2025-09-01T04:11:19.04788Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/4710d66e8fda/api.js?onload=XaVFY8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:38.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"GET /turnstile/v0/b/4710d66e8fda/api.js?onload=XaVFY8\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.cowsushi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Thu, 14 Aug 2025 15:17:42 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9781eb483df2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48995,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (48994)","md5":"49d515b98ccae9634aff66a4ca77af98","sha1":"bfa5462a4f47c2350dcd0b3000e9cb54bec63c21","sha256":"4ca696d2fb66b44648a8fd55bc9eeaa6958dd9e523c4a740365823c30d4fc087","sha512":"856b855e0662da94dc3d314080976df11b5cb203d5ac498bacd9d201013e82258ee66ba1c3bb948e0ea71dd319345d9988be765daa3a276f8571e1787a38cc39","ssdeep":"768:XC6BRV2fM4lLa+rnhPLy6PuR8u5jUjRFPlBMqfspV6q11AY13kep+ORWqxIrm3LW:J2E4lLa+rnhT/oj2P6V6GNI","tlshash":"8f231b583256793227e980e1617ba74373257939e94ccc50d423c86536bcecad233fba","first_seen":"2025-08-15T11:12:03.097811Z","last_seen":"2025-09-08T12:15:40.897517Z","times_seen":20901,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":34,"dns":20,"connect":1,"send":0,"wait":9,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/cdn-cgi/challenge-platform/h/b/flow/ov1/788723073:1756698529:MTH05dVEJU2tB_ZOjXnmQ4ogT-Q-82BDOuk1EVLyOP8/9781eb46ff1d5688/DleOGVrEzbNbVWbPeQAxeSszCCGBYTCmgwgGfCXse_s-1756699838-1.2.1.1-CPZd1Lp59u9mq3y5HZMAIP7csC0.qnE7w5dZNU7HHl2ugv66KxQcVd51mzLpj43b","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:38.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/788723073:1756698529:MTH05dVEJU2tB_ZOjXnmQ4ogT-Q-82BDOuk1EVLyOP8/9781eb46ff1d5688/DleOGVrEzbNbVWbPeQAxeSszCCGBYTCmgwgGfCXse_s-1756699838-1.2.1.1-CPZd1Lp59u9mq3y5HZMAIP7csC0.qnE7w5dZNU7HHl2ugv66KxQcVd51mzLpj43b HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.cowsushi.top/\r\ncf-chl: DleOGVrEzbNbVWbPeQAxeSszCCGBYTCmgwgGfCXse_s-1756699838-1.2.1.1-CPZd1Lp59u9mq3y5HZMAIP7csC0.qnE7w5dZNU7HHl2ugv66KxQcVd51mzLpj43b\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2380\r\nOrigin: https://www.cowsushi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:38 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: ZgdJo/5J+FNzxfYVyDfl1W7Zx6oBb25CeLtzwm2NiwQ=$jQdTolYUSm3Z6uDGuwqVbw==\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9781eb4958435688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18552,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (18552), with no line terminators","md5":"28d8b132a5849f3b4f356e0fcafcac17","sha1":"1d37b4aa4710e0ca2fa02f636acb5e98cfa77502","sha256":"c7845210ec26714d77e5d47f41b9f3bf6942c110052360ebe7f98117babe2fb0","sha512":"e2bd86f4a240f10fbfeb574465a6d0afc4cdef5c6fe2cb4cc8cd1aa118aa6e921f4905c70fa47549b44fadc3365573175f3bf77bdb3032c2d4a97b2520cbfebf","ssdeep":"384:9UT+Ap8GhsIuBruSr8AsDlNmmBw6MaIxWxfSr1Zqn7Yih+6K/Vv:yflsPBruSr8AsDp/xhu1Zq7YihQVv","tlshash":"8982e0c963893479423e01b446738ef2c849d890802a7fd59f2e7563b26747db437a9f","first_seen":"2025-09-01T04:11:19.051087Z","last_seen":"2025-09-01T04:11:19.051087Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/polygon.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.79.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 24 Apr 2025 13:45:55 GMT","end":"Tue, 26 May 2026 13:45:55 GMT"},"fingerprint":{"sha1":"8C:61:DB:F4:59:AA:B3:DB:D3:12:E2:66:0A:25:C6:AB:C2:AD:20:6D","sha256":"72:8C:8C:F1:15:FA:11:D0:30:77:C3:1F:DA:FD:AB:28:E6:81:ED:68:D1:8B:B8:E3:EB:B6:58:30:DD:87:8B:C3"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/polygon.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 614\r\nserver: cloudflare\r\ncf-ray: 9781eb6b8d830daa-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: private, no-transform, max-age=604800\r\netag: \"5ad2c9ee0864d61261661a8e7fb87b08\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:28 GMT\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data, Accept-Encoding\r\naccess-control-expose-headers: Content-Length,ETag,Server-Timing,Vary,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=111;start=2025-09-01T04:10:44.414Z;desc=hit,rtt;dur=1,content-info;desc=\"width=32,height=32,owidth=102,oheight=102,obytes=3678;\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":614,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3","md5":"5ad2c9ee0864d61261661a8e7fb87b08","sha1":"ae7a5e25ee3da9251ae108e45137476d97719aaa","sha256":"a517e53a32d4dbfd9c0bba6d287a9a2fb5fc6af407579bec31eb2b751f5cbb83","sha512":"5b7c7c6fa0fd23260cf51faed0872f4f3aaed48b700076f03cc42dc8dc34532faa798991d610ddfb33243146448db71bbed2ddf854e54cc09791ac764ab2f9fd","ssdeep":"","tlshash":"eaf0c0271b819b82dc681f7d106057503bc5991064526ffa51c17d765bb50362c72349","first_seen":"2025-04-07T11:34:04.59879Z","last_seen":"2026-06-03T10:20:46.37534Z","times_seen":706,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":40,"dns":26,"connect":6,"send":0,"wait":123,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/static/js/jquery.i18n.properties-1.0.9.js","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET /static/js/jquery.i18n.properties-1.0.9.js HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nCookie: cf_clearance=BVZtwUTFO5ui1gzX4ARLEC_JToZBryE8bWXpzgwsOEA-1756699843-1.2.1.1-e6lVOptK2nxtqq2BQ61g7qbH9KiU0_IfTTAjoZfU.qxWAghyh4rlwhEpuhVa400wA2FX3.SvefoOnTX_T4oQ7ZKsX9prf4n0l2JV8Ync3A5nuOCrafHIBZ2fBI2fKXUT2rp9lHwDahr6VFrnhtUo8kjPDYOWC0fkhg1FhyO3JyRVPX2VAkrppsnA_xMOAb11O8OGCuUUo.nik3Noobot5mr3jjbzzL4W84h7YyoGpQE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Aug 2022 11:39:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"62ff7670-4756\"\r\nexpires: Mon, 01 Sep 2025 16:10:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CxPpMdOd1zVnlrLZJLxYNXVzKMcEdLAG3llVQch6ig%2B%2FoTjF5R%2FonKPG1BHbdi33A4%2BQBdnbJ5F%2FNhEzAK5%2Ftp5g9YUrgAfUazj6XMIC\"}]}\r\ncf-ray: 9781eb6b480f5688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18262,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"cf3466c221ea851913cdee4fa966c386","sha1":"4299bbb2c505780b927a1c61a25888ed0d2d49e3","sha256":"6baa624dc013c94e79f71f9af775848c574c995f88d0512370b3457f6cf1d60c","sha512":"d466e59d1c94a51f5462b461f4b25f154d2633a73983702991497351cbb3ce828d5cd346f4effb4954a11aa9168ee1d6338a975cd474e6844e22f6b946f25ff9","ssdeep":"192:c+oDJtkMWXZu2PclZbfXx85xiXwSUXdNE+qkid3tM65BtgcRyz/MWQIGs16SUJQX:cfqMWY2PqZmQooNsEA1IS9hv5jP","tlshash":"9482b6087a050d1e46b233b02abd2888da79c47b5521a0f5b8dc77543f7cda942e9ff9","first_seen":"2025-04-07T11:34:04.636019Z","last_seen":"2026-06-03T10:20:46.382475Z","times_seen":686,"resource_available":true,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/moonbeam.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.79.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 24 Apr 2025 13:45:55 GMT","end":"Tue, 26 May 2026 13:45:55 GMT"},"fingerprint":{"sha1":"8C:61:DB:F4:59:AA:B3:DB:D3:12:E2:66:0A:25:C6:AB:C2:AD:20:6D","sha256":"72:8C:8C:F1:15:FA:11:D0:30:77:C3:1F:DA:FD:AB:28:E6:81:ED:68:D1:8B:B8:E3:EB:B6:58:30:DD:87:8B:C3"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/moonbeam.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 576\r\nserver: cloudflare\r\ncf-ray: 9781eb6b7d740daa-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: private, no-transform, max-age=604800\r\ncontent-disposition: inline; filename=\"moonbeam.webp\"\r\netag: \"705402485a65af1084b1b6a4d42d8ebf\"\r\nlast-modified: Sun, 23 Jan 2022 06:54:31 GMT\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data, Accept-Encoding\r\naccess-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=223;start=2025-09-01T04:10:44.406Z;desc=hit,rtt;dur=1,content-info;desc=\"width=32,height=32,owidth=102,oheight=102,obytes=3403;\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":576,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"705402485a65af1084b1b6a4d42d8ebf","sha1":"4c86d5ccf115984752f80ef256825df5c650d38d","sha256":"7521fcc19e1b734a6e4d8e7d776d03eb904bbbc5009c3b0e8d14cbfbe05f44b9","sha512":"ceeb24e62f663d81223564c4cb4237b37292b52e401f22423b2946db4671b59b102cb0fd18f2e109bcbfa1a50114cbbed423aacda029048db1fb79d329a760fc","ssdeep":"","tlshash":"5ff0419cd3d0f7a8f391144c9a1c1742036200b04ac2736aa2bec704696c0611e3b8e9","first_seen":"2025-04-07T11:34:04.62059Z","last_seen":"2026-06-03T10:20:46.37728Z","times_seen":706,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/arbitrum.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.79.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 24 Apr 2025 13:45:55 GMT","end":"Tue, 26 May 2026 13:45:55 GMT"},"fingerprint":{"sha1":"8C:61:DB:F4:59:AA:B3:DB:D3:12:E2:66:0A:25:C6:AB:C2:AD:20:6D","sha256":"72:8C:8C:F1:15:FA:11:D0:30:77:C3:1F:DA:FD:AB:28:E6:81:ED:68:D1:8B:B8:E3:EB:B6:58:30:DD:87:8B:C3"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/arbitrum.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 496\r\nserver: cloudflare\r\ncf-ray: 9781eb6b8d760daa-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: private, no-transform, max-age=604800\r\ncontent-disposition: inline; filename=\"arbitrum.webp\"\r\netag: \"d599dbec55b24e736284fc2623700592\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:29 GMT\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data, Accept-Encoding\r\naccess-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=124;start=2025-09-01T04:10:44.409Z;desc=hit,rtt;dur=1,content-info;desc=\"width=32,height=32,owidth=102,oheight=102,obytes=3813;\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":496,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d599dbec55b24e736284fc2623700592","sha1":"f0bc8bb117e29ba042739bba71aeb7bdebe9d8ca","sha256":"a7f37d523f36ac2e6abe39c356e733047419314462a85237ad9344ad7127eda0","sha512":"c82188e1fa27bbb3c47ada1c55051016229bc9c84eb772fe078d1685e10b4723ca7dcde1a03b76b9d5430e6a6390ba2d28ed339031dfaf4867491222ecf4606b","ssdeep":"","tlshash":"f2f0540a09e749d0445677d1859e259c02208b71c144bcdc07f3aa8e87f69436d0a134","first_seen":"2025-04-07T11:34:04.621924Z","last_seen":"2026-06-03T10:20:46.385079Z","times_seen":706,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/static/icons/favicon.ico","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:46.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET /static/icons/favicon.ico HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nCookie: cf_clearance=BVZtwUTFO5ui1gzX4ARLEC_JToZBryE8bWXpzgwsOEA-1756699843-1.2.1.1-e6lVOptK2nxtqq2BQ61g7qbH9KiU0_IfTTAjoZfU.qxWAghyh4rlwhEpuhVa400wA2FX3.SvefoOnTX_T4oQ7ZKsX9prf4n0l2JV8Ync3A5nuOCrafHIBZ2fBI2fKXUT2rp9lHwDahr6VFrnhtUo8kjPDYOWC0fkhg1FhyO3JyRVPX2VAkrppsnA_xMOAb11O8OGCuUUo.nik3Noobot5mr3jjbzzL4W84h7YyoGpQE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:47 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Aug 2022 11:39:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GjTOGn%2FiOgOa49vuhXHg54uE8XR9vSOFX69bsXMVPcERYZs1%2BmTPjhhcyxC6NfRzxVbA%2FuepZT9H2kWSLxibp3%2FQ0ZhK%2FZtVmjdOLM8l\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"62ff7670-3aee\"\r\ncontent-encoding: br\r\ncf-ray: 9781eb7a3f2f5688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"2d9fd3050b348ff710c48fc1eaa299c1","sha1":"e09be2276f644036097bb50f88d1cc4d30dc026f","sha256":"aa58c0d6b5056402871afca422d34080d36b00c90a4368b5ed661459cc12438e","sha512":"962477589971c0f5bd7941d9e9df077237ef333098caef6cef6fa5615a1fbe9d3154070674e1f03c1aa6c2f77260cb11c32280f981999943c12d0415eda1ed9b","ssdeep":"192:jm6yEEE0EEEEEEEEKEEEEEEEEEEEE/EEEEEEEEEEEEEEE6YEEEEEEEEEEEEEEEE/:jm6HEsyJcKmQQk5YxE","tlshash":"d462a4aeb630d698d151583dcc79cf9d036fbe6a5c44b686bdd8330e2af22841c3b915","first_seen":"2025-04-07T11:34:04.607148Z","last_seen":"2026-06-03T10:20:46.38832Z","times_seen":702,"resource_available":false,"data":null}},"time_used":678,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":678,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-rpc.publicnode.com/","fqdn":"bsc-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:52.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 11:56:08 GMT","end":"Sat, 15 Nov 2025 12:56:03 GMT"},"fingerprint":{"sha1":"31:3C:77:7B:BE:98:B6:33:D7:F2:CC:B1:EF:40:DD:58:1F:8A:11:5E","sha256":"5E:C2:76:10:E4:FF:4F:6E:20:07:C4:39:82:E5:E4:0C:AD:00:FD:04:61:90:DE:6D:B6:6C:07:0C:26:AE:A5:16"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.cowsushi.top/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://www.cowsushi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:52 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 1\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 9781eb9e6958c0ac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4903,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"de9a73a1a5dae05a90d288aa0fa0f5ee","sha1":"36dae6ae5e5144371d9c123a13fbff7926c28b72","sha256":"ff1536d46de0319a8cb1eff2085d79c0df6983c4b809f5b255e2dfdf9775b6bc","sha512":"ba8288272049f23c9f595a3768604632fb22598fef29ead5a5eb91024acdf9eb2a8d7f74f3a1fa8e63d31efe087d119212e2c420f04ca158d99ef53cd95a49c6","ssdeep":"96:oigW53TB2SzrZYpTbDaOTkSO6mdSInccYGS9FzelVLC:r5TB2SzAT/7kSRRrze3m","tlshash":"45a179f0ee02c891f1be4768f2ddbe0461383726eedc5a4604b45a991ee5a51bd0dccd","first_seen":"2025-01-16T17:05:36.089407Z","last_seen":"2026-06-01T14:49:27.19234Z","times_seen":939,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-rpc.publicnode.com/","fqdn":"bsc-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:52.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 11:56:08 GMT","end":"Sat, 15 Nov 2025 12:56:03 GMT"},"fingerprint":{"sha1":"31:3C:77:7B:BE:98:B6:33:D7:F2:CC:B1:EF:40:DD:58:1F:8A:11:5E","sha256":"5E:C2:76:10:E4:FF:4F:6E:20:07:C4:39:82:E5:E4:0C:AD:00:FD:04:61:90:DE:6D:B6:6C:07:0C:26:AE:A5:16"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.cowsushi.top/\r\nOrigin: https://www.cowsushi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 01 Sep 2025 04:10:52 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nserver: cloudflare\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9781eb9f5a02c0ac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1rpc.io/bnb","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:52.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 01:23:19 GMT","end":"Sun, 23 Nov 2025 01:23:18 GMT"},"fingerprint":{"sha1":"77:DD:9D:03:9A:8B:27:57:64:8B:DC:3F:84:87:56:2B:4C:AD:62:3C","sha256":"98:20:17:06:F7:B2:60:4B:A8:A1:AE:72:47:3C:9D:A4:FC:C0:39:C4:F7:3F:EA:8B:B3:19:01:4B:E6:61:CD:6A"}}},"request":{"raw":"POST /bnb HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.cowsushi.top/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://www.cowsushi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 01 Sep 2025 04:10:53 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: br\r\nAccess-Control-Allow-Origin: https://www.cowsushi.top\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6374,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fa3dbe9e7a67f351ee2d52c99850bf9c","sha1":"294cd26f4c0198841057707ed0b44b3cf616e5a8","sha256":"efe3b5e2a041edfb73e010d9c7b8321b7c075c78f0b5d972fe7783da8844f87b","sha512":"d46f4edc8d511404ba6bb32a1a375a1a1c66b24a11f072dbe332243df7b1489af0816a8506fb648a97dd28b0c5ceac714915bc46221ef78d12e9a8a5f1d51d45","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:YKam3QytxvU15+doY1jNNTt9jv","tlshash":"52d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-04-07T11:53:19.749574Z","last_seen":"2026-08-09T15:35:30.721565Z","times_seen":5261,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":33,"connect":31,"send":0,"wait":191,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-01T04:10:38.542Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Mon, 01 Sep 2025 04:10:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: https://www.cowsushi.top/\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4w%2FppUUUwhjPnLOZ5CthExwE9IYTq6TUqDvXeAQQ%2BXMc7ypQHn9O6HoJTPMOeZvEHgPrQ6TBUbEzWnS4Peb1jXvoyjflAG9us1ET2iM7\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9781eb46db050b02-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4705,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:38Z","timestamp":1756699838,"ip_dst":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":49458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-01T04:10:38.554091+0000\",\"flow_id\":508576149682089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":49458,\"dest_ip\":\"104.21.92.126\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.cowsushi.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.cowsushi.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":762,\"start\":\"2025-09-01T04:10:38.538537+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9781eb4a1a2335a6\u0026lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","date":"2025-09-01T04:10:39.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9781eb4a1a2335a6\u0026lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9781eb4a8a7435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142886,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e840841333d97e8ad3f65c952836cb36","sha1":"6666abb39bfaf194290550ea684e2b362a645c51","sha256":"4ab38dbcb92c69cff0dd804518709df016a375dd3d791f01436bf8112c4e9bc8","sha512":"97a00f08f29ec74027a3b52c05c0341701d365bfb80f243fe300b6af1f2fbb281bc8950bcc015230b9acde7d17c61cb7b44b07610676b6c8aaa7cff2c35cba2e","ssdeep":"3072:ksA/n7pPTOOSWmGxH9VQfjOTQ+W040pJgWdbwm/Y:qpPTOOSYdqfyo03gWdbZY","tlshash":"25d3f9cf75ceb6458312b0608067b4eba2af7c4424586c5ce63198e879f436d65bbcb8","first_seen":"2025-09-01T04:11:19.062907Z","last_seen":"2025-09-01T04:11:19.062907Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/metis.svg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.79.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 24 Apr 2025 13:45:55 GMT","end":"Tue, 26 May 2026 13:45:55 GMT"},"fingerprint":{"sha1":"8C:61:DB:F4:59:AA:B3:DB:D3:12:E2:66:0A:25:C6:AB:C2:AD:20:6D","sha256":"72:8C:8C:F1:15:FA:11:D0:30:77:C3:1F:DA:FD:AB:28:E6:81:ED:68:D1:8B:B8:E3:EB:B6:58:30:DD:87:8B:C3"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/metis.svg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 260\r\nserver: cloudflare\r\ncf-ray: 9781eb6b8d780daa-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: private, no-transform, max-age=604800\r\ncontent-disposition: inline; filename=\"metis.webp\"\r\netag: \"f5ba0627e2bb180844a7da5cd656b58c\"\r\nlast-modified: Wed, 13 Jul 2022 17:14:44 GMT\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data, Accept-Encoding\r\naccess-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=90;start=2025-09-01T04:10:44.410Z;desc=hit,rtt;dur=1,content-info;desc=\"width=32,height=32,owidth=128,oheight=128,obytes=3793;\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":260,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f5ba0627e2bb180844a7da5cd656b58c","sha1":"8db9058952dbe0c7c80321d4bb01dc10c2dd0716","sha256":"ed7c452ffa7c8301470c90113620b6618f456f58f3720a2fdb958cfd70f7679f","sha512":"e7c28bf50a5b6a5b853c86ba8519614891e1dcf73694f29fa611c49b9205f331a6ef1d3c35efa93ac1de8727adcb8bb45ab12fd46f50d261888994059dbebb06","ssdeep":"","tlshash":"ccd02b4d0897711451027dd257e68a006621d9049f12c046d6cb156d8af10c08975b34","first_seen":"2025-04-07T11:34:04.604936Z","last_seen":"2026-06-03T10:20:46.352538Z","times_seen":706,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:52.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/ethers/5.6.9/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 125841\r\ncf-ray: 9781eb9b3ea5c0ac-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ad87d5-1eb91\"\r\nlast-modified: Sat, 18 Jun 2022 08:07:49 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 238447\r\nexpires: Sat, 22 Aug 2026 04:10:52 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=iJQYZVpDrRM3qtpIzXOfSieaOM2Y0%2B5RA3jfLoPdk62T2qbDzKwBrB5oL5JvRG1kzodD0FmvMD89Lem9xQthMecyaFXYMuNPynHjNVqk%2FmUZL4T0oYC3DnsZv%2FdRPJMAHTtnpUyB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":735973,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-09T15:35:30.709021Z","times_seen":8490,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/favicon.ico","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:38.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.cowsushi.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Mon, 01 Sep 2025 04:10:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"9781eb480fa05688\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sEltqybe7t0YrYxlFEbLBEKb1MFHHgq5oUCWKV3iR3BVWNWddUBopyANlCjSq7BkYnacvTRyA0XUDnWfwE6LLzbAm2AT9dUnHkRHPWom\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9781eb480fa05688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4759,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (4759), with no line terminators","md5":"787aec5f724cf529364853cff2c620fd","sha1":"2c32c19131586d069752ffb8a9f9df4143d18fa6","sha256":"47fe25bf155752ab704a87de75f0ce34d93a69c9723130111601135803f8c800","sha512":"209a47c070df8de868f556f6326cda611c233c8c796b4d1efa360f49bfa9bd695024ea7c5b504d5e7bb76d7d2284e3351ffb9cab54ed273ebd808aba4fe20ecc","ssdeep":"96:PNybXZtIEb0EFW87IP4NRKsdA5pZSjMZIt0/kmpoYzueh836mw:PNadB/ldoZgs5ppyjw","tlshash":"5ea14cbbc9511029d3be1bbb427fb79cd11052158b01889afad0d96cc2fef578a781a4","first_seen":"2025-09-01T04:11:19.067528Z","last_seen":"2025-09-01T04:11:19.067528Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:39.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/ HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:39 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-1by9Ow6Ft7IBX3SA' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9781eb4a1a2335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26987,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (26987), with no line terminators","md5":"3ea7e85eb4b5210ffb76942efae29685","sha1":"f5cfb4f2bdac0630a68c4ce3362342e72e6de0eb","sha256":"61264e81cbf8edb679d590c81e1e0d9f39fc57985f4494f3fb34dd869755421b","sha512":"c96f058f5c420212fabf7c174888b8a8543bf98fce8d17b550a9173d05d1065b5bf98bb6af8a5dfe2b47e7b5da1d92231f975fe82c13eda4e8916e4c24c415e5","ssdeep":"384:6H6U+qdB83E29aJC6tHzSk1b2xdLVSmda3mDI9FBz1s/AacCP8:edGrkHzlJUdLV9da3m8ZLCU","tlshash":"42c2d8038a101b7e7463c72da3e1b5c9a3387a025f56b1b7f25053a58f4d29f2b53b1a","first_seen":"2025-09-01T04:11:19.069797Z","last_seen":"2025-09-01T04:11:19.069797Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/static/image/aave-1.png","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET /static/image/aave-1.png HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nCookie: cf_clearance=BVZtwUTFO5ui1gzX4ARLEC_JToZBryE8bWXpzgwsOEA-1756699843-1.2.1.1-e6lVOptK2nxtqq2BQ61g7qbH9KiU0_IfTTAjoZfU.qxWAghyh4rlwhEpuhVa400wA2FX3.SvefoOnTX_T4oQ7ZKsX9prf4n0l2JV8Ync3A5nuOCrafHIBZ2fBI2fKXUT2rp9lHwDahr6VFrnhtUo8kjPDYOWC0fkhg1FhyO3JyRVPX2VAkrppsnA_xMOAb11O8OGCuUUo.nik3Noobot5mr3jjbzzL4W84h7YyoGpQE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 13 Nov 2024 22:07:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"6735232e-a38\"\r\nexpires: Wed, 01 Oct 2025 04:10:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mbJYuC2s%2FRLrajoKUCR33vLxwPu5WYqJOZEtbQ04bVa96uEQnSH40x05VbGLSp5sFkfVtVhiJ4R8I7j%2BH1HRoj%2FQSmaR82F9uN250TKU\"}]}\r\ncf-ray: 9781eb6b1fef5688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2616,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"469f26322557b97cb8c174bccb56db7d","sha1":"857dcff61a552f487ed4f2773967c6613fa517d7","sha256":"834fd0b3757ded7d7847b246ec87c5cd5df09c0aac299645d5f63c473cc35364","sha512":"59fca9e415bf7ae2bf7a5f9b698f2165e9b09ac50833f93f6dcca36d1521a0f463fa5a52c0316e6509d5348641df37068839f79bd36575969e11c76f636b669e","ssdeep":"","tlshash":"3e5129a3f9ab6d0ac7672467b0c59f6289607327f8a8016b730d3191bd29c38f2d6d40","first_seen":"2025-05-13T09:35:41.824711Z","last_seen":"2025-09-19T01:41:36.768267Z","times_seen":12,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/arbitrum-nova.svg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.79.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 24 Apr 2025 13:45:55 GMT","end":"Tue, 26 May 2026 13:45:55 GMT"},"fingerprint":{"sha1":"8C:61:DB:F4:59:AA:B3:DB:D3:12:E2:66:0A:25:C6:AB:C2:AD:20:6D","sha256":"72:8C:8C:F1:15:FA:11:D0:30:77:C3:1F:DA:FD:AB:28:E6:81:ED:68:D1:8B:B8:E3:EB:B6:58:30:DD:87:8B:C3"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/arbitrum-nova.svg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 294\r\nserver: cloudflare\r\ncf-ray: 9781eb6b8d810daa-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: private, no-transform, max-age=604800\r\ncontent-disposition: inline; filename=\"arbitrum-nova.webp\"\r\netag: \"3db81c8998c1f444e61baf395ca605bf\"\r\nlast-modified: Tue, 09 Aug 2022 17:36:24 GMT\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data, Accept-Encoding\r\naccess-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=116;start=2025-09-01T04:10:44.414Z;desc=hit,rtt;dur=1,content-info;desc=\"width=32,height=32,owidth=128,oheight=128,obytes=1573;\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":294,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3db81c8998c1f444e61baf395ca605bf","sha1":"91fffc820fb8c355371e5f6d3d1a25ab4b2dda0d","sha256":"73fc519d14480fede397b68e4681aef4e939dbc4de8de8a79d0f6b7566115758","sha512":"f040f30132acb95fec0153b798c055e87616bebd72592cebd04091b3a453bc42ee56a5e683a72fe325694439ccb7460017e1ebed012c70bcc63886d88eff2322","ssdeep":"","tlshash":"47e0275bc47d62848ce0f748d1473f577c3725847b4312476f9dcdd044172c7a151551","first_seen":"2025-04-07T11:34:04.625872Z","last_seen":"2026-06-03T10:20:46.386534Z","times_seen":669,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":42,"dns":34,"connect":4,"send":0,"wait":128,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/gnosis.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.79.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 24 Apr 2025 13:45:55 GMT","end":"Tue, 26 May 2026 13:45:55 GMT"},"fingerprint":{"sha1":"8C:61:DB:F4:59:AA:B3:DB:D3:12:E2:66:0A:25:C6:AB:C2:AD:20:6D","sha256":"72:8C:8C:F1:15:FA:11:D0:30:77:C3:1F:DA:FD:AB:28:E6:81:ED:68:D1:8B:B8:E3:EB:B6:58:30:DD:87:8B:C3"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/gnosis.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 378\r\nserver: cloudflare\r\ncf-ray: 9781eb6b7d6c0daa-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: private, no-transform, max-age=604800\r\ncontent-disposition: inline; filename=\"gnosis.webp\"\r\netag: \"f578054363bb0326eabd07d77074fd20\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:29 GMT\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data, Accept-Encoding\r\naccess-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=124;start=2025-09-01T04:10:44.405Z;desc=hit,rtt;dur=1,content-info;desc=\"width=32,height=32,owidth=128,oheight=128,obytes=8746;\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":378,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f578054363bb0326eabd07d77074fd20","sha1":"d6a3c2f1692445fee937a8b0118c320b23aeefa1","sha256":"f47d348f1fc042a74e18fc139798552dbdc3d60c41c32b51fc9b15361f8fc5e6","sha512":"1dce79c7012733af423605b494c40c40d0f054cf4d65a62f19da018deb2ad209e24d1860906d1bc160b603f21d4022cbc5f0cebd83158fe3eb1bde80c53fdde7","ssdeep":"","tlshash":"a9e0f19c5d8013852ad709b55d72e0c00c3139035305a67135c62568f6118a826f08be","first_seen":"2025-04-07T11:34:04.633603Z","last_seen":"2026-06-03T10:20:46.379546Z","times_seen":704,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/list/master/logos/network-logos/optimism.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.79.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 24 Apr 2025 13:45:55 GMT","end":"Tue, 26 May 2026 13:45:55 GMT"},"fingerprint":{"sha1":"8C:61:DB:F4:59:AA:B3:DB:D3:12:E2:66:0A:25:C6:AB:C2:AD:20:6D","sha256":"72:8C:8C:F1:15:FA:11:D0:30:77:C3:1F:DA:FD:AB:28:E6:81:ED:68:D1:8B:B8:E3:EB:B6:58:30:DD:87:8B:C3"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/list/master/logos/network-logos/optimism.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 258\r\nserver: cloudflare\r\ncf-ray: 9781eb6b7d720daa-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: private, no-transform, max-age=604800\r\ncontent-disposition: inline; filename=\"optimism.webp\"\r\netag: \"5cfb7feeb6e91bea923286c20e8f4974\"\r\nlast-modified: Thu, 05 May 2022 19:44:05 GMT\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data, Accept-Encoding\r\naccess-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=112;start=2025-09-01T04:10:44.407Z;desc=hit,rtt;dur=1,content-info;desc=\"width=32,height=32,owidth=128,oheight=128,obytes=11182;\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5cfb7feeb6e91bea923286c20e8f4974","sha1":"8c3708d60b4f5b3dec64ad62e3f6493d099f7b68","sha256":"c58cfef726dbb851e554f457ba14201c3c3c4875bbf465d77a7bdce34d62b0c7","sha512":"2271cf216d0da1459c373296d72c259cb225308125916b7520b84c34abb9f9f5e823d708d4bb0c3edcb5eff466082b3d5d49fbf83e6c8457babcfa0a688065fe","ssdeep":"","tlshash":"dfd02ec38fe0f2cf3a3a89da22271c00b0309894339046a2aa890740b003f927a02b1e","first_seen":"2025-04-07T11:34:04.603851Z","last_seen":"2026-06-03T10:20:46.347289Z","times_seen":706,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:52.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 23:06:13 GMT","end":"Mon, 06 Oct 2025 00:05:56 GMT"},"fingerprint":{"sha1":"8A:D4:06:E3:DF:41:70:FA:F8:24:61:06:C6:AD:47:97:37:2F:30:94","sha256":"B1:0C:6E:35:A4:D2:D3:A9:97:48:58:62:89:5F:87:76:31:39:A9:9E:3E:0D:7B:F7:56:58:A6:CB:D8:05:1C:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.cowsushi.top/\r\nOrigin: https://www.cowsushi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:52 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncf-ray: 9781eb9cedbf723c-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1792\u0026min_rtt=481\u0026rtt_var=2053\u0026sent=11\u0026recv=13\u0026lost=0\u0026retrans=1\u0026sent_bytes=3592\u0026recv_bytes=1151\u0026delivery_rate=7451114\u0026cwnd=255\u0026unsent_bytes=0\u0026cid=e109e81e3c20c98d\u0026ts=167\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":52,"dns":6,"connect":5,"send":0,"wait":125,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/merkletreejs@latest/merkletree.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:52.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/merkletreejs@latest/merkletree.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.5.1\r\nx-jsd-version-type: version\r\netag: W/\"38b62-hb7yiPDOf36GeGwNtiLPc6Lfotc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 13876\r\ndate: Mon, 01 Sep 2025 04:10:52 GMT\r\nx-served-by: cache-fra-etou8220103-FRA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 49570\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232290,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ea425bcaf8d5bcc4cd1b787a9067be7c","sha1":"85bef288f0ce7f7e86786c0db622cf73a2dfa2d7","sha256":"8dfd04b5d4631811c6f25b7ebd6d0444222afc0a7ab5a740320731b0e50f08ac","sha512":"66ee506a0e657b1fe597d6434c186db3ebbc12f5f540d29689dbb1119efbbc8cae1b1edf9e6682cbf602f4540be1b2f61af725ee1ec2036c5b57ab817f01362f","ssdeep":"3072:ZcBVt9NAALrlr9KorpLppLR8Cs4HOIFV99:Zo9NAAvOYRVssOIF/9","tlshash":"ae342ac53685a0a583da71a8043f980fb176a827405cd484e928fcf59cfce9956bbf7c","first_seen":"2025-03-02T05:43:21.853177Z","last_seen":"2026-07-08T12:41:40.125836Z","times_seen":1308,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":77,"dns":36,"connect":13,"send":0,"wait":14,"receive":15,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-01T04:10:38.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Mon, 01 Sep 2025 04:10:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"9781eb46ff1d5688\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R7abaM7FbFixyUOyIvoWaaf%2BpWN%2F2NKObadDosRuhQXzFcyVwWhQoh9ql92fxlEeHjVJKsP1OCOAmteGZC%2B7Z2wldwOoDoqExIMy5f7e\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9781eb46ff1d5688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4705,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (4705), with no line terminators","md5":"99ea184f195ce0b65debf3fc8515b364","sha1":"86a3af00d4a2e6c66f7705bcbbf3037ad2ebba7e","sha256":"ae51059a8d05d6442c85aa7c1e00e8571e2ea24cd46cebec5292ba41431511c2","sha512":"9bc78310d1d854cb1f7994d2b97918840b8d75e0a7fa7853e59b413b9ff02adf83357cbaa55aa7923576db67a616ae41fda6f9a29f0020fbfa74d47b2d082e07","ssdeep":"96:PNybXZtIEb0EFW87IdwYpDQej2Ox7TPxmlxAYzueh86mmw:PNadBKwOl7johy0w","tlshash":"96a13ae39a502037e3bf0ff254bb73509260a2961b0190d9f9e49a5cd3dfe47c576158","first_seen":"2025-09-01T04:11:19.081814Z","last_seen":"2025-09-01T04:11:19.081814Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:38Z","timestamp":1756699838,"ip_dst":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":49458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-01T04:10:38.554091+0000\",\"flow_id\":508576149682089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":49458,\"dest_ip\":\"104.21.92.126\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.cowsushi.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.cowsushi.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":762,\"start\":\"2025-09-01T04:10:38.538537+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9781eb46ff1d5688","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:38.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9781eb46ff1d5688 HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.cowsushi.top/?__cf_chl_rt_tk=OBPImIcYs6vXOaCkfu_ezDxyYMEdoOgY_S_mxf1TNF8-1756699838-1.0.1.1-M8p_XfBWi4_TIUBnsvfdAeh83WcB_aWZ7DjkYGU6tqI\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9781eb47af695688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112119,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"594f22d8cb6f7850f7dcb76c8b5e2b08","sha1":"4a34034abe41d2bfe48dfa811810ee050f529cc1","sha256":"753002f730aa497082914e6a7bc5af2dcbdef4ef134bdfd7f3e51c9cc3112562","sha512":"d87dc7d7e4649e9ad060b9f5a5d90e8299c5933855c66f3dccb8fc37ac5a1a57306d65a255bb6f36272fbe6bcd85a62d3250ee08fc0834ccab19813d4e3cb80b","ssdeep":"1536:uwN2pkKJV6cOY8AS/JJvorxP0PcwvP0UTyISKdETPifxHMPzJkB5RJ7hAvGkMBZI:u9fCHo/AETPiJi07rA","tlshash":"4cb30ace79edb49943276431442ba1ebe2797c84301c4c1ce62199ec7ce936d7267eb8","first_seen":"2025-09-01T04:11:19.084089Z","last_seen":"2025-09-01T04:11:19.084089Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/cdn-cgi/challenge-platform/h/b/flow/ov1/788723073:1756698529:MTH05dVEJU2tB_ZOjXnmQ4ogT-Q-82BDOuk1EVLyOP8/9781eb46ff1d5688/DleOGVrEzbNbVWbPeQAxeSszCCGBYTCmgwgGfCXse_s-1756699838-1.2.1.1-CPZd1Lp59u9mq3y5HZMAIP7csC0.qnE7w5dZNU7HHl2ugv66KxQcVd51mzLpj43b","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:43.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/788723073:1756698529:MTH05dVEJU2tB_ZOjXnmQ4ogT-Q-82BDOuk1EVLyOP8/9781eb46ff1d5688/DleOGVrEzbNbVWbPeQAxeSszCCGBYTCmgwgGfCXse_s-1756699838-1.2.1.1-CPZd1Lp59u9mq3y5HZMAIP7csC0.qnE7w5dZNU7HHl2ugv66KxQcVd51mzLpj43b HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.cowsushi.top/\r\ncf-chl: DleOGVrEzbNbVWbPeQAxeSszCCGBYTCmgwgGfCXse_s-1756699838-1.2.1.1-CPZd1Lp59u9mq3y5HZMAIP7csC0.qnE7w5dZNU7HHl2ugv66KxQcVd51mzLpj43b\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4716\r\nOrigin: https://www.cowsushi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-chl-out: 26azi8cjI11KWrXgIP4jMDnPaNY2C9/Nv4IhyGowuyyoxKWeG0zRV0fHGYreKxN/k947dtIIebRCEPLmRGGn8A==$vyHhgYroiqd7WJ14RqquKg==\r\ncf-chl-out-s: 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$fNcgunlfFHvIZYfiXPed1Q==\r\ncontent-encoding: br\r\nserver: cloudflare\r\nset-cookie: cf_clearance=BVZtwUTFO5ui1gzX4ARLEC_JToZBryE8bWXpzgwsOEA-1756699843-1.2.1.1-e6lVOptK2nxtqq2BQ61g7qbH9KiU0_IfTTAjoZfU.qxWAghyh4rlwhEpuhVa400wA2FX3.SvefoOnTX_T4oQ7ZKsX9prf4n0l2JV8Ync3A5nuOCrafHIBZ2fBI2fKXUT2rp9lHwDahr6VFrnhtUo8kjPDYOWC0fkhg1FhyO3JyRVPX2VAkrppsnA_xMOAb11O8OGCuUUo.nik3Noobot5mr3jjbzzL4W84h7YyoGpQE; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=cowsushi.top; Expires=Tue, 01 Sep 2026 04:10:43 GMT\r\ncf-ray: 9781eb653d555688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4160,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (4160), with no line terminators","md5":"d3350981fb175350ed3b421cf25dba05","sha1":"b9c541d555b60be3d859f72c6a7b53be5acda3f5","sha256":"ba478aa63d6a1e9fe35df6ec6ee7b69da2c9f2fd4d5334fb63e9ae30d3f449db","sha512":"b127ad4ce7f092a75e510af14768c9832019b793de8711a6c9e1235693b2eb6d0dc809ae2c48c106b3f68f7b569bcc90429f4151164d0137a485c7ce509ded4f","ssdeep":"96:GKoefHniduMU/wjF7cGEBf7V4kwbpSDC31YFt/w+QjYKf1je:kefHidj6wh7cN6kAVFYF9w3K","tlshash":"9d816d572a66727f4a0f049d1c72e98f3c59b14a018b2186dbe43621f71aedb29b105d","first_seen":"2025-09-01T04:11:19.086462Z","last_seen":"2025-09-01T04:11:19.086462Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/static/icons/icon-512x512.png","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:46.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET /static/icons/icon-512x512.png HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nCookie: cf_clearance=BVZtwUTFO5ui1gzX4ARLEC_JToZBryE8bWXpzgwsOEA-1756699843-1.2.1.1-e6lVOptK2nxtqq2BQ61g7qbH9KiU0_IfTTAjoZfU.qxWAghyh4rlwhEpuhVa400wA2FX3.SvefoOnTX_T4oQ7ZKsX9prf4n0l2JV8Ync3A5nuOCrafHIBZ2fBI2fKXUT2rp9lHwDahr6VFrnhtUo8kjPDYOWC0fkhg1FhyO3JyRVPX2VAkrppsnA_xMOAb11O8OGCuUUo.nik3Noobot5mr3jjbzzL4W84h7YyoGpQE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:47 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Aug 2022 11:39:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"62ff7672-11d82\"\r\nexpires: Wed, 01 Oct 2025 04:10:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mCeBtcrL7r%2B6GZK77bRP9x3tpIQV4S4NU9Yayv50j%2BrcyipGGuY4hzhwQWx6q%2BrM4NMgDVyZSnWJGPQiVxLopwxoWCVc7%2FpWwMksBaOh\"}]}\r\ncf-ray: 9781eb7a3f2e5688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73090,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"8dbad42c7d00c2930136f562702664bc","sha1":"7bfd2a25a6fc0af20b1d179fe2cfc188955a035a","sha256":"3902689b806083649d3c99ee6e6d35222c824562792a24d8c12de1d711ca6df6","sha512":"f7e223e7e7b6f7b386cacfc6a406231804634fb4b0abed619fac5af8e1e4842aebc9fa5e58d19dbf715b31bc8a8c5efad0e7e5276b64c832e7c3a0487bfc623d","ssdeep":"1536:43EQhVlYoWIC8WZa5WdVaCUKDcTRWf64FtJRgYFty1saicrtU0VzWLh:sEOlcIlWZa5WsKDioTJRnXylice6Ah","tlshash":"b263f12edf802d74eac55e4f3094fdd897ae8069b682f455a920c68561e43f9cfc482b","first_seen":"2025-04-07T11:34:04.631395Z","last_seen":"2026-06-03T10:20:46.353648Z","times_seen":701,"resource_available":false,"data":null}},"time_used":680,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":680,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://app.sushi.com/images/chef.svg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.79.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 24 Apr 2025 13:45:55 GMT","end":"Tue, 26 May 2026 13:45:55 GMT"},"fingerprint":{"sha1":"8C:61:DB:F4:59:AA:B3:DB:D3:12:E2:66:0A:25:C6:AB:C2:AD:20:6D","sha256":"72:8C:8C:F1:15:FA:11:D0:30:77:C3:1F:DA:FD:AB:28:E6:81:ED:68:D1:8B:B8:E3:EB:B6:58:30:DD:87:8B:C3"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://app.sushi.com/images/chef.svg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 494\r\nserver: cloudflare\r\ncf-ray: 9781eb6b7d6a0daa-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: private, no-transform, max-age=604800\r\ncontent-disposition: inline; filename=\"chef.webp\"\r\netag: \"38ea5c1f6ca42ffe426f0f892036aba2\"\r\nlast-modified: Sun, 23 Jan 2022 02:31:13 GMT\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data, Accept-Encoding\r\naccess-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=96;start=2025-09-01T04:10:44.403Z;desc=hit,rtt;dur=1,content-info;desc=\"width=22,height=22,owidth=22,oheight=22,obytes=93196;\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":494,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"38ea5c1f6ca42ffe426f0f892036aba2","sha1":"5551bd6aae36e9bb9bc0a9bba0232785d5b27c7e","sha256":"ad0a76c89956fcf0505aab998d9f9f9c51b2ad958d75ddb99c140025ac9e6371","sha512":"c34f106c7130b3b48f3d8ccaa58468c503302c489d66de41b96347fd0d830184c5902ce0363a15c86404ce917a796d32ab6b580c175f201887aec4a6e9f96a24","ssdeep":"","tlshash":"d3f00e35608130ee4d5351646ca33ffa2b4a18b584513583d9384a84252d654c73a86d","first_seen":"2025-04-07T11:34:04.610001Z","last_seen":"2026-06-03T10:20:46.347924Z","times_seen":706,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":50,"dns":38,"connect":1,"send":0,"wait":108,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/bsc","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:52.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enterprise.onerpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:43:07 GMT","end":"Mon, 27 Oct 2025 11:43:06 GMT"},"fingerprint":{"sha1":"0A:91:99:6D:49:3A:2D:61:FB:0E:6D:EB:6C:CB:67:DD:A6:F6:EF:4D","sha256":"92:66:B5:09:99:C7:87:4C:F6:60:B6:C3:59:71:7E:6F:31:DB:A0:53:24:52:5C:1D:C0:C8:79:22:5F:4E:C2:00"}}},"request":{"raw":"POST /bsc HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.cowsushi.top/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://www.cowsushi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:52 GMT\r\ncontent-type: application/json\r\ncontent-length: 229\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"42e136a22281d105bd21fa496816706c","sha1":"bc02950079004b0d4f4bea3888dfd4517cddeeff","sha256":"ede226c79ae326ce9e4b099e9f4dbb4e3d7807da2b793bdfadfafeeb84d7175a","sha512":"a41403da8b9e698eb2823bbe0925160b68682c55d4c64e5c8b27193f8fd8bf4fd118179d26eadb446ed41c2c9c12d46523b6f5094caadaae8a03ba3c1d6bade5","ssdeep":"","tlshash":"33d02313c6470537e34f4633371567c4f559705071105f1b4e1c0315024f97b0255351","first_seen":"2025-04-07T11:34:31.00119Z","last_seen":"2026-08-09T06:15:25.627437Z","times_seen":3038,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1rpc.io/bnb","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:52.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 01:23:19 GMT","end":"Sun, 23 Nov 2025 01:23:18 GMT"},"fingerprint":{"sha1":"77:DD:9D:03:9A:8B:27:57:64:8B:DC:3F:84:87:56:2B:4C:AD:62:3C","sha256":"98:20:17:06:F7:B2:60:4B:A8:A1:AE:72:47:3C:9D:A4:FC:C0:39:C4:F7:3F:EA:8B:B3:19:01:4B:E6:61:CD:6A"}}},"request":{"raw":"OPTIONS /bnb HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.cowsushi.top/\r\nOrigin: https://www.cowsushi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AutomataGeode/0.1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\nContent-Length: 0\r\nDate: Mon, 01 Sep 2025 04:10:52 GMT\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":99,"dns":30,"connect":27,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/autocompleter@9.2.1/autocomplete.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:52.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/autocompleter@9.2.1/autocomplete.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 9.2.1\r\nx-jsd-version-type: version\r\netag: W/\"1778-T/efyFDYUSEmqnfjRzQWaoXGxew\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 508499\r\ndate: Mon, 01 Sep 2025 04:10:52 GMT\r\nx-served-by: cache-fra-eddf8230172-FRA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 2102\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6008,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5512)","md5":"a86b4d0b78aa81ae3448dd179e63a6a1","sha1":"4ff79fc850d8512126aa77e34734166a85c6c5ec","sha256":"ad210c53d6d3b61146779594a306e0d0f48272ebf884284700613baa05919c74","sha512":"57be2c72415b2964b5d7b971f6445d62c7221d2a74be7e83245355f9990ddc29b3a54ef0e8cf885700796a0710f05ec5b49cb2a8b5cad580a87350250d091953","ssdeep":"96:mhrNV4lDBSEBnEMuZPo6paG9o2UKqB9PxtAdBzF9EvOViuhV33G:mvm45Mui6kB2UxjEdkSk","tlshash":"18c1757e3b0036731ac771e7959fb9421e782563e90e4c00a039ee943e3cee93667995","first_seen":"2024-08-13T22:13:15Z","last_seen":"2026-08-05T23:59:47.242744Z","times_seen":673,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":80,"dns":35,"connect":16,"send":0,"wait":26,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/bsc.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.79.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 24 Apr 2025 13:45:55 GMT","end":"Tue, 26 May 2026 13:45:55 GMT"},"fingerprint":{"sha1":"8C:61:DB:F4:59:AA:B3:DB:D3:12:E2:66:0A:25:C6:AB:C2:AD:20:6D","sha256":"72:8C:8C:F1:15:FA:11:D0:30:77:C3:1F:DA:FD:AB:28:E6:81:ED:68:D1:8B:B8:E3:EB:B6:58:30:DD:87:8B:C3"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/bsc.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 658\r\nserver: cloudflare\r\ncf-ray: 9781eb6b8d800daa-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: private, no-transform, max-age=604800\r\netag: \"073f20ab692964f421b8488218f66b18\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:13 GMT\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data, Accept-Encoding\r\naccess-control-expose-headers: Content-Length,ETag,Server-Timing,Vary,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=85;start=2025-09-01T04:10:44.413Z;desc=hit,rtt;dur=1,content-info;desc=\"width=32,height=32,owidth=102,oheight=102,obytes=10257;\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":658,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3","md5":"073f20ab692964f421b8488218f66b18","sha1":"934b809e8d32824a07bc3ec5f978d2ecf970ded5","sha256":"de9bbb1d1f6bc48bec47f6ea94a22b56364333b23652ed08c6dfc200e7ff7a73","sha512":"dc9afa0cba6818361b29e99e0efdacd720c17b2b9e0bafc535aa6aeaf28084dedf311be80161f2ae0dcf4ea07e59b554303ac0a8cfa9a9043264e01a0306ac1f","ssdeep":"","tlshash":"4001dd237448e52acdf6ab3160105378675a614e925e51cebc9590b4bf4a85d2804e66","first_seen":"2025-04-07T11:34:04.629691Z","last_seen":"2026-06-03T10:20:46.374656Z","times_seen":706,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":44,"dns":28,"connect":4,"send":0,"wait":95,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/static/layer/layer.js","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET /static/layer/layer.js HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nCookie: cf_clearance=BVZtwUTFO5ui1gzX4ARLEC_JToZBryE8bWXpzgwsOEA-1756699843-1.2.1.1-e6lVOptK2nxtqq2BQ61g7qbH9KiU0_IfTTAjoZfU.qxWAghyh4rlwhEpuhVa400wA2FX3.SvefoOnTX_T4oQ7ZKsX9prf4n0l2JV8Ync3A5nuOCrafHIBZ2fBI2fKXUT2rp9lHwDahr6VFrnhtUo8kjPDYOWC0fkhg1FhyO3JyRVPX2VAkrppsnA_xMOAb11O8OGCuUUo.nik3Noobot5mr3jjbzzL4W84h7YyoGpQE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 03 Jan 2022 21:27:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"61d36a54-4d84\"\r\nexpires: Mon, 01 Sep 2025 16:10:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kAXZcI8ARrXKjNbjPVlqmUqUpv1Lsi4NyszlZeHBC8IqRqrxYIHvHFE8Dwc2ASk%2FHySy12W3kYVE55jxaf8Kc2BKEDiajTbasRADT3QQ\"}]}\r\ncf-ray: 9781eb6b481b5688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19844,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752), with CRLF line terminators","md5":"2eb1aaf732c36835784d91a17cb33989","sha1":"0c299dbb6354cbcffb908c137d50ca482f3b068d","sha256":"49bead7cfddd71b31ef110e012c1e2c72b8a0e7ef6688145214610a0aa481a16","sha512":"032612493a4486453c78c2ea81846ea0bb2ebb5f704b6795bcf2a8cf9b03ef4664c0f05f540f95c4487a2b5a430193774fd4d71ea41fca7b5603d8de1c063648","ssdeep":"384:CJ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:CJtu8CfS793QODbcI","tlshash":"e392d85ab550359321639069911fa90f30f24d22eb078858f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-25T14:30:41Z","last_seen":"2026-07-20T10:43:52.781445Z","times_seen":829,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-rpc.publicnode.com/","fqdn":"bsc-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:52.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 11:56:08 GMT","end":"Sat, 15 Nov 2025 12:56:03 GMT"},"fingerprint":{"sha1":"31:3C:77:7B:BE:98:B6:33:D7:F2:CC:B1:EF:40:DD:58:1F:8A:11:5E","sha256":"5E:C2:76:10:E4:FF:4F:6E:20:07:C4:39:82:E5:E4:0C:AD:00:FD:04:61:90:DE:6D:B6:6C:07:0C:26:AE:A5:16"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.cowsushi.top/\r\nOrigin: https://www.cowsushi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 01 Sep 2025 04:10:52 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nserver: cloudflare\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9781eb9cf819c0ac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":42,"dns":12,"connect":1,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://app.sushi.com/images/logo.svg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.79.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 24 Apr 2025 13:45:55 GMT","end":"Tue, 26 May 2026 13:45:55 GMT"},"fingerprint":{"sha1":"8C:61:DB:F4:59:AA:B3:DB:D3:12:E2:66:0A:25:C6:AB:C2:AD:20:6D","sha256":"72:8C:8C:F1:15:FA:11:D0:30:77:C3:1F:DA:FD:AB:28:E6:81:ED:68:D1:8B:B8:E3:EB:B6:58:30:DD:87:8B:C3"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://app.sushi.com/images/logo.svg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 918\r\nserver: cloudflare\r\ncf-ray: 9781eb6b8d7f0daa-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: private, no-transform, max-age=604800\r\ncontent-disposition: inline; filename=\"logo.webp\"\r\netag: \"48f98a26aea202ad7316b0f42dccb2ef\"\r\nlast-modified: Sun, 23 Jan 2022 00:08:27 GMT\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data, Accept-Encoding\r\naccess-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=85;start=2025-09-01T04:10:44.412Z;desc=hit,rtt;dur=1,content-info;desc=\"width=32,height=32,owidth=512,oheight=512,obytes=4251;\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":918,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"48f98a26aea202ad7316b0f42dccb2ef","sha1":"97abff01d48d83db76784483b5d87ba3e2fa0ed8","sha256":"5b1ea5bb644f5266c0448e2fe3d405c757aa1e26749735ffeaad9802901fe73d","sha512":"bd80da4661c981b5430310e0db304e3079dbdb04c40f6b87975bfbda9e3af1462669ac986d66a7956c8757e50e5ed42955c67803680eba58621102f6feaa500b","ssdeep":"","tlshash":"5811bb45d2356255a639dc3306ec56ac2c7c7d543e3184d707763a9fd824c0213f5e4b","first_seen":"2025-04-07T11:34:04.596029Z","last_seen":"2026-06-03T10:20:46.383005Z","times_seen":707,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":55,"dns":27,"connect":4,"send":0,"wait":95,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/static/image/aave.png","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET /static/image/aave.png HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nCookie: cf_clearance=BVZtwUTFO5ui1gzX4ARLEC_JToZBryE8bWXpzgwsOEA-1756699843-1.2.1.1-e6lVOptK2nxtqq2BQ61g7qbH9KiU0_IfTTAjoZfU.qxWAghyh4rlwhEpuhVa400wA2FX3.SvefoOnTX_T4oQ7ZKsX9prf4n0l2JV8Ync3A5nuOCrafHIBZ2fBI2fKXUT2rp9lHwDahr6VFrnhtUo8kjPDYOWC0fkhg1FhyO3JyRVPX2VAkrppsnA_xMOAb11O8OGCuUUo.nik3Noobot5mr3jjbzzL4W84h7YyoGpQE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 550\r\nserver: cloudflare\r\nlast-modified: Wed, 13 Nov 2024 22:07:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6735232e-226\"\r\nexpires: Wed, 01 Oct 2025 04:10:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=47Vipz%2F1%2BGQbABiJFyi2EIE%2FFL5OVYgM1qUSHMk7vvFjlGVHh779z0YOIQQDuBeW4S6xNnzApyfY1Kkbt0mhciJ3X0GAGW1fJ0J2G1aj\"}]}\r\ncf-ray: 9781eb6b1ff25688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":550,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"d0acc16f865a14c3625d2ea8c2e16ab1","sha1":"318058dc32279e768085fbaa784a343e6702b55a","sha256":"877cea847fcfe6f595e3b56cdb988169aee34e5cfe4c8c73733498e272ca7fe7","sha512":"10ae9847e8979fe491249f752bdec8cde233a1fb224b77fa078ce7e66714afed3feacaccf590e0e464e6dd98ecbc18b697fc652de0b618f2ce4fdcc1ae53e4ca","ssdeep":"","tlshash":"12f041adf3a048fde85aa521ca728ea0442369e248411966881c8b88c5c513c36a74dc","first_seen":"2025-05-13T09:35:41.810717Z","last_seen":"2025-09-19T01:41:36.810383Z","times_seen":12,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/static/js/bignumber.min.js","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET /static/js/bignumber.min.js HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nCookie: cf_clearance=BVZtwUTFO5ui1gzX4ARLEC_JToZBryE8bWXpzgwsOEA-1756699843-1.2.1.1-e6lVOptK2nxtqq2BQ61g7qbH9KiU0_IfTTAjoZfU.qxWAghyh4rlwhEpuhVa400wA2FX3.SvefoOnTX_T4oQ7ZKsX9prf4n0l2JV8Ync3A5nuOCrafHIBZ2fBI2fKXUT2rp9lHwDahr6VFrnhtUo8kjPDYOWC0fkhg1FhyO3JyRVPX2VAkrppsnA_xMOAb11O8OGCuUUo.nik3Noobot5mr3jjbzzL4W84h7YyoGpQE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Aug 2022 17:55:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"630fa0ac-4885\"\r\nexpires: Mon, 01 Sep 2025 16:10:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FfCnc0mmRPO%2Fe5TR1SU4dae6bRVDuQ2tjUkB55e0syMGPrE8SVtexvz0DJXu477C5%2BsZFnOquNGWnQE3hszq5WwonbcbHb5YMN%2Fdx0Uv\"}]}\r\ncf-ray: 9781eb6b48125688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18565,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18564), with no line terminators","md5":"220b87873ab81287f915af82e3ba9a33","sha1":"ced2ebc27d644716effa64115643dd1770ba04eb","sha256":"266103c2cedfaf94d60f5a638555639fb2b86f2b66386660fd3d057715ebf463","sha512":"ddd12920edadffa6de43bed4fda62056a26999291cbd6b9314ee1684242b4a2dad49057753e938a65c122a554ec4a89bb2777a67fd1ebe60a5b0c9782d567b22","ssdeep":"384:W/NxaJsOM+a9fxrSZwieoa+gPIbMPzvP22niiXuB/CeTa4pLG950/GrVh:0xdxcZ9epPzP2/VlTDiX0/6","tlshash":"e582fcd875e3f09d62ff20e100e75443e17a9f0ba84c1976a2509496b831ddba2aff35","first_seen":"2023-03-07T12:03:15Z","last_seen":"2026-08-08T01:19:54.409199Z","times_seen":820,"resource_available":true,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/static/layer/skin/layer.css","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:45.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET /static/layer/skin/layer.css HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nCookie: cf_clearance=BVZtwUTFO5ui1gzX4ARLEC_JToZBryE8bWXpzgwsOEA-1756699843-1.2.1.1-e6lVOptK2nxtqq2BQ61g7qbH9KiU0_IfTTAjoZfU.qxWAghyh4rlwhEpuhVa400wA2FX3.SvefoOnTX_T4oQ7ZKsX9prf4n0l2JV8Ync3A5nuOCrafHIBZ2fBI2fKXUT2rp9lHwDahr6VFrnhtUo8kjPDYOWC0fkhg1FhyO3JyRVPX2VAkrppsnA_xMOAb11O8OGCuUUo.nik3Noobot5mr3jjbzzL4W84h7YyoGpQE\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 03 Jan 2022 21:27:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"61d36a56-36e0\"\r\nexpires: Mon, 01 Sep 2025 16:10:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2BaPhAxjLYut59WebaArfbEO4JGHg73SEVQcUTUtrn6m5KwoVsgv80IxTpFBYguKDPu4fpTS69BPAMliTEKeNs2L7tB7%2BKHoKFErNDoR\"}]}\r\ncf-ray: 9781eb6fda0f5688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14048,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13967), with CRLF line terminators","md5":"bc204604a91fcdddb0e0b2a2fda5ec52","sha1":"7b50547ac18b5443d4fd843e3c812ce3ff6a20fe","sha256":"37a4c15690401bff641efe29c6138421e9464e2fdb35d4cf72b7ffd6638fc687","sha512":"3c3974cb103e12ac6390562ca7d8937a609e778298df5285fdf009d3ffe61798002439340a121ece4d752c72c0c60e6130cbfe0497ee3462497d135fe4d660f3","ssdeep":"192:9OcW0PmLeWVrrzztBm0T9zBKgwBnsY5Cb+RX:9PW0ijVDJbTyGY5CGX","tlshash":"415202e144811299b0278611d6dcbeba32f88d53e5630dbef2573c1f874c6dba2b6247","first_seen":"2025-04-07T11:34:04.626874Z","last_seen":"2026-07-17T08:24:27.733641Z","times_seen":813,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/secureproxy.php?e=ping_proxy","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:52.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET /secureproxy.php?e=ping_proxy HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.cowsushi.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=BVZtwUTFO5ui1gzX4ARLEC_JToZBryE8bWXpzgwsOEA-1756699843-1.2.1.1-e6lVOptK2nxtqq2BQ61g7qbH9KiU0_IfTTAjoZfU.qxWAghyh4rlwhEpuhVa400wA2FX3.SvefoOnTX_T4oQ7ZKsX9prf4n0l2JV8Ync3A5nuOCrafHIBZ2fBI2fKXUT2rp9lHwDahr6VFrnhtUo8kjPDYOWC0fkhg1FhyO3JyRVPX2VAkrppsnA_xMOAb11O8OGCuUUo.nik3Noobot5mr3jjbzzL4W84h7YyoGpQE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:52 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1UjDsKq3xpBnkJNNQ1yYiOhjHCn03KTHBRrQxUz3Lzz%2BkmbgT7C3TYRGhTLd6%2B3fGSJl6sX3a9SRNpEUu7r%2BU%2B0FAApbRMTmCZPzPxuN\"}]}\r\ncf-ray: 9781eb9c8dc05688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-09T15:35:30.715545Z","times_seen":9018,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/static/css/da7b6eae53d62a5c.css","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET /static/css/da7b6eae53d62a5c.css HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nCookie: cf_clearance=BVZtwUTFO5ui1gzX4ARLEC_JToZBryE8bWXpzgwsOEA-1756699843-1.2.1.1-e6lVOptK2nxtqq2BQ61g7qbH9KiU0_IfTTAjoZfU.qxWAghyh4rlwhEpuhVa400wA2FX3.SvefoOnTX_T4oQ7ZKsX9prf4n0l2JV8Ync3A5nuOCrafHIBZ2fBI2fKXUT2rp9lHwDahr6VFrnhtUo8kjPDYOWC0fkhg1FhyO3JyRVPX2VAkrppsnA_xMOAb11O8OGCuUUo.nik3Noobot5mr3jjbzzL4W84h7YyoGpQE\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 25 Aug 2022 01:46:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"6306d472-13ecb\"\r\nexpires: Mon, 01 Sep 2025 16:10:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XvtGmGQgeUoB3KoY75k9s3tcKRmIhQShgiuKBIR0UhoQpwFMh0cYHXHjzHnYAjlmIIdHQeywUZIgayLrTwPjuXAvUFMOIywZIQbgVekY\"}]}\r\ncf-ray: 9781eb6b0fe45688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81611,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (63844), with CRLF line terminators","md5":"6b1545a84bc7b83d4f98efa655fd93a4","sha1":"583759b7d6860fe64798e7bc86b0b17c17313eb3","sha256":"2b96c612708b06a35f2823df9bf439dc747dd03e7e8550de06720fed42a55ab9","sha512":"e5b9a9dae3e52db55201030828546534e8e88b6653b84120c2485b22f34b594b868422b8a469f9be228023a123b09c2949a9c939985ee12973362534792f7c67","ssdeep":"1536:Yk8/vqwvmwaUSqGcYhUB3M5HSMTuqNU+3Gh:Yk8/vqwvmwaUSqGcYhFwMTueU+3Gh","tlshash":"f583a46dba51103f7c2790f5c2a8fe9db11ab1c4df3626e6bd8221019be27f70c66614","first_seen":"2025-04-07T11:34:04.608474Z","last_seen":"2026-06-03T10:20:46.378871Z","times_seen":683,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":666,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/mainnet.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.79.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 24 Apr 2025 13:45:55 GMT","end":"Tue, 26 May 2026 13:45:55 GMT"},"fingerprint":{"sha1":"8C:61:DB:F4:59:AA:B3:DB:D3:12:E2:66:0A:25:C6:AB:C2:AD:20:6D","sha256":"72:8C:8C:F1:15:FA:11:D0:30:77:C3:1F:DA:FD:AB:28:E6:81:ED:68:D1:8B:B8:E3:EB:B6:58:30:DD:87:8B:C3"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/mainnet.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 214\r\nserver: cloudflare\r\ncf-ray: 9781eb6b8d820daa-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: private, no-transform, max-age=604800\r\ncontent-disposition: inline; filename=\"mainnet.webp\"\r\netag: \"bd03cdb4b57baabe3f0e5e029d139d07\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:19 GMT\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data, Accept-Encoding\r\naccess-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=121;start=2025-09-01T04:10:44.413Z;desc=hit,rtt;dur=1,content-info;desc=\"width=32,height=32,owidth=102,oheight=102,obytes=6327;\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":214,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 32x32, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bd03cdb4b57baabe3f0e5e029d139d07","sha1":"def9ec0cee4aa2231150a409b9b93af1324d7236","sha256":"77c5d4287e1047bcaca077d84df3f075ce5286d3f76bb6d926691fdf3860e822","sha512":"f64af9c8af172d43cd5ea9b1861eb662fb77b793df44901cc59a54643a7129d70c7fd1fdc1bffde3b1e645a6a4eb113c5cc9f879594f1d30d2de5f04690124a2","ssdeep":"","tlshash":"20d0235f854405c8da15346514210ff1cc594d61cf67dcd556e51d3a7b180cf75e1145","first_seen":"2025-04-07T11:34:04.617184Z","last_seen":"2026-06-03T10:20:46.346625Z","times_seen":706,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":57,"dns":36,"connect":1,"send":0,"wait":131,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/static/image/wbtc.png","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET /static/image/wbtc.png HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nCookie: cf_clearance=BVZtwUTFO5ui1gzX4ARLEC_JToZBryE8bWXpzgwsOEA-1756699843-1.2.1.1-e6lVOptK2nxtqq2BQ61g7qbH9KiU0_IfTTAjoZfU.qxWAghyh4rlwhEpuhVa400wA2FX3.SvefoOnTX_T4oQ7ZKsX9prf4n0l2JV8Ync3A5nuOCrafHIBZ2fBI2fKXUT2rp9lHwDahr6VFrnhtUo8kjPDYOWC0fkhg1FhyO3JyRVPX2VAkrppsnA_xMOAb11O8OGCuUUo.nik3Noobot5mr3jjbzzL4W84h7YyoGpQE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 418\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Aug 2022 15:11:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"630b85a2-1a2\"\r\nexpires: Wed, 01 Oct 2025 04:10:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2BdjQocvHpPQZNoN9t4ZwQUVhe3qsUQdsZuuq2wHCcQSBzRUmHuQbXyyQGQKOQAA4t%2BLyccjARSqDJPFUw5iFgTLbfBFBuigw4yYDk10\"}]}\r\ncf-ray: 9781eb6b1ff65688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":418,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 48x48, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"311a92f4fd9f89e67b3d0e54a51465f2","sha1":"b5a2a2075d34d22635b660b923dad0464b6bb29e","sha256":"43e3c81281509419baec632a380e7ac1cf59ccb01db6845b80b65f14d8fe7d76","sha512":"6b5dc0d7e116298b899c27404fe4d055d43d6aca1ef351cbfd8d87331328fdb07aeec62fdb17e50152a25be12334fd3c8708cbff3d5cf9e979c8b1d8f7029223","ssdeep":"","tlshash":"3ae0239050c825f0ad0de720b3c2770105b4da4693b4ce7a05079cf7109018082d7b05","first_seen":"2025-04-07T11:34:04.61234Z","last_seen":"2026-06-19T03:29:38.325417Z","times_seen":704,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/9781eb4a1a2335a6/1756699839455/0f89468243b0cc3f58b2c587e0b09adc53f3ef1aea4b2bc5a61ba7741ee57b9f/UQf9dcFtTHiSDyR","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","date":"2025-09-01T04:10:41.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/pat/9781eb4a1a2335a6/1756699839455/0f89468243b0cc3f58b2c587e0b09adc53f3ef1aea4b2bc5a61ba7741ee57b9f/UQf9dcFtTHiSDyR HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\ndate: Mon, 01 Sep 2025 04:10:41 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1\r\ncf-ray: 9781eb5b8b8935a6-OSL\r\nwww-authenticate: PrivateToken challenge=\"AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gD4lGgkOwzD9YssWH4LCa3FPz7xrqSyvFphundB7le58AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAscjm_UO_k901rNdCKgLw5bvI4i6M_jDNCIXpfs2LRbtxwLOrUyplqVvML_hVlB5tIDMuj0ihhaOFHose-Y0_UjQnNUGE_vol46VvGgscTMtTjU4xINriap8AMTIygvljEBt6my-nBwkUGhY3U9v5iKC-eWR5bTfvrqFsuIVxafkSfhHqDXB4KLGNjvOOV71GGJ9x4yxA-C2OcULZ1uDDKuvAaMhuiWdF6OzSTXruP9yPg1vmuteavOW1re0YDbCbtK16PhHdSzWym7v_FrvId-2zf26j50FlTd_vl_DcKNDVCgWDoU0uX3cU6V3rSQoVXREEqPr-2ywSGru8ZuXRoQIDAQAB\", max-age=20, PrivateToken challenge=\"AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIA-JRoJDsMw_WLLFh-CwmtxT8-8a6ksrxaYbp3Qe5XufABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsLS4HBnLGydwK-bLQGRCaoyMsrXBRrDgQVmxS06j3UF0nYSd6GdTGCKIu1WV60eg-tJtTttfEVq7wHVQf4vzjYBidmCh88ebzxKv2GB6PESSodf5MsEup9xd5dxpkYScgL1CCJq89kRrOQ_CS61bvkL_oGyZf4ffqG5THgaOsopqj8dFLH6_SMy9yf8EgMYqpyjxfKsD-1_qb1m1DRjJEKPWKIGwmHXIKQJUqsxZFm4_Inwkxx7QMpVP4GyqlTxFVz7stWwJRSkMLHjEM_IWLUYfPhuwIUVqmRjGsY1n8flA1bRfxaWHNDxoi25-M2BKTP9NkNNJBbTKErhrZ9LGywIDAQAB\", max-age=20, PrivateToken challenge=\"AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIA-JRoJDsMw_WLLFh-CwmtxT8-8a6ksrxaYbp3Qe5XufABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA3aONLzbt9azB_WsRJ4fehRU_y1UQE_D8mdWWuqEhv9iUW3QY8cOitD9qU8sfP91br9VqJSPu750lYHdosT3-HjwqTyfu9ZBx6FpQXzXn6mzAoyAPTxDNFX67hiG8rhGbKNmSy6pk_XzqDQwhfRfsuvzm6l-GMl1V4cUJ1qtr6ccKbCZ4Sj_erBYzqnox7KdS7yi54U-AK3HOOXJdoOZ-iz-0wm62XfQRkx-wSxzNO4SAGy2XXAAJfkqiKMJnFVq9pTxDVcsJXwIixVYZq_yW9zKyYEOnyhhv9kNiRNfZYqFEEB9Engiz1UbsV7zlyh8pmtFihRCKUZ7U6oZu_5DbxwIDAQAB\", max-age=20\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:48:16.802091Z","times_seen":504600,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-01T04:10:43.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.cowsushi.top/?__cf_chl_tk=OBPImIcYs6vXOaCkfu_ezDxyYMEdoOgY_S_mxf1TNF8-1756699838-1.0.1.1-M8p_XfBWi4_TIUBnsvfdAeh83WcB_aWZ7DjkYGU6tqI\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1623\r\nOrigin: https://www.cowsushi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=BVZtwUTFO5ui1gzX4ARLEC_JToZBryE8bWXpzgwsOEA-1756699843-1.2.1.1-e6lVOptK2nxtqq2BQ61g7qbH9KiU0_IfTTAjoZfU.qxWAghyh4rlwhEpuhVa400wA2FX3.SvefoOnTX_T4oQ7ZKsX9prf4n0l2JV8Ync3A5nuOCrafHIBZ2fBI2fKXUT2rp9lHwDahr6VFrnhtUo8kjPDYOWC0fkhg1FhyO3JyRVPX2VAkrppsnA_xMOAb11O8OGCuUUo.nik3Noobot5mr3jjbzzL4W84h7YyoGpQE\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 01 Sep 2025 04:10:43 GMT\r\ncontent-type: text/html\r\nlocation: /\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tHFd2HESkMQxOTUnt%2BKqJzhnes7L3kExN6rBku12aiZW8IJqBi624V1HzgozmiKWvXIJu3C98OSBuls6tH7DedbblappFW87ZR8vIPEhP9AhcDvoTOO2XQGHf%2Byo%2BC%2F2nvCQ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9781eb661db05688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164561,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:38Z","timestamp":1756699838,"ip_dst":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":49458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-01T04:10:38.554091+0000\",\"flow_id\":508576149682089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":49458,\"dest_ip\":\"104.21.92.126\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.cowsushi.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.cowsushi.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":762,\"start\":\"2025-09-01T04:10:38.538537+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/static/css/style.css","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET /static/css/style.css HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nCookie: cf_clearance=BVZtwUTFO5ui1gzX4ARLEC_JToZBryE8bWXpzgwsOEA-1756699843-1.2.1.1-e6lVOptK2nxtqq2BQ61g7qbH9KiU0_IfTTAjoZfU.qxWAghyh4rlwhEpuhVa400wA2FX3.SvefoOnTX_T4oQ7ZKsX9prf4n0l2JV8Ync3A5nuOCrafHIBZ2fBI2fKXUT2rp9lHwDahr6VFrnhtUo8kjPDYOWC0fkhg1FhyO3JyRVPX2VAkrppsnA_xMOAb11O8OGCuUUo.nik3Noobot5mr3jjbzzL4W84h7YyoGpQE\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 12 Sep 2022 14:12:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"631f3e58-497\"\r\nexpires: Mon, 01 Sep 2025 16:10:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rsfCQM7N48LePUNKuKAMGkXmrWvcFRxQHMG1abDluBFDm%2FbKm8PwzesLmszCqac9nYp%2FAf23KCliM9Lh8YjU2LM8Xcu2MJPdIzBuxMEb\"}]}\r\ncf-ray: 9781eb6b0fe85688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"a39cc3af0664a35820a97bfb228a280e","sha1":"3698f5bff1b91601cf9b418d9b473a8be3eb9577","sha256":"d851aca3e8bfb7e6476ca07e419d693f131034563919b655760c64f23a09b9e7","sha512":"8a46dda2169f6e4e24f2be35f207f812f6a6b9c7a7ba226d75b72c083e9b3695751df5b8b03eac6d6014abd59a2698af73131bf0854f2fb0fc5f67902bd2610a","ssdeep":"","tlshash":"d421f11b9490420a91b7cf7564762b3bcd57594ec943734af883b254cf2eb570a70d50","first_seen":"2025-04-07T11:34:04.602753Z","last_seen":"2026-06-03T10:20:46.354189Z","times_seen":684,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/harmonyone.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.79.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 24 Apr 2025 13:45:55 GMT","end":"Tue, 26 May 2026 13:45:55 GMT"},"fingerprint":{"sha1":"8C:61:DB:F4:59:AA:B3:DB:D3:12:E2:66:0A:25:C6:AB:C2:AD:20:6D","sha256":"72:8C:8C:F1:15:FA:11:D0:30:77:C3:1F:DA:FD:AB:28:E6:81:ED:68:D1:8B:B8:E3:EB:B6:58:30:DD:87:8B:C3"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/harmonyone.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 554\r\nserver: cloudflare\r\ncf-ray: 9781eb6b7d6f0daa-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: private, no-transform, max-age=604800\r\netag: \"30f05ca8a9b000fdbdf4496876c6137d\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:29 GMT\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data, Accept-Encoding\r\naccess-control-expose-headers: Content-Length,ETag,Server-Timing,Vary,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=116;start=2025-09-01T04:10:44.404Z;desc=hit,rtt;dur=1,content-info;desc=\"width=32,height=32,owidth=102,oheight=102,obytes=4041;\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":554,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3","md5":"30f05ca8a9b000fdbdf4496876c6137d","sha1":"8b10fdc295a71727b858e8feae9706604c4479c3","sha256":"d8b9fee4aceb04c143d5de613e4bfd772bf63def40e253a0f64869fc1a0cb9cb","sha512":"2ba0f2a41f8eb0d66e88575eff80b612c6d8d58bda099f718e72177fcd001b4a30ac5a83ae7f090deb558b9d4fab8755e73aa607868afbe4402cad4ce7d1085e","ssdeep":"","tlshash":"2bf0dcf277d43923ee045eb81564d331ef35689bd585ab8a0683a5242d295836f2193c","first_seen":"2025-04-07T11:34:04.634442Z","last_seen":"2026-06-03T10:20:46.381162Z","times_seen":703,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/avalanche.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.79.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 24 Apr 2025 13:45:55 GMT","end":"Tue, 26 May 2026 13:45:55 GMT"},"fingerprint":{"sha1":"8C:61:DB:F4:59:AA:B3:DB:D3:12:E2:66:0A:25:C6:AB:C2:AD:20:6D","sha256":"72:8C:8C:F1:15:FA:11:D0:30:77:C3:1F:DA:FD:AB:28:E6:81:ED:68:D1:8B:B8:E3:EB:B6:58:30:DD:87:8B:C3"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/avalanche.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 290\r\nserver: cloudflare\r\ncf-ray: 9781eb6b7d710daa-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: private, no-transform, max-age=604800\r\ncontent-disposition: inline; filename=\"avalanche.webp\"\r\netag: \"7e74439e52b76c5e5e0a91b249206183\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:18 GMT\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data, Accept-Encoding\r\naccess-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=90;start=2025-09-01T04:10:44.406Z;desc=hit,rtt;dur=1,content-info;desc=\"width=32,height=32,owidth=128,oheight=128,obytes=2178;\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":290,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 32x32, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7e74439e52b76c5e5e0a91b249206183","sha1":"0c98ea0155d4ef3d96fd3595708855b5de7dae43","sha256":"fbaba472741915e440d7a1cb40254d1c48cbef1e73ae3a3b0af6a747888b9cb4","sha512":"ef7a6b2e45d5b5f775283e4eb15b84d5d9fc92ec3b66754a0dc6a003468c6e63f1b2ec99cb757e16c35e894a470f1d2196b45c825898bce730e22863e28a8d81","ssdeep":"","tlshash":"71d07d7660ac9ad1129f24a42755a316414d8c024d66f564a3da491ce0c45021092f14","first_seen":"2025-04-07T11:34:04.61493Z","last_seen":"2026-06-03T10:20:46.349274Z","times_seen":704,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/celo.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.79.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 24 Apr 2025 13:45:55 GMT","end":"Tue, 26 May 2026 13:45:55 GMT"},"fingerprint":{"sha1":"8C:61:DB:F4:59:AA:B3:DB:D3:12:E2:66:0A:25:C6:AB:C2:AD:20:6D","sha256":"72:8C:8C:F1:15:FA:11:D0:30:77:C3:1F:DA:FD:AB:28:E6:81:ED:68:D1:8B:B8:E3:EB:B6:58:30:DD:87:8B:C3"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/celo.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 729\r\nserver: cloudflare\r\ncf-ray: 9781eb6b8d7c0daa-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: private, no-transform, max-age=604800\r\netag: \"f441e139eff0559a9f73577f58a84ede\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:30 GMT\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data, Accept-Encoding\r\naccess-control-expose-headers: Content-Length,ETag,Server-Timing,Vary,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=108;start=2025-09-01T04:10:44.410Z;desc=hit,rtt;dur=1,content-info;desc=\"width=32,height=32,owidth=500,oheight=500,obytes=31154;\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":729,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3","md5":"f441e139eff0559a9f73577f58a84ede","sha1":"ff39bbd9a6208aaad00f81654a84686ddda0db5a","sha256":"d732b72d8b9027e89cdbcb4f19ed1cb84d7e3f08f9294a0572a79444175f8849","sha512":"8d953b13fe23dffaed77f249f73c69466e2a7b827a6b283a18d4e2101ea9ab1a18425a122e8642d5f67dd3fc89cfd0ba3332e4429d2fac0406e0f2972a94d399","ssdeep":"","tlshash":"d401990393455459cd7ce235c01036f563169359901954cfbf91c101aba703d1f63e78","first_seen":"2025-04-07T11:34:04.606072Z","last_seen":"2026-06-03T10:20:46.358193Z","times_seen":706,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","date":"2025-09-01T04:10:39.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\ncf-ray: 9781eb4a7a6935a6-OSL\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced","md5":"70c202196187ab3c11b4e094c20c6de1","sha1":"9c52b959e74aee9d79cbc9f35d1f9f65a3b8c863","sha256":"6255b9231d09ebe6aa1ac19ba46bdd81f3df58989c9ef2e11d6cd6e2e7b21643","sha512":"7e6168e40cce79239fc00a05381e1e95ca3534905d3fc1467973927f317b7f12b6f3e76960d5202c40046618b51e0895082e22338b1b9971038fa0ba158117e4","ssdeep":"","tlshash":"4ea022f3b2203c3eeb2a2333022e8030f83020b803828e0c000eec332a20208c0ca2c2","first_seen":"2025-05-13T14:11:45.873663Z","last_seen":"2026-04-03T11:40:49.866694Z","times_seen":265776,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/fantom.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.79.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 24 Apr 2025 13:45:55 GMT","end":"Tue, 26 May 2026 13:45:55 GMT"},"fingerprint":{"sha1":"8C:61:DB:F4:59:AA:B3:DB:D3:12:E2:66:0A:25:C6:AB:C2:AD:20:6D","sha256":"72:8C:8C:F1:15:FA:11:D0:30:77:C3:1F:DA:FD:AB:28:E6:81:ED:68:D1:8B:B8:E3:EB:B6:58:30:DD:87:8B:C3"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/fantom.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 653\r\nserver: cloudflare\r\ncf-ray: 9781eb6b7d6d0daa-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: private, no-transform, max-age=604800\r\netag: \"030feea8d18bb8d67c9382a57fe41adc\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:23 GMT\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data, Accept-Encoding\r\naccess-control-expose-headers: Content-Length,ETag,Server-Timing,Vary,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=87;start=2025-09-01T04:10:44.406Z;desc=hit,rtt;dur=1,content-info;desc=\"width=32,height=32,owidth=102,oheight=102,obytes=9962;\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":653,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3","md5":"030feea8d18bb8d67c9382a57fe41adc","sha1":"152f68cedaee9cf0ad9685bd13d197e32c96f8cf","sha256":"8cce1bd87ee7df9f7ffe0e0aa3984b8748c5448c341daaa9c353ca0bb0735361","sha512":"c5747dce3e6267ba8963d54b886fef9d3c12c3e4427990c0c8775d622c01c82ddfb37a4c9fb44617890747404cde00f084799ef6bdfbcfbcd4ec7594ebb6ceba","ssdeep":"","tlshash":"31f0232fd3be8301d6462bb88325730643461761ed0a8f0e21c3752da76b0479d81aa0","first_seen":"2025-04-07T11:34:04.613746Z","last_seen":"2026-06-03T10:20:46.376504Z","times_seen":705,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/fuse.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.79.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 24 Apr 2025 13:45:55 GMT","end":"Tue, 26 May 2026 13:45:55 GMT"},"fingerprint":{"sha1":"8C:61:DB:F4:59:AA:B3:DB:D3:12:E2:66:0A:25:C6:AB:C2:AD:20:6D","sha256":"72:8C:8C:F1:15:FA:11:D0:30:77:C3:1F:DA:FD:AB:28:E6:81:ED:68:D1:8B:B8:E3:EB:B6:58:30:DD:87:8B:C3"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/fuse.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 740\r\nserver: cloudflare\r\ncf-ray: 9781eb6b7d750daa-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: private, no-transform, max-age=604800\r\ncontent-disposition: inline; filename=\"fuse.webp\"\r\netag: \"1feff172d88d3891d5f52276eea6a10b\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:29 GMT\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data, Accept-Encoding\r\naccess-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=106;start=2025-09-01T04:10:44.405Z;desc=hit,rtt;dur=1,content-info;desc=\"width=32,height=32,owidth=128,oheight=128,obytes=13852;\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":740,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1feff172d88d3891d5f52276eea6a10b","sha1":"d94e9ed76f4b2a20880fb62e27aafd7a6a3bdd20","sha256":"fd45af725d0f5264dadf079a1cdee5b0cc230182e434c3ccadfcbf0cf4189f53","sha512":"9c548363c95b29fc47f693d38c0274c2b23aef59751ee397e080ef5fe0693e80e46b30e136d1621139bbca062165911e22b3819532a1bdcecd6d5f7bea1a161b","ssdeep":"","tlshash":"0c016ad2b957815945e9513c5bdc78195780ba8635d3a501417d787022f037cd737de4","first_seen":"2025-04-07T11:34:04.63517Z","last_seen":"2026-06-03T10:20:46.378137Z","times_seen":704,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":115,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/main-ztvwnrvfqrk.min.js","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET /main-ztvwnrvfqrk.min.js HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nCookie: cf_clearance=BVZtwUTFO5ui1gzX4ARLEC_JToZBryE8bWXpzgwsOEA-1756699843-1.2.1.1-e6lVOptK2nxtqq2BQ61g7qbH9KiU0_IfTTAjoZfU.qxWAghyh4rlwhEpuhVa400wA2FX3.SvefoOnTX_T4oQ7ZKsX9prf4n0l2JV8Ync3A5nuOCrafHIBZ2fBI2fKXUT2rp9lHwDahr6VFrnhtUo8kjPDYOWC0fkhg1FhyO3JyRVPX2VAkrppsnA_xMOAb11O8OGCuUUo.nik3Noobot5mr3jjbzzL4W84h7YyoGpQE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 22 Aug 2025 04:39:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68a7f46b-32cc7d\"\r\nexpires: Mon, 01 Sep 2025 16:10:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zFWztwRXRh0N4PhlUtwHeRLWnf8G6aokLiVYlK0qTUK7qbqLFHK53s%2FgnPIbahfktqWwi1EZUkJGDk1q83thJ2%2FsQPPDxhBcGh0Cb%2F1x\"}]}\r\ncf-ray: 9781eb6b481c5688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3329149,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dc995213d32957c633f2b97e1f8ae2e2","sha1":"a2ccbea77ab187282cef1cccb3c83692171e3d03","sha256":"379fc140b6286530a2d04be92b866aa30af0ea74023ac9f638986e01e9feb0b1","sha512":"18c5187b733f06fdb406f87ca2958bd045b30e78eb6ebf465715720d30fa226ef5579e68dbdf284a4b0991c88338a407b9f7a3e00206fd1c081074b10c90d0e8","ssdeep":"24576:VsMn8Dub/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjel7M0Rl:V/n8D0GkwdNZngkO5l","tlshash":"5b25bea63e4e9c908f7415bc886bafeda441cc51cacca7d7968ddc8470dafa070c25e5","first_seen":"2025-08-22T23:01:43.770657Z","last_seen":"2025-09-08T08:56:07.772482Z","times_seen":25,"resource_available":false,"data":null}},"time_used":713,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":713,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/bsc","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:52.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enterprise.onerpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:43:07 GMT","end":"Mon, 27 Oct 2025 11:43:06 GMT"},"fingerprint":{"sha1":"0A:91:99:6D:49:3A:2D:61:FB:0E:6D:EB:6C:CB:67:DD:A6:F6:EF:4D","sha256":"92:66:B5:09:99:C7:87:4C:F6:60:B6:C3:59:71:7E:6F:31:DB:A0:53:24:52:5C:1D:C0:C8:79:22:5F:4E:C2:00"}}},"request":{"raw":"OPTIONS /bsc HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.cowsushi.top/\r\nOrigin: https://www.cowsushi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 01 Sep 2025 04:10:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version\r\naccess-control-max-age: 1728000\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":135,"dns":57,"connect":22,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-rpc.publicnode.com/","fqdn":"bsc-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:52.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 11:56:08 GMT","end":"Sat, 15 Nov 2025 12:56:03 GMT"},"fingerprint":{"sha1":"31:3C:77:7B:BE:98:B6:33:D7:F2:CC:B1:EF:40:DD:58:1F:8A:11:5E","sha256":"5E:C2:76:10:E4:FF:4F:6E:20:07:C4:39:82:E5:E4:0C:AD:00:FD:04:61:90:DE:6D:B6:6C:07:0C:26:AE:A5:16"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.cowsushi.top/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://www.cowsushi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nx-content-type-options: nosniff\r\ncontent-type: application/json\r\ndate: Mon, 01 Sep 2025 04:10:52 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 1\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9781eb9f9f6856c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":6375,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e03d109fb7cf9d96c48895d65145bb3c","sha1":"fa507f515b54fa95c02ebe52ea3ff192dd6c909b","sha256":"95781d97071276af538b664f0196d44a10aab2c6ca81883cd19209817b2e78f3","sha512":"12675a48555f65f4653fb1fef0a5bd53c8d45a7c9cbf71ee5f0fc4f510542b1fbc96b5d2266d08eeace10fd5ce36988726991fd0657a15273f6c84303163faa3","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60j3:YKam3QytxvU15+doY1jNNTt9j3","tlshash":"16d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-01-25T17:56:03.222171Z","last_seen":"2026-08-09T15:35:30.729529Z","times_seen":1271,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":128,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/static/image/eth.png","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET /static/image/eth.png HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nCookie: cf_clearance=BVZtwUTFO5ui1gzX4ARLEC_JToZBryE8bWXpzgwsOEA-1756699843-1.2.1.1-e6lVOptK2nxtqq2BQ61g7qbH9KiU0_IfTTAjoZfU.qxWAghyh4rlwhEpuhVa400wA2FX3.SvefoOnTX_T4oQ7ZKsX9prf4n0l2JV8Ync3A5nuOCrafHIBZ2fBI2fKXUT2rp9lHwDahr6VFrnhtUo8kjPDYOWC0fkhg1FhyO3JyRVPX2VAkrppsnA_xMOAb11O8OGCuUUo.nik3Noobot5mr3jjbzzL4W84h7YyoGpQE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 826\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Aug 2022 15:08:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"630b84e2-33a\"\r\nexpires: Wed, 01 Oct 2025 04:10:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wMLp8oELE7R8akjTm3Q4zv6%2FAz7ZMBsMvRp1lKM0Xbskc6gzB5dLQWbWewZYMsh2OC0aPhIUx1EAerukH48u5GkJmZp4VY%2Fen7zBEDFU\"}]}\r\ncf-ray: 9781eb6b1ff35688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":826,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"55c83a614034818029ede9c8b1c035a2","sha1":"c3090069f2e88bb6b34bb1db184c566ee23fa508","sha256":"be98029dac523269f53752b8ceb98e7616f147558f93b5f0c33a3ab4db67cb7b","sha512":"66ecdaa42fe606fa9d0b5af2b0de660879679fd511f9833fe838631d6df3406ae980bc8a2951e4335a70f0599301dbe0189ca60a81542162b245eaa09376f1b3","ssdeep":"","tlshash":"8501d6d28920410f527222a969b01d37430529b4ae2a8fd00c862b0b3170eed4606196","first_seen":"2025-04-07T11:34:04.619296Z","last_seen":"2026-06-19T03:29:39.595716Z","times_seen":566,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/moonriver.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.79.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 24 Apr 2025 13:45:55 GMT","end":"Tue, 26 May 2026 13:45:55 GMT"},"fingerprint":{"sha1":"8C:61:DB:F4:59:AA:B3:DB:D3:12:E2:66:0A:25:C6:AB:C2:AD:20:6D","sha256":"72:8C:8C:F1:15:FA:11:D0:30:77:C3:1F:DA:FD:AB:28:E6:81:ED:68:D1:8B:B8:E3:EB:B6:58:30:DD:87:8B:C3"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/moonriver.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 522\r\nserver: cloudflare\r\ncf-ray: 9781eb6b7d6e0daa-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: private, no-transform, max-age=604800\r\ncontent-disposition: inline; filename=\"moonriver.webp\"\r\netag: \"78fb8d51620ff169cf177a67d94036c6\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:29 GMT\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data, Accept-Encoding\r\naccess-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=116;start=2025-09-01T04:10:44.404Z;desc=hit,rtt;dur=1,content-info;desc=\"width=32,height=32,owidth=128,oheight=128,obytes=8842;\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"78fb8d51620ff169cf177a67d94036c6","sha1":"1ff6c4425c83349d6a4ad1ac99589fb642604065","sha256":"6e954d7716418feea8d1d9ab78657c1d2a7140ad3c26df19595e2e5e4a9c0595","sha512":"532a04351e29bcc2b51344704d526c268e4b67cf60f494c4790ae90749af025606eeaf867b3069dce3c8a7eb93991d2d00cbc48243d37db98c41d0c1041852e7","ssdeep":"","tlshash":"7ef0753fc3c4a85530763f83a137336c960e3d03a6931811520f12eae4b8d066643c5c","first_seen":"2025-04-07T11:34:04.600236Z","last_seen":"2026-06-03T10:20:46.38455Z","times_seen":704,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/telos.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.79.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 24 Apr 2025 13:45:55 GMT","end":"Tue, 26 May 2026 13:45:55 GMT"},"fingerprint":{"sha1":"8C:61:DB:F4:59:AA:B3:DB:D3:12:E2:66:0A:25:C6:AB:C2:AD:20:6D","sha256":"72:8C:8C:F1:15:FA:11:D0:30:77:C3:1F:DA:FD:AB:28:E6:81:ED:68:D1:8B:B8:E3:EB:B6:58:30:DD:87:8B:C3"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/telos.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 724\r\nserver: cloudflare\r\ncf-ray: 9781eb6b8d7a0daa-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: private, no-transform, max-age=604800\r\ncontent-disposition: inline; filename=\"telos.webp\"\r\netag: \"90906ce533abebdb3c73028cb3d45e38\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:29 GMT\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data, Accept-Encoding\r\naccess-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=126;start=2025-09-01T04:10:44.411Z;desc=hit,rtt;dur=1,content-info;desc=\"width=32,height=32,owidth=128,oheight=128,obytes=8607;\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":724,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"90906ce533abebdb3c73028cb3d45e38","sha1":"f3becab3c002fa0c148502da9f78cea998cd59b0","sha256":"f40938730da4129013f9e95fe5a290ade4bfe7c4f337a0c466fa73fa5d2e637e","sha512":"01b8d621691d61d6dbfca1d3fce496285c40902ccb8ad9750d3394b7cfc59012127e268d69ad85f5c50060b7a90a6d713b9b14ad2e5d3eceedf8c0644ed0c93c","ssdeep":"","tlshash":"dd016034129ae98a5d26f8f040c3272158a5aa6b0828b7fa09487700d212a5ef0587ad","first_seen":"2025-04-07T11:34:04.630518Z","last_seen":"2026-06-03T10:20:46.350531Z","times_seen":701,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/static/language/strings_en.properties?_=1756699845081","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:50.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET /static/language/strings_en.properties?_=1756699845081 HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nCookie: cf_clearance=BVZtwUTFO5ui1gzX4ARLEC_JToZBryE8bWXpzgwsOEA-1756699843-1.2.1.1-e6lVOptK2nxtqq2BQ61g7qbH9KiU0_IfTTAjoZfU.qxWAghyh4rlwhEpuhVa400wA2FX3.SvefoOnTX_T4oQ7ZKsX9prf4n0l2JV8Ync3A5nuOCrafHIBZ2fBI2fKXUT2rp9lHwDahr6VFrnhtUo8kjPDYOWC0fkhg1FhyO3JyRVPX2VAkrppsnA_xMOAb11O8OGCuUUo.nik3Noobot5mr3jjbzzL4W84h7YyoGpQE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:50 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1173\r\nserver: cloudflare\r\nlast-modified: Wed, 13 Nov 2024 22:04:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67352262-495\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pdIEWiEth8v%2BvtRQAvZIIlEYaiILhkpC0s7Sxff2K1d%2BgCR0s8%2BongJncuRs2RdPp4ifTFYUyOZTIa43TG3CItORfrpV7HgVeMSa9rlL\"}]}\r\ncf-ray: 9781eb9339a95688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1173,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (318), with CRLF line terminators","md5":"ed5f28ecdfb7966b73f27bfcbf97d3dc","sha1":"596a7fd94d574f1d271de0c945a274ccd2bca8d7","sha256":"6d39546b2e31bda880fc877e53ae50d16c1a858b9e41999ef44828cd505f9eb1","sha512":"dccb3c7f74e9de06c6ed6f6304e461437527dbd3057376a2deabe34898538132ae5bf456ea4f3251f739ee52ceaaa41d61a257d3ddbbaeb0d8635d7b3d745da7","ssdeep":"","tlshash":"3a21ccd627010a101d523e702afa64e1d744209373f008f8c4dc4d88dabaf8aed72f82","first_seen":"2025-05-13T09:35:41.818898Z","last_seen":"2025-09-19T01:41:36.834006Z","times_seen":12,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:52.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 23:06:13 GMT","end":"Mon, 06 Oct 2025 00:05:56 GMT"},"fingerprint":{"sha1":"8A:D4:06:E3:DF:41:70:FA:F8:24:61:06:C6:AD:47:97:37:2F:30:94","sha256":"B1:0C:6E:35:A4:D2:D3:A9:97:48:58:62:89:5F:87:76:31:39:A9:9E:3E:0D:7B:F7:56:58:A6:CB:D8:05:1C:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.cowsushi.top/\r\nOrigin: https://www.cowsushi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:52 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncf-ray: 9781eb9cdda8723c-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1696\u0026min_rtt=481\u0026rtt_var=2483\u0026sent=8\u0026recv=12\u0026lost=0\u0026retrans=1\u0026sent_bytes=3225\u0026recv_bytes=1151\u0026delivery_rate=7451114\u0026cwnd=255\u0026unsent_bytes=0\u0026cid=e109e81e3c20c98d\u0026ts=153\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":52,"dns":19,"connect":1,"send":0,"wait":123,"receive":2,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/9781eb4a1a2335a6/1756699839452/s3MHYxNLkeYF-HV","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","date":"2025-09-01T04:10:40.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/d/9781eb4a1a2335a6/1756699839452/s3MHYxNLkeYF-HV HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 147\r\ncf-ray: 9781eb50689535a6-OSL\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 9, 8-bit/color RGBA, non-interlaced","md5":"6a3e6024588c710ac5945b9a2ef29d30","sha1":"11c1348372d3fe2e6e8bf3bfcf651744f51a5a3a","sha256":"0cf1a6c318e9a80b0cd5b7f0f1131dd6dc6c80ffc45e1c13e97e6b982a0966a5","sha512":"1d0f735652a17d9bd7dc28a0505bd3ab38700b67acb0c171afb8f97612c56a93a90fa85c32093949ef721644b865e829db328c370e4f17796025f4343e28ae5b","ssdeep":"","tlshash":"09c02bd0a268f6308edd1ea35d50d34ac4b31310002e5d7a7f2a6c226739ec0e64e6f0","first_seen":"2025-05-28T18:52:24.607683Z","last_seen":"2026-04-03T04:57:43.68803Z","times_seen":97,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/static/js/jquery.min.js","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET /static/js/jquery.min.js HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nCookie: cf_clearance=BVZtwUTFO5ui1gzX4ARLEC_JToZBryE8bWXpzgwsOEA-1756699843-1.2.1.1-e6lVOptK2nxtqq2BQ61g7qbH9KiU0_IfTTAjoZfU.qxWAghyh4rlwhEpuhVa400wA2FX3.SvefoOnTX_T4oQ7ZKsX9prf4n0l2JV8Ync3A5nuOCrafHIBZ2fBI2fKXUT2rp9lHwDahr6VFrnhtUo8kjPDYOWC0fkhg1FhyO3JyRVPX2VAkrppsnA_xMOAb11O8OGCuUUo.nik3Noobot5mr3jjbzzL4W84h7YyoGpQE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 25 Aug 2022 19:38:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"6307cfa2-1497b\"\r\nexpires: Mon, 01 Sep 2025 16:10:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3KyzKqsanT3BZYYnYbr3%2BWSmO4bm7Jk%2Fc2UF1vw%2FcszWwGrruzRp4Doiqa%2FbVs%2Fqlxiq10%2F4RZpbApu8XPKxIe%2BS6lgeQbM0850pNhrl\"}]}\r\ncf-ray: 9781eb6b380d5688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84347,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators","md5":"26aae2f13dc332df6e6f01e6657a03a0","sha1":"8cbb682f32cf5bf8702571399ccb57a77148f27b","sha256":"0108cf57a5359cdecc80699650b912a11731d0aeaec300d884a9d658ed96b295","sha512":"fb3c96f0ad4c712e1df1da8e8b3f687010e4722b4bea6c1f92270f03514aa6355e3fb48b0c15412423be1725c24dc5d1d2465eaf9f5c97436ec57c7d88219c9d","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98HrR:f+41hJiz6fhdlTqya98HrR","tlshash":"7883d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T12:04:04Z","last_seen":"2026-08-05T08:06:56.960568Z","times_seen":1093,"resource_available":true,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":684,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cowsushi.top/","fqdn":"www.cowsushi.top","domain":"cowsushi.top","tld":"top"},"ip":{"addr":"104.21.92.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-01T04:10:38.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cowsushi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 05:03:31 GMT","end":"Fri, 21 Nov 2025 06:01:54 GMT"},"fingerprint":{"sha1":"22:33:5B:68:99:C3:5E:06:8B:D3:4B:7A:92:5C:60:5A:05:67:89:54","sha256":"82:D9:D6:85:A3:B1:12:F3:F6:C1:C1:F2:C5:92:E2:6D:3A:42:96:28:43:9C:CF:76:04:F6:C4:D3:B8:1D:85:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.cowsushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Mon, 01 Sep 2025 04:10:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"9781eb463ec85688\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DMek6Ohjr1yqjs%2FCrdpZ1C0RkJ1%2B1KfgGWo2kp77VOSXohzZOfAC7UXeivRRjc9wM%2BQEzHd1%2FhDrDLWAjdb23oCg%2F0tFNyfEKD1%2BRuhk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9781eb463ec85688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4705,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (4705), with no line terminators","md5":"a9ed81b78a96f3434ae5cd9982633d89","sha1":"f3456baac060ef7436fd54c97cee24581c4d64c5","sha256":"04de5444c004af4bbde656617d37714580e41c77bd473808ae9efec9988e4491","sha512":"5b0e2481119a91f6afcfa6d79769b3962fe35370612a947ad120d15d983f91b9294b883de034fb8b3271a69d799c0d8d791914dc0a89a8f4f763c7dc8ee1033b","ssdeep":"96:PNybXZtIEb0EFW87IhLtQjmlrfFHrLVeKytWYzueh8AQmw:PNadBatQjYHvVeKytbyGXw","tlshash":"bca13de796111036a3bf2bf24477b268b161a37acf0790dce7e1e94c81eef078925194","first_seen":"2025-09-01T04:11:19.114736Z","last_seen":"2025-09-01T04:11:19.114736Z","times_seen":1,"resource_available":false,"data":null}},"time_used":655,"timings":{"blocked":324,"dns":305,"connect":1,"send":0,"wait":7,"receive":0,"ssl":15},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T04:10:38Z","timestamp":1756699838,"ip_dst":{"addr":"104.21.92.126","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":49458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-01T04:10:38.554091+0000\",\"flow_id\":508576149682089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":49458,\"dest_ip\":\"104.21.92.126\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.cowsushi.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.cowsushi.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":762,\"start\":\"2025-09-01T04:10:38.538537+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-01","alert":"Sinkholed","trigger":"www.cowsushi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/310614700:1756698494:zzdKjFG8yuwfjOsPBDGlh3kiNPXlSpereu5k1WffcKE/9781eb4a1a2335a6/83SqwKlbunJkXffu72M_xj9k.eIEt2doiDm68PvGBKY-1756699839-1.2.1.1-RXT7YgvRR9Sy4R4eT8c9g_0ZEfeVY1XRRAeeZpCJH4FNdLgotY6ijaUCnUKym3J0","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/","date":"2025-09-01T04:10:39.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/310614700:1756698494:zzdKjFG8yuwfjOsPBDGlh3kiNPXlSpereu5k1WffcKE/9781eb4a1a2335a6/83SqwKlbunJkXffu72M_xj9k.eIEt2doiDm68PvGBKY-1756699839-1.2.1.1-RXT7YgvRR9Sy4R4eT8c9g_0ZEfeVY1XRRAeeZpCJH4FNdLgotY6ijaUCnUKym3J0 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/qevoo/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/\r\ncf-chl: 83SqwKlbunJkXffu72M_xj9k.eIEt2doiDm68PvGBKY-1756699839-1.2.1.1-RXT7YgvRR9Sy4R4eT8c9g_0ZEfeVY1XRRAeeZpCJH4FNdLgotY6ijaUCnUKym3J0\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4151\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:39 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: br\r\ncf-chl-gen: 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$jZ3S93YdOkfHJxP5oO0bXw==\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9781eb4c8c9135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":284432,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"33e2892d9c58b6ee3b7b353f2930d8d0","sha1":"44650a41e3b431ecebf4960841529adfa95dc297","sha256":"e1fbaecfc19c7d8432ee7fea76999c2a902cdb7356282ccff6da526f915045d8","sha512":"4836a06a12cc1dbe4fce713d856c148bc7a124c887ee714ea6515760bf2dfe0e6dd65431f7322e95134578633b031169555944c3c79a76a36a3a4d836a6dd9e7","ssdeep":"6144:yta5TiUCQstaEwtRBdpiB2xwH0BA0Yn5gd1Olr:yY4BmBdpjwH0BDjz8r","tlshash":"d154236faea36b8fc180542731916622a514157d3016b9e4bfe53ecbb1cc80ebf5c4b6","first_seen":"2025-09-01T04:11:19.116419Z","last_seen":"2025-09-01T04:11:19.116419Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_48,q_auto/https://app.sushi.com/images/chef.svg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.79.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.cowsushi.top/","date":"2025-09-01T04:10:44.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 24 Apr 2025 13:45:55 GMT","end":"Tue, 26 May 2026 13:45:55 GMT"},"fingerprint":{"sha1":"8C:61:DB:F4:59:AA:B3:DB:D3:12:E2:66:0A:25:C6:AB:C2:AD:20:6D","sha256":"72:8C:8C:F1:15:FA:11:D0:30:77:C3:1F:DA:FD:AB:28:E6:81:ED:68:D1:8B:B8:E3:EB:B6:58:30:DD:87:8B:C3"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_48,q_auto/https://app.sushi.com/images/chef.svg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowsushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Sep 2025 04:10:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 494\r\nserver: cloudflare\r\ncf-ray: 9781eb6b8d7e0daa-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: private, no-transform, max-age=604800\r\ncontent-disposition: inline; filename=\"chef.webp\"\r\netag: \"38ea5c1f6ca42ffe426f0f892036aba2\"\r\nlast-modified: Sun, 23 Jan 2022 00:32:41 GMT\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data, Accept-Encoding\r\naccess-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=116;start=2025-09-01T04:10:44.411Z;desc=hit,rtt;dur=1,content-info;desc=\"width=22,height=22,owidth=22,oheight=22,obytes=93196;\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":494,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"38ea5c1f6ca42ffe426f0f892036aba2","sha1":"5551bd6aae36e9bb9bc0a9bba0232785d5b27c7e","sha256":"ad0a76c89956fcf0505aab998d9f9f9c51b2ad958d75ddb99c140025ac9e6371","sha512":"c34f106c7130b3b48f3d8ccaa58468c503302c489d66de41b96347fd0d830184c5902ce0363a15c86404ce917a796d32ab6b580c175f201887aec4a6e9f96a24","ssdeep":"","tlshash":"d3f00e35608130ee4d5351646ca33ffa2b4a18b584513583d9384a84252d654c73a86d","first_seen":"2025-04-07T11:34:04.610001Z","last_seen":"2026-06-03T10:20:46.347924Z","times_seen":706,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}