{"report_id":"16af6c8e-383d-4015-9c2b-ea1fd7a2473f","version":0,"status":"done","tags":[],"date":"2026-06-17T20:29:47Z","url":{"schema":"https","addr":"www.lukicrown.to/","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":0,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"www.lukicrown.to/login","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"title":"LUKI CROWN | Login","dom":{"size":18054,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4991)","md5":"4c0479b12cd641d2438d5e250b623ac8","sha1":"dc7ba2e67ddddb9617712014d465e5b2bd6acfe0","sha256":"fe791d41e1002338d4abd133b8478de5ca7799a4a646331d2157b30e5c99ba40","sha512":"f1f84b8e43d5307fe501834221f2093fb90638e05eebda999fd36f449ef160fb9061ebc6a475f74322e85a2c4d4481ce6fa5d6ce6fae533f68bc781ae6e45e76","ssdeep":"384:+7TVW2FTZlKNVs+RzHQ5t31jDqXI+Jbd1tsp60HD2JG:Yo2FXeVZZQtVZp60HD2E","tlshash":"3b82e53424f109331aa394d87aaa6f0a2ee4d213ca5b490933fd17d94fd7d81dc93b68","dom_hash":"domhash23c6f7617f5bc4a1b95d1a0b596bb644","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.lukicrown.to/","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":0,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-22T20:29:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.lukicrown.to","ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":2668071,"first_seen":"2025-12-12T17:49:34.804157Z","last_seen":"2026-06-14T20:42:12.836984Z","alert_count":54,"request_count":27,"received_data":1748250,"sent_data":14257,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.lukicrown.to/assets/js/theme-switcher.js","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a805e2e27aeec917dad263617428723","sha1":"7e621056504db836209c0052cd945814bdbcdf33","sha256":"149cc4bece7890be24138dada40c740ddd58649b70d080e05e64b9cc758d34c0","sha512":"1bdd93cf985def8829e73f2b67bca9907b5a47d88bda2aaed339c687bfee14c7ba4f24750f55e778fb13642511c72d0415f20dd7cd8d6446299c1b0a94cb3811","ssdeep":"","tlshash":"3901efbe0c305a31103904ef7248abe66e38301753118560e44fec6c385cdda91e3ee7","size":846,"data":"","first_seen":"2026-06-17T20:29:51.087146Z","last_seen":"2026-06-17T20:29:51.087146Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/js/plugins/jquery.js","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"512729daf8ee9b5349c57013fb005fb2","sha1":"cb21585dafe13aa43a6ff5daff019a3bed0f7470","sha256":"3ef0b3864c82f5f3a751adceed2d2998f7a13147ff3450b2cc161e8b64e6b180","sha512":"14b596255b0bb06c259f068045fa64c509a58457f300e158bf9aef9aba40349c9eda04f410b6eb018772fea04ab6b5b5f1742b1fef7c9e5e6256392244f863d5","ssdeep":"1536:Lg2LGLupvxBavnQYTkPJjoMkxfEIWKUdnBN4sO9ClNZJf/xS+s2BB84:FmkPJwgXl4sxPcMB84","tlshash":"ee8309dd72c6b02247a770ba007f550bf236199d280d8450f169d8e9bcb5a8e827bf7d","size":86221,"data":"","first_seen":"2025-03-17T01:13:48.375574Z","last_seen":"2026-06-24T12:25:40.982134Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/js/plugins/toast.js","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c4118aa73781e1e67b882df7c969d14","sha1":"8201d0c7cc5c7746501ac0192682a8e8229d0fe5","sha256":"4096a3a9d1f3ecf1736c7020640e49e1d4f88f194a58a4b022b6fe440be4469b","sha512":"ed59ef6037d01561c9f608b722babcd80814a449caac1044662a014c7cea17adf9d7310691997910365f4b70f03e8a33469867700febd4fbc0a2913993ef64d2","ssdeep":"96:vrepuS6u9cym0rpqH0mERZPC1E8qPZMW5aQC33uVgzEC1sXEl:vrxSEmoVyPSV33/zZ","tlshash":"b7d1008cb1426b3209c792d5706d560db13393f84a90184cbabdebf1ea24f81e5e7775","size":6241,"data":"","first_seen":"2026-06-17T20:29:51.105368Z","last_seen":"2026-06-17T20:29:51.105368Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/js/utils.js","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"51a08d50bf5e95d7d5a43b6a87c230be","sha1":"7d638e57f01e6583c104323807cce15af4906359","sha256":"1fc01e55e54ef35c39ab25e9436ff45acede68eabf7b8666aac9e6967632bd1f","sha512":"baafcddbcc04a474fcf71adb8892d7e0835777de7c34071ffc6ba14ef0da4ad5b5df1fda842468e8b4e96d0d6d77beb9ec44cad2a0ab9e1d6204826be19301b1","ssdeep":"","tlshash":"eab0120471d54224337f81c8e0850fb01c05bc9d90cc16cd7cf6e98e361ec4015dfa01","size":103,"data":"","first_seen":"2026-06-17T20:29:51.111157Z","last_seen":"2026-06-17T20:29:51.111157Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/js/plugins/crypto-js.min.js","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0e422653cabbde70b9659f245dea233","sha1":"03dc792110829d358c4722770637ad283194f51e","sha256":"c8229e1a0947b9d8212ec09426bf4b80068b8d4575850fa4fcf37315cc07d2a1","sha512":"185b281d26834ee6e4e0649a5f221c2f2a916b48bb26bb7857236caf41a2ab6b691d7a739a5f53bbd5d5a62d2c052504f842d0b8671802c1ca19f0a3c20994e2","ssdeep":"1536:pP3jxXjmYJEXc0YowUEyXPtNPU9ArHMqnY:p/jkYi2T","tlshash":"7a535cc162986492a3b76880097f740b7077353b0a0d59acf654fdefacacad68079c7d","size":60782,"data":"","first_seen":"2026-06-17T20:29:51.106376Z","last_seen":"2026-06-17T20:29:51.106376Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/js/pages/login.js","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f0c92429114765af2611725f7c50d09","sha1":"4325e762633607b2a205bcd43925473ac1ec1c14","sha256":"47644e2038012e3f2d69f72b54b89b94b405f4503459ece3d4af7f47a638a222","sha512":"d133644373f482a613e15085f745911337f0076447a3efcc5dfa39267bb70b23eb7d6f4a284fc9572478c4b6f29777b66697b1bf3107eb605b48e177e0d703eb","ssdeep":"192:X2HhHJDINGBBtmMDOPOTxrtGza7JtduFzH4u:ocM7EaXo","tlshash":"f6f19530e0510ea30efa51fb348a2a09f077cc55d749c621767652e8b79feda0d23b89","size":7777,"data":"","first_seen":"2026-06-17T20:29:51.093144Z","last_seen":"2026-06-17T20:29:51.093144Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/js/theme.min.js","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a91fed00769c1cb80c84d890aa15555","sha1":"c3e1cfcfe82c6fde646471b0b435886274c70cdb","sha256":"de07ce303e07b4389715ec8119c69b4e72915f16ff442c196945ceb1eb950910","sha512":"768426749d776c8b3dfee3a36c9f77be42eb6e3fb34d03d19b92d7497982e655ba07ef742d68db0960b217fa58ead972f4b7e0144994a30042d4178ef162e58c","ssdeep":"1536:x2CX0qxxh8jXiOk9u+sfc/GmaUMAk02ffD9RBKdOUrEFE80cUb58LwmriS:B/u7ATG6wUrEFE8E58LJiS","tlshash":"8c93e7593254b4730adf41a7807b434bf23619a8b54a801cb57cacdd2a7dcc272b7bb9","size":96427,"data":"","first_seen":"2026-06-17T20:29:51.089403Z","last_seen":"2026-06-17T20:29:51.089403Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/js/validate.js","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f19f3706c54473b51c4faf84d5a2e8ea","sha1":"ebda512029f56697096546bd02adc19e1c7e3ecc","sha256":"39b10d18c7afca699cf6f6426e9e4299bf95d7a2acc9597af3abff5b5cfe35c2","sha512":"3295d62e59a4b13d840f3af79fcbce57794386a895fb1ccb2672ef4949ccac5de3099fb2e170b974e84df2805388383e7b6b11068267f8dd828b0314d21aafac","ssdeep":"","tlshash":"8131029c73a0592302f6d4b508a30405b3f3ada195180fe1d72266b33a759e69b439b9","size":1830,"data":"","first_seen":"2026-06-17T20:29:51.074203Z","last_seen":"2026-06-17T20:29:51.074203Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/js/lib.js","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"287d7413861b1f2cb35ae163966615ea","sha1":"c35cb811533692e56213e2600fe1e028d579dd4f","sha256":"7c46a2983adfaf1aa6e967bafd4c5eeacea4f8514e34bf092c5e97455ea37315","sha512":"d871186b8700705aa50d8cf9503bf0bd9a50e441d5940c214d783d61bef2348d8ae89621e9114991604d4c03fd293fcab491abdd811efb06329b51deb38aacba","ssdeep":"","tlshash":"3c219d6080022b5009fb96fe744e191dd973454ceb7ac520b67b1154bbcda6d0b77b8d","size":1353,"data":"","first_seen":"2026-06-17T20:29:51.091524Z","last_seen":"2026-06-17T20:29:51.091524Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.lukicrown.to/assets/css/datatable.css","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:23.951Z","timestamp":1781728163951,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/css/datatable.css HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/login\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: text/css\r\nContent-Length: 1177\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:14 GMT\r\nETag: \"692dfda6-499\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1177,"size_decoded":1408,"mime_type":"text/css","magic":"ASCII text","md5":"e08be6666250a1bb09fae87383edc4b7","sha1":"dffb790a0dfb6f923a7c18c2d243cc352cdf03d9","sha256":"6891d7945aee81263c3e557f7ca2f003047b48ba1021a5aaac3b1e7bb0251be2","sha512":"fbeca4bae44d85d42fe671a8e366fe51a14c3b14202d1ee6bc9d8a45e0583e96c4b46dbb63450dd0a1dc2f51f3f3c88174fcb080d483996333daf68ec146cb77","ssdeep":"","tlshash":"4d2107a1ffb47868712ada11225fd7d6331c264098684a35b1d1313c974cf6d1e72ebc","first_seen":"2026-06-17T20:29:51.067492Z","last_seen":"2026-06-17T20:29:51.067492Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":62,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/css/theme.css","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:23.952Z","timestamp":1781728163952,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/css/theme.css HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/login\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: text/css\r\nContent-Length: 432842\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:14 GMT\r\nETag: \"692dfda6-69aca\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":432842,"size_decoded":433077,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (419)","md5":"a7c20c6b9a770c26a424d1b38be68a57","sha1":"134230b778d050f3ab5bf0ea75d84167aa23111e","sha256":"9a9fca4d73e5da398c88fbffe4a231301f2230be1821818a77df8df4931b9778","sha512":"10ae6a7f4410ca5a2872f630e904fdfafae4e41ce96b897787eb06d6f57bc8009ffb2debe581b92ba664b778ae64f7ef05f2848d2b08e648acccd7828d7ef171","ssdeep":"1536:7nDPponNpKczCkyrCs4VZDSEbjWQnFjeot4ydWYX6sAVTmw9SeE57aFamti/gv6F:wpW7C8+HtIjNbPZlikfUpB/a5/TmR","tlshash":"d8949768fdf01124393b526965abbbfc7b6c5042cb09cd76bdd23124cf857e548a2e88","first_seen":"2026-06-17T20:29:51.068867Z","last_seen":"2026-06-17T20:29:51.068867Z","times_seen":1,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":126,"receive":148,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/css/login.css","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:23.960Z","timestamp":1781728163960,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/css/login.css HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/login\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: text/css\r\nContent-Length: 408\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:14 GMT\r\nETag: \"692dfda6-198\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":408,"size_decoded":638,"mime_type":"text/css","magic":"ASCII text","md5":"5c04c38ee149a2b53e3465be5bb3030b","sha1":"f9e27d8215bb851d3474c81c977244481726e14c","sha256":"f486af8a8ef7704dd84d8c403cb40622e89f68f8f700a8f6e39bbb65f8010db4","sha512":"0b164fd3bde07c50075cf767d04c441411592c19ac99b80a71f0ea16740e961e43cb13c3ee57aaac571946faec6cf4d1931a099d136c2d482adeafadcf22a72b","ssdeep":"","tlshash":"fce0e5901b91920ea917a8541d655a88d368c412d24eda3e26e960edaece18d60fa3e0","first_seen":"2026-06-17T20:29:51.072251Z","last_seen":"2026-06-17T20:29:51.072251Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/js/validate.js","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:23.968Z","timestamp":1781728163968,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/js/validate.js HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/login\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1830\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:18 GMT\r\nETag: \"692dfdaa-726\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1830,"size_decoded":2075,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1830), with no line terminators","md5":"f19f3706c54473b51c4faf84d5a2e8ea","sha1":"ebda512029f56697096546bd02adc19e1c7e3ecc","sha256":"39b10d18c7afca699cf6f6426e9e4299bf95d7a2acc9597af3abff5b5cfe35c2","sha512":"3295d62e59a4b13d840f3af79fcbce57794386a895fb1ccb2672ef4949ccac5de3099fb2e170b974e84df2805388383e7b6b11068267f8dd828b0314d21aafac","ssdeep":"","tlshash":"8131029c73a0592302f6d4b508a30405b3f3ada195180fe1d72266b33a759e69b439b9","first_seen":"2026-06-17T20:29:51.074203Z","last_seen":"2026-06-17T20:29:51.074203Z","times_seen":1,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":155,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/img/bg.png","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:24.315Z","timestamp":1781728164315,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/img/bg.png HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/assets/css/login.css\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 42370\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:14 GMT\r\nETag: \"692dfda6-a582\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42370,"size_decoded":42604,"mime_type":"image/png","magic":"PNG image data, 1892 x 1050, 8-bit/color RGBA, non-interlaced","md5":"7c73575670911cc5a077460f2dd43ee8","sha1":"9fcbd60b3b55d8df1d3adf2c443bd0c504e8b142","sha256":"ad8317458e8402cf8f83338019124b703668cc6691ff041e5bb571fe9253fd26","sha512":"2e63d6c30b7fd2982eca806ebd078de0d9e9b3386b3d66de3178ea3637ba60c98c1d75e80a12dbab570d4d3bae19bc4659136a4c75c51ba8381e221329971ec1","ssdeep":"768:bJ+OsVLY/9BDJwgeD5N0XTfRweKNqedHr3dpan3D6P44/z:bJ+OsVM/9BDKgelN+DRwBNqIHTdpGWP3","tlshash":"3f133b4cc7d0d06dc81a9374cc7c3dd47eba0e4a38a67ab4165a842f6fb727294d6839","first_seen":"2026-06-17T20:29:51.078066Z","last_seen":"2026-06-17T20:29:51.078066Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/font/Inter.ttf","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:24.348Z","timestamp":1781728164348,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/font/Inter.ttf HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/assets/css/theme.css\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 874708\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:14 GMT\r\nETag: \"692dfda6-d58d4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":874708,"size_decoded":874959,"mime_type":"application/octet-stream","magic":"TrueType Font data, 21 tables, 1st \"GDEF\", 58 names, Microsoft, language 0x409","md5":"0a77e23a8fdbe6caefd53cb04c26fabc","sha1":"ee5c2e22ffeddefc433c9aa4c76779bb73a5c682","sha256":"0be2399ea925f1f83ff974764761da9860ec50742ed29a5d4c1ffd0c5c7ac3a8","sha512":"6012de93c8523799869b8976f620936651efc0395c66f1a6a56d417288c1b05675662c5c740800ea935eaae1968f2befe279d0264eb0805f6b98e5ab042a9316","ssdeep":"24576:Wap5PFuuuuPz2iKeRpJ6iruEOwRy+4FFNea:WapTL2iKeRpJ6iar9F7","tlshash":"f7158e53f282cf5ec2592b358a734b9462396870ff17130f696573b4aea33e0694d6e0","first_seen":"2024-12-10T16:54:08.570183Z","last_seen":"2026-06-26T20:33:31.003498Z","times_seen":2991,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/api/captcha/image?csrf_token=ad4c4f3d6004f2b5417d4b9a60376b248bbba3d0b7f24724d009068e923ba3d2","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:24.434Z","timestamp":1781728164434,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /api/captcha/image?csrf_token=ad4c4f3d6004f2b5417d4b9a60376b248bbba3d0b7f24724d009068e923ba3d2 HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/login\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:25 GMT\r\nContent-Type: text/html;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4886,"size_decoded":4016,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (4886), with no line terminators","md5":"3709e3417320f5e4a9536b3d1bf4c2c6","sha1":"54f2e56b953384d1ab63dc4a2caf5abd90fc1ea7","sha256":"6fce3eb0c57e81b3abc2dc0deafc44b6ba0eab88f115132ed4c375f3fcd16c3b","sha512":"3d70a6a2289315f85aef2e1025e9a0bf7c72d80a364fd64e75e64127d3885a3c95764017d9f339ee30fa36f5616f29099a9c3fadb4ef430f44e4409427086053","ssdeep":"96:muDyrC3tAn9VnczaO8kdGauBzgNYQ5sOF+zjWnxlFfJ/Ekux4DqpJ6aN:m+yW4Vs/GauBzgWQ59UWx3x/EkDqpJ9","tlshash":"99a17c6ea2c91f10eede909de113000c0eb7b2bbc8e88c159357472494cb924dcd1ead","first_seen":"2026-06-17T20:29:51.081765Z","last_seen":"2026-06-17T20:29:51.081765Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1071,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1071,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/app-icons/favicon.ico","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:24.639Z","timestamp":1781728164639,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/app-icons/favicon.ico HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/login\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 8351\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:14 GMT\r\nETag: \"692dfda6-209f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8351,"size_decoded":8587,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"f6f2a11b3fd7a222b32070ab4ac11999","sha1":"18e4146ece1d9fc3f54957434181c39893d90882","sha256":"0307ebcb074f9fc7f2729b711460b4ddea5ccaedf37fe70a91400a525052bcd3","sha512":"829230786d7530371768dc943a42c43ec85c28a0b7f5901fa15962f788b3ec72ccd85d16d745e5e294c1cac3438473227f0294471dc7d4a21b0d55cc2992f9b9","ssdeep":"192:8dv9VM91d+rOxhRw9icNopqj6miL3GbV/pYWPxsk9Vk:8Z9VA/5xbb2wqjQGbxjxskLk","tlshash":"e602ae84750506d2e8f8e17d08e372cb4ebbb7a607757d8651388611ea78dc3cc4aee0","first_seen":"2026-06-17T20:29:51.083981Z","last_seen":"2026-06-17T20:29:51.083981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-17T20:29:23.375Z","timestamp":1781728163375,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:23 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nLocation: /login\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T03:34:35.400809Z","times_seen":16750458,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":108,"connect":20,"send":0,"wait":67,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/js/theme-switcher.js","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:23.942Z","timestamp":1781728163942,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/js/theme-switcher.js HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/login\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:23 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 846\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:18 GMT\r\nETag: \"692dfdaa-34e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":846,"size_decoded":1090,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (846), with no line terminators","md5":"5a805e2e27aeec917dad263617428723","sha1":"7e621056504db836209c0052cd945814bdbcdf33","sha256":"149cc4bece7890be24138dada40c740ddd58649b70d080e05e64b9cc758d34c0","sha512":"1bdd93cf985def8829e73f2b67bca9907b5a47d88bda2aaed339c687bfee14c7ba4f24750f55e778fb13642511c72d0415f20dd7cd8d6446299c1b0a94cb3811","ssdeep":"","tlshash":"3901efbe0c305a31103904ef7248abe66e38301753118560e44fec6c385cdda91e3ee7","first_seen":"2026-06-17T20:29:51.087146Z","last_seen":"2026-06-17T20:29:51.087146Z","times_seen":1,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/js/plugins/jquery.js","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:23.962Z","timestamp":1781728163962,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/js/plugins/jquery.js HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/login\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 86221\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:40 GMT\r\nETag: \"692dfdc0-150cd\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86221,"size_decoded":86469,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"512729daf8ee9b5349c57013fb005fb2","sha1":"cb21585dafe13aa43a6ff5daff019a3bed0f7470","sha256":"3ef0b3864c82f5f3a751adceed2d2998f7a13147ff3450b2cc161e8b64e6b180","sha512":"14b596255b0bb06c259f068045fa64c509a58457f300e158bf9aef9aba40349c9eda04f410b6eb018772fea04ab6b5b5f1742b1fef7c9e5e6256392244f863d5","ssdeep":"1536:Lg2LGLupvxBavnQYTkPJjoMkxfEIWKUdnBN4sO9ClNZJf/xS+s2BB84:FmkPJwgXl4sxPcMB84","tlshash":"ee8309dd72c6b02247a770ba007f550bf236199d280d8450f169d8e9bcb5a8e827bf7d","first_seen":"2025-03-17T01:13:48.375574Z","last_seen":"2026-06-24T12:25:40.982134Z","times_seen":71,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":127,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/js/theme.min.js","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:23.965Z","timestamp":1781728163965,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/js/theme.min.js HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/login\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 96427\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:17 GMT\r\nETag: \"692dfda9-178ab\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96427,"size_decoded":96675,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1a91fed00769c1cb80c84d890aa15555","sha1":"c3e1cfcfe82c6fde646471b0b435886274c70cdb","sha256":"de07ce303e07b4389715ec8119c69b4e72915f16ff442c196945ceb1eb950910","sha512":"768426749d776c8b3dfee3a36c9f77be42eb6e3fb34d03d19b92d7497982e655ba07ef742d68db0960b217fa58ead972f4b7e0144994a30042d4178ef162e58c","ssdeep":"1536:x2CX0qxxh8jXiOk9u+sfc/GmaUMAk02ffD9RBKdOUrEFE80cUb58LwmriS:B/u7ATG6wUrEFE8E58LJiS","tlshash":"8c93e7593254b4730adf41a7807b434bf23619a8b54a801cb57cacdd2a7dcc272b7bb9","first_seen":"2026-06-17T20:29:51.089403Z","last_seen":"2026-06-17T20:29:51.089403Z","times_seen":1,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":134,"dns":0,"connect":0,"send":0,"wait":128,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/js/lib.js","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:23.972Z","timestamp":1781728163972,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/js/lib.js HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/login\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1353\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:19 GMT\r\nETag: \"692dfdab-549\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1353,"size_decoded":1598,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1353), with no line terminators","md5":"287d7413861b1f2cb35ae163966615ea","sha1":"c35cb811533692e56213e2600fe1e028d579dd4f","sha256":"7c46a2983adfaf1aa6e967bafd4c5eeacea4f8514e34bf092c5e97455ea37315","sha512":"d871186b8700705aa50d8cf9503bf0bd9a50e441d5940c214d783d61bef2348d8ae89621e9114991604d4c03fd293fcab491abdd811efb06329b51deb38aacba","ssdeep":"","tlshash":"3c219d6080022b5009fb96fe744e191dd973454ceb7ac520b67b1154bbcda6d0b77b8d","first_seen":"2026-06-17T20:29:51.091524Z","last_seen":"2026-06-17T20:29:51.091524Z","times_seen":1,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":218,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/js/pages/login.js","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:23.973Z","timestamp":1781728163973,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/js/pages/login.js HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/login\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 7777\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:22 GMT\r\nETag: \"692dfdae-1e61\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7777,"size_decoded":8023,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (7777), with no line terminators","md5":"8f0c92429114765af2611725f7c50d09","sha1":"4325e762633607b2a205bcd43925473ac1ec1c14","sha256":"47644e2038012e3f2d69f72b54b89b94b405f4503459ece3d4af7f47a638a222","sha512":"d133644373f482a613e15085f745911337f0076447a3efcc5dfa39267bb70b23eb7d6f4a284fc9572478c4b6f29777b66697b1bf3107eb605b48e177e0d703eb","ssdeep":"192:X2HhHJDINGBBtmMDOPOTxrtGza7JtduFzH4u:ocM7EaXo","tlshash":"f6f19530e0510ea30efa51fb348a2a09f077cc55d749c621767652e8b79feda0d23b89","first_seen":"2026-06-17T20:29:51.093144Z","last_seen":"2026-06-17T20:29:51.093144Z","times_seen":1,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":219,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/img/sunshine.svg","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:23.983Z","timestamp":1781728163983,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/img/sunshine.svg HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/login\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 4813\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:14 GMT\r\nETag: \"692dfda6-12cd\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4813,"size_decoded":5050,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5d77ca54d98693731756490108256be5","sha1":"3fc34ffd27d4994a0cf8873e16f6b1ff0ff1a9e9","sha256":"00dd522476e069e085747c9bcb8afd436efeac4ba177f276fc4f4213bb1a1239","sha512":"3c050d8c29f2c9eeec05673f6918ab28283760d7ff145b393c4edb9528051766c7cbe6d0e3baf198f38f3765d9ed8ec6c6ab645ab688c57c849babe06811761d","ssdeep":"96:Ay46HtoFgL2vcjcOcdcAcncicRcEcLc7c0c6:JKO2Uo1+7cpCPAw/6","tlshash":"ada1bd9ed1286626fc44c28deec74408325f86a3e8d685936195efaf48e4c8d3d8c3f1","first_seen":"2026-06-17T20:29:51.099191Z","last_seen":"2026-06-17T20:29:51.099191Z","times_seen":1,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":289,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/icons/around-icons.woff2?29da402db6a4645f2ed69d761c35b60e","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:24.350Z","timestamp":1781728164350,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/icons/around-icons.woff2?29da402db6a4645f2ed69d761c35b60e HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/assets/icons/around-icons.min.css\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 33272\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:14 GMT\r\nETag: \"692dfda6-81f8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33272,"size_decoded":33507,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33272, version 1.0","md5":"de380f292f248b9dc1e324082c1ed3af","sha1":"75bb1bb0724ed844ea927dee3befae1bc7d610fa","sha256":"6b5f7ea196ded25b8de4a529d04df3bc904228a594cd5f55b7182e8d79b5912e","sha512":"7765ca1939d04f964c335018a9a81cc63014952622db3e2ea8677caec6653a831cdc56b3fd977384c77af111e7e4eec602078c8c36b25a166b2c674504644192","ssdeep":"768:mSeQJe+Gsk+HJq4qPe76IIXj2nnuVS4by209L6RbzpIgWVuC:MQMFoIvw6pzefNLizpIxP","tlshash":"46e2f14154e9800cb7cc23dfe4472f2a20acb19294f0a291e27f5361adb567a72dbb52","first_seen":"2025-03-21T10:08:01.619104Z","last_seen":"2026-06-17T20:29:51.101271Z","times_seen":40,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/icons/around-icons.min.css","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:23.944Z","timestamp":1781728163944,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/icons/around-icons.min.css HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/login\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: text/css\r\nContent-Length: 12855\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:14 GMT\r\nETag: \"692dfda6-3237\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12855,"size_decoded":13088,"mime_type":"text/css","magic":"ASCII text, with very long lines (12855), with no line terminators","md5":"0a9798cc711c12df579b05182d9e1e20","sha1":"a3cb290ba29487ec31f28559d742947f59afe2af","sha256":"7a09aef2629165a920e2186b729fe4043fa5a058d9cae0fd0c5b27e6672905a3","sha512":"4dcbcd14a6adb20da4eaac5bba37dc2178319239aadfa76744a803d2a334de42d2ea39ab604a59ae6eabc32f9fcf113920e8bec0346816942924d3752bdf343f","ssdeep":"192:uj+9un+RhEFmFk82VL/nON426P8a9PUkuDyYWHc:bhSPxUoi","tlshash":"1942c5f8e16a50e07736c063ef81a39a66d6f63cdd861d68f11f411c2ed266406c9ef8","first_seen":"2024-12-21T17:09:59.90481Z","last_seen":"2026-06-17T20:29:51.101954Z","times_seen":41,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":84,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/css/myfont.css","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:23.945Z","timestamp":1781728163945,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/css/myfont.css HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/login\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: text/css\r\nContent-Length: 299\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:14 GMT\r\nETag: \"692dfda6-12b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":299,"size_decoded":529,"mime_type":"text/css","magic":"ASCII text","md5":"3adb35ebb75eddd4d4a166a4cc99197c","sha1":"9beaf9d176d999375dc1ce1d4276c8c4be0e2bda","sha256":"13b114035c9e6225a01c2b4b74414d851a41016d3a309a1a8b7fccd9612da6be","sha512":"f93ca59551bde14f035ea75391c1667e02278d1060f8f561107e21b38ca5c68156d297a7ae54c4a8febb8103e43a01b19872bc7c210228af1033e3ab1c50d84a","ssdeep":"","tlshash":"2fe08615849d2632d4c8ac7d72833a305a597d4860c419572428646a9ce0cb88298f5a","first_seen":"2026-06-17T20:29:51.102662Z","last_seen":"2026-06-17T20:29:51.102662Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":63,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/css/scrollbar.css","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:23.957Z","timestamp":1781728163957,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/css/scrollbar.css HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/login\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: text/css\r\nContent-Length: 337\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:14 GMT\r\nETag: \"692dfda6-151\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":337,"size_decoded":567,"mime_type":"text/css","magic":"ASCII text","md5":"b6bce72d2ea63e13cb31b5a87ab00949","sha1":"37eafb02cddfbc06f6a187324e45f7a92f831106","sha256":"095a131c9b32b4a5c1a9091ea0e3fb1d6a66fc0ca0a9d356e0ab1e3d9171d16e","sha512":"47567f4f34f6cf438eb818ab2838d59515006ec125726747cf2feccc48cf0db3ff6cee33210b9de4c5e1e408432902cce2f2a78f558ac20a94ac2d95ecd12ea2","ssdeep":"","tlshash":"91e0d856f5fdc5a430f7a8514745c7db23681117414908d4f3a83bb4f612bac023024d","first_seen":"2026-06-17T20:29:51.103594Z","last_seen":"2026-06-17T20:29:51.103594Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/js/plugins/toast.js","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:23.963Z","timestamp":1781728163963,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/js/plugins/toast.js HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/login\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 6241\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:45 GMT\r\nETag: \"692dfdc5-1861\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6241,"size_decoded":6487,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6241), with no line terminators","md5":"7c4118aa73781e1e67b882df7c969d14","sha1":"8201d0c7cc5c7746501ac0192682a8e8229d0fe5","sha256":"4096a3a9d1f3ecf1736c7020640e49e1d4f88f194a58a4b022b6fe440be4469b","sha512":"ed59ef6037d01561c9f608b722babcd80814a449caac1044662a014c7cea17adf9d7310691997910365f4b70f03e8a33469867700febd4fbc0a2913993ef64d2","ssdeep":"96:vrepuS6u9cym0rpqH0mERZPC1E8qPZMW5aQC33uVgzEC1sXEl:vrxSEmoVyPSV33/zZ","tlshash":"b7d1008cb1426b3209c792d5706d560db13393f84a90184cbabdebf1ea24f81e5e7775","first_seen":"2026-06-17T20:29:51.105368Z","last_seen":"2026-06-17T20:29:51.105368Z","times_seen":1,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/js/plugins/crypto-js.min.js","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:23.971Z","timestamp":1781728163971,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/js/plugins/crypto-js.min.js HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/login\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 60782\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:41 GMT\r\nETag: \"692dfdc1-ed6e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60782,"size_decoded":61029,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (60782), with no line terminators","md5":"b0e422653cabbde70b9659f245dea233","sha1":"03dc792110829d358c4722770637ad283194f51e","sha256":"c8229e1a0947b9d8212ec09426bf4b80068b8d4575850fa4fcf37315cc07d2a1","sha512":"185b281d26834ee6e4e0649a5f221c2f2a916b48bb26bb7857236caf41a2ab6b691d7a739a5f53bbd5d5a62d2c052504f842d0b8671802c1ca19f0a3c20994e2","ssdeep":"1536:pP3jxXjmYJEXc0YowUEyXPtNPU9ArHMqnY:p/jkYi2T","tlshash":"7a535cc162986492a3b76880097f740b7077353b0a0d59acf654fdefacacad68079c7d","first_seen":"2026-06-17T20:29:51.106376Z","last_seen":"2026-06-17T20:29:51.106376Z","times_seen":1,"resource_available":true,"data":null}},"time_used":347,"timings":{"blocked":200,"dns":0,"connect":0,"send":0,"wait":126,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/img/logo1.png","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:23.981Z","timestamp":1781728163981,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/img/logo1.png HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/login\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 27504\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:14 GMT\r\nETag: \"692dfda6-6b70\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27504,"size_decoded":27738,"mime_type":"image/png","magic":"PNG image data, 1008 x 1164, 8-bit/color RGBA, non-interlaced","md5":"a0184f5b4496d9c104167594d9d932f9","sha1":"3ec4cb435d04b41af12068b6d2ac1488789679d6","sha256":"8a9ac56d6d320129a1dbff528ea2d959714c661e32f4a03102e95790f1b1be22","sha512":"8764b3838516e7006c902795ef9ab0644f8d319647f3f5922df1c71abe96d6ea70c9afc76b275195755342a0d10e703d72db0610cb9fac80e4b4838f65e5db0d","ssdeep":"768:IigdkYtvZ8q+LfewSsyPSRSEYFK1IoQ2SWUXboXHmkt3pr:gtvZ8a2yPSMZFK1IoHVUrQ3t","tlshash":"b1c2d012fb1698d9f97d2a2b46b75e64ef84961c4e8d03a10b0bc7c7acfc4b089558d8","first_seen":"2026-06-17T20:29:51.107284Z","last_seen":"2026-06-17T20:29:51.107284Z","times_seen":1,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":289,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/login","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-17T20:29:23.631Z","timestamp":1781728163631,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /login HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:23 GMT\r\nContent-Type: text/html;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}],"data":{"size":13541,"size_decoded":3898,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"4b65ae943681625acde5fe13d958b74f","sha1":"6e9ac3ce0025bcd4f021157ebbae161135344b16","sha256":"2d954c3f4ff63eba826148a16cf55fb3ec8d6f6a9a6c15074e7f3fb235127261","sha512":"8224fb3a3559ea6bb3ed3b986f1919561caef93e94a1248e7c47487111175f73b7ab7fac2318d650bf57fbe6556e5cf96fec41ef986219ea93d79d03781e077f","ssdeep":"192:B7+EzrVW87E+PF1Q4cNw4H0b49Fe0Qh8B7OrSVzL8cE7Ebd1xD5p60HD2JV:B7TVW2FT0S8tBJbd1t5p60HD2JV","tlshash":"09526e2424f1193706a398d47aaaaf0b3ee0c603ca1b490933fd17d94fd7d829d57b68","first_seen":"2026-06-17T20:29:51.10825Z","last_seen":"2026-06-17T20:29:51.10825Z","times_seen":1,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/css/style.css","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:23.954Z","timestamp":1781728163954,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/login\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: text/css\r\nContent-Length: 12802\r\nConnection: keep-alive\r\nLast-Modified: Thu, 02 Apr 2026 13:32:25 GMT\r\nETag: \"69ce6fe9-3202\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12802,"size_decoded":13035,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"a63ebd428f53fef5f57ca8c772579a7c","sha1":"74c49ed137c408d8793c67d2fabcd5223b2623e7","sha256":"d11871af2564cf54c93e2aedb30b5371e745ed01955eaaedbe96da16b0b8571e","sha512":"388344f4272712af15f32e3e5541e4e6ce722de4d1fa898585e18b85e7c3e08e58da9341e9694e534efb2f45c9edcfcb668214d19bf80108b2eb6006e2a7c972","ssdeep":"192:9PeQU2tZesyVNgccXXmgKEqizEAIxQxhmahOxR5AzmNj/:IezouXjKCzE/FrizmNj/","tlshash":"dc42ffa4e9f05d3e721a81246567e78c732d5040a74faf2dfaf1309857c82ae98b77c4","first_seen":"2026-06-17T20:29:51.109412Z","last_seen":"2026-06-17T20:29:51.109412Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":202,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/css/toast.css","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:23.956Z","timestamp":1781728163956,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/css/toast.css HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/login\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: text/css\r\nContent-Length: 1482\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:14 GMT\r\nETag: \"692dfda6-5ca\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1482,"size_decoded":1713,"mime_type":"text/css","magic":"ASCII text","md5":"22d3b97b89b6d65235e426ea80329b13","sha1":"d7a4bf8d9b0c91b51be0e28effc5cba5996ec101","sha256":"f238a2e4c569e8b2ea448953e4d3c726954dcd6048f653e29f92a09cf24a4bae","sha512":"06439ce6eff355fe7baf734bcedc69f3ba2db6f2277e33debcc35669db44093cc1e1af22dcaf879edbc88e7613006a2041d15d3aff7d66e59e7b775847d1f459","ssdeep":"","tlshash":"b53100a14f712e281c968de6355df7c9e345504263dfed84acd7101ceec4b608c3294a","first_seen":"2026-06-17T20:29:51.110342Z","last_seen":"2026-06-17T20:29:51.110342Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/js/utils.js","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:23.966Z","timestamp":1781728163966,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/js/utils.js HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/login\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 103\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:19 GMT\r\nETag: \"692dfdab-67\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103,"size_decoded":346,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"51a08d50bf5e95d7d5a43b6a87c230be","sha1":"7d638e57f01e6583c104323807cce15af4906359","sha256":"1fc01e55e54ef35c39ab25e9436ff45acede68eabf7b8666aac9e6967632bd1f","sha512":"baafcddbcc04a474fcf71adb8892d7e0835777de7c34071ffc6ba14ef0da4ad5b5df1fda842468e8b4e96d0d6d77beb9ec44cad2a0ab9e1d6204826be19301b1","ssdeep":"","tlshash":"eab0120471d54224337f81c8e0850fb01c05bc9d90cc16cd7cf6e98e361ec4015dfa01","first_seen":"2026-06-17T20:29:51.111157Z","last_seen":"2026-06-17T20:29:51.111157Z","times_seen":1,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":139,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lukicrown.to/assets/app-icons/favicon.ico","fqdn":"www.lukicrown.to","domain":"lukicrown.to","tld":"to"},"ip":{"addr":"172.86.69.191","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.lukicrown.to/login","date":"2026-06-17T20:29:24.641Z","timestamp":1781728164641,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lukicrown.to","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:7E:25:B5:15:EF:08:B2:A7:82:BB:10:8B:87:9E:F1:35:0D:8F:29","sha256":"9E:EC:86:E6:E0:01:D2:DE:DF:3F:BC:5E:38:4C:68:6F:51:D2:7F:D3:14:A9:50:D3:A5:D5:E4:BE:0D:5D:58:64"}}},"request":{"raw":"GET /assets/app-icons/favicon.ico HTTP/1.1\r\nHost: www.lukicrown.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.lukicrown.to/login\r\nCookie: PHPSESSID=56ie6uptm24io42edvgcut9u0n\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 20:29:24 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 8351\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Dec 2025 20:42:14 GMT\r\nETag: \"692dfda6-209f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8351,"size_decoded":8587,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"f6f2a11b3fd7a222b32070ab4ac11999","sha1":"18e4146ece1d9fc3f54957434181c39893d90882","sha256":"0307ebcb074f9fc7f2729b711460b4ddea5ccaedf37fe70a91400a525052bcd3","sha512":"829230786d7530371768dc943a42c43ec85c28a0b7f5901fa15962f788b3ec72ccd85d16d745e5e294c1cac3438473227f0294471dc7d4a21b0d55cc2992f9b9","ssdeep":"192:8dv9VM91d+rOxhRw9icNopqj6miL3GbV/pYWPxsk9Vk:8Z9VA/5xbb2wqjQGbxjxskLk","tlshash":"e602ae84750506d2e8f8e17d08e372cb4ebbb7a607757d8651388611ea78dc3cc4aee0","first_seen":"2026-06-17T20:29:51.083981Z","last_seen":"2026-06-17T20:29:51.083981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"www.lukicrown.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}