{"report_id":"157cd60a-78a6-48bd-8145-160254caf0f3","version":6,"status":"done","tags":["suspicious"],"date":"2026-02-04T17:23:51Z","url":{"schema":"http","addr":"testttdomain.com","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"172.67.150.224","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"testttdomain.com/","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"title":"Axiom","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T11:42:47.151275Z","times_seen":17778321,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"testttdomain.com","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"172.67.150.224","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-11T17:23:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":2,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-04T17:23:22Z","timestamp":1770225802,"ip_dst":{"addr":"173.231.16.77","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":37690,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-02-04T17:23:22.240194+0000\",\"flow_id\":668827348744989,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":37690,\"dest_ip\":\"173.231.16.77\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api64.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":917,\"bytes_toclient\":1654,\"start\":\"2026-02-04T17:23:21.965405+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"testttdomain.com","ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-27","domain_rank":0,"first_seen":"2026-02-04T17:23:54.073824Z","last_seen":"2026-02-04T17:23:54.073824Z","alert_count":36,"request_count":35,"received_data":3974621,"sent_data":16509,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-01T22:17:46.954894Z","alert_count":0,"request_count":1,"received_data":8267,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"axiom.trade","ip":{"addr":"216.230.86.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-12-24","domain_rank":16487,"first_seen":"2025-03-16T21:52:10.36043Z","last_seen":"2026-01-30T03:13:11.913606Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":450,"comment":"","tags":null,"fingerprints":null},{"fqdn":"connect.sol.ms","ip":{"addr":"104.21.12.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-10","domain_rank":0,"first_seen":"2026-01-18T23:46:03.161332Z","last_seen":"2026-01-26T19:16:44.257611Z","alert_count":0,"request_count":5,"received_data":870243,"sent_data":3262,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-01T22:14:44.580478Z","alert_count":0,"request_count":3,"received_data":148101,"sent_data":1671,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api64.ipify.org","ip":{"addr":"173.231.16.77","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"domain_registered":"2014-01-05","domain_rank":26688,"first_seen":"2020-08-17T05:58:17Z","last_seen":"2026-02-04T16:02:53.692568Z","alert_count":0,"request_count":2,"received_data":386,"sent_data":800,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"87qma2.vercel.app","ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2026-02-04T17:23:54.078393Z","last_seen":"2026-02-04T17:23:54.078393Z","alert_count":0,"request_count":1,"received_data":866330,"sent_data":591,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"87qma2.vercel.app/demo.php?antibot=false\u0026id=69749f25be1ff7d4492e9a7f\u0026source=solana-iframe","fqdn":"87qma2.vercel.app","domain":"87qma2.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c74d678c09ccd04c4002631d971e635d","sha1":"39a4ed131aef483809dee9bdfcf832e082ceff8b","sha256":"c0b8e849f90e660c02067b9eb63816818ad24898dd4de84dcb330645ae3fa58f","sha512":"6d9848a5cd89f9b93af023c672a4201bd1397cfdc66f9d89f9f3fcebe4ff24e9ae08d508eb4de39be66699823b546671ba9c3c0b7f1cb9f2049166ae9b6c386e","ssdeep":"","tlshash":"9021d01ba5936471f867306e678bf60531375847810ede047e0c9d017fa5116873e6da","size":1410,"data":"","first_seen":"2026-01-23T08:43:12.733168Z","last_seen":"2026-02-23T18:49:41.962159Z","times_seen":219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-08T11:41:15.78216Z","times_seen":416397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4e44ab098e8619a81eff1ae0874defd1","sha1":"457d8d5f1a7ee5d82c5152ae8534acde4794813a","sha256":"e704eb051c9617585856e309667b4839d5a753df24016841fcf9d4c325c992bd","sha512":"94a962d1ec779427627631a80892aecb85c59c2990695c287a23f6f1abe6cb62ac10de394afb6c93e25eacce4341ef3c329f6ae29c29eda6ae6061883899cba6","ssdeep":"96:x1GTFGKLAbwozKRi/gwEUG4K5pWzMdiZB4724qQ4q/qu3Q5KUDQ5bi2IcrYtxtc7:x1GhXu1m44wclRa47223QpQ+cuE","tlshash":"8302b799ffe22276b5ab706a175fa30c72761007200ccd24b5ad87003f59ba591bbfd9","size":8877,"data":"","first_seen":"2026-02-04T17:23:59.363866Z","last_seen":"2026-04-01T17:55:36.998655Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"269184e3504aae95e2b0ce7666438b00","sha1":"a6802ee4c1021b344ee662a82068467329d50fd9","sha256":"2ab42cf0412a38c90d3d9ca5ac3f441f89a0db07f5e04ced3b3cca4d5f164f62","sha512":"e08b1f8d74ebbbad7f7a059ae8e0275d8bd6e9b94faf9bf9b2433b84a8be65e760962485bbb5be78cf36d6190ea356b4e2c14561557a80935f99105a52d99b5b","ssdeep":"","tlshash":"96c0120970746566048e786d08cf08897f268412610849c599dcc8547fb1e6942b084c","size":173,"data":"","first_seen":"2024-12-04T06:49:00.889058Z","last_seen":"2026-07-07T03:07:15.491632Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/noir.js","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a4dc9245b1a39f990d5a2c4febf4fb4","sha1":"6523f04c94adc956226f645947b4204f2605be4f","sha256":"368075e0dfad22fdaae53833dab10691b6f75415ce8bf2cf074da1637b13542d","sha512":"4a7455c1bb24f7841175d9a9ad52da6d3e462f878a8acb783d63bd834448297b32e2ccbfbde0d384861e191e79f8534f62417d0c9749c7d01d96e5c8d5342af2","ssdeep":"192:/ocdYtm8btr7Z9K/JDNg2R41ypRYa8v/ncNR59zzB67tyBmpmYpN5ZmGCWy:/ZSmytrWA2R41MYawncNR59HkByBmpnw","tlshash":"90321aa6cd8f3a41cf644a0511ed2dc9081e77daa8e240cdda0afbc99a5f57708dc1ec","size":11943,"data":"","first_seen":"2026-02-04T17:23:59.331778Z","last_seen":"2026-02-04T17:23:59.331778Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-08-07T09:08:54.699482Z","times_seen":3238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"87qma2.vercel.app/demo.php?antibot=false\u0026id=69749f25be1ff7d4492e9a7f\u0026source=solana-iframe","fqdn":"87qma2.vercel.app","domain":"87qma2.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f63013371bd2d34a2318601e68419962","sha1":"f159fd38a15ff31f44d35485aa5cb3cd46eebb93","sha256":"a35a2499c3b908347a2381cfd3d726340b69b3a178787e4d3a6661456e7f61ae","sha512":"c6807be680fdf8358d0987cac0d9e3a662ac36ad3161d14f0c049608c861e7281aa6e9e96b92703562af1be881485924aedffed6887dd2014c912e0cfaf76c1f","ssdeep":"","tlshash":"0bc01207140928a221ea9505bb62b581bd22621f2c909050ae79928a1f209d7d5b494d","size":178,"data":"","first_seen":"2026-02-04T17:23:59.366021Z","last_seen":"2026-02-04T17:23:59.366021Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"87qma2.vercel.app/demo.php?antibot=false\u0026id=69749f25be1ff7d4492e9a7f\u0026source=solana-iframe","fqdn":"87qma2.vercel.app","domain":"87qma2.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d56c10435676bd51139e13db65bfc0a","sha1":"5b4ab2f002beffb85b226a41a4f220218f7af910","sha256":"cfdc31eacaac5b44abdc84d01f3814bbe88207debd34f86e6dd2bfbcef93da3b","sha512":"7b819bd7f4315bf3f8952e37fda5f6f6ae0c616731d003e2aad79111572f79a6e78fcc9e01fa5584b58b1399b2099e513d2d7a301df7a6e6382a3b035be5ed3d","ssdeep":"6144:fP+FkTVOoKRswOLEyV+dKEqdmsg4XBwnpQCNvmsjcaQhQiI1rcWnMQDvN5K12/Vh:wOLEyNWh4XBwnpQamsjHRrFBNL/jsC","tlshash":"57052a8ab39070b1439715e501bb510bf23dbd58740a44bcf75ce8f62bb9989a53af38","size":861432,"data":"","first_seen":"2026-02-04T17:23:59.367042Z","last_seen":"2026-02-04T17:23:59.367042Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"testttdomain.com/","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-04T17:23:18.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZWWPD%2BG5aLNvEdt4uZE8YJL2jkuVHwmcU9VBHnwjW0QaDKvrMXdT%2FoC3LA7nWYwXdG%2FXFHhXXmdlC4cbH1DBEoa%2FoSdN25H%2F6W3hQ6F9wXQ%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c8bdae6dd8d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67551,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (37417)","md5":"8d9c166a1eb500767071a736db97d37e","sha1":"610a6c511336f086b1d87523da580440a975c846","sha256":"6f662e1f487906f857041fe2d115f166b81abd7995a4da5d861e114971890469","sha512":"eb6b88fc4072f92bb5aae242bac09f37a17e6a27a8dc02f51725fea00a166398ddb5b19a81901d80e488b7d9d314b81321bd39ed946d34f4fff70d4e4f976d9c","ssdeep":"1536:BPlpzqyrYiJ/sUfTAKFU/ununK16Wo/3pLp2ucQJdfSUpUvzoCx:VzqcJnunK16WofpFjBbKcG","tlshash":"42638464a1201a3b770f41fe95d8dfdd6251b600ca13f90d73bc81a6a7cecb24db6668","first_seen":"2026-02-04T17:23:59.326202Z","last_seen":"2026-02-04T17:23:59.326202Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":30,"dns":5,"connect":1,"send":0,"wait":175,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"testttdomain.com/perps-image.webp","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /perps-image.webp HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 107086\r\ncf-cache-status: MISS\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"975b52a4a770c0e67f8fd43d70ef72a7\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NhLocHog5SfTK%2FKmJVDKfmgtQ6HO3oaIh2N2C7bjr%2B4%2B1TcX4AuaVi1L6ooSJGEusf7EgHnSJtma9smlqrwE2sP2K7nPhcw40vFc%2BxpgZzM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c8bdae92969568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107086,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2504x1360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a0e599c0d2bb569bef8e5063a026b06c","sha1":"d2c9c7e034fb0c65dffe37385bfa2a0a72bbcfc8","sha256":"ffbd20c89f947373d072ca4f06e7abfc435e3e5d9b4623c811dcee82532d8a7e","sha512":"9b364ac8744224ed830722ed7931cc67cf9bf00df4d44ab4607c0f47f84fef318e108455f19d7924a079c98c85e78544a3c7b3d3a0d08cd9c408d598e07bea68","ssdeep":"1536:Ew0lqitP5xsMjTPP30NH3y7P4x3lFrAvTBpyxG3D+QF+1erONLhYZTVp/9cJNRC9:IlqcBjrqA4xfrCp5D+QF+1WrL/9UNwcQ","tlshash":"1ca3121486e8f12fc5f3c4ff714a9c1190889789b460ee52dd694cab9168f3a5cf278b","first_seen":"2025-03-16T21:52:20.823659Z","last_seen":"2026-07-13T01:06:07.95072Z","times_seen":219,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/y-combinator-brand.svg","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /y-combinator-brand.svg HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Wed, 04 Feb 2026 17:23:19 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0SgWU1isbACuodQVMzeS8K0t2lSoPgjOl3x5TkyczqbevAUCVbF8ON6oeEMlSoabAsH2oWEPTKf%2BjpKptJRerxvK1nJqFqrwn3qaU61k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"168d4692873878f2dabe4e8d11ad1921\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c8bdaeb99a2568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12235,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"786f1a6a3e4c065c7a3ee52f83dd9996","sha1":"3fe2e3b54a874b37d53b1bb6fab0616fd28ffcf8","sha256":"4abac8191dad95b84b1dbdf7acbb49a74af8ace7ddf3e5ec4e22b223b825bf6c","sha512":"a30cf2c5963ce9c4fdbfbf38568250479c4604b60125093c0e5f57d34a54b949d6f990a42f2f35dcd2bddf58c4eff31b5ec243435d184cbc1e7b1b250b659799","ssdeep":"192:b5yVztN8hLtiVm0yDmCY/9wORR2Hd6i8+gqsfwjyzyanWeir9eeLWYN4BXGKzi05:dUXsLZYqsR2HdB9jyzya9g9fL3+YKZ5","tlshash":"43421fef9bc8b2d0f102f3f4e42644b57a5f24bb67d2c710c3a59e8469464acc98dc84","first_seen":"2025-03-16T21:52:20.837477Z","last_seen":"2026-07-13T01:06:07.94213Z","times_seen":223,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/hero-video.mp4","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:19.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /hero-video.mp4 HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://testttdomain.com/\r\nRange: bytes=1376256-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 31208\r\ncf-cache-status: REVALIDATED\r\ncontent-type: application/octet-stream\r\ncontent-range: bytes 1376256-1407463/1407464\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a4bf0e8c8f9e37acc8fa6852e5ebe330\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a64WGlAoMrvVnsfHnQbCesvi%2FhJnrtSNUz98QdysIQyDz%2FnwN1gNmqMnnU1gaiNALinQgmqP7S5crCk8b%2B4ipdIPzRA38R7HZMifpiYp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 04 Feb 2026 17:23:19 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c8bdaec99b4568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31208,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"55a63b7c576c0a981dd14e3b1f6d2813","sha1":"8259704ba1709e000a788c44b83dfdc8a749e6d0","sha256":"a0240abdd6e28b84ec79f990d38585c9e678d23504694856e9e99781b1710e69","sha512":"9932e56fbd7839975fc4cd507f0f3ea92a05b40bedbd505a5da7214ec77d5ed972e6f1488ad3abaeee7513669b65f3f1cc56260950aa1cefcb43f168b0f6d5ef","ssdeep":"768:/PQ7qiKJCIvBIV89O71vGrgzp7XiSRDP3xviHtc:XQuvvBa8A71vRVGSx4S","tlshash":"f8e25942ab34019bc428037c94f3c340bb71da61ab93575fd79073b8bca27799c925ea","first_seen":"2025-09-20T16:31:15.457806Z","last_seen":"2026-07-13T01:06:07.914111Z","times_seen":21,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://87qma2.vercel.app/demo.php?antibot=false\u0026id=69749f25be1ff7d4492e9a7f\u0026source=solana-iframe","date":"2026-02-04T17:23:22.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:02 GMT","end":"Mon, 06 Apr 2026 08:38:01 GMT"},"fingerprint":{"sha1":"00:CB:E3:62:3C:86:A7:11:87:F3:A6:90:20:C5:3B:40:22:3D:A4:45","sha256":"95:06:BF:37:D3:97:28:E3:54:05:91:BE:0D:2F:72:C7:C5:B0:4B:1C:FA:A1:FF:85:13:D0:DE:4A:8F:A2:55:1D"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 04 Feb 2026 17:23:22 GMT\r\ndate: Wed, 04 Feb 2026 17:23:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7575ffd6532e96f3830de7bc9efc8544","sha1":"348ab893b08a4854b7715fcabf3843a26e15ed9e","sha256":"a10e7cf1445dc2d00971db17adcd20ec035a11211c982265f321e6658501b15b","sha512":"1fa9e882de10d071f440582aa2594802d406d9e2c484e1e6971e6b8ac3f02f81aedbe6e09689412296c7bf0d461bafbf223b09bd00227d84e6c003c23aa8adc6","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlx:vXuM0pR","tlshash":"e0f17792002ba400ab971dc223cf7f3aaece50896085d1b95ffd0dc59ceed66436876d","first_seen":"2025-09-11T07:42:16.456799Z","last_seen":"2026-08-08T11:20:51.406332Z","times_seen":9220,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":139,"dns":1,"connect":29,"send":0,"wait":46,"receive":0,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axiom.trade/images/app-icons/180x180.png","fqdn":"axiom.trade","domain":"axiom.trade","tld":"trade"},"ip":{"addr":"216.230.86.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:19.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axiom.trade","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:45:29 GMT","end":"Sat, 02 May 2026 22:45:28 GMT"},"fingerprint":{"sha1":"01:25:DC:C0:B6:72:9F:09:95:95:FF:C3:5D:AA:13:48:02:BB:98:4A","sha256":"EB:97:2F:6B:0E:BF:C3:59:4E:F5:7C:7D:43:DE:01:4F:26:C0:AB:12:70:D2:67:AF:AA:BF:6B:DD:00:BE:95:AD"}}},"request":{"raw":"GET /images/app-icons/180x180.png HTTP/1.1\r\nHost: axiom.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T11:42:47.151275Z","times_seen":17778321,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":1,"dns":2,"connect":1,"send":0,"wait":122,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/noir.js","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /noir.js HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YvNSiEXB2nEiJ4yRe5ROxAImZWmQ9dmwAWeOE6VFcm92msTk8BTwKHvAoENATfTX9Ul4dtANkup1TiiLIKoidUqBpAFlkYBo0gZef1ut\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f45afacef756429b2d06fd6d3c11ec97\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c8bdae92965568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11943,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11943), with no line terminators","md5":"4a4dc9245b1a39f990d5a2c4febf4fb4","sha1":"6523f04c94adc956226f645947b4204f2605be4f","sha256":"368075e0dfad22fdaae53833dab10691b6f75415ce8bf2cf074da1637b13542d","sha512":"4a7455c1bb24f7841175d9a9ad52da6d3e462f878a8acb783d63bd834448297b32e2ccbfbde0d384861e191e79f8534f62417d0c9749c7d01d96e5c8d5342af2","ssdeep":"192:/ocdYtm8btr7Z9K/JDNg2R41ypRYa8v/ncNR59zzB67tyBmpmYpN5ZmGCWy:/ZSmytrWA2R41MYawncNR59HkByBmpnw","tlshash":"90321aa6cd8f3a41cf644a0511ed2dc9081e77daa8e240cdda0afbc99a5f57708dc1ec","first_seen":"2026-02-04T17:23:59.331778Z","last_seen":"2026-02-04T17:23:59.331778Z","times_seen":1,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/css2.css","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YBWj12ifTRtQcwXVd0WD4m2RDHZA3PaQDiW6A0kESujBGJ5uSdQUq1tHvwzvI%2BsRi0VoWaxvtWn0qrAf9tRDn8z9VdXg8L7jk3AuhxdzrVI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f37bb0085d645c53fb43c3850a7ff563\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c8bdae92964568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7628,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a945690afba190bdf35bdbc8dca91152","sha1":"d93d79ba5c4ff541fb62d683c5d6b488b9f53ba8","sha256":"e3588f89e8f3d36d7befdcd1ad777d37963acce98132704f84f1d7ab2d5e1b4b","sha512":"72a22e14d311d595ee72e60b3ae2692c0cf6745594fab8f6f60c522f0f91a227d67e0dbbbc34e4fdfae78e152a29498981398ad2f56e511e7abe26664268a393","ssdeep":"192:9/NAPt34yaDD/OnIt3/ha8G/rKht3iIall/E5yt3RPaGc:JwSfyGKVm","tlshash":"ebf14490046b9400eb872cd277cf7f376d9da148a045c9795ffd1898acded2613a1b4d","first_seen":"2024-12-17T11:31:53.647668Z","last_seen":"2026-08-08T06:10:42.864095Z","times_seen":627,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/axiom.woff","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /axiom.woff HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://testttdomain.com/bd50b303cf537142.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 7572\r\ncf-cache-status: MISS\r\ncontent-type: font/woff\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1d37cca6f234db980ae801f9af236200\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pMt2cmLLSF0r4ti4OZNIQ4pQMlNHDDGhbiq%2FWhxfQ7w460uOv0SI%2B3ZyAqtHlXr98jO%2BUai57lOIsC%2Bsh3dqvLtHsgY2CFFV82A2Jq06\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c8bdaeb1996568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7572,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 7572, version 1.0","md5":"ac87f9faf3ebf44b1641f9133d827a3b","sha1":"ab5c4aa910175617e3d37baa15980fa63f303c47","sha256":"360dc9b890cde5b1562b92872722ee73d958b5c87b4291329c78ab7072cdb5ef","sha512":"2aa9d6334c6136e1a77dcf22aa93221059f9cc9b80568aaa7e53a1305db499850779cb34cc968d7e70f7e5cb3af81cc00c2708828cacdcfe4424dc521514a466","ssdeep":"192:QD45h5TOsVEJ+OR3yjwFKfTIAR7JnuBreZvCO+z/gK:QD8OLF4Tn7JnuRe5+d","tlshash":"09f11a67ab49ef0ae4e301f98825a3414fe3e425933dd7d2a5c68d1a90098d45d3cbee","first_seen":"2025-09-20T16:31:15.433162Z","last_seen":"2026-07-13T01:06:07.919097Z","times_seen":25,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect.sol.ms/config?source=https://testttdomain.com/","fqdn":"connect.sol.ms","domain":"sol.ms","tld":"ms"},"ip":{"addr":"104.21.12.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://87qma2.vercel.app/demo.php?antibot=false\u0026id=69749f25be1ff7d4492e9a7f\u0026source=solana-iframe","date":"2026-02-04T17:23:22.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sol.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 13:14:54 GMT","end":"Fri, 10 Apr 2026 14:13:18 GMT"},"fingerprint":{"sha1":"23:13:25:E8:BB:B1:A7:64:03:A6:FA:74:FE:64:83:16:36:18:78:2F","sha256":"09:BC:C7:26:D6:B6:3E:5F:F6:A0:08:0F:2E:59:DE:F1:93:17:47:57:05:FE:C4:42:22:CD:D7:A4:86:1B:45:B7"}}},"request":{"raw":"OPTIONS /config?source=https://testttdomain.com/ HTTP/1.1\r\nHost: connect.sol.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-client-source,x-config-id,x-data-check,x-fingerprint-id,x-unique-client-id\r\nOrigin: https://87qma2.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ndate: Wed, 04 Feb 2026 17:23:22 GMT\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z8coMVyxW1vyefugak9WzujQZv5L7ksrAeoJdnpg2C%2BVTdlvbjd6GU%2BBFvxSyEOpbVaF1P81LP1Wl0eNsMXLs1k7c207xNiU%2FinCNQ%3D%3D\"}]}\r\ncf-ray: 9c8bdb01cb68b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T11:42:47.151275Z","times_seen":17778321,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":19,"dns":1,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.sol.ms/visit?source=https://testttdomain.com/\u0026wallets=","fqdn":"connect.sol.ms","domain":"sol.ms","tld":"ms"},"ip":{"addr":"104.21.12.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://87qma2.vercel.app/demo.php?antibot=false\u0026id=69749f25be1ff7d4492e9a7f\u0026source=solana-iframe","date":"2026-02-04T17:23:22.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sol.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 13:14:54 GMT","end":"Fri, 10 Apr 2026 14:13:18 GMT"},"fingerprint":{"sha1":"23:13:25:E8:BB:B1:A7:64:03:A6:FA:74:FE:64:83:16:36:18:78:2F","sha256":"09:BC:C7:26:D6:B6:3E:5F:F6:A0:08:0F:2E:59:DE:F1:93:17:47:57:05:FE:C4:42:22:CD:D7:A4:86:1B:45:B7"}}},"request":{"raw":"OPTIONS /visit?source=https://testttdomain.com/\u0026wallets= HTTP/1.1\r\nHost: connect.sol.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-client-source,x-config-id,x-data-check,x-fingerprint-id,x-unique-client-id\r\nOrigin: https://87qma2.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ndate: Wed, 04 Feb 2026 17:23:23 GMT\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MrViDCIF1qEsKVs9uocRQ1AX%2FDsJeQAPUh9eAdKpz8UVx%2B80re017esDHERoJNK3h7JSWc%2FLBXmRaltoEHMBl9xOW6fCgt9na82QDA%3D%3D\"}]}\r\ncf-ray: 9c8bdb048b9ab4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T11:42:47.151275Z","times_seen":17778321,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://87qma2.vercel.app/demo.php?antibot=false\u0026id=69749f25be1ff7d4492e9a7f\u0026source=solana-iframe","date":"2026-02-04T17:23:23.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://87qma2.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 31 Jan 2026 15:23:48 GMT\r\nexpires: Sun, 31 Jan 2027 15:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 352775\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-08T11:42:03.923032Z","times_seen":254828,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":15,"receive":9,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/bd50b303cf537142.css","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /bd50b303cf537142.css HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aNcSBDNRV%2BallyHVITl5j2hX3yuFuGPbb1c4L1VD6hFt1fZNyCVwKXdP6uZ8XeViwGbTkKiQ62LekZoFO6Ykph1CDx65Rs7LEljGkc4KeVY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"bfddb01baed8d7ba1bdfcdfc4c01f8fe\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c8bdae92963568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144310,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (63240)","md5":"c781c1b16bafe95547495a05f5dc2143","sha1":"a9f609d048ed6e94263b9c80711cd20394a36951","sha256":"28a2fb39b748838e5e6a19dc1a83f0d1f876fdfe0109acf8049e17f243fd4a34","sha512":"858ca2af858f90b96678a4f477799710e51cf53b782250022677982f8dac97ad1a0480e0eae955420976c99c19232f129f562c9ee54329b480c132d5c502c86c","ssdeep":"3072:GnY4+9hT5BEw1+l/t0cvwLxY1/9zVfbsLPZ5KHIgptfYPBbsy5E35Pdt8Aj7Ocx/:GnY5hT5BEw1+l/t0cvwLxY1/9zVfbsL6","tlshash":"04e3225cb35a553f781784fac1b8dc8ea22ba6c1ef216ffabd15122147903e62d73250","first_seen":"2025-09-20T16:31:15.459545Z","last_seen":"2026-07-13T01:06:07.901618Z","times_seen":23,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/notification-reward.webp","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /notification-reward.webp HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 40438\r\ncf-cache-status: MISS\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9370ba87202f56d11dbc39107deb7270\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QGUSCnH2LT9aoxj2PBRqdBBn%2Fq8KJ4WltjLKpmPgAbAxFZjEue%2Be3BKOF9l6ukYA6p3c1O2qtw2DavvOa4bmpx7gSdzKUodz5zBhMpKISjo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c8bdae9296d568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40438,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8888ba318fd0987cdfaede457eda59b5","sha1":"9fd7d18e0c1286f3a811f081d1aca166275287f4","sha256":"88c475d2075bcca448136b89fac00e5f27db31331b152a83aa6220b6135faa17","sha512":"3a225a1c9d7e32e0f4abbf31bd7bf82fbe550cc3975b14d2c1fde624d27588779af141c8e718b7fc0c3f655fa31b72c4f2ea550b3d58fb3ed3642e4ae452c739","ssdeep":"768:xyj3dTlpXjIpNcriJdvD6/fa/HCJ1QWJKLAbARznP7TdsefoaF0IYY2ZKqAzh:e39lepmuH2KHO1+LAbARzP3GaFQGqch","tlshash":"4303f1dcbd89f3c8eaf3d93ec801255a3b1de6be104f9004f81699057a2c952de19f4a","first_seen":"2025-03-16T21:52:20.873348Z","last_seen":"2026-07-13T01:06:07.938825Z","times_seen":221,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/referral-rewards.webp","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /referral-rewards.webp HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 39980\r\ncf-cache-status: MISS\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"6a433c7b10c50051b58eb29402fbfb51\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ANEqFPVwstDnzIoL1T6J4rd%2F0ybfkEdlxsizk%2Bhrgl8uXsuzGFszoCaq1Ojz9wHyfJJuvMdbgKr7a5562kMYFzZQEMd3XHzZSZZOpTBl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c8bdae9396f568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39980,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"23406a925fb9c1a1135cdf9735ca059a","sha1":"39242bf59535e2d5c2b3d24719121ee856359ae8","sha256":"b782ff6a99b5bcdb1ce9b806e2c26d303b638a995b3b519832ea5119c84fb12e","sha512":"6a9f1264bc8df9afe9c7aea75d9ef3f036a48577641f960e7baa567782ca0332b3cbff375686c6d73457c3b5688180de28e154f20f1ecf2f90cf5aa2fa513003","ssdeep":"768:YOl7TcvfrZoCWKP0YMhko1Z7qKaRZ3JISJoJINfuFs7bhFKLy:3lvcvjZoCWKP0NpZ7qx5LdN2Crqy","tlshash":"7503f11d870383678425e53ac01df46eb98315c2ab7a49206b8b35f73d57efe258a702","first_seen":"2025-03-16T21:52:20.877376Z","last_seen":"2026-07-13T01:06:07.905741Z","times_seen":223,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/snipe-on-migration.mp4","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /snipe-on-migration.mp4 HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://testttdomain.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 1298041\r\ncf-cache-status: MISS\r\ncontent-type: application/octet-stream\r\ncontent-range: bytes 0-1298040/1298041\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1dbc0888bdeb40b05203b98fa4f3f9f4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wzHHOjztigAi8zZ0OM7yOWxO9%2BHQFCcFXCdqY0XrgiVycBdHoxnNNpSTxjh3knxbO40MTgh%2BGxN8H21DE7wYItZ4UAx2w4rGNRxa4MFf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c8bdaeb499c568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":397351,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"b3eba5f3637262c59e27392e2f510ce1","sha1":"4868c135aba3a07bfc5b55aed2cf6cf9aaac607d","sha256":"cfa784fad6fefc5216ff314fad73e5e11965745ceb2e13d386782d03c6159d13","sha512":"e61bc8e0dcabfb8c8bb07cff128b34fbe203c4675e2fd61e0c29f2a0ec6f9d03e91fe5e233ec3cb7f98e99cf4213f6d84938a8bd562d06cef4e388b70d52691f","ssdeep":"6144:JjiO4RAA2q0W0vJHH6mvqCZwpNZpOJNN+XqkqUlQz0Dz70Z7J/tgCb7NkBCs6YPU:SRFPPd+v2pdOYXMzMO/tgC9kDrU","tlshash":"7b8412896fa02540f75ce67ea2e6c866c6e79a53cdc2d2c3708f69610f740154e4f8fa","first_seen":"2026-02-04T17:23:59.337268Z","last_seen":"2026-02-04T17:23:59.337268Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/automatic-placement.mp4","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /automatic-placement.mp4 HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://testttdomain.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 1663148\r\ncf-cache-status: MISS\r\ncontent-type: application/octet-stream\r\ncontent-range: bytes 0-1663147/1663148\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1e168d31787c32c4d57f79589eddeb0e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mNUYYVtvNx20x2HO6v%2F%2FgVEUfsAw7tKTWoQi4Mo3qEFGLbNzr50dZQIGA5Zs91WvQBtaW%2FE00G51f8c%2F%2FCsFVV4L5G94Is3Obc9HB6AB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 04 Feb 2026 17:23:19 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c8bdaeb599e568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":367645,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"4795e3d5bd26766fa96fe5ca78e5b1bb","sha1":"ac92fcfd17920d557bf1233a2edab7515c6e78e9","sha256":"82e3e558820f842aff65c487a8044bc20e432bb1afd36d25e811bad7ef238c4e","sha512":"f391c02ed9d45bcfee8195a3b93293c64d0ef2ce7c41a12d79d9423fa239d2674e6947ace3bc2b85b4300ec5993f6fde906b49a0396472646bc28c36d29eda5b","ssdeep":"6144:RQfTssBcDvih4bLFkyWDns8ajn17T4pkgFOHtcLWC:efTs8gih4bGTKj1gegF1WC","tlshash":"c574f14d4ea24085f70cfa3d95c4d828c8e749abc9c1d56fb49e92844f762910faf0bb","first_seen":"2026-02-04T17:23:59.338252Z","last_seen":"2026-02-04T17:23:59.338252Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/axiom-logo.svg","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /axiom-logo.svg HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FdJJHlfvb5rWUcjw0NEw4qP3LpNiq0hsM9Ffzihz%2BElxkQRlo1YB3wdARihFtknljiwd57jItNKl79FkfXmsNEKzREOiyGYArkEpgC8IO%2BI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6b2b6a9d15b07165dff423392e69eb6a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c8bdae93974568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2538,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8fea2f496cbab0880d9dc3971ea5c628","sha1":"06c79fac1b6844698a6a824cbe1a5a440b0442c5","sha256":"c786ebf30a59c42054ac322f6b111633db5ff48afbfb1849e7e771d7b43af0b0","sha512":"94fb112df8191f4a46212d04dff33659632a402f5ea547fb77db35ae63a653578d37b86e37741ec783a1bc499aeaac1ada4fb45f597357659803d52429fa1179","ssdeep":"","tlshash":"2d5155cc33284398fd89cef36a04542d0413d9e3a4468a50c27a2f651cd9d467e77fd5","first_seen":"2025-08-11T11:12:01.877718Z","last_seen":"2026-07-31T08:33:27.943839Z","times_seen":228,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://87qma2.vercel.app/demo.php?antibot=false\u0026id=69749f25be1ff7d4492e9a7f\u0026source=solana-iframe","date":"2026-02-04T17:23:23.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://87qma2.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 31 Jan 2026 15:23:48 GMT\r\nexpires: Sun, 31 Jan 2027 15:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 352775\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-08T11:42:03.923032Z","times_seen":254828,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":72,"dns":3,"connect":7,"send":0,"wait":10,"receive":14,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/not-triggered-by-mev.mp4","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /not-triggered-by-mev.mp4 HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://testttdomain.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 373600\r\ncf-cache-status: MISS\r\ncontent-type: application/octet-stream\r\ncontent-range: bytes 0-373599/373600\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"df3f52cc09708e1b02f62b1a3ea7c2d1\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4hqr5ev%2FOWfyXwKx0ycoeURIXlyJB3DklpXIep62A7hlSz4vXMe9FUXwNxNwD3fndCzULuEgxu8FVzIgCUvk7tShIG8c3uMlPnEobPwiDpc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 04 Feb 2026 17:23:19 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c8bdaeb599d568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":353573,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"e5e349b636a1a2d2159c794906bc9a17","sha1":"6ce177c00affb0508a7a1a0891348245d234dbfc","sha256":"4f818cac481c03c4bae74300f52cde30a5121d9065c1a6cf0e279af3b5be4e19","sha512":"99324c782c40eb5b314936816142ba65c1b47929f1f39dab6e27ad0058969559e1fff0a8b8ec8ae0fbb7de566070d6750442b87fcf21a11ab723bf470a1eed2d","ssdeep":"6144:rhozaUs6YpImbnzasxhnrveDT3nq0Qz0ViUdWnAk53y46h:0Ts6AJ9xVz47q0Qzb2k046h","tlshash":"7c74f12d5ee22250fb4cf23d80c4d426d8e28666cac2d75fb59f08608f756594b6f2b3","first_seen":"2026-02-04T17:23:59.340099Z","last_seen":"2026-02-04T17:23:59.340099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/axiom-logo-mark.svg","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /axiom-logo-mark.svg HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B6kT2mniCgg%2FaPw2VJ%2BLnpBiuEGoy3zcCFz2qFWvqzZC87eE7iUVgpr9V6VOwUYlaCnJI212u4vjd8HETjg6%2FqKnpZIkE2YuEDDrcPGgoKY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5d803f5789a223c28b47f07151c750d8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c8bdae92966568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":452,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ba619fafb07bfd750de8684d13ac508c","sha1":"ef7b89e0cbb1c2b8cdf016dac94d79ab825d4db7","sha256":"8c61dd47112c6efad3dcec0625617a66dd926c6583fa0d2c862b695768992ae1","sha512":"a067d23b14919b6f832c7a68d9cf6e15dd9b186f4bf9ac37d7ab024c1003ebbcd839f8f79492bc308df5a6839173103d4cfc9e53a57121d96a249603a9a0c146","ssdeep":"","tlshash":"9bf05ca4305c86559a02d741036cb47e407ab3db65160468b9946f0a683a55e2f7c7d4","first_seen":"2025-05-16T12:46:07.698652Z","last_seen":"2026-07-31T08:33:27.949706Z","times_seen":234,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/yield-page.webp","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /yield-page.webp HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 38906\r\ncf-cache-status: MISS\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"88f301b6e472e7a452384651bde245f0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XSceB78%2FxL3idFARjoQ%2BavQNDTFrakZ0YcfAgVbc2pEqoKqyJ4uSCEjWibmOWivJdJWmYmRlahrCKo%2FPHzZUtqtSOus6Qza60OTmXuOV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c8bdae9296c568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38906,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2814x1660, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"313bab83ad36287500f22cf98a60ae67","sha1":"326e10891c10d16c11e05933fb59054949fed8a1","sha256":"513aff4a32fa92330773f44fd86bdc051355a2cb901102bf04011cb7006a23cb","sha512":"0959091e48b95bd0c675f3b24f58c9be6e99c1e774990d03f4c0527f441426349f4362c8b6a6c69ebac507f57983ac18f8f681ecdc193d874d20e708dcc515b4","ssdeep":"768:hddb1jAd6+fdIscucqcVwfTkt/C+e+U++Bp+LA8udAZ5duicmV3b6kauJSJSJlKv:ZXrXx7X5FKUla66Dqk","tlshash":"79038e72aa661fdac6effff761823b78686c6d2093a411d20f2473d0417022255bfd5a","first_seen":"2025-03-16T21:52:20.876455Z","last_seen":"2026-07-13T01:06:07.937969Z","times_seen":219,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/non-custodial.webp","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /non-custodial.webp HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 9628\r\ncf-cache-status: MISS\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2b167e1647b44436eb63a9f3f5af0aa2\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2F1s05kAboi8zr%2BDM18aakHCxov9BYijFoO1NYrfrhKL8xvT9sYAUFLGURn2t8WvEAGDw6%2Fu0xoF3k8K69fdTloQ4YzoKfCXHJ8ven7QHco%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c8bdae93972568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eb4dcf221264944e4eb18c34e1139ef0","sha1":"735e2cf62460d3ba51f473753fc8c1a4a3168b8d","sha256":"a4dfc359c8bf955b4acd6c9a80cde63beb446181e8ac726bb2fc887377203aca","sha512":"41105a54b5e035e1d678e821b6a3a5c716b992287d8f46ca5f206c1ef1dc09d2d9194d747c201364f48d7fb9c879a05c05339108dcc2f07f3d93bea9357b5491","ssdeep":"192:Bn4rCbm3881lnPKzkQGDReLqVVMxxD8KlEkHG80ejTI:ZmYmxvizNGsm0xR8KmGGjOI","tlshash":"84129e8e492e6a08a423eebdc97502b4d1cc3510d71f3b96cd93b93d5e842097dcb42b","first_seen":"2025-03-16T21:52:20.856999Z","last_seen":"2026-07-13T01:06:07.952025Z","times_seen":222,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/remixicon.ff3db2f0.woff2","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /remixicon.ff3db2f0.woff2 HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://testttdomain.com/ce178d2b3058a5fe.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 176812\r\ncf-cache-status: MISS\r\ncontent-type: font/woff2\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"0e227c30ec21b6443ab425c60fe75d3a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HaBz%2FzYQKGRgrcyspjBicda233LaLilHO5%2FY32GhUPdCrrm%2FveUXwTeXIagrr1QiM8TBiL2Rm9IGY%2B1h2YcQasYPXL8ZYx0NWDO6uIFr8tY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c8bdaeb0995568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176812,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 176812, version 1.0","md5":"9f0118b43f57fc3ea9f55bbfb3a3b185","sha1":"f3ec7500bd2c615bba2de885d46bcaa91c20aa9b","sha256":"7ea90bbc7c505b98dd7d3a089a6fa32067e353150192951cedb05e26820936cf","sha512":"6a17cdb1c39d1638a2e69ac8c9cf15229d9f64ce9026965dd8e8878700994fd1db65f21be31e18a49ec36e0b0ca522d05ab7f3884b21a022d9ccde9795d0baab","ssdeep":"3072:8oI+omjEjOiEHbaa4yYDtZimTAj2QdJohF8EBGWXsL1u:8r+5baa4yYRTw2Q8C48g","tlshash":"300413f0eda0d72cd9c7fc12f48db606aa9c579475f790901bb0fef869ca4a8965c420","first_seen":"2024-12-20T14:28:38.376296Z","last_seen":"2026-08-08T09:31:25.211182Z","times_seen":2440,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/wallet-twitter-tracker.mp4","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:19.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /wallet-twitter-tracker.mp4 HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://testttdomain.com/\r\nRange: bytes=1474560-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 28722\r\ncf-cache-status: REVALIDATED\r\ncontent-type: application/octet-stream\r\ncontent-range: bytes 1474560-1503281/1503282\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d2be2dc8e36f174954636ff18ccbeadf\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YArcm%2BoGc53LEIN7SlsoxFOGvN1pV8v53rE6fyszDv7%2Bxwb1P33AHZ25nwKhq8rVB4ykjXXqVUJFcPwyzSseo%2FME07t8DwNx8vNeEqOz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 04 Feb 2026 17:23:19 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c8bdaecb9b6568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28722,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"ff1d540173282944d252fcde1c579a65","sha1":"f002a325bca73dd0beaf92f8906f4b4eb54cd13f","sha256":"eee7325ca80c55eba4c88c1a8f190057dc7042e41bd4d1cf15dc773562e356b9","sha512":"43708d0b8cb79a4208c9008050fa5e3f6e5f01a4e9c882306216ec2cd3a93b300a6b402d6717454131957ef8c05963541d3c0057b7f2038d5055b3a98b0404ef","ssdeep":"384:T9NVblk9kZ5GfJpYqHnw0opuMjWxIkxRWJi4jli7b1uadWgdH4lucubieVov:70sGfHYqHwzjjGxRvslinFWNNDoa","tlshash":"0bd2489e5f02c02aca36263adcf223183730d4fd5207875f141c9a7c6ed6bd51cea89a","first_seen":"2025-09-20T16:31:15.449019Z","last_seen":"2026-07-13T01:06:07.927499Z","times_seen":21,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/f30152c0704fba31.css","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /f30152c0704fba31.css HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yf0mc%2FtY2VWtuA5wchQxXupDYUbdka%2Fb5ybGxmo4P9qAHcsfLBd0xIU3Mv73CzdGX8%2FoJ0zw%2FeHh%2BE3sRrDHBON4OGOLDyFESPUudArRRCM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"34fdd1f7508443e54743fc547e358c6d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c8bdae91961568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2118,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2118), with no line terminators","md5":"5532a60ba705ed7d21e887ce4b6aa94a","sha1":"49de849d7af0b1beeca34dffaf851a536aa82d0a","sha256":"4cd08feeb6b0a63e5d120314042adaf84b0a4167cfce24313da953240871d55c","sha512":"13d7071a6c71cc73d4ca20c947bd85402f3438b14960694be4967fd0ae74258f631e1ca4868c4bb8748e5805b5f68a8788ac03dbd0bae38ea46dfff6669b58a7","ssdeep":"","tlshash":"79415b204019d05fd5f1f89335ca7f73293e60198ad809669a7905798edb86e73e0ba8","first_seen":"2025-09-17T10:50:11.178127Z","last_seen":"2026-07-13T01:06:07.935256Z","times_seen":29,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect.sol.ms/modal?id=69749f25be1ff7d4492e9a7f","fqdn":"connect.sol.ms","domain":"sol.ms","tld":"ms"},"ip":{"addr":"104.21.12.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sol.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 13:14:54 GMT","end":"Fri, 10 Apr 2026 14:13:18 GMT"},"fingerprint":{"sha1":"23:13:25:E8:BB:B1:A7:64:03:A6:FA:74:FE:64:83:16:36:18:78:2F","sha256":"09:BC:C7:26:D6:B6:3E:5F:F6:A0:08:0F:2E:59:DE:F1:93:17:47:57:05:FE:C4:42:22:CD:D7:A4:86:1B:45:B7"}}},"request":{"raw":"GET /modal?id=69749f25be1ff7d4492e9a7f HTTP/1.1\r\nHost: connect.sol.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 04 Feb 2026 17:23:19 GMT\r\ncontent-length: 0\r\nlocation: https://87qma2.vercel.app/demo.php?antibot=false\u0026id=69749f25be1ff7d4492e9a7f\u0026source=solana-iframe\r\nx-ratelimit-limit: 50\r\nx-ratelimit-remaining: 49\r\nx-ratelimit-reset: 600\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BcYdR%2FkLAoy5MGWFyZ%2BTQq5AD4HCo%2FN10WG%2Bif7yOeokbW9dqbsrqJKPs4sGPtcg2wV%2FyVjD0We5Mjm8s70ATGkcxHWbdCWv7LqpIw%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9c8bdaebeba956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":865408,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T11:42:47.151275Z","times_seen":17778321,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":48,"dns":0,"connect":1,"send":0,"wait":213,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api64.ipify.org/","fqdn":"api64.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"173.231.16.77","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://87qma2.vercel.app/demo.php?antibot=false\u0026id=69749f25be1ff7d4492e9a7f\u0026source=solana-iframe","date":"2026-02-04T17:23:21.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ipify.org","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 06 Feb 2025 00:00:00 GMT","end":"Mon, 09 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9B:74:6A:25:D6:31:FF:C3:36:8D:D7:54:7C:C2:B6:CC:A3:CD:17:03","sha256":"FD:FB:ED:F7:BB:34:34:80:84:89:30:C9:CD:7E:D5:3D:1C:26:7F:A1:2F:28:2A:ED:F5:7F:C8:CD:8D:7E:5E:A7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api64.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://87qma2.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 17:23:22 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":852,"timings":{"blocked":354,"dns":3,"connect":134,"send":0,"wait":143,"receive":0,"ssl":214},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/wallet-twitter-tracker.mp4","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /wallet-twitter-tracker.mp4 HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://testttdomain.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 1503282\r\ncf-cache-status: MISS\r\ncontent-type: application/octet-stream\r\ncontent-range: bytes 0-1503281/1503282\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d2be2dc8e36f174954636ff18ccbeadf\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YArcm%2BoGc53LEIN7SlsoxFOGvN1pV8v53rE6fyszDv7%2Bxwb1P33AHZ25nwKhq8rVB4ykjXXqVUJFcPwyzSseo%2FME07t8DwNx8vNeEqOz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 04 Feb 2026 17:23:19 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c8bdaeb79a1568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97755,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"5460f75b1e34809c371c362f119631cc","sha1":"b388f6e7dbb0a74b0d51efa657cc861ce41f9ba8","sha256":"5f77d79a6da893f154d1ab9a280acb60690748e07be80bd890ecba745cdcfe6b","sha512":"818802c3715f8cdedffc9382d93341d91f178735f7a231f99c682aaa56bfa07a62d08ceafe6287ad058fbf3681850207a8d94ddffbe1683c1bd7ad568c9a46ef","ssdeep":"1536:QGe/9d4COX2TbYNfIIiDf4sfQLhU4ZwwhXoykON63rtKL:Qn/fQAMIIYfp4LzKSmON0oL","tlshash":"8aa3123bda66e58b53e11d15f48228dd3bac300aa0d9db4d1fc7206f6987d35e6e4a30","first_seen":"2026-02-04T17:23:59.346729Z","last_seen":"2026-02-04T17:23:59.346729Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/hero-video.mp4","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:19.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /hero-video.mp4 HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://testttdomain.com/\r\nRange: bytes=1376256-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 31208\r\ncf-cache-status: REVALIDATED\r\ncontent-type: application/octet-stream\r\ncontent-range: bytes 1376256-1407463/1407464\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a4bf0e8c8f9e37acc8fa6852e5ebe330\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a64WGlAoMrvVnsfHnQbCesvi%2FhJnrtSNUz98QdysIQyDz%2FnwN1gNmqMnnU1gaiNALinQgmqP7S5crCk8b%2B4ipdIPzRA38R7HZMifpiYp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ndate: Wed, 04 Feb 2026 17:23:19 GMT\r\ncf-ray: 9c8bdaeca9b5568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31208,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"55a63b7c576c0a981dd14e3b1f6d2813","sha1":"8259704ba1709e000a788c44b83dfdc8a749e6d0","sha256":"a0240abdd6e28b84ec79f990d38585c9e678d23504694856e9e99781b1710e69","sha512":"9932e56fbd7839975fc4cd507f0f3ea92a05b40bedbd505a5da7214ec77d5ed972e6f1488ad3abaeee7513669b65f3f1cc56260950aa1cefcb43f168b0f6d5ef","ssdeep":"768:/PQ7qiKJCIvBIV89O71vGrgzp7XiSRDP3xviHtc:XQuvvBa8A71vRVGSx4S","tlshash":"f8e25942ab34019bc428037c94f3c340bb71da61ab93575fd79073b8bca27799c925ea","first_seen":"2025-09-20T16:31:15.457806Z","last_seen":"2026-07-13T01:06:07.914111Z","times_seen":21,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/axiom.svg","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:19.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /axiom.svg HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Wed, 04 Feb 2026 17:23:19 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j2jWjMuebRkGkArURyOcgupISOjqP4H4PC5XGmHYNZ3ct5%2BWIVYax6eEdiXRs9NB%2BVN5lLQfwCwNax9TXfkdqt6IYb8IoFtwTHoNe3sr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"9604471460a18432e8c283e8037f83fb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c8bdaed29c0568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":512,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ca4c3e0f1732e8d11636fd8769839ae3","sha1":"1e0df992bb3256eef535ab2780532c95c5b59675","sha256":"b499691abd3802dd218e6110f9ff985588ffb356fc43abea39c1695f76e3f855","sha512":"fbfc7343290b41767b401fb81bd04cfb4380f3b6d141398a7c389ffba473428972da0cd50930b488cf1965a09cf11bcfb1ecad1e3b6f537c9573b7cbfa7c0178","ssdeep":"","tlshash":"35f059d8b14c8508f701e395db5a2d99465fb1d64a590110fb443b47293c0abbd646c9","first_seen":"2025-08-11T11:12:02.009277Z","last_seen":"2026-07-13T01:06:07.946963Z","times_seen":218,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/axiom-logo-type-new.svg","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /axiom-logo-type-new.svg HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yr1w5EpwfPWO4z8%2FzOFtDK4T5tMQEpHp2htXKjVawpsBMgg9JVNOJzgCIE%2FU%2B0b%2FlhUHJxJY2dMmF7ZVnyD56Msf3jmJQje6YMDhio7E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"799242414c8fbfcf206a2e17e7019d3e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c8bdae92968568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2182,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e9718f74140ea2fad4779bde7048f3c","sha1":"8785e97686ad35c6bedcffd3c84d54bd4fff5c58","sha256":"81f024093442742102d01da7865af992da0bd75044223f910d6aa1c7ce255128","sha512":"12d8900b856db84477ffc8ad01ba18bcf550a1857fd07d87e95eb4ea715dd5681d5298bbf772b2734bc22d0f3a0f41c101f143b8ed5965f5fe12d3b85cf58491","ssdeep":"","tlshash":"4241dca2b74891d6a910d7edc35f01ee205b20fbf341ef968bd22f11b5646928ceca44","first_seen":"2025-08-11T11:12:02.01455Z","last_seen":"2026-07-13T01:06:07.904824Z","times_seen":225,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/land-on-two-blocks.mp4","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /land-on-two-blocks.mp4 HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://testttdomain.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 1313773\r\ncf-cache-status: REVALIDATED\r\ncontent-type: application/octet-stream\r\ncontent-range: bytes 0-1313772/1313773\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"68c661b6db19e60518066a61b9c203f1\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t2q9GeZNMNA8zAEW2FyV3NS67FAtb%2Fl%2FWoeTlCAqhfvVLxWbSRlSntVCZ1FgDsEupsv2McfBTe71HL1eIXAM6n3vO5iS35DxcR%2Bq%2BNrxuRs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c8bdaeb699f568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":461061,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"784bdbaa03f723fa7b36e3c47bcc0ebd","sha1":"353883018a5a65ce5e2d354b202178ca19219013","sha256":"18913abdb54802bd207fa389cfb2bbb1d75d99ee78660cd0b2cf5a76b15f21c0","sha512":"7a35b652c929b55921feb64b3f95caf2b74672ca75f94d8b4a4118236c03ff503f4f8a704b624c7f04c688c2444adc17cee4eebaa88785fe291f203ddaa4ef5f","ssdeep":"6144:NNIqTs1oREvlsg4bpb6npn4UUER2GFekn8WAoCKaCmvBqPw+HEzG:UqTooav+FApn4hzGFNn8WxUCIXK","tlshash":"8da4015a4fc29161fb8deabd8492c821ead31a47d8c1d30f798e45444f3d0964baf2b7","first_seen":"2026-02-04T17:23:59.350231Z","last_seen":"2026-02-04T17:23:59.350231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Wed, 04 Feb 2026 18:11:18 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gyzVQedXunwkEg3m99bsoBkCOK3ES59BTAublWZaFTlhpPJxIhd51q99TxZm8XJSHft%2FZrFfEX8jfp%2BNP6Cj03K3op3QuDFeMFbBw4JH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\ncf-ray: 9c8bdae94975568f-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-08T11:41:15.78216Z","times_seen":416397,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/land-on-two-blocks.mp4","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /land-on-two-blocks.mp4 HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://testttdomain.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 1313773\r\ncf-cache-status: MISS\r\ncontent-type: application/octet-stream\r\ncontent-range: bytes 0-1313772/1313773\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"68c661b6db19e60518066a61b9c203f1\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t2q9GeZNMNA8zAEW2FyV3NS67FAtb%2Fl%2FWoeTlCAqhfvVLxWbSRlSntVCZ1FgDsEupsv2McfBTe71HL1eIXAM6n3vO5iS35DxcR%2Bq%2BNrxuRs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c8bdaeb499b568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":470023,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"3a1829314660ff47cbff2c450c58b2fe","sha1":"6a5c84df09e97c662d2529e05949d621b99e6304","sha256":"ea4a079a8859f0507e3b2ef95be1a9f54be43771479831c904e83400b4128e18","sha512":"2c0319509efcb3f0f5ca3b6abe292c2b0224c564a92c2e7f8b36a28c1c60acd1a644fb19e711d5061d63e81bfde7a8cdb550f3c6cc58ea51347479f605b73ff6","ssdeep":"6144:NNIqTs1oREvlsg4bpb6npn4UUER2GFekn8WAoCKaCmvBqPw+HEzGDau:UqTooav+FApn4hzGFNn8WxUCIXyDau","tlshash":"2ca4015a4fc29161fb8ceabd8491c821e6d31a47d9c1e30fb98e45444f3d0964baf2b7","first_seen":"2026-02-04T17:23:59.351732Z","last_seen":"2026-02-04T17:23:59.351732Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect.sol.ms/visit?source=https://testttdomain.com/\u0026wallets=","fqdn":"connect.sol.ms","domain":"sol.ms","tld":"ms"},"ip":{"addr":"104.21.12.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://87qma2.vercel.app/demo.php?antibot=false\u0026id=69749f25be1ff7d4492e9a7f\u0026source=solana-iframe","date":"2026-02-04T17:23:23.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sol.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 13:14:54 GMT","end":"Fri, 10 Apr 2026 14:13:18 GMT"},"fingerprint":{"sha1":"23:13:25:E8:BB:B1:A7:64:03:A6:FA:74:FE:64:83:16:36:18:78:2F","sha256":"09:BC:C7:26:D6:B6:3E:5F:F6:A0:08:0F:2E:59:DE:F1:93:17:47:57:05:FE:C4:42:22:CD:D7:A4:86:1B:45:B7"}}},"request":{"raw":"GET /visit?source=https://testttdomain.com/\u0026wallets= HTTP/1.1\r\nHost: connect.sol.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Config-Id: 69749f25be1ff7d4492e9a7f\r\nX-Client-Source: Perpetual-Client\r\nX-Fingerprint-Id: 2970cca0175ce506c2661e771626736b\r\nX-Unique-Client-Id: c118a9e9101fe830eb7ce895984ca2a21240f02258e134f4a434c4d8f2617e96\r\nX-Data-Check: 95533c0e7ce053b85978c9795194f96632e126bd955b432f9cf2cdbeedd49bc8\r\nOrigin: https://87qma2.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: perpetual/encrypted\r\ndate: Wed, 04 Feb 2026 17:23:23 GMT\r\nx-ratelimit-limit: 50\r\nx-ratelimit-remaining: 47\r\nx-ratelimit-reset: 596\r\ncontent-length: 168\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2FMjNFgmAERtM6O%2B%2FOghPmi7sPUB4k%2Bazzu56Cdtcb63REInk%2FfBG4Lx4SyLsT2UakXK6mq81gt3HjY4OzodHd2Cu1n8JwOxJ%2FEwDQ%3D%3D\"}]}\r\ncf-ray: 9c8bdb050ba2b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168,"size_decoded":0,"mime_type":"perpetual/encrypted","magic":"ASCII text, with no line terminators","md5":"cab9f8d0f631a328c8a5a3b588fcbd2e","sha1":"9225e83d84341d5302c8ad2e6f458fd1379b2ce6","sha256":"9653e6a2cc889f85e62ad5972a5690cdca2ecc87750396c7b6e510e5afd748a1","sha512":"0d0cda44f0832570f5e126a819f5de0787b29321ccabff2d4efd51dc1d20aa55b0d13323bdaa5d83a80d050e2471984fd195de24ab97a309766a52cd4324ad23","ssdeep":"","tlshash":"c2c08025e2502d9f8d54411b1fd38e59562205435ea51159d5c167c770a27847811fd1","first_seen":"2026-02-04T17:23:59.352542Z","last_seen":"2026-02-04T17:23:59.352542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api64.ipify.org/","fqdn":"api64.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"173.231.16.77","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://87qma2.vercel.app/demo.php?antibot=false\u0026id=69749f25be1ff7d4492e9a7f\u0026source=solana-iframe","date":"2026-02-04T17:23:22.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ipify.org","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 06 Feb 2025 00:00:00 GMT","end":"Mon, 09 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9B:74:6A:25:D6:31:FF:C3:36:8D:D7:54:7C:C2:B6:CC:A3:CD:17:03","sha256":"FD:FB:ED:F7:BB:34:34:80:84:89:30:C9:CD:7E:D5:3D:1C:26:7F:A1:2F:28:2A:ED:F5:7F:C8:CD:8D:7E:5E:A7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api64.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://87qma2.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 17:23:22 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/ranks-rewards.webp","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /ranks-rewards.webp HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 11330\r\ncf-cache-status: MISS\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"c36ae68ee363a04a8014fdefe53c2fe9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=POmIgnQXuJKmZTDi65FNifQaxezAdGSRXJI%2FvzZSf%2FL%2FRl2sxJCXUo4ktR%2BgwyUdfnhJKiB5COQt0u%2FjIzGvcWBGhake98VuB0tRngQEATM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c8bdae9396e568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11330,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41948d5151eb816445349aaea41de298","sha1":"5f6431c2d01089cc2f5a115819683f1324904239","sha256":"6640d5cff174a164a38cde2c7a54109b4b5c6eeb010df1a790a984add8d22e4b","sha512":"853db66c57aa5ba8cebe66dac3e4130bcb25d9480f43d8c135fa9f7b7d2d7d7209f20f80ca103a3f2b0e7fd922b1a64dd875fef8487dde73e45525da4483df82","ssdeep":"192:OnMWX8VsXir0RiU0IdtlpmxWxEjDcQb3jZP+hueVo2H+miiv3rYzJKz1ZE/07z4P:SZXiSfpmUEjgQbzZWhtZD/3V2uhK","tlshash":"db32aee631f85ae0c41b7b9ccec2a5c40e651d036418cf93a8cf5aec4ec5eab6267406","first_seen":"2025-08-11T11:12:02.046965Z","last_seen":"2026-07-13T01:06:07.911773Z","times_seen":219,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"87qma2.vercel.app/demo.php?antibot=false\u0026id=69749f25be1ff7d4492e9a7f\u0026source=solana-iframe","fqdn":"87qma2.vercel.app","domain":"87qma2.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:19.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /demo.php?antibot=false\u0026id=69749f25be1ff7d4492e9a7f\u0026source=solana-iframe HTTP/1.1\r\nHost: 87qma2.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 04 Feb 2026 17:23:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3nYmVsuWvK6eZ5bMS1Q5GbB43hHPKPeZ9w8%2B4cmsyP%2FvilXmk%2BE3iqMRQVZNVDt2YR6XlKgJmDJ1pxttlG5GeKhEGJz7WI3LQ6B3QhaK\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-ratelimit-limit: 50\r\nx-ratelimit-remaining: 49\r\nx-ratelimit-reset: 600\r\nx-vercel-cache: MISS\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::fra1::n5cdp-1770225799306-d12eba17ac93\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":865408,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (60977)","md5":"12d2cb464f0c8a6e67691a55469c900e","sha1":"17d7cc0175a7e8d66586d6d26b30f29714807f66","sha256":"f3b19bbc9846ddd16c49142c87814db9a3f190227144558f2de293f87a2ab418","sha512":"a58ebcb221f19192cc69407ae1b951f9cf0fafd90dd4163d29aa59954fafdddfdc911de7c02d96ff2c75dad130261eecfe8ea231868a1854457344bd828f8344","ssdeep":"6144:6P+FkTVOoKRswOLEyV+dKEqdmsg4XBwnpQCNvmsjcaQhQiI1rcWnMQDvN5K12/VW:JOLEyNWh4XBwnpQamsjHRrFBNL/jsL","tlshash":"9d052a8ab39070b1439715e501bb510bf23dbd58740a44bcf75ce8f62bb9989a53af38","first_seen":"2026-02-04T17:23:59.354484Z","last_seen":"2026-02-04T17:23:59.354484Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":29,"dns":4,"connect":1,"send":0,"wait":10,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/last-section.webp","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /last-section.webp HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 52448\r\ncf-cache-status: MISS\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"758aa3541152b3bbf43657707cd0bb1e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6HqbnEF2FQHN%2Fsm6Nc%2BuGerLT%2FP4TXu7DTzMt7qwi%2FsoSuiyi46jJWsJ6ABlbD27%2Fac9h8J3OlntFj%2FY7tQIRHK186JhDIeWQ1uRF3O08dc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c8bdae93973568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52448,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"396c64a4a5b1eaa76438a1549e8f6809","sha1":"37a5617b80c16ac69653e2c6ea63fbee8f4a3c59","sha256":"049fe660ed104b9b0e7e7ee99969bceb3222d0dce6d746fa232f0355f718ffa3","sha512":"e089081d4e48df1aa03e4c3b7df3647e7729cfb08c2581fb2a665a48c6556da79010269b2b080edb14ada2afd079206d4704f36168b657813821b8640d5c20d9","ssdeep":"768:YYytYytYyn1/+/daiJR84zLkWweWtsPcLEiMDrs/rwXNAtIJkEyo51GL:YJJ7pQdZR84zrwREcLEiMETwXoPL","tlshash":"9a33f1659afac355c7abd8f4ec12bfdc40b31f3dfa24c846d570a052b1c6a026d8b245","first_seen":"2025-03-16T21:52:20.8131Z","last_seen":"2026-07-13T01:06:07.956351Z","times_seen":221,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/hero-video.mp4","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /hero-video.mp4 HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://testttdomain.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 1407464\r\ncf-cache-status: REVALIDATED\r\ncontent-type: application/octet-stream\r\ncontent-range: bytes 0-1407463/1407464\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a4bf0e8c8f9e37acc8fa6852e5ebe330\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a64WGlAoMrvVnsfHnQbCesvi%2FhJnrtSNUz98QdysIQyDz%2FnwN1gNmqMnnU1gaiNALinQgmqP7S5crCk8b%2B4ipdIPzRA38R7HZMifpiYp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 04 Feb 2026 17:23:19 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c8bdaeb4999568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158216,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"b0aab33f085dd867e77ccc6a7a16c47f","sha1":"431f7bdd05a9acd0565fe20c894649ac7079bdbd","sha256":"c165cc8cee394d5cb030a8d14b3de8ab65c814039aa147a9fb78ba04a9d20b08","sha512":"ebdaab8f74881451e04fa168fc4f605c7939c19f5d0eb468159da37162ceb75296a012c26350bb6940d6d7bcf3273f7628adf714036b79ce1c6e3ea9a6394488","ssdeep":"3072:4b4SpJgiOA86v9Qivom7xchFVairC21uo548ZG6fW93qnei:sLgiObYjv/O0irC21uopfsIP","tlshash":"21f312b86bda54caf46dbb37494baf5463c209000a106b3a6fe5063df1d5c74df292a3","first_seen":"2026-02-04T17:23:59.356474Z","last_seen":"2026-02-04T17:23:59.356474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/wallet-twitter-tracker.mp4","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:19.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /wallet-twitter-tracker.mp4 HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://testttdomain.com/\r\nRange: bytes=32768-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 1470514\r\ncf-cache-status: REVALIDATED\r\ncontent-type: application/octet-stream\r\ncontent-range: bytes 32768-1503281/1503282\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d2be2dc8e36f174954636ff18ccbeadf\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YArcm%2BoGc53LEIN7SlsoxFOGvN1pV8v53rE6fyszDv7%2Bxwb1P33AHZ25nwKhq8rVB4ykjXXqVUJFcPwyzSseo%2FME07t8DwNx8vNeEqOz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 04 Feb 2026 17:23:19 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c8bdaed39c1568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":514832,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"9f82c31bc1c37b5c6c442d6f01324d51","sha1":"8a4ae782d116a45a6e232dc4aaed25b4f6c61336","sha256":"27825f94b4f5addb240a1ee3b7646bf39c5425d5fe694a636d5cb49060f40aa8","sha512":"d93e5b523f71b4e06a3acb8bfa44be3ad968b0c4eb60fd6b88ed62b571b10d99cf9b73b2b796934ec11c4be537bf2abfa3b75dbfbc6000ab97aa67390dad87cd","ssdeep":"12288:kCpgqzlRQcK2KvVmEAevwrrqLQR+DY7Ni2hSoqMy/0d0Z3a/On:/gwRu2SGevwrGLiNiqSoq9/s4my","tlshash":"7eb4233e8897b788fd702f16a7c344f82bcd55c1e4aae6570c46b527a68798d7ccc260","first_seen":"2026-02-04T17:23:59.357395Z","last_seen":"2026-02-04T17:23:59.357395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":12,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect.sol.ms/config?source=https://testttdomain.com/","fqdn":"connect.sol.ms","domain":"sol.ms","tld":"ms"},"ip":{"addr":"104.21.12.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://87qma2.vercel.app/demo.php?antibot=false\u0026id=69749f25be1ff7d4492e9a7f\u0026source=solana-iframe","date":"2026-02-04T17:23:22.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sol.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 13:14:54 GMT","end":"Fri, 10 Apr 2026 14:13:18 GMT"},"fingerprint":{"sha1":"23:13:25:E8:BB:B1:A7:64:03:A6:FA:74:FE:64:83:16:36:18:78:2F","sha256":"09:BC:C7:26:D6:B6:3E:5F:F6:A0:08:0F:2E:59:DE:F1:93:17:47:57:05:FE:C4:42:22:CD:D7:A4:86:1B:45:B7"}}},"request":{"raw":"GET /config?source=https://testttdomain.com/ HTTP/1.1\r\nHost: connect.sol.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Config-Id: 69749f25be1ff7d4492e9a7f\r\nX-Client-Source: Perpetual-Client\r\nX-Fingerprint-Id: 2970cca0175ce506c2661e771626736b\r\nX-Unique-Client-Id: c118a9e9101fe830eb7ce895984ca2a21240f02258e134f4a434c4d8f2617e96\r\nX-Data-Check: 95533c0e7ce053b85978c9795194f96632e126bd955b432f9cf2cdbeedd49bc8\r\nOrigin: https://87qma2.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: perpetual/encrypted\r\ndate: Wed, 04 Feb 2026 17:23:22 GMT\r\nx-ratelimit-limit: 50\r\nx-ratelimit-remaining: 48\r\nx-ratelimit-reset: 597\r\ncontent-length: 1278\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q7lUrUvWyMK7o7QHDOFzCWMbsIKKSDXVkLWkiB9PYbusdfEG9soIPoRGLZxPN3Gab7GMjcRKCTEPw1s8fzdwYb55HjEqOTDnQAlXCQ%3D%3D\"}]}\r\ncf-ray: 9c8bdb025b76b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1278,"size_decoded":0,"mime_type":"perpetual/encrypted","magic":"ASCII text, with very long lines (1278), with no line terminators","md5":"d1974c8e4388dc87c8a5d6da89b771c6","sha1":"6d7f75eaf6286c3523851b5c88cbd06a91e862f7","sha256":"1313739f0ca78d2e6ad50048fecf9ef0ec89ea9c8f7addad8d1b0cac980f1ea1","sha512":"b8abbff0e59c0f443d0f4e0cd1c9fbf832840c9e8cb09eb34452df9c056a75d3ed206eff9603a1d47035f5eda6e321bb0a85da047307e047010695b0189c188a","ssdeep":"","tlshash":"992195fb70641c7a25af22216974a8e980972a75c2961696009f7694297375a2e16110","first_seen":"2026-02-04T17:23:59.358323Z","last_seen":"2026-02-04T17:23:59.358323Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://87qma2.vercel.app/demo.php?antibot=false\u0026id=69749f25be1ff7d4492e9a7f\u0026source=solana-iframe","date":"2026-02-04T17:23:23.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://87qma2.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 31 Jan 2026 15:23:48 GMT\r\nexpires: Sun, 31 Jan 2027 15:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 352775\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-08T11:42:03.923032Z","times_seen":254828,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":107,"dns":1,"connect":7,"send":0,"wait":10,"receive":6,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/axiom-points.webp","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /axiom-points.webp HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 27976\r\ncf-cache-status: MISS\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"ee7498ec2ab39415386bee48182d09f5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YITHOG7u4Fe%2BTZ%2Bs39GAWDgGMzrI1pmvrNW4KPH08EZB9wZx3ZUN2QXwEfPQLdP4tBlKcwuHCkWqxo%2FI7cdrIZYtcueLtxU1YKYPBG91TB0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c8bdae93970568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27976,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10686ac65a6692c9a3312371a272bbe9","sha1":"4b5693383b3064a1b58683b02c1a3348bf213f23","sha256":"be4dd96343e80f282c28d2985ab2bdbeb6536e8f7b581158703c9fd66d48832c","sha512":"bdf46cf35c1bfbb9a5fdfde45022fdd2bc2166162009afd00da96ca9645906b8e18714f0b8ff5119f2e045f0f4c4116c556dcdd665bf4b130ff61fc1c2785b22","ssdeep":"768:O/ft2RbPJW7h7Z1QAiWdkzR0RRdnXMVIe0tQGvR3uLJ:OwlW7h91RiWCzR0RRd8VIeWVQLJ","tlshash":"02c2e1695d7bf911ba4c5cc599d0cc86a3f12f6db281cd3386ee312c4166a4a4b3703b","first_seen":"2025-03-16T21:52:20.840668Z","last_seen":"2026-07-13T01:06:07.955148Z","times_seen":31,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/ce178d2b3058a5fe.css","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /ce178d2b3058a5fe.css HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hOrKfK5lUZ39OFwGiJ5xdvRi%2FZjAUaeJigzmlaqgsvz74G3JCq9bv2a4F76MDsJOXLmTrxrvQK8P1fUg7snu1YUB9ejysLvKNhP6nT6B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"dbaac9abb85467e1b2a43aa60d7f6fc3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c8bdae91962568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130307,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"edcf47cfe4c90d9051f74e396e61b0d9","sha1":"e7c404a1fdff2476cd4b1ec1e0cb7b2395b68cd1","sha256":"0481d6462cc1618aecd94556f02cfcb2825b96ac08a9907bf7d8edfc75bf5b2e","sha512":"27cbbd857996b5aacc5b7093d88d626066cbcae43bbee7b46704523f1c0c1a0e151fceb38cec49fd994d4722b97b1095f7ed3712699c6d0aae1bf750350dcb42","ssdeep":"1536:6c+QAP3ILxAjujj/mZjblpU0UvDfFawWgUipUwRET5yZ03fIJsP322H3a37VMrXe:e3uxx/KPbdwRDnK56","tlshash":"fdd305fde24d45d13732c886eb75b78a60e9fabad5815c45f81b500daec36a102c4ebc","first_seen":"2025-09-17T08:13:09.265925Z","last_seen":"2026-07-13T01:06:07.949557Z","times_seen":25,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/integrations.webp","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /integrations.webp HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testttdomain.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 14534\r\ncf-cache-status: MISS\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2635774e51a95714c7c94d613ff3f812\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5bnMvDvUPHeK3BEDQ54cu1Xd%2Fu8prlYCBc3V1JzWlL%2FByoqdt2XiHaI%2Bp2Afq%2BOKO8YRi8%2B%2B0X596rRh2rOPas6GQ%2FpAQ3xDSr52bI3gGRg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 04 Feb 2026 17:23:18 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c8bdae93971568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14534,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"92022a4faeac1671bb1c29195d1e0d60","sha1":"400d5748332789134b7dce3569d33563dcab3b35","sha256":"cc5d2383a6d290f9b4a8bf109e43c617776be1c785c7bd77bfff7eacd2e9b522","sha512":"e96ce18783bbe4cd5ef32ed4095361617d6500b3b7151dbd695630d0571986dd41ab0cf59976537271be074772d01e92462eed29a4da46bb7ecfe2b9ccc0c251","ssdeep":"384:3jDdnCINL9S74GDhcAplRrJCYub6WqqLt4gko:TDdhGDhc0jVzn5Pgko","tlshash":"5662cf1cc08485f8e04b457edbec2b99fa6938f770c3026b6453de926606bc19960b9d","first_seen":"2025-03-16T21:52:20.85954Z","last_seen":"2026-07-13T01:06:07.94025Z","times_seen":223,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testttdomain.com/hero-video.mp4","fqdn":"testttdomain.com","domain":"testttdomain.com","tld":"com"},"ip":{"addr":"104.21.0.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://testttdomain.com/","date":"2026-02-04T17:23:18.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testttdomain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 13:38:13 GMT","end":"Mon, 27 Apr 2026 14:37:55 GMT"},"fingerprint":{"sha1":"59:98:59:54:D1:99:46:50:50:A0:86:AF:5C:64:57:C1:EF:82:A3:41","sha256":"8E:FE:79:9B:F3:CB:54:D9:7A:C4:78:90:D7:53:7D:9F:77:D8:B8:6E:0C:16:48:FE:04:69:19:59:11:05:FA:12"}}},"request":{"raw":"GET /hero-video.mp4 HTTP/1.1\r\nHost: testttdomain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://testttdomain.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 1407464\r\ncf-cache-status: MISS\r\ncontent-type: application/octet-stream\r\ncontent-range: bytes 0-1407463/1407464\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a4bf0e8c8f9e37acc8fa6852e5ebe330\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a64WGlAoMrvVnsfHnQbCesvi%2FhJnrtSNUz98QdysIQyDz%2FnwN1gNmqMnnU1gaiNALinQgmqP7S5crCk8b%2B4ipdIPzRA38R7HZMifpiYp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 04 Feb 2026 17:23:19 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c8bdaeb3997568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125470,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"446fb9bb24e36ddc292ca04f5b4dc512","sha1":"9fdc85d900a309e090f7ceae31f62100234ab485","sha256":"dbd92aa9a2fda2f1e322cd999a21432b4105c9b2869ba69fec949e13f925dd43","sha512":"01e03671a6e159564e176a60ec7f363954b3202fda41432341ef531bd1f2a35c9945a3ef2cc71cab5586b34e20a39386b399e90c1509991ba07e13a30bf98492","ssdeep":"3072:4b4SpJgiOA86v9Qivom7xchFVairC21uo548Zq:sLgiObYjv/O0irC21uoE","tlshash":"c2c31274adc950caf43dbb37495bef40a2d148400642af394fe44639f5e5cb8ee692a2","first_seen":"2026-02-04T17:23:59.362378Z","last_seen":"2026-02-04T17:23:59.362378Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"testttdomain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}