{"report_id":"133dd6da-8464-4608-962c-762c61dd6e70","version":6,"status":"done","tags":[],"date":"2026-03-03T16:15:49Z","url":{"schema":"https","addr":"tomorrowfix.xyz/","fqdn":"tomorrowfix.xyz","domain":"tomorrowfix.xyz","tld":"xyz"},"ip":{"addr":"104.21.11.13","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"tomorrowfix.xyz/","fqdn":"tomorrowfix.xyz","domain":"tomorrowfix.xyz","tld":"xyz"},"title":"Tomorrowland | support","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"tomorrowfix.xyz/","fqdn":"tomorrowfix.xyz","domain":"tomorrowfix.xyz","tld":"xyz"},"ip":{"addr":"104.21.11.13","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-07T16:15:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"tomorrowfix.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"tomorrowfix.xyz","ip":{"addr":"104.21.11.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-01","domain_rank":0,"first_seen":"2026-03-03T16:15:50.118673Z","last_seen":"2026-03-03T16:15:50.118673Z","alert_count":3,"request_count":3,"received_data":5668052,"sent_data":1465,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tomorrowfix.xyz/","fqdn":"tomorrowfix.xyz","domain":"tomorrowfix.xyz","tld":"xyz"},"ip":{"addr":"104.21.11.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"be1682ea0fd836f2b03b323994fbc918","sha1":"eaf59a8815af7a25b98c0d7e08168b2a138a86ea","sha256":"b90549b7d0046d6055c33be3b9516888f6e63a9083d05fff8ddcc0b56738a88f","sha512":"45a819813bfe4bf192119ccbca92d9e27e9aa8174d4906a48ca143ed88754f53fe4d5a9f8bac89ed8e7254ceb9c77459cc0683fa332bc0fe79be273d926689c7","ssdeep":"","tlshash":"a3c08094c6745da4592c14df603476f472906d6d5541a0d7c3fcad4fd4dcd810f95d10","size":186,"data":"","first_seen":"2026-02-27T06:27:08.100772Z","last_seen":"2026-03-22T14:54:39.542253Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tomorrowfix.xyz/secureproxy?s=%2Fipfs%2FUMyYwahlp3lTlxv9o_ZiOQ731e54709897f716b61ec985684b9dfe%3Ft%3D1772554527068","fqdn":"tomorrowfix.xyz","domain":"tomorrowfix.xyz","tld":"xyz"},"ip":{"addr":"104.21.11.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd93ffe6eee7d524176b48206162e18a","sha1":"cd83f6c4d2ba31443008a470a3b60040d5d2a76e","sha256":"16246d93490169e495c44623596f2fd9e9360ad028a077ab277f18eb6a251c6b","sha512":"198513e9d33b28ededba8a6c65c9d3ee899186fce7061e0f2fcd8c2e47bcc2348a2dba4a6e796c3c4e9884c0c4597d3380846d99d3addfb2280b1613603cffea","ssdeep":"6144:fh5gDuJjJJhOb1ntpwro5gxPoGeDtGXsdnrZtF6VHp3JTa:nsu9XhOb1tpDWPQdnrr","tlshash":"3dd4aac8873a967b44a013a7053792bfbfca0d7da24f8c607ac09cd2da6571e92f455c","size":610094,"data":"","first_seen":"2026-03-03T16:15:53.088281Z","last_seen":"2026-03-03T16:15:53.088281Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tomorrowfix.xyz/","fqdn":"tomorrowfix.xyz","domain":"tomorrowfix.xyz","tld":"xyz"},"ip":{"addr":"104.21.11.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-03T16:15:26.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tomorrowfix.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:06:18 GMT","end":"Sat, 30 May 2026 03:06:17 GMT"},"fingerprint":{"sha1":"F6:8C:1E:1D:23:83:4E:36:D8:55:D0:97:62:00:EC:51:4D:B0:2E:BE","sha256":"DD:A6:35:6E:B6:B9:69:7E:E5:EA:13:E1:25:25:73:03:51:9F:BC:0C:47:A2:D6:F5:D2:AF:E7:31:B3:68:66:AD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tomorrowfix.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:15:26 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 01 Mar 2026 03:32:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aWBfhz3LJM%2Fl3L2BHQVb89Q95yAipkUzLFGXcskNO%2Bg4mBLupCBQA%2FzrfJLjqMlFy1ldQTPmu3y9nVeJRB97XGIVKuybMbVpX9mrjSwo8A%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d69f0a02ea0562f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5054141,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (44484)","md5":"0a568452de385d1f22c1a3edbb8c0e21","sha1":"34138218d3ade9009b982028705cd0229cd7704e","sha256":"490d2c82776a85d2ffa0a1cf215cf183f7bc28609df357eb27cf90eee01cfae5","sha512":"ebc5c023e10a28d7f6134b7d56118d294d69c9fdddcb27c9e3463cda7055bd7214ccd04c33979116c29dbba66a0aaf58ad0cf947e082f8d9fcbd0b541e18ca00","ssdeep":"12288:tDhqF7lTYhqF7lTvhqF7lT0hqF7lT5hqF7lTAhqF7lTiho:nq9hKq9hpq9hWq9hjq9hSq9hMo","tlshash":"83255597ed9eb04b992488207eda1c8d1e4f57d67cc6549dc82bfed8c98a49330f04da","first_seen":"2026-02-27T06:27:08.098108Z","last_seen":"2026-03-03T16:20:13.604968Z","times_seen":3,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":90,"dns":66,"connect":8,"send":0,"wait":199,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"tomorrowfix.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tomorrowfix.xyz/secureproxy?s=%2Fipfs%2FUMyYwahlp3lTlxv9o_ZiOQ731e54709897f716b61ec985684b9dfe%3Ft%3D1772554527068","fqdn":"tomorrowfix.xyz","domain":"tomorrowfix.xyz","tld":"xyz"},"ip":{"addr":"104.21.11.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tomorrowfix.xyz/","date":"2026-03-03T16:15:27.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tomorrowfix.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:06:18 GMT","end":"Sat, 30 May 2026 03:06:17 GMT"},"fingerprint":{"sha1":"F6:8C:1E:1D:23:83:4E:36:D8:55:D0:97:62:00:EC:51:4D:B0:2E:BE","sha256":"DD:A6:35:6E:B6:B9:69:7E:E5:EA:13:E1:25:25:73:03:51:9F:BC:0C:47:A2:D6:F5:D2:AF:E7:31:B3:68:66:AD"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2FUMyYwahlp3lTlxv9o_ZiOQ731e54709897f716b61ec985684b9dfe%3Ft%3D1772554527068 HTTP/1.1\r\nHost: tomorrowfix.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tomorrowfix.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 16:15:27 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"94f2e-zYP2xNK6MUQwCKRwo7YAQNXSp24\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=gfNniGXsiNEEqjtqhTtv7g.js\r\ncdn-proxyver: 1.47\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/03/2026 16:15:27\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 4fbaf75e03c4d2b73c4760aefa781bfc\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2FE2vocgVtGdqwhQSwVGJr%2FRD1J5sYbTdmu8QW11xBrjd%2Ft8%2BnWrCR8aQvGTaR7pFE%2Fd61KyAtpPenT3fobebARefg%2BD%2FuZQopxZUDX%2B%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d69f0a24c55b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":610094,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bd93ffe6eee7d524176b48206162e18a","sha1":"cd83f6c4d2ba31443008a470a3b60040d5d2a76e","sha256":"16246d93490169e495c44623596f2fd9e9360ad028a077ab277f18eb6a251c6b","sha512":"198513e9d33b28ededba8a6c65c9d3ee899186fce7061e0f2fcd8c2e47bcc2348a2dba4a6e796c3c4e9884c0c4597d3380846d99d3addfb2280b1613603cffea","ssdeep":"6144:fh5gDuJjJJhOb1ntpwro5gxPoGeDtGXsdnrZtF6VHp3JTa:nsu9XhOb1tpDWPQdnrr","tlshash":"3dd4aac8873a967b44a013a7053792bfbfca0d7da24f8c607ac09cd2da6571e92f455c","first_seen":"2026-03-03T16:15:53.088281Z","last_seen":"2026-03-03T16:15:53.088281Z","times_seen":1,"resource_available":true,"data":null}},"time_used":816,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":730,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"tomorrowfix.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tomorrowfix.xyz/secureproxy?s=%2Fjmpd%2F","fqdn":"tomorrowfix.xyz","domain":"tomorrowfix.xyz","tld":"xyz"},"ip":{"addr":"104.21.11.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tomorrowfix.xyz/","date":"2026-03-03T16:15:28.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tomorrowfix.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:06:18 GMT","end":"Sat, 30 May 2026 03:06:17 GMT"},"fingerprint":{"sha1":"F6:8C:1E:1D:23:83:4E:36:D8:55:D0:97:62:00:EC:51:4D:B0:2E:BE","sha256":"DD:A6:35:6E:B6:B9:69:7E:E5:EA:13:E1:25:25:73:03:51:9F:BC:0C:47:A2:D6:F5:D2:AF:E7:31:B3:68:66:AD"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: tomorrowfix.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1366\r\nOrigin: https://tomorrowfix.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1366,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QB3QKvAhEAFwDGAv8CEQDuAhcAAAECCAMAAO8nhn2XtsKCAdizl_FXoJ97uL35QmYCAABrGholXgrZkl5BrUO-zgORuHjXSOiAgUjuvnX9SJc5YwEdMi0Lx4FdFltNc07AX8WyxuP51O-azs0A3Rk_aJFZWJ1YwJLobgETn5Ar_5PCad4clzJ_agPSWx57oZ3-8nMJORJNHvoXbh_GXvq4hmksIZf4LjtTUvnnJwkTh6750MH9nNR8zICRzh31f-LnX-GDFZUAl6TICt5Ue6FtAiSWP3V8978h2hN143QAKoaE9L2QmSMjl7Xx7DkF0rI3Kd3pNdvJUKwXVvEqPf97uxvprviYP-5UL_PAuttpf_L3DUKb5B7gP_OkVoPe-Q63RqXMSQWUG_7vLcoLIrHWivtn4_JeEwWOJNJHFIPUk19jqtZMrBUlWkwVlQZCXKOXa8NUg8Hn5tYr3jWH1zRXrt8Tq5XNvDr4Qg9GvVv2RceimnxSN1FoKSUls18QjrJh6AVd9n5x_cNkfOImurL9Tik_oAsFDoz6enLuz3Jg8H39WwwXx3CPC88GLU1PCb4ImcrGq5aJzi-06XtGpF9VB31AOqsooBYRNGwI0W5lQ7bQBh_oaw323-y862ZKrIntHjtKok0Cst8qGbyUIe0k5EGyjfHUtycOvxKVDTbTCJB_QJ-dUh895Haob2FVHSPmz8xIn85mQC_dukM_uAtEvBJuRZxl2v8aKWSmiSqQuMpyJcHYr4dgpYIJhGMyRzWsnuquC9I9gGe0IftK0z_1EmVvGC-kXjJt2cYd1NI3GxTh34PkCNNXwg5R8GsYjzsrrgf9GWAkevrV1r5m073Cv7sEo431_Bv6JwggP9z4hL1cTBwsGfX3Y9wARQPKFuQtvBw98kQpk7hV8K4KAh863peSiAiC_TQqfkG9UqIOiw7-9kukXEqpjawGzWQesRxum1rCi6GvG2BHtIn9dBhQL__aWbYnzc2Zrh6VaN-kgDMEjzVDxA5BC8lYdEo08vURKTZm_IWmNrISqq0GcP-tuzi6PZ3anr76nmDwjgFSt-7Mldjfh8BT-ZQTDMdlXOF3WgYkRvx5lOKsXO4eCKHK6ogxwRjpWzl3A39LjkXvG-rKEA\",\"challenge\":\"eyJpZCI6InFUYTJvS0dwbWs0emM2MU5nMTJBN1EiLCJub25jZSI6NTkyLCJoYXNoIjoiMDA0YTJiNjVmYjE5MTRmZDFjNTE3MTczNTg2ZGI1YmE2YjYyYjRmNDc1OTBjOTVlNDlkZDU0OTQyNWNhNTdkMyJ9\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 16:15:29 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1772554588833\r\ncdn-proxyver: 1.47\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 03/03/2026 16:15:29\r\ncdn-edgestorageid: 879\r\ncdn-requestid: 71b048a05e24d0cf185ff0d36bd824dc\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W1U3aUMC48NV0tgR6eO1SQVUJRwvz3abnmb4Fc52Telo5fhEsdzkVUiUo%2FUAZhedcTmyhuvTyMf6E7%2BSDqF7TEdhAyVMR82JhJ%2FHzvtvNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d69f0ac4e81b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T15:09:47.269258Z","times_seen":16181626,"resource_available":true,"data":null}},"time_used":798,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":798,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"tomorrowfix.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}