{"report_id":"17dc25f3-dffc-4ddb-b6a5-a495b03b3c4e","version":6,"status":"done","tags":[],"date":"2026-03-12T16:13:13Z","url":{"schema":"https","addr":"www.herb6.vip/#/register?ref=806595","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"172.67.216.51","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.herb6.vip/#/register?ref=806595","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"title":"NovartisagVIP","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.herb6.vip/#/register?ref=806595","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"172.67.216.51","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-16T16:13:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"api.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.herb6.vip","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-09","domain_rank":0,"first_seen":"2026-03-12T16:13:15.937639Z","last_seen":"2026-03-12T16:13:15.937639Z","alert_count":34,"request_count":34,"received_data":3401139,"sent_data":17110,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.herb6.vip","ip":{"addr":"104.21.43.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":14,"request_count":14,"received_data":430226,"sent_data":8287,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sc-static.net","ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-16","domain_rank":3142,"first_seen":"2017-09-05T18:35:04Z","last_seen":"2026-03-11T21:00:21.896207Z","alert_count":0,"request_count":1,"received_data":59423,"sent_data":414,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-03-11T13:42:54.363339Z","alert_count":0,"request_count":1,"received_data":115283,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.herb6.vip/assets/BaseInput.vue_vue_type_style_index_0_lang-98da5af6.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"47f11c4026039ea1480f24f2f9afe509","sha1":"5fbf97b086b4aa8bad38c07e59cf031515654a81","sha256":"80acad7e78d364d7e25971cf86505b3858942ba8f3f667ed169d6ff246f1056e","sha512":"ab00847e1b0d9db269af51a26b80ee69ea6f19b26e486e18cd094ec95979ce35c87a9d6b6cb3388f73360bda8f43471a420b7888c231a813a31b1b0233d8bb2b","ssdeep":"","tlshash":"2b41570add6aafb2c673d6a5a1df0c20e0052b67c550459150f9192d1b8dde4173fb18","size":2396,"data":"","first_seen":"2026-01-31T14:12:27.024824Z","last_seen":"2026-03-12T16:13:20.924542Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/register-58cfe9a8.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"24b0b637e9437f70fbec320697214e1f","sha1":"042951b90c83ea5e14ffff0fa7f4cb925fc95321","sha256":"b26afc783a964d4001208311c49497f74007486ec58b31481c2329a2f2bf87ca","sha512":"5e121a270f7cc8762c62fd542b8e8aea3ec27395a62c9cef2f2b4e2c5ae4b14ba654cad96972c05f4ec3b3a50319c083327b09a545b816bcf844067b2db18bbe","ssdeep":"6144:gvcjRsL6UJDpw1bM1cogt3/MThHocS54UhfUWlUa5CMJHGfAOy4RTY5eJzry7f8H:R9mnRq1IKTtA9HANV9q2d94BrNg6n0UH","tlshash":"0944519cd0b4cf76d4b79661385ea860b05e4befc2405714b3fc4a252edacf0a3b56a4","size":278068,"data":"","first_seen":"2026-02-13T13:35:32.795171Z","last_seen":"2026-03-12T16:13:20.95559Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/#/register?ref=806595","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"10568b780a0d314b06f4ae6be4a339f7","sha1":"2c0ba855511dbe4d8ce3bf061282976a34fd375f","sha256":"97611d5571f8e91da4b84e7fed039c19126ed0d05a358286b229ee99b23e61d4","sha512":"f1d5ba897fc7e7481668825a9b1fc036114a015a88759f3df8a3f52521648c16dcf66dd17116a513a7ccbc3f4d62eff48fde1b11b4905917762aec42d1009705","ssdeep":"96:nfkdoq1aBIBOjsXgInhubwM0eb9X+T60YTHs:nfkdoq1aBIBksXZhu8M0k9X+T60YDs","tlshash":"beb1991b69e56468a703b0ba8c3fa406b521042f099cbd407e0cd7769f8953daab4edd","size":5554,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-06-07T05:03:57.018709Z","times_seen":494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/#/register?ref=806595","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3b4c1c632a9253be71d15901a67e5736","sha1":"728d2e4951da7bf399b7d54b675f17732ac938ed","sha256":"573cc7af8ef0ae6cde3588715917d46b20390d791b0786df96f3fd4bc0d7855a","sha512":"239d3e018f8d9124f200b8bdc576adcaf746396e84333be98746da9fa8985e8bc9e13fcd145a2ec9c2168641609b3cfcf6b9afe9ba17dbd772cd5464d1791687","ssdeep":"","tlshash":"7fc08cc4a0c22e102656a85020af24e8a0244066b0482b02ac94d8483e220b08237ea8","size":143,"data":"","first_seen":"2023-07-09T14:24:47Z","last_seen":"2026-08-09T10:03:19.855879Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/#/register?ref=806595","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dd736b319204af5dfab55929ccd55877","sha1":"8cde638a47bc414ffa37fe9758d6e7ecb499644a","sha256":"75df447b2d365684b20a365175ed1901ea7d2f1dcb108208ab31d280e8a4f9e7","sha512":"958638099f6557326e2a174d0fcb5487fa05c365ea917f4a42ba5d5e76ba69170ace887f9adbcfc1250206a61d2f044212f2c38758a73f9778efbb820c6f0030","ssdeep":"","tlshash":"a9c08cc8b0c22d101b42685458af64e49038c82a784c1b068c98e89a3e230b08233eec","size":150,"data":"","first_seen":"2023-11-04T18:18:58Z","last_seen":"2026-04-16T04:49:47.509106Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/#/register?ref=806595","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7d4fbff71549398ceffe8189db57c5b","sha1":"9ddc56ef19489e0d21f74eebc29c92b469ae6fd4","sha256":"ca663f53ed1b54e1f40c4b17ba2257f76179690249527bf88d268d9d178995a3","sha512":"bb5e60f5eec27743c6cfb79705632ad071bd6cdfffb44d8f0ce4e2c884c1bb531e06e6aa80bee647986c34bb4bad620495cd48c61e8d30441914687444b03b1b","ssdeep":"","tlshash":"e3f09e1b1886b07e53d760b6593bad5b322a11472c5119077d4c80242fe083d7ef5fde","size":623,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-06-07T05:03:57.019407Z","times_seen":494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/#/register?ref=806595","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"caad72fe48a09f8a060e5dd1477935fa","sha1":"f2b5ddb3021c1d3b5df6a518c7b555a7ffaeba39","sha256":"3097fffe06a687f15fda650f93d6f5303679a4fc78db9645da44a7aa4fa902fb","sha512":"1ad398a20e4693fe3fcd02aa2ffd3fa8f2c7bc1cafdc3778ed28300852491cc74174c17f930f387a3d75c02a35aa21100f56df21ee41f5222850cea0d1edee06","ssdeep":"","tlshash":"b731682918ea1118b2177166e17fe70d2725501b2dd4fc097a0cd2240f9997ee6b8cae","size":1591,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-06-07T05:03:57.020035Z","times_seen":494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/ContainerForm-e939f23f.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4934c4c5ca0f46fb55362b82c84b510c","sha1":"4eeaa0856adff81fe0c353d78f3dcb1171a9935b","sha256":"91e17b29f21e01b2babc8a4764c88a97511df03130a1c662547a99aa902f834b","sha512":"a1aa2f087b2c06bc9bc5ed2df175666934997bfd3614f080ee181e8c3ea4e51d365eb781135d7eaed500ba85c24639880ebf918a62bd7b52e7df232bfb696eac","ssdeep":"","tlshash":"0bd0220e6c5096f280126a8c336a3437db5e3e2633b49d52109b48a94b1a4af220ff4c","size":217,"data":"","first_seen":"2026-01-31T14:12:26.997757Z","last_seen":"2026-03-12T16:13:20.935239Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/BaseLogo.vue_vue_type_script_setup_true_lang-d0ee7399.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f8a1a4c2a666d6c80c3392ba03c68d73","sha1":"811444ae2df08cdd88dfa852ae85bd66103d67e2","sha256":"19640ef00927e70adbd4f67a9c0d35c87ba927ab2707062fec580afb37aaed52","sha512":"0f07c85b9a441475058e5cc64d3be13707229ac8bdfeb1f0c87bb20d2802564b7d481be86004f6c86ffb5b64cdb58298e48e5f82c13c985d9c7f949b6b24b6c6","ssdeep":"","tlshash":"d7f0c00f5c2a95ff40a669942b47204212045eadc6209994f2e52278624185a701e768","size":522,"data":"","first_seen":"2026-01-31T14:12:26.987602Z","last_seen":"2026-03-12T16:25:00.604715Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/#/register?ref=806595","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0ae64cce4f24529caa56156b159bdade","sha1":"3f1c5a480a93a0bfdc86eb0d7769ea098682b7a5","sha256":"99cb12f023e5c6752e9a7e0132343acf246a432e31d1e7326a3fad10704711a5","sha512":"0ce54f9c86d027c6895c449a7be022ab96d9df608d39f56a3eb0c2721f49aac55b9f82668c5265ba231c626d7a841bcb68c13b169f5f5f9be40244d0c3abec61","ssdeep":"","tlshash":"eec08cc8a0c22d002602a45010bf38e4a024842770481b028de4dc4c3e230f08233e98","size":141,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-08-09T21:36:51.41278Z","times_seen":2558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/BaseUserTab.vue_vue_type_style_index_0_lang-1f220dae.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1c86d838e348968407bb5a6de6489aeb","sha1":"8c842f8bd50b6c03dd3b841abfedbdf8e941383c","sha256":"1e810bdae8a0bc48587cac15318fb183d8473bdcaa8d998e5bd729617c53c44f","sha512":"9ad738172ebd108a0689557fbaeee1c217cadfe59ddd447013cf777c5895df9663d3061a5616cac7e21acfd511537b0917606337583ad804d28cd4ba2fb245ef","ssdeep":"","tlshash":"560125dd48e6cbf5849703543e5a1050d0848f449b39cd0470dc2a22274b8a0b5de33c","size":760,"data":"","first_seen":"2026-01-31T14:12:26.999755Z","last_seen":"2026-03-12T16:25:00.623079Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/#/register?ref=806595","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c413d2be75f07c801978090a3ccf10e3","sha1":"773ea0d1d4ee53f9670dee6fdf7562cc4630ea13","sha256":"ccb04fa8e25ade741486698e70583c55c02eb598e46433ff2502e276436bea5f","sha512":"de6620ccc14d5b2bfc7cbf623236b049297c8b31bc7917355bf04cb6fbc48db2449054ae9ba95aa2431da23d29e2969b13ea52247877bb36b69e515e19520702","ssdeep":"","tlshash":"bdc08cc8a0e26d101b42641464af34e49028842a784c1b068c98e8983e230b09233ea9","size":150,"data":"","first_seen":"2023-11-04T18:18:58Z","last_seen":"2026-04-16T04:49:47.516697Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/#/register?ref=806595","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5d860e04454fa825ccf8d7c91a80c48e","sha1":"46d75823757172181cb408537bc34a4891e2501e","sha256":"b5d8a0b035a8145892c8a5fdfa42287e4252f75c4c5163c6502f20bcecc730c3","sha512":"f83783a980875c43bb289e9ee627c58f1bceb58cbc46a588b45b78f25ddaa518bccf4bff4cedb6edf343319781ff807c2002274538b5641565d380b9daabc8f6","ssdeep":"","tlshash":"e5c08cc4a0d66d005f02a41021ef24e890248026b4481b028d94d8882e220b09233e9c","size":139,"data":"","first_seen":"2023-06-05T21:34:11Z","last_seen":"2026-08-09T10:03:19.86065Z","times_seen":1690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/#/register?ref=806595","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a28e056a6989b49de8bf0c6fe7a9078e","sha1":"166889dc07218cf99767d4179177e393a87c50b5","sha256":"5adba9de6f8cd98bd9f208363a88990f71f45bc7eaa3b277fa7fc86d54f0ecbb","sha512":"5fca1b898fe0243788c1e8403086ea2b8f6374b3575b8c71ff971b969f1e1325eb301221aad3fa4f9447bb8df6c43021297674123c156e4fd1a322d5cd3cdcc9","ssdeep":"","tlshash":"acf0ab0b199008319707b17a2a7fec0a1e42201f29646671be0c95109fce97e4664d5c","size":506,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-06-07T05:03:57.026572Z","times_seen":599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/#/register?ref=806595","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c771a56c31bff8ba6299f63241568899","sha1":"3d6509d1f412e744a937e891546180b1093f7ccd","sha256":"c0b3a74335ec3f96e25be399971bafea9e3513f821dd3b4009608de199fd4f2a","sha512":"f859c02090a494b60671d2dea13324fc38d926b315de977edb5889e587917facd9d2e4c1e73e0edb3f0112b5af30b8d05d33a173612c81f4cdbcab5bcf47a03c","ssdeep":"","tlshash":"7b0128e59986483146db31fa2a9e301070318003b908beb0386f15446fdd33ed3f6bd8","size":689,"data":"","first_seen":"2024-11-20T07:54:53.452195Z","last_seen":"2026-06-07T05:03:57.027217Z","times_seen":489,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/#/register?ref=806595","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9f1adf5a937557142643e353cbf37934","sha1":"68bee525409e37e507e07e841ac152c28e681e02","sha256":"ebf44a8d66510cfec03abf88ce5c4c8b7a398508ac85d4951fae6da1c2d981fa","sha512":"0d87c40442a74282c127eec84d658a303f2d0390855ab5aa6d533e9513498ae6d605678fafad858b419b1389e523246a2a581815f42f9795d03281dcf4565a47","ssdeep":"","tlshash":"bac08cc6a0d22d002606681014af24e490244427788c1b02cd94d84c3e220b48237ea8","size":140,"data":"","first_seen":"2023-05-25T11:08:57Z","last_seen":"2026-08-09T10:03:19.856767Z","times_seen":654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/BaseMainBtn.vue_vue_type_style_index_0_lang-46c2025e.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"aabfb6de09f4059f259ce38d079060bc","sha1":"7c63bc489029f62ae48a9b02d9e77088b761b104","sha256":"e76881bcd8763e336aa4ccd6f3cff7e64f343f00f95465f97bb15bd669aad772","sha512":"8c41959c82149a5d7448b229927b9e8f087f02ebcd8959b10fd363e7eae5bed1e7b43a12d05b8578f2c82d290cf4b6762b29b7714552c8ce8becd47d3c5606de","ssdeep":"","tlshash":"c0f020066c01c9bc2c82020a2a85201092043a6fe32560f8a5df216c679f0b9783a32c","size":556,"data":"","first_seen":"2026-01-31T14:12:27.001633Z","last_seen":"2026-03-12T16:25:00.590178Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/#/register?ref=806595","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b4a632459a011f9cf34cc3f6a449d24e","sha1":"23c6bb20ee82a11a54bfd4764e76b9fd86cf57fd","sha256":"ebb303d9df1321004f0694d1b1872542665a684d1f7cc90df2a8e3a0f286cbf0","sha512":"121db1d01b5f5ca50ae592bd141d36a7e2f650220c081e8a7c6d49f8d692b2ff12e36cd6bfcd1be3691d436eaef2fcefd1d5f36dde0a91089407d466bbf6d743","ssdeep":"","tlshash":"c6c08cc5a0d22d502606681016af25e490244036748c5b028c98d85c3e220b48333ea8","size":140,"data":"","first_seen":"2023-06-08T15:13:23Z","last_seen":"2026-08-09T19:51:59.805151Z","times_seen":1029,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/#/register?ref=806595","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"95a1d47af6ed5d0451d09a2ede9df733","sha1":"18992381f196ec53b4a7170f27a57959d7705fe9","sha256":"80057449a96f88844455fb3f9d28e24f9b77f7a871b7da5a7c04441d5efc234d","sha512":"49bdd33459d0e087dd037abd02f62efd7eab565fb2da01bcc02453a4ed0e1ae680a6e48c621e0830bb9f2b8a6fde9b25ebbb059f2c8dc2935371fe139bbcd217","ssdeep":"","tlshash":"9ac08cc8a0d32d102603a51020af38e4a0348027704c1b078da8dc493e630f08233ed8","size":149,"data":"","first_seen":"2024-08-20T15:10:12.50161Z","last_seen":"2026-04-16T04:49:47.509892Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/login-E86A33-8fb012b5.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8bc2e9c38638963bcc9c147eb35a6feb","sha1":"03ec30d484ac5e365643fa9827920776d5064041","sha256":"e1bd5fbf64e193af4d58c4ca380d24d2a87c764c39268f4886b1753211c25da5","sha512":"1f4e2f3f970fae9af86e5960c1e66113c43b205390c6e0955ff09e3709f88c027b7212c0d66b38ef26ea64ff214608bb07809ee6deae9d7f6e16653adf7fec04","ssdeep":"384:zk/5P5a28wa8H5to08u/+kDRHmHD0upJDjJDXOCkG2Dz+RG:Q/jajwa8ZuLuLHcwupttt72vYG","tlshash":"78b2e37b00b017baf7f09324f101f8a623891e866c56a5f78d7f539299a00e7b5cb65c","size":25347,"data":"","first_seen":"2026-01-31T14:12:27.020001Z","last_seen":"2026-03-12T16:13:20.917692Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/#/register?ref=806595","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a28e056a6989b49de8bf0c6fe7a9078e","sha1":"166889dc07218cf99767d4179177e393a87c50b5","sha256":"5adba9de6f8cd98bd9f208363a88990f71f45bc7eaa3b277fa7fc86d54f0ecbb","sha512":"5fca1b898fe0243788c1e8403086ea2b8f6374b3575b8c71ff971b969f1e1325eb301221aad3fa4f9447bb8df6c43021297674123c156e4fd1a322d5cd3cdcc9","ssdeep":"","tlshash":"acf0ab0b199008319707b17a2a7fec0a1e42201f29646671be0c95109fce97e4664d5c","size":506,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-06-07T05:03:57.026572Z","times_seen":599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/index-fbfb58ce.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"05c236a3fe2ad686e408cfb14b1ea4e6","sha1":"e51a75278010569b05286c4c854c2e8a70574235","sha256":"1982798a71699d56bde0fd82740dad8e5e78f15d1a684072e6a182d6da2ae09e","sha512":"742141b31157a4054d31818551e7c132e31ba2abd05f07196a14215e58a1eb54cd7f0e47f531aa75ccb60042c22fbae4b36860de96a11a929ccee9ddc6717c5a","ssdeep":"12288:mtF2wMS3OXLgUUnhIHAn0ZesneDcpVo2EDxWJR4aNgI+Hi:mjOb+n2pwseDBD7aNgI+C","tlshash":"1465d1286a6bf354e518c0d7fa3b3c84c59de18aa00764d14f754bb31ba1793eaacd13","size":1446987,"data":"","first_seen":"2026-01-31T14:12:27.040777Z","last_seen":"2026-03-12T16:25:00.685273Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/index-a9671252.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9835ab1ff41a6157ada6ee13b1fcf556","sha1":"b55cb6209ad7f9af100a6cedda3ab41716abaf70","sha256":"5d9fdbf9b6c7b8e919734bfe788ca798d18bff749e2ac425c15225fdaa191396","sha512":"c7d2276e101a7e37a1e1bfdf40fa99ae5471a4221a77b1843f56b3cb09af4c817f955d65648b85737ba45ce80d886c4318ee638cd205703df6edfe05114c1227","ssdeep":"","tlshash":"4611a54b6cf08ef940bd08863b930115560f0699565058e0fc8e4e5c26bc9c35a2ff1c","size":1077,"data":"","first_seen":"2026-01-31T14:12:26.984953Z","last_seen":"2026-03-12T16:13:20.947432Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/#/register?ref=806595","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5bd6185639b8be9b5d6a79cf5af2a9dd","sha1":"f1cadfb16d24785897f89d1da75adbd0f028de58","sha256":"8974133640d35c1c7fff7a94f677c866910b8e07e2830473c9ef84da0f01fa9e","sha512":"4b9b0252665f704d49cafca04e04d96d8ffe1f2348946d655d3d0d7780342b865e6b8451bb687c6acb4f2690473c13fec9b10a1b036f1d2a028a8e34c6dd35a6","ssdeep":"","tlshash":"7ec08cc4a0c23d001a23646120bf34e49038402770881b428d94d8482e230f08337e9c","size":148,"data":"","first_seen":"2023-07-15T02:55:06Z","last_seen":"2026-08-08T05:00:07.318321Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/NavBar.vue_vue_type_style_index_0_lang-d519bef3.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dae2a447a9d4e8cbd8efd8a3afaa4c96","sha1":"03cadc2838879b70116bf40a048ae2eaf61989a0","sha256":"4df63233870ec71eef84127d7306461f1c00db76c1c10cfc70b1882b801905c8","sha512":"cbe39c8e7651c91083ea3cfbfe23a3b82f6ea5a144a96b695fa099b7a347a213a8002e626877cd0c852bec617a59b998b745934fdca12af31f3f46026487a045","ssdeep":"384:EHGMVMzf2wOXwJMZDJZLJjBMb3WOHMVBEKUNcSrF/8aecfHwo1mk:EdMiMhycH","tlshash":"dfb20c40f5528a7cdab70239de9a6441b24c5f8fd546a9a1f1fc282f37c6cf97048b68","size":23604,"data":"","first_seen":"2026-01-31T14:12:27.021695Z","last_seen":"2026-03-12T16:25:00.64261Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/#/register?ref=806595","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d2b2b050757ba3d24426c42c3e4676f","sha1":"6a3359c5389d7d41f4b9647878b29cf654f5fc63","sha256":"da3abe33f5dd2abd814eb50229fb90d0ab61f7553b0154dae0cf129be7e7980f","sha512":"1c678470e263ef5bc0a5f8b44714ccd7cac330e2a61742d4735579da012208167e3b6672534f5ed217b285ff49c4204cc060936cf2f2d7e1625e10df79bed04e","ssdeep":"","tlshash":"b0f0eb130cd900af6f2710bd2b3faa1236a41113044ac020fc0e8720af20e7c1724acc","size":656,"data":"","first_seen":"2025-09-10T03:49:42.458429Z","last_seen":"2026-06-07T05:03:57.031683Z","times_seen":357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b52900cfd7b47b8a49e66817877b5587","sha1":"f663aa8a4839526f042bb3f74817ab5c0b8fd5d8","sha256":"2a411581195ab46d1eb9c5b0792223215efc0632060d57cc416cc875c4f08bf8","sha512":"1a6fbeff29ad0055e35e5beebdb247714a582a68efefa470466598e4282a4323a33571fcc44e871820a21e0a1bd4acff9403698e2fd5df5d330cb53b98b31ec5","ssdeep":"1536:kQ870ziaaEzjPOevVJm0tlsuHrih9HHVZ1GJV51kxx0Kb:786hTl49dx0G","tlshash":"1643d78cb7e9b02503973472497f541be33bb9646c0bc650c526e5883dbc69e9237eac","size":58763,"data":"","first_seen":"2026-03-02T18:17:41.839776Z","last_seen":"2026-03-16T22:45:13.13991Z","times_seen":1474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/login-c6e297-5638315b.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8d4976d22aa948250a135c00d3d9a28b","sha1":"80d5ae9a3c2e3ddefc51119105b945e7ecacf92d","sha256":"80ac60742cda817e1d84a928ff9d93588793b60acd461fb0dd0a1291cb4ce262","sha512":"b6213399deb3a996557ca5ed9026d2a49c63966495f9ca854c5548c7b5222cbccb309c84539645db2d74df21c66f62cfd3f28db5a0f87a193aea4e58b3361d15","ssdeep":"","tlshash":"bb11822aca585d3f112c390d02c6e9e4010d332b9868ef7cc336852c6c18b1746d6c70","size":955,"data":"","first_seen":"2025-02-18T16:23:29.571893Z","last_seen":"2026-08-09T10:03:19.802024Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb0a2fecf6cd27fba9cd29610fd2ccdc","sha1":"7546ed807d56be081be97fa1e4859381ecccf58e","sha256":"dc67f1e084e069a3fb629f3154765856fe0aa805a4e138bc42c228bc3d656a78","sha512":"5350795e68c371956350f88354aac62900d7fc5974817e93f49f218fa60becda436da0a8bf17d6239e2ef882cee0b18bfe66e181baa6f1ca04b57817c2920166","ssdeep":"1536:pO5TpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:s5TpRdfcKFU7Rx1H","tlshash":"31b33e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","size":114950,"data":"","first_seen":"2026-03-10T21:38:17.367441Z","last_seen":"2026-08-06T08:41:46.722793Z","times_seen":775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/index-3a38c551.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"81b68467baf0421d250a97eb76f3da2f","sha1":"b2cf4586351c19aa36215446c37ce86f7b2f8bf3","sha256":"40dc596ac2cc82ea908f388a7b602582a16639aa70b47a667074b3f45eb88a68","sha512":"9901c5bbd146611e781e892dd703ce16d4356fe45bfcebc5fd0e1d7f8dc1139e0b52a854be424825e6e66b647bcd78d3cb391065967c255b8bd5672cf7a90c8b","ssdeep":"","tlshash":"dc41726d78cc1035cbbbe888846a4913b22f8b1c022889f1d0ab1d9c2e2f10cf177e31","size":1958,"data":"","first_seen":"2026-01-31T14:12:27.003527Z","last_seen":"2026-03-12T16:13:20.95737Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.herb6.vip/assets/ContainerForm-4e418d51.css","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/ContainerForm-4e418d51.css HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: text/css\r\ncontent-length: 43\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 08:38:19 GMT\r\npriority: u=2,i=?0\r\netag: \"68d3adfb-2b\"\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SKfUdkRAwI9sjCtTcZG2BrpsqRQEBdW6tvSZLVH%2F54Ueljv%2B4VOGmHzlg7wXhPmniEAmRqvRR2YwR9jHl5JYbtVrRFnnPXt85%2FzZ8J0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db415345c89acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"210bc0aef74b653b3356a9a9b785006d","sha1":"b77ab851a4963c96af01c55e7dafb33240202fdc","sha256":"4e418d51c9ed84b3998be57770f4d38289e5e8d86351b032b91fd304eedd2a49","sha512":"dc96806e9bdb062655a1d74a5b387b0d13121d6d4a427c31a5af4c23daf6378dd5073e051dca208189f335e6a31088d3149d6cb9d0503f6e27dde66172eb67ea","ssdeep":"","tlshash":"429002441980647ab501919d255402150604a84b84404e65a014595051d15f60051a58","first_seen":"2023-11-09T00:35:11Z","last_seen":"2026-08-09T10:03:19.795945Z","times_seen":228,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/login-E86A33-8fb012b5.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/login-E86A33-8fb012b5.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.herb6.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 09:41:26 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"697b2b46-6333\"\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MB1xf6iY0DSn5VQSpRdg3qcQOdXlH6hMoM%2FO5JU%2B9i0TQSFEbKczC51ewBRSTIAINeR2bTPBd3Ttv34QEvlKOPMESpINB%2F6lrtyhVD8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db415347ce4acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25395,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (24045)","md5":"8bc2e9c38638963bcc9c147eb35a6feb","sha1":"03ec30d484ac5e365643fa9827920776d5064041","sha256":"e1bd5fbf64e193af4d58c4ca380d24d2a87c764c39268f4886b1753211c25da5","sha512":"1f4e2f3f970fae9af86e5960c1e66113c43b205390c6e0955ff09e3709f88c027b7212c0d66b38ef26ea64ff214608bb07809ee6deae9d7f6e16653adf7fec04","ssdeep":"384:zk/5P5a28wa8H5to08u/+kDRHmHD0upJDjJDXOCkG2Dz+RG:Q/jajwa8ZuLuLHcwupttt72vYG","tlshash":"78b2e37b00b017baf7f09324f101f8a623891e866c56a5f78d7f539299a00e7b5cb65c","first_seen":"2026-01-31T14:12:27.020001Z","last_seen":"2026-03-12T16:13:20.917692Z","times_seen":8,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.herb6.vip/api/public/index_info?d=1773331971223\u0026language_type=en","fqdn":"api.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"104.21.43.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /api/public/index_info?d=1773331971223\u0026language_type=en HTTP/1.1\r\nHost: api.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-lang: en\r\nst-ctime: 1773331971223\r\nst-ttgn: cc2827a065f9550b72eed20f23d8d55b\r\nOrigin: https://www.herb6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=meIpUHqO44AD3FTWCjrOoC%2FqwLSkMEZLJFNV%2FykMbKX%2F2%2BV7F47PdNxm1pzvsBLNHSzpadnalQGB6FItCrymcLcR9oWiz4W30y5hP3k%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.herb6.vip\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db415351a0fc8cb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11957,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"938f150bc0bdd489c1f2d8ea24bc3a0c","sha1":"e888243aa0d1c176f47107e98f00f1c68ced1f59","sha256":"38e6c1c0a9550afb6644a7759436693c7b53973d0e848ee16e11a6e617818a4a","sha512":"8664a5650ecb03520acbbf3625b5d317c18954c9a0c944711d323eeb3bd24abb25bf9655020597ba483dd7b76b364df56b46333210818f29b88d88c5968ccedf","ssdeep":"192:ImZm4bL7QaooQt+m5MseUnZgCM/xVlJIZSedvkD3Qo73bZMkWh+J69HDHTuDhV6q:JMaqBmDZzkS0sDA6SpuyUkvpx2","tlshash":"d23214aa21990862e1f06cc43fcb75d2bbbdf01f9ec4fe64c9e96f7c0498a561217452","first_seen":"2026-03-12T16:13:20.920907Z","last_seen":"2026-03-12T16:13:20.920907Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"api.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/BaseInput.vue_vue_type_style_index_0_lang-98da5af6.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/BaseInput.vue_vue_type_style_index_0_lang-98da5af6.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/assets/register-58cfe9a8.js\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 09:41:26 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"697b2b46-95c\"\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CsmSLtrfkG84rR%2B4cqa%2FgX2XIxBfqNIGxJnPXfjlMTMcICNYDgERSJWtX0w0mN6QIsDzvLOVQ2zpzs3s05Dhw%2FwCnOV9qxBTkI39uPQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db415375ce0acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2396,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2395)","md5":"47f11c4026039ea1480f24f2f9afe509","sha1":"5fbf97b086b4aa8bad38c07e59cf031515654a81","sha256":"80acad7e78d364d7e25971cf86505b3858942ba8f3f667ed169d6ff246f1056e","sha512":"ab00847e1b0d9db269af51a26b80ee69ea6f19b26e486e18cd094ec95979ce35c87a9d6b6cb3388f73360bda8f43471a420b7888c231a813a31b1b0233d8bb2b","ssdeep":"","tlshash":"2b41570add6aafb2c673d6a5a1df0c20e0052b67c550459150f9192d1b8dde4173fb18","first_seen":"2026-01-31T14:12:27.024824Z","last_seen":"2026-03-12T16:13:20.924542Z","times_seen":8,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/NavBar.vue_vue_type_style_index_0_lang-d519bef3.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/NavBar.vue_vue_type_style_index_0_lang-d519bef3.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/assets/register-58cfe9a8.js\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 09:41:26 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"697b2b46-5c34\"\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dH0oRZXwYMfFkBAHdDk5auzo3CrLhLh5y2GdRlTxrOIjf2BfTVoXLBy85%2Fq4ggG9SqJ%2F5ZW9r%2FK83Ci5T8vX04%2FAN8H%2B5j3kDa%2BdycU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db415376cffacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23604,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23603)","md5":"dae2a447a9d4e8cbd8efd8a3afaa4c96","sha1":"03cadc2838879b70116bf40a048ae2eaf61989a0","sha256":"4df63233870ec71eef84127d7306461f1c00db76c1c10cfc70b1882b801905c8","sha512":"cbe39c8e7651c91083ea3cfbfe23a3b82f6ea5a144a96b695fa099b7a347a213a8002e626877cd0c852bec617a59b998b745934fdca12af31f3f46026487a045","ssdeep":"384:EHGMVMzf2wOXwJMZDJZLJjBMb3WOHMVBEKUNcSrF/8aecfHwo1mk:EdMiMhycH","tlshash":"dfb20c40f5528a7cdab70239de9a6441b24c5f8fd546a9a1f1fc282f37c6cf97048b68","first_seen":"2026-01-31T14:12:27.021695Z","last_seen":"2026-03-12T16:25:00.64261Z","times_seen":16,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.herb6.vip/upload/img/69ae91012676.webp","fqdn":"api.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"104.21.43.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /upload/img/69ae91012676.webp HTTP/1.1\r\nHost: api.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 93722\r\nlast-modified: Mon, 09 Mar 2026 09:21:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69ae9101-16e1a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GLsRonrE1Jdx%2FHCjtSq6xz774xO4578BRZ1J9THfAPClTBJ3xCUFPr7LG1xFzh5izPgUZYIQDWQJyXW%2FkyrEE5Z4oz2bmS4Us67imz0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db41537ca95c8cb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93722,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"737f89ad4362d7fde363c97ada906d70","sha1":"2301344a51f1ffc25884be2876cc6540515ce97d","sha256":"14d52d6ab7f28699b1442215f3e0b3cd4f5976f694901fca844998345762deb0","sha512":"f96373d0575158852b2fb015de708860f3e717b3b40b74f8351be76219252ecc83b1944d9a1f01f08b653f6b97ecdf4c70fea74521d1e65cfdabbf4b730b0fea","ssdeep":"1536:/yJ7X3UC7lET8OsLpIzffenoupFxd3r8o+EhP98075b7VMfjQHyVlYSRO/ENW4k0:KJ7Xr7lET8OqkhSndr+ET8K5MfjrVlYy","tlshash":"c1931269fb1d4578d148a58d772f084c8eec98d3ebec50bb43bc51632607b9808a77b5","first_seen":"2026-03-12T16:13:20.93049Z","last_seen":"2026-03-12T16:25:00.585413Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"api.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.herb6.vip/api/public/visit","fqdn":"api.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"104.21.43.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"OPTIONS /api/public/visit HTTP/1.1\r\nHost: api.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,st-ctime,st-lang,st-ttgn\r\nReferer: https://www.herb6.vip/\r\nOrigin: https://www.herb6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.herb6.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type,st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XIN%2F8RUfh9wCikkU6yj6zFKnrZk4oYfkliVZUJCa%2FodC5WQDJK45OLOAdSmaz0yv0bk34ZPcQ1LKFM9XFxuAZsypPrVBMc%2BgETo68D8%3D\"}]}\r\ncf-ray: 9db415380ab2c8cb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"api.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.herb6.vip/api/public/visit","fqdn":"api.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"104.21.43.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"POST /api/public/visit HTTP/1.1\r\nHost: api.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nst-lang: en\r\nst-ctime: 1773331971824\r\nst-ttgn: 3df5c965ba681c15602ba71ad219b94d\r\nContent-Length: 55\r\nOrigin: https://www.herb6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":55,"data":"{\"code\":\"806595\",\"language\":\"en\",\"device\":\"windows pc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 16:12:52 GMT\r\ncontent-type: application/json\r\ncontent-length: 40\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.herb6.vip\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bc%2FCdQPCAgV%2BQc2JBhYmxiP9OGwphg2UqhzIrRkmiYZvPlkMnJn2huLqJDJ%2FGAWLR8YwmBGvqP77hMdCUHMMm0tC68Y7PtBny2uht98%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db41538faeac8cb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dac22ea265ef2b988f6f7e6e88fd6076","sha1":"8eb3ea36343bacab1c48f88e22db10c0883d52e4","sha256":"b7c34be4da9a56e57a6dbb79e887c829a077dac9cbd3d4226d7fc20e5fddbd17","sha512":"5da4520e219e0f158cf84c790a0c0168bd7c1710a2f37e9900cb33e7c9bcab4ffa9e8bdef10cef64656a59ae5ad5a083c3872ee45729428efd78929225f89fea","ssdeep":"","tlshash":"409004111c0454435c403c4d0143475035d13574410503c0405c503cc70d0f5f445c34","first_seen":"2023-06-08T13:28:08Z","last_seen":"2026-08-03T14:06:42.894453Z","times_seen":219,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"api.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.herb6.vip/upload/img/69ae911a6be2.webp","fqdn":"api.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"104.21.43.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:50.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /upload/img/69ae911a6be2.webp HTTP/1.1\r\nHost: api.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 93722\r\nlast-modified: Mon, 09 Mar 2026 09:21:30 GMT\r\npriority: u=4,i=?0\r\netag: \"69ae911a-16e1a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KEgdDgHrR1Mke2pFhXM%2BmDMf%2BCBasNu1OAfHgP%2Ba3D%2B%2BMuS1CB7vIBJ8zLFQvrPneim1XmJiWeKHKz8fbjmsLKo1CbQMRgOsEsQhD3A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db4153128d6c8cb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93722,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"737f89ad4362d7fde363c97ada906d70","sha1":"2301344a51f1ffc25884be2876cc6540515ce97d","sha256":"14d52d6ab7f28699b1442215f3e0b3cd4f5976f694901fca844998345762deb0","sha512":"f96373d0575158852b2fb015de708860f3e717b3b40b74f8351be76219252ecc83b1944d9a1f01f08b653f6b97ecdf4c70fea74521d1e65cfdabbf4b730b0fea","ssdeep":"1536:/yJ7X3UC7lET8OsLpIzffenoupFxd3r8o+EhP98075b7VMfjQHyVlYSRO/ENW4k0:KJ7Xr7lET8OqkhSndr+ET8K5MfjrVlYy","tlshash":"c1931269fb1d4578d148a58d772f084c8eec98d3ebec50bb43bc51632607b9808a77b5","first_seen":"2026-03-12T16:13:20.93049Z","last_seen":"2026-03-12T16:25:00.585413Z","times_seen":2,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":295,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"api.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:49.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sc-static.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 22 Oct 2025 00:00:00 GMT","end":"Fri, 20 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:63:7D:63:F2:DF:8F:C5:65:EF:16:8E:06:3E:E4:66:D9:41:67:CD","sha256":"91:A8:D7:CD:20:36:14:EC:9A:D5:10:BC:DD:44:F1:9D:26:20:78:F8:92:93:7B:37:6A:F8:E9:7B:FC:7E:72:66"}}},"request":{"raw":"GET /scevent.min.js HTTP/1.1\r\nHost: sc-static.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript;charset=utf-8\r\ncontent-length: 24779\r\nserver: CloudFront\r\ndate: Thu, 12 Mar 2026 16:12:49 GMT\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncache-control: private, s-maxage=0, max-age=600\r\nset-cookie: X-AB=a3dc9e51dc86440da194e814bdbd460c;max-age=86400;expires=Fri, 13 Mar 2026 16:12:49 GMT;Path=/scevent.min.js;Secure;SameSite=None\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ed0b1ae4224d4a858ec43080e17ab00c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: _o9EXbYxyTecea2QcQLeAFBfSn3W9dtihKcrnU5euugLDp9L8U-ACQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":58763,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (58736)","md5":"b52900cfd7b47b8a49e66817877b5587","sha1":"f663aa8a4839526f042bb3f74817ab5c0b8fd5d8","sha256":"2a411581195ab46d1eb9c5b0792223215efc0632060d57cc416cc875c4f08bf8","sha512":"1a6fbeff29ad0055e35e5beebdb247714a582a68efefa470466598e4282a4323a33571fcc44e871820a21e0a1bd4acff9403698e2fd5df5d330cb53b98b31ec5","ssdeep":"1536:kQ870ziaaEzjPOevVJm0tlsuHrih9HHVZ1GJV51kxx0Kb:786hTl49dx0G","tlshash":"1643d78cb7e9b02503973472497f541be33bb9646c0bc650c526e5883dbc69e9237eac","first_seen":"2026-03-02T18:17:41.839776Z","last_seen":"2026-03-16T22:45:13.13991Z","times_seen":1474,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":9,"dns":1,"connect":1,"send":0,"wait":49,"receive":1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.herb6.vip/api/public/index_info?d=1773331971223\u0026language_type=en","fqdn":"api.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"104.21.43.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"OPTIONS /api/public/index_info?d=1773331971223\u0026language_type=en HTTP/1.1\r\nHost: api.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://www.herb6.vip/\r\nOrigin: https://www.herb6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.herb6.vip\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KOkNOK08x%2FXgjtkDxaJB%2BdNowucSMcWVYFSK6BxBgw2650xB9n6VCLRbwaHx6Z9%2BRgNbIRodpd4hrKWGH8bhNDkIkcfzvChrNfXl0Tw%3D\"}]}\r\ncf-ray: 9db4153439c1c8cb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"api.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/login-E86A33-8fb012b5.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/login-E86A33-8fb012b5.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/assets/register-58cfe9a8.js\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 09:41:26 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"697b2b46-6333\"\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xTIce%2FLZvssYCzMJC8FONb9wh%2BA%2Ft95K5VTth5uz4kFiH5tuHloj3mrsgNbNJqn5oE5KVZArThXLpxAcaIHCH1Mxp0L%2Fw5F9jDxmVMM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db415375cb9acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25395,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (24045)","md5":"8bc2e9c38638963bcc9c147eb35a6feb","sha1":"03ec30d484ac5e365643fa9827920776d5064041","sha256":"e1bd5fbf64e193af4d58c4ca380d24d2a87c764c39268f4886b1753211c25da5","sha512":"1f4e2f3f970fae9af86e5960c1e66113c43b205390c6e0955ff09e3709f88c027b7212c0d66b38ef26ea64ff214608bb07809ee6deae9d7f6e16653adf7fec04","ssdeep":"384:zk/5P5a28wa8H5to08u/+kDRHmHD0upJDjJDXOCkG2Dz+RG:Q/jajwa8ZuLuLHcwupttt72vYG","tlshash":"78b2e37b00b017baf7f09324f101f8a623891e866c56a5f78d7f539299a00e7b5cb65c","first_seen":"2026-01-31T14:12:27.020001Z","last_seen":"2026-03-12T16:13:20.917692Z","times_seen":8,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/ContainerForm-e939f23f.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/ContainerForm-e939f23f.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/assets/register-58cfe9a8.js\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 09:41:26 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=to5s64ej3hj7fNyyTQk5O7ea5yDzYoSOD0HZ8if70Yc%2BeTfhTmCGLxJCp%2BqFAvkmwkWq9SrasMzXVSguOhnWBrad%2BBNe1UwYitBzKbA%3D\"}]}\r\netag: W/\"697b2b46-d9\"\r\ncontent-encoding: br\r\ncf-ray: 9db415375cc8acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"4934c4c5ca0f46fb55362b82c84b510c","sha1":"4eeaa0856adff81fe0c353d78f3dcb1171a9935b","sha256":"91e17b29f21e01b2babc8a4764c88a97511df03130a1c662547a99aa902f834b","sha512":"a1aa2f087b2c06bc9bc5ed2df175666934997bfd3614f080ee181e8c3ea4e51d365eb781135d7eaed500ba85c24639880ebf918a62bd7b52e7df232bfb696eac","ssdeep":"","tlshash":"0bd0220e6c5096f280126a8c336a3437db5e3e2633b49d52109b48a94b1a4af220ff4c","first_seen":"2026-01-31T14:12:26.997757Z","last_seen":"2026-03-12T16:13:20.935239Z","times_seen":8,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/login-c6e297-5638315b.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/login-c6e297-5638315b.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/assets/register-58cfe9a8.js\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 08:38:19 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VXCEBpnuVO5RDBPysK%2BSBGwNg92bvfhD4NBBNVeonmOpfYS54slD0cXOjrEm4KUExKK0LH%2BzPpyMhMmc8fiBSZJmHa3EEFZ502cmrVU%3D\"}]}\r\netag: W/\"68d3adfb-3bb\"\r\ncontent-encoding: br\r\ncf-ray: 9db415376d12acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":955,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (954)","md5":"8d4976d22aa948250a135c00d3d9a28b","sha1":"80d5ae9a3c2e3ddefc51119105b945e7ecacf92d","sha256":"80ac60742cda817e1d84a928ff9d93588793b60acd461fb0dd0a1291cb4ce262","sha512":"b6213399deb3a996557ca5ed9026d2a49c63966495f9ca854c5548c7b5222cbccb309c84539645db2d74df21c66f62cfd3f28db5a0f87a193aea4e58b3361d15","ssdeep":"","tlshash":"bb11822aca585d3f112c390d02c6e9e4010d332b9868ef7cc336852c6c18b1746d6c70","first_seen":"2025-02-18T16:23:29.571893Z","last_seen":"2026-08-09T10:03:19.802024Z","times_seen":139,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.herb6.vip/api/public/index_info?d=1773331970769","fqdn":"api.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"104.21.43.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /api/public/index_info?d=1773331970769 HTTP/1.1\r\nHost: api.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-ctime: 1773331970770\r\nst-ttgn: 2cad6ad52c6b42a489a9f8b8b50c88c9\r\nOrigin: https://www.herb6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H6e5ebVJmzEB9dnASl1YnBiBYAvxAC3iSw479Ui7Zr6LgmjyyxBpm0DxWFsX38acD%2F7dBZ%2FxKK9KLINRghxTYy%2B05rPCMSUyYOaI4no%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.herb6.vip\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db415331967c8cb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11957,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"938f150bc0bdd489c1f2d8ea24bc3a0c","sha1":"e888243aa0d1c176f47107e98f00f1c68ced1f59","sha256":"38e6c1c0a9550afb6644a7759436693c7b53973d0e848ee16e11a6e617818a4a","sha512":"8664a5650ecb03520acbbf3625b5d317c18954c9a0c944711d323eeb3bd24abb25bf9655020597ba483dd7b76b364df56b46333210818f29b88d88c5968ccedf","ssdeep":"192:ImZm4bL7QaooQt+m5MseUnZgCM/xVlJIZSedvkD3Qo73bZMkWh+J69HDHTuDhV6q:JMaqBmDZzkS0sDA6SpuyUkvpx2","tlshash":"d23214aa21990862e1f06cc43fcb75d2bbbdf01f9ec4fe64c9e96f7c0498a561217452","first_seen":"2026-03-12T16:13:20.920907Z","last_seen":"2026-03-12T16:13:20.920907Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"api.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.herb6.vip/upload/img/69ae91012676.webp","fqdn":"api.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"104.21.43.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /upload/img/69ae91012676.webp HTTP/1.1\r\nHost: api.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 93722\r\nlast-modified: Mon, 09 Mar 2026 09:21:05 GMT\r\npriority: u=6,i=?0\r\netag: \"69ae9101-16e1a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wJ3Qv5uQ86lFmLOoSS8zdYZLAkNh9Bqfe389m5NxlYpuhSUGPl2BXU4gqs2Mobx0byuAKka3%2BEkTlX0AmaSuRzvR3gMDCt2UgrYZf%2FI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db4153429bcc8cb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93722,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"737f89ad4362d7fde363c97ada906d70","sha1":"2301344a51f1ffc25884be2876cc6540515ce97d","sha256":"14d52d6ab7f28699b1442215f3e0b3cd4f5976f694901fca844998345762deb0","sha512":"f96373d0575158852b2fb015de708860f3e717b3b40b74f8351be76219252ecc83b1944d9a1f01f08b653f6b97ecdf4c70fea74521d1e65cfdabbf4b730b0fea","ssdeep":"1536:/yJ7X3UC7lET8OsLpIzffenoupFxd3r8o+EhP98075b7VMfjQHyVlYSRO/ENW4k0:KJ7Xr7lET8OqkhSndr+ET8K5MfjrVlYy","tlshash":"c1931269fb1d4578d148a58d772f084c8eec98d3ebec50bb43bc51632607b9808a77b5","first_seen":"2026-03-12T16:13:20.93049Z","last_seen":"2026-03-12T16:25:00.585413Z","times_seen":2,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"api.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/NavBar-faa64b88.css","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/NavBar-faa64b88.css HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 03 Nov 2025 11:34:01 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"69089329-5c7e\"\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XrHghDM9pUTi7v7CaUc570%2F2K4Ezu%2BCNknlA0OzpuVxpVbfdoPHm4eLOSCWZVQ%2FW4R4jBuJ0KuZahcN2c8e%2FYFv8aFcO%2BozYsWqnn6A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db415346cc6acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23678,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23677)","md5":"468f2ddc6e3aa1b8eaad881853ad4eaa","sha1":"3dc5d872bdf5b920b14a9785be130086ca981ff1","sha256":"faa64b884a32121e72154c982db040a08bffc528d5f6605f6355486a31bbc7a8","sha512":"562cb73416ff54d30da51daa11b726bec115156c4359c701af70648563a3f68b876aaa59cbb0af5aa2b4d207de044f31919e59c492a8a8c15e7a2b4b1fe4fc9b","ssdeep":"384:9Qus6Dn1lvW04hbGC2WNuf1BVyGQ8ApopxgS3JS57:eu1D1VN0bV2WNuf1yGZlL+7","tlshash":"16b274e403a4b33cff1fa41666ed8ac92e149209c237f9599e017336d1df29716b9d88","first_seen":"2025-10-16T04:09:02.764428Z","last_seen":"2026-07-18T04:13:55.353677Z","times_seen":175,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/BaseMainBtn.vue_vue_type_style_index_0_lang-46c2025e.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/BaseMainBtn.vue_vue_type_style_index_0_lang-46c2025e.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.herb6.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 09:41:26 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Jp%2FfTqR1egclFiCYm05AJ%2BRrupd30m0EyOriTTphtES0NfCNA6OSlx%2Ff4d7OyVzEzNhseoFYaGBk8Y%2BBOq%2B3J%2Fo1ZsmGHX0iHgemIo%3D\"}]}\r\netag: W/\"697b2b46-22c\"\r\ncontent-encoding: br\r\ncf-ray: 9db415347cf6acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":556,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (555)","md5":"aabfb6de09f4059f259ce38d079060bc","sha1":"7c63bc489029f62ae48a9b02d9e77088b761b104","sha256":"e76881bcd8763e336aa4ccd6f3cff7e64f343f00f95465f97bb15bd669aad772","sha512":"8c41959c82149a5d7448b229927b9e8f087f02ebcd8959b10fd363e7eae5bed1e7b43a12d05b8578f2c82d290cf4b6762b29b7714552c8ce8becd47d3c5606de","ssdeep":"","tlshash":"c0f020066c01c9bc2c82020a2a85201092043a6fe32560f8a5df216c679f0b9783a32c","first_seen":"2026-01-31T14:12:27.001633Z","last_seen":"2026-03-12T16:25:00.590178Z","times_seen":16,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.herb6.vip/api/public/get_lang_json?d=1773331970750\u0026lang=en","fqdn":"api.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"104.21.43.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:50.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"OPTIONS /api/public/get_lang_json?d=1773331970750\u0026lang=en HTTP/1.1\r\nHost: api.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://www.herb6.vip/\r\nOrigin: https://www.herb6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 16:12:50 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.herb6.vip\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0n5aTNFtWPUnK%2BYFrpNItzyzDt3%2BCXGSXaVKib6xXOxMRDVM7r%2B2DLVAvKf1oTuMMuGrJPlkhRNcgWSumksLDOLWFIvS%2F6XlJsaZvqk%3D\"}]}\r\ncf-ray: 9db4153138dcc8cb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"api.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.herb6.vip/api/public/get_lang_json?d=1773331970750\u0026lang=en","fqdn":"api.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"104.21.43.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:50.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /api/public/get_lang_json?d=1773331970750\u0026lang=en HTTP/1.1\r\nHost: api.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-ctime: 1773331970750\r\nst-ttgn: ac9882badaa3478f2ffead453d383b64\r\nOrigin: https://www.herb6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xg8MpyIICYTGNE3RvsyPEw4Z7zRkPYFc9LBp8vvaTKgavQ6cebdiY20TELBBiGUyyD%2Fidtd2niIg7q62WRn1SjFHyEXeRzcsr6kxdrI%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.herb6.vip\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db41532292bc8cb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24978,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"31fee0072b1ae273c09b38a2d3a77ec0","sha1":"fc8a585c0cc1a185f2284c6ecf320fbd691acd29","sha256":"1504cdf6387322881d7faeb0d25bf2abd6c7cd29536b8a0bb24a9bf58b38d7a1","sha512":"4ffac5d43307e51c67715ea748fb27aa978c368ca4d120df79c5cfb47dbd6869d10256b0687833d2ec4f55859018fe3b740a3334a51e5e5ebae1eba1695cbb56","ssdeep":"384:/PvNQBAT0a1djWglUdz6h4BlCqcP8ya6N+UdUE/2KyKBqfGSu/eLX7CA7xlG:XlQST0ajWgKcPHfuE/2KmzRf7S","tlshash":"52b2c84f720a1eb3afd25bc1789b6d1725f951c31680084d8cdece2c12adf99b22f589","first_seen":"2026-01-28T21:22:52.53228Z","last_seen":"2026-06-09T16:29:13.183771Z","times_seen":22,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"api.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.herb6.vip/upload/img/69ae83b08ac1.webp","fqdn":"api.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"104.21.43.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /upload/img/69ae83b08ac1.webp HTTP/1.1\r\nHost: api.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 83566\r\nlast-modified: Mon, 09 Mar 2026 08:24:16 GMT\r\npriority: u=6,i=?0\r\netag: \"69ae83b0-1466e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8btyGytdcb8TGdGTFnIRp8rloMXFiMzOqpVMlKYd2YQK6CobKwNBJejVsKcbSKs46agE7ki%2BDm%2BhO%2BywCysYV7qicH1LQO2vJpH7NLU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db4153429b9c8cb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83566,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 635x635, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"71821ea454755baefac17aad6a1933c4","sha1":"1b491eb4f7155f7e3b4486634f4909556a463eda","sha256":"6b751c2f7fcbc643bc25f07e61618ade12adde231e1bec5ea7ce2c8bd1b5446b","sha512":"262f75c76ba0eac964a510bd704e038778f3cc523b3c9ac1b57831bb3cb57fbcb63a5ec82192b16c12575d4603b74039c61e34f44334f693ef2cbaae804e930c","ssdeep":"1536:KYPPa8CEZ3CkGwOzvXinl+9uXaYy8YlIP9naldoLRNAJIlpnmx7jqKz1q:KcaHmy5wWSc9kaYPH9QdwaJYnmDzM","tlshash":"2583026ebb8c1d0695430b5fca8935ff1e9671bf986eaeb8f02df480e842d0e145505b","first_seen":"2026-03-12T16:13:20.941705Z","last_seen":"2026-03-12T16:25:00.587296Z","times_seen":2,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"api.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/register-b5beeeeb.css","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/register-b5beeeeb.css HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 08:38:19 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zuALWlKpDryh0CIpzUjZi6lvFkLlTZQKkMym0gvdxGn5kTzS3R20jwEHQ%2FNcDM5ZAuacXwG9ReFmizkev4wa4Gr5pdyIAI3rrwBCxuQ%3D\"}]}\r\netag: W/\"68d3adfb-78\"\r\ncontent-encoding: br\r\ncf-ray: 9db415346cd4acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c36615ba21a8e943990d2670c50112da","sha1":"8ceb181413615c75b135ee908c0241f7834d7524","sha256":"b5beeeebdacd2c3d94e9602b1e1e264e3c5e1ec512df91326f6d04b789320682","sha512":"0342d30fe7269a2661eba63bd1ec0e1bfb639de5df54618a22ad960d1778e8cd0efa3d4542ed7e0eb9a7cced6a76263665df5a6184b423b3e6011b4752796c12","ssdeep":"","tlshash":"93b0923c81f8f0fbe8b0522ad6434cc8202b610d132286a9de04beab806680e54300f5","first_seen":"2024-08-20T12:48:46.96777Z","last_seen":"2026-03-25T10:59:22.585018Z","times_seen":25,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/NavBar.vue_vue_type_style_index_0_lang-d519bef3.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/NavBar.vue_vue_type_style_index_0_lang-d519bef3.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.herb6.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 09:41:26 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"697b2b46-5c34\"\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h93ipREuJg9Y6UWxJGBoOqRcxFzQJLUwH1SbcKwiimGLpF2G3iRkvsXx2v4evHIvMJdLw%2F5dLO%2FD6XduUWy75F9h%2FqzF%2BEUkgNLcv4Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db415347d0eacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23604,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23603)","md5":"dae2a447a9d4e8cbd8efd8a3afaa4c96","sha1":"03cadc2838879b70116bf40a048ae2eaf61989a0","sha256":"4df63233870ec71eef84127d7306461f1c00db76c1c10cfc70b1882b801905c8","sha512":"cbe39c8e7651c91083ea3cfbfe23a3b82f6ea5a144a96b695fa099b7a347a213a8002e626877cd0c852bec617a59b998b745934fdca12af31f3f46026487a045","ssdeep":"384:EHGMVMzf2wOXwJMZDJZLJjBMb3WOHMVBEKUNcSrF/8aecfHwo1mk:EdMiMhycH","tlshash":"dfb20c40f5528a7cdab70239de9a6441b24c5f8fd546a9a1f1fc282f37c6cf97048b68","first_seen":"2026-01-31T14:12:27.021695Z","last_seen":"2026-03-12T16:25:00.64261Z","times_seen":16,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/BaseUserTab.vue_vue_type_style_index_0_lang-1f220dae.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/BaseUserTab.vue_vue_type_style_index_0_lang-1f220dae.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/assets/register-58cfe9a8.js\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 09:41:26 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2VU2h1iYGk%2F0uOOuynqdTUpITNAToKTvEIT9eZ8vLxhWCSd2dnn6jUzJ2LlCR68NwVFWgpDl8U4y9OXlOHLW5E1bCEr%2FXzucIOUw8PU%3D\"}]}\r\netag: W/\"697b2b46-2f8\"\r\ncontent-encoding: br\r\ncf-ray: 9db415375cecacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":760,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (515)","md5":"1c86d838e348968407bb5a6de6489aeb","sha1":"8c842f8bd50b6c03dd3b841abfedbdf8e941383c","sha256":"1e810bdae8a0bc48587cac15318fb183d8473bdcaa8d998e5bd729617c53c44f","sha512":"9ad738172ebd108a0689557fbaeee1c217cadfe59ddd447013cf777c5895df9663d3061a5616cac7e21acfd511537b0917606337583ad804d28cd4ba2fb245ef","ssdeep":"","tlshash":"560125dd48e6cbf5849703543e5a1050d0848f449b39cd0470dc2a22274b8a0b5de33c","first_seen":"2026-01-31T14:12:26.999755Z","last_seen":"2026-03-12T16:25:00.623079Z","times_seen":16,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:49.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 12 Mar 2026 16:12:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Mar 2026 10:53:09 GMT\r\netag: W/\"69aff815-1c106\"\r\nexpires: Mon, 16 Mar 2026 16:12:49 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114950,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"bb0a2fecf6cd27fba9cd29610fd2ccdc","sha1":"7546ed807d56be081be97fa1e4859381ecccf58e","sha256":"dc67f1e084e069a3fb629f3154765856fe0aa805a4e138bc42c228bc3d656a78","sha512":"5350795e68c371956350f88354aac62900d7fc5974817e93f49f218fa60becda436da0a8bf17d6239e2ef882cee0b18bfe66e181baa6f1ca04b57817c2920166","ssdeep":"1536:pO5TpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:s5TpRdfcKFU7Rx1H","tlshash":"31b33e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","first_seen":"2026-03-10T21:38:17.367441Z","last_seen":"2026-08-06T08:41:46.722793Z","times_seen":775,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":129,"dns":1,"connect":21,"send":0,"wait":41,"receive":0,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.herb6.vip/api/public/index_info?d=1773331970769","fqdn":"api.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"104.21.43.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:50.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"OPTIONS /api/public/index_info?d=1773331970769 HTTP/1.1\r\nHost: api.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://www.herb6.vip/\r\nOrigin: https://www.herb6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.herb6.vip\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HQ9SJqTS16bwL4XMRIwH2F1NOsGAmvmo4F%2FxGuo4DKBb1PXtW8hPlx9Uqv%2Fc8Y5gTyGh%2Bh1XrrUhVUG%2B712Hb0WE3rYFKoPZci3XNgQ%3D\"}]}\r\ncf-ray: 9db4153158e7c8cb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"api.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/BaseUserTab-c449726b.css","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/BaseUserTab-c449726b.css HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 08:38:19 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nJgrEToRCcrWiDhPOdsPL88En%2FXDpOdCD%2BatyNWyUYCApiO2ePxMF%2Fsq3NwwOY%2FoK8%2Bcgrw%2FN6dYh%2FJSr8g4r2JU7aFB5Yr%2BIHDKRug%3D\"}]}\r\netag: W/\"68d3adfb-67\"\r\ncontent-encoding: br\r\ncf-ray: 9db415345cb4acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b8d7ddd09f6113fe70a8ce29ce0f4f9a","sha1":"e5e5284a913c5a08cb36b655cee62fab9ae2f736","sha256":"c449726b38d5164aa8a8d9c73e9c00f401e74c59b1bf2d6b974d15db8722372e","sha512":"b385a0a7b17f175fe07b11341303935f1327d46d8bc66073e545fa18a160d6e60dbe3e74b75e100ec6714b6ad09390305ae9d9bb2ca00a039a51913d6bf18320","ssdeep":"","tlshash":"5cb0924c1840b02a288161f80f5642e808493244ae028eb870243d5101c36f9207392a","first_seen":"2025-05-06T14:23:01.793345Z","last_seen":"2026-08-09T10:03:19.801288Z","times_seen":308,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/index-a9671252.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/index-a9671252.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.herb6.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 09:41:26 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"697b2b46-435\"\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zoD39obcZ6qjDnTXzVO3nUCXTj7T8Mdhqc8JaX3IH7Ciol6buvld7xEJKPjBEAZFElSlOSeaDMhLwS9%2FZrphGHK06pjrYMt75eAkpAE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db415347cfdacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1077,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1076)","md5":"9835ab1ff41a6157ada6ee13b1fcf556","sha1":"b55cb6209ad7f9af100a6cedda3ab41716abaf70","sha256":"5d9fdbf9b6c7b8e919734bfe788ca798d18bff749e2ac425c15225fdaa191396","sha512":"c7d2276e101a7e37a1e1bfdf40fa99ae5471a4221a77b1843f56b3cb09af4c817f955d65648b85737ba45ce80d886c4318ee638cd205703df6edfe05114c1227","ssdeep":"","tlshash":"4611a54b6cf08ef940bd08863b930115560f0699565058e0fc8e4e5c26bc9c35a2ff1c","first_seen":"2026-01-31T14:12:26.984953Z","last_seen":"2026-03-12T16:13:20.947432Z","times_seen":8,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/index-d56192c0.css","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/index-d56192c0.css HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 08:38:19 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DH1XLFNxUg31%2BKQaYN%2BVNcrjhR38wiB8mV5YA8l5l3ObmyUsTqMxQLia9qTH1YSnpWuPum7Eq3%2B8%2BaVdpwHUBe%2BwIDrz%2B%2Fh9Jx5qdTk%3D\"}]}\r\netag: W/\"68d3adfb-3d\"\r\ncontent-encoding: br\r\ncf-ray: 9db415345c9facd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"186fb1b7bcf7b4484422f657a2d0a66a","sha1":"bac6f21e45e86ce5fc7ae63485ff8f0ae004176d","sha256":"d56192c060bf7a99d3f3b4c0423b887037f7f99353920242b8cd8ef520a8fb62","sha512":"b552c8d0495770108a31d5ac0dfeedce31e5b9b6f0cee914031774bed544000fccbc690024c355019e86c314e59667b3c32635ceb95fa4e1c7372cd280a523a9","ssdeep":"","tlshash":"60a0026249545e641a9240820d8407578434c1044a136e6dd4b99d1a2cce4810e534dc","first_seen":"2024-06-07T16:46:44Z","last_seen":"2026-08-09T10:03:19.804272Z","times_seen":189,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/index-69cf39c2.css","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:49.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/index-69cf39c2.css HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:49 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 09:41:26 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"697b2b46-107393\"\r\nexpires: Fri, 13 Mar 2026 04:12:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j%2F0RaEP1DMxp%2Fg9ArY8yAz3Yczquhis9I3dTiSJUBUN7%2Fm0lZLhtSt8jkVAVlygYfRj0UL2KLGkRSUKxLcfa3zZ4z21CRoc59E5YlSg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db415279fe1acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1078163,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"d815b1d4361a180a1bae1814190b26ee","sha1":"ea6974f3d146aee855c1b9b382b953a01c5a6d92","sha256":"0b032f446393e3773e5306d6326b7d62d2b0c92a3d4de594a2a9cc89ac4f00cd","sha512":"b54abc3e95deeeaa3f3e1b48cc30b137910afb704fac3875fc291630a126525af8f6068982352b932c75dc520ce99a935d7cf8c4d63fe7463623b67d94591ad7","ssdeep":"12288:6n1HgnTIaZPOmwagu0uRNNcD55TSS12FhKR7hGucwesKzN8vF9:6n1qTI8OW0ocD55TSS12FhKR7hGucw/","tlshash":"d7254bb86f8451befd0bcf7a4728958c691ef093ef424e846619f53043c72a77663268","first_seen":"2026-01-31T14:12:27.010667Z","last_seen":"2026-03-14T06:41:35.377586Z","times_seen":17,"resource_available":false,"data":null}},"time_used":824,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":525,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.herb6.vip/api/user/app_info?d=1773331970231","fqdn":"api.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"104.21.43.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:50.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"OPTIONS /api/user/app_info?d=1773331970231 HTTP/1.1\r\nHost: api.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://www.herb6.vip/\r\nOrigin: https://www.herb6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:50 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.herb6.vip\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bJ9WsVh4yCsXU3ujEVvl2pcJHumVkb2eNOIexoo1yOz%2BRHyu80A5oBAqxkOQ%2BiDiLtcr%2BzX0I%2FLmbkhegugwXX75kstxJsKyFUekgsQ%3D\"}]}\r\ncf-ray: 9db4152e3d2837c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":37,"dns":6,"connect":8,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"api.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/favicon.ico","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:50.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 12 Mar 2026 16:12:50 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A7EbczcZXtF0zo4UX3ewr7e9yO7Y2UMekQZCa6BdoooI20YdqkJROqayDv7pQQtw0UhHNPX3%2Fj1Nh8MS81rkge5ybrNJ2gwbA4JnM7w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9db4152efdb4acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-08-09T22:17:08.468176Z","times_seen":317930,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/BaseMainBtn-cf1599ad.css","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/BaseMainBtn-cf1599ad.css HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 08:38:19 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LkgTSTdc8xCgFuGsN%2Bc7JG%2BqJ084rXfwK8Q47ZfY%2BzYuTnTYpuo9M1niiF6E%2Bqv9emRmdvMQg23xGU%2FtpVXTuqnXRPEy%2FiKOnSYloWg%3D\"}]}\r\netag: W/\"68d3adfb-da\"\r\ncontent-encoding: br\r\ncf-ray: 9db415344c75acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c1fb97309cdf49465e4f0c30d3076578","sha1":"a89aad9837fa74c4b617ae97df0cb4bd6be84cd8","sha256":"cf1599ad93a05243bea5ed51b989a7bf72f5292a94b612154a39d30d50e35e9c","sha512":"c43620fa6919ff89a83a41252ce19bfef4cf68662f34b0a054749d7293c2dcb601ba2dace836f22635988cd596f8bc16b3f7b331a7eb622cb0df89e256ce9030","ssdeep":"","tlshash":"4ad0128d3191b97e18be87cc75ec50214b8038975f51beb9655429dd43872773c7305e","first_seen":"2023-11-04T18:18:58Z","last_seen":"2026-08-09T10:03:19.797916Z","times_seen":311,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/BaseUserTab.vue_vue_type_style_index_0_lang-1f220dae.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/BaseUserTab.vue_vue_type_style_index_0_lang-1f220dae.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.herb6.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 09:41:26 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DSZqDdFvzH3%2F5mJNwhRyCo%2B%2F6%2FMpZy4hJqa7vhOCrv03VBRrdiz9bf1qw8DePdfwkt3l%2BO%2FI9HYvaRfdMlL1ozd121wFTgo5MefnSjQ%3D\"}]}\r\netag: W/\"697b2b46-2f8\"\r\ncontent-encoding: br\r\ncf-ray: 9db415347d06acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":760,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (515)","md5":"1c86d838e348968407bb5a6de6489aeb","sha1":"8c842f8bd50b6c03dd3b841abfedbdf8e941383c","sha256":"1e810bdae8a0bc48587cac15318fb183d8473bdcaa8d998e5bd729617c53c44f","sha512":"9ad738172ebd108a0689557fbaeee1c217cadfe59ddd447013cf777c5895df9663d3061a5616cac7e21acfd511537b0917606337583ad804d28cd4ba2fb245ef","ssdeep":"","tlshash":"560125dd48e6cbf5849703543e5a1050d0848f449b39cd0470dc2a22274b8a0b5de33c","first_seen":"2026-01-31T14:12:26.999755Z","last_seen":"2026-03-12T16:25:00.623079Z","times_seen":16,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/BaseLogo.vue_vue_type_script_setup_true_lang-d0ee7399.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/BaseLogo.vue_vue_type_script_setup_true_lang-d0ee7399.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.herb6.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 09:41:26 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9q28MyNVy58BMmqx8cuILH%2BGzA09dqt2G%2FOUjRMHz1NM%2F%2BNFiG6JmC2V9MVfS7ymt5ik61dyeT22PPJbJYx%2BxpDARxrWnIn4Sbjr2oY%3D\"}]}\r\netag: W/\"697b2b46-20a\"\r\ncontent-encoding: br\r\ncf-ray: 9db415347d16acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (521)","md5":"f8a1a4c2a666d6c80c3392ba03c68d73","sha1":"811444ae2df08cdd88dfa852ae85bd66103d67e2","sha256":"19640ef00927e70adbd4f67a9c0d35c87ba927ab2707062fec580afb37aaed52","sha512":"0f07c85b9a441475058e5cc64d3be13707229ac8bdfeb1f0c87bb20d2802564b7d481be86004f6c86ffb5b64cdb58298e48e5f82c13c985d9c7f949b6b24b6c6","ssdeep":"","tlshash":"d7f0c00f5c2a95ff40a669942b47204212045eadc6209994f2e52278624185a701e768","first_seen":"2026-01-31T14:12:26.987602Z","last_seen":"2026-03-12T16:25:00.604715Z","times_seen":16,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.herb6.vip/api/user/app_info?d=1773331970231","fqdn":"api.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"104.21.43.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:50.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /api/user/app_info?d=1773331970231 HTTP/1.1\r\nHost: api.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-ctime: 1773331970232\r\nst-ttgn: 7a1ba19bda955cff9b305431ea94b9a1\r\nOrigin: https://www.herb6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.herb6.vip\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XMry0wTyaIvBk7J8ALVMwmemhK0dOKPSaKkcjKpo%2BwN47JOImI8HQRFicYejRwDgT2Tx3%2B642gd3iHlNRHbqtiSOrEwz1qS4infXPGY%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9db415300dbb4651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6122,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"81322b5803fc81bfa00f651be1a153b5","sha1":"b32749c852bb879cbb7b167c909a0c3e27159c83","sha256":"0004320f17076654a7c557441a7cddfec9a6c515adca4a266578c3928428cffa","sha512":"63aecb637d0109d0527401a7be0684cc3dab700cc8e8f3dfd34474ab113cff94e20376556ac887ae5d1da9e11c6ce461b72946615bd81039604cab864972fbba","ssdeep":"96:IlS2P/yV3y8LX5+MV0UfeD1excCrZMZDjNYAkIAOwWiSIBYAIzJYAJ9YAUFcYANT:IlS2P/yV3y8LpjV0OehqcCkN/kIgWiUt","tlshash":"2dc1ee55256adcbbe5a7bdc02bcb3105899d389bfccc8f4a9f2cdda6019d492212f503","first_seen":"2026-03-12T16:13:20.953805Z","last_seen":"2026-03-12T16:25:00.602351Z","times_seen":2,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":7,"connect":8,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"api.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/register-58cfe9a8.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/register-58cfe9a8.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.herb6.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 09:41:26 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"697b2b46-43e34\"\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w0viF%2FAOBKbeyP7GdpOEaFD7sQMO1QZxjJ6POGaeoAppeLpxom9X5dCu3MRKqqfmmDcwT6WlzU%2FnovW1oYX5vc0U95MOJQGtXbHKTWE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db415346cdeacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":278068,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15580)","md5":"24b0b637e9437f70fbec320697214e1f","sha1":"042951b90c83ea5e14ffff0fa7f4cb925fc95321","sha256":"b26afc783a964d4001208311c49497f74007486ec58b31481c2329a2f2bf87ca","sha512":"5e121a270f7cc8762c62fd542b8e8aea3ec27395a62c9cef2f2b4e2c5ae4b14ba654cad96972c05f4ec3b3a50319c083327b09a545b816bcf844067b2db18bbe","ssdeep":"6144:gvcjRsL6UJDpw1bM1cogt3/MThHocS54UhfUWlUa5CMJHGfAOy4RTY5eJzry7f8H:R9mnRq1IKTtA9HANV9q2d94BrNg6n0UH","tlshash":"0944519cd0b4cf76d4b79661385ea860b05e4befc2405714b3fc4a252edacf0a3b56a4","first_seen":"2026-02-13T13:35:32.795171Z","last_seen":"2026-03-12T16:13:20.95559Z","times_seen":2,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/index-3a38c551.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/index-3a38c551.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.herb6.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 09:41:26 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"697b2b46-7a6\"\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kkzDNjzI4TmZ8JhtALPEfvqUoa88VEyjasv4teLpsA3mGgRLiTvPK8gOmidzumFxyZIogTcy98rOjBEsbTnsiZIEqWiBlSWu9PitQn0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db415347d02acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1958,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1957)","md5":"81b68467baf0421d250a97eb76f3da2f","sha1":"b2cf4586351c19aa36215446c37ce86f7b2f8bf3","sha256":"40dc596ac2cc82ea908f388a7b602582a16639aa70b47a667074b3f45eb88a68","sha512":"9901c5bbd146611e781e892dd703ce16d4356fe45bfcebc5fd0e1d7f8dc1139e0b52a854be424825e6e66b647bcd78d3cb391065967c255b8bd5672cf7a90c8b","ssdeep":"","tlshash":"dc41726d78cc1035cbbbe888846a4913b22f8b1c022889f1d0ab1d9c2e2f10cf177e31","first_seen":"2026-01-31T14:12:27.003527Z","last_seen":"2026-03-12T16:13:20.95737Z","times_seen":8,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/BaseInput.vue_vue_type_style_index_0_lang-98da5af6.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/BaseInput.vue_vue_type_style_index_0_lang-98da5af6.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.herb6.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 09:41:26 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"697b2b46-95c\"\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RHAV7zx1RA4FQsf%2BQ66HOM0pyTPGJT0lTJApiBTM3wx%2FcKe69HFuSi5VA%2BnIAGhBeW%2BGOr7JcKJzTn7EkHl9LrG49KWNxEp%2Fg8DNNeM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db415347d04acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2396,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2395)","md5":"47f11c4026039ea1480f24f2f9afe509","sha1":"5fbf97b086b4aa8bad38c07e59cf031515654a81","sha256":"80acad7e78d364d7e25971cf86505b3858942ba8f3f667ed169d6ff246f1056e","sha512":"ab00847e1b0d9db269af51a26b80ee69ea6f19b26e486e18cd094ec95979ce35c87a9d6b6cb3388f73360bda8f43471a420b7888c231a813a31b1b0233d8bb2b","ssdeep":"","tlshash":"2b41570add6aafb2c673d6a5a1df0c20e0052b67c550459150f9192d1b8dde4173fb18","first_seen":"2026-01-31T14:12:27.024824Z","last_seen":"2026-03-12T16:13:20.924542Z","times_seen":8,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/register-58cfe9a8.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/register-58cfe9a8.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/assets/index-fbfb58ce.js\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 09:41:26 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"697b2b46-43e34\"\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7msDWChbeKJCXCw0rvRjbmQVPZObLCDtr3%2F%2BKN5DXq8Wxl0BFiwBNT2DInCASC%2Fr9GxPLst74tvlvCY2jlYQ5pcOmgXnU5s%2Fe12JsSk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db415368a95acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":278068,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15580)","md5":"24b0b637e9437f70fbec320697214e1f","sha1":"042951b90c83ea5e14ffff0fa7f4cb925fc95321","sha256":"b26afc783a964d4001208311c49497f74007486ec58b31481c2329a2f2bf87ca","sha512":"5e121a270f7cc8762c62fd542b8e8aea3ec27395a62c9cef2f2b4e2c5ae4b14ba654cad96972c05f4ec3b3a50319c083327b09a545b816bcf844067b2db18bbe","ssdeep":"6144:gvcjRsL6UJDpw1bM1cogt3/MThHocS54UhfUWlUa5CMJHGfAOy4RTY5eJzry7f8H:R9mnRq1IKTtA9HANV9q2d94BrNg6n0UH","tlshash":"0944519cd0b4cf76d4b79661385ea860b05e4befc2405714b3fc4a252edacf0a3b56a4","first_seen":"2026-02-13T13:35:32.795171Z","last_seen":"2026-03-12T16:13:20.95559Z","times_seen":2,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/BaseMainBtn.vue_vue_type_style_index_0_lang-46c2025e.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/BaseMainBtn.vue_vue_type_style_index_0_lang-46c2025e.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/assets/register-58cfe9a8.js\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 09:41:26 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2Fgek8Dv7DiHbJS0G4fdTnjjBLpT8los55XFj4fbJagPlxbbGOTKCd5w7UsZGNCdA4B%2FhGKdbcGpotPMT73EFeuXtAnV5Y3XRPr%2B1Xc%3D\"}]}\r\netag: W/\"697b2b46-22c\"\r\ncontent-encoding: br\r\ncf-ray: 9db415375cc0acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":556,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (555)","md5":"aabfb6de09f4059f259ce38d079060bc","sha1":"7c63bc489029f62ae48a9b02d9e77088b761b104","sha256":"e76881bcd8763e336aa4ccd6f3cff7e64f343f00f95465f97bb15bd669aad772","sha512":"8c41959c82149a5d7448b229927b9e8f087f02ebcd8959b10fd363e7eae5bed1e7b43a12d05b8578f2c82d290cf4b6762b29b7714552c8ce8becd47d3c5606de","ssdeep":"","tlshash":"c0f020066c01c9bc2c82020a2a85201092043a6fe32560f8a5df216c679f0b9783a32c","first_seen":"2026-01-31T14:12:27.001633Z","last_seen":"2026-03-12T16:25:00.590178Z","times_seen":16,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/index-a9671252.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/index-a9671252.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/assets/register-58cfe9a8.js\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 09:41:26 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"697b2b46-435\"\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GOZmueYL0ABwzT%2FGKMA%2BD4%2B5iBwnm1AtHPN7novJ9Zi6OO0IMki%2Bv5PmY4qzpPErsFTvkcVQpYiyb69aiYmDOl5vsyc79CW4cz%2BwUfI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db415375cceacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1077,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1076)","md5":"9835ab1ff41a6157ada6ee13b1fcf556","sha1":"b55cb6209ad7f9af100a6cedda3ab41716abaf70","sha256":"5d9fdbf9b6c7b8e919734bfe788ca798d18bff749e2ac425c15225fdaa191396","sha512":"c7d2276e101a7e37a1e1bfdf40fa99ae5471a4221a77b1843f56b3cb09af4c817f955d65648b85737ba45ce80d886c4318ee638cd205703df6edfe05114c1227","ssdeep":"","tlshash":"4611a54b6cf08ef940bd08863b930115560f0699565058e0fc8e4e5c26bc9c35a2ff1c","first_seen":"2026-01-31T14:12:26.984953Z","last_seen":"2026-03-12T16:13:20.947432Z","times_seen":8,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/index-3a38c551.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/index-3a38c551.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/assets/register-58cfe9a8.js\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 09:41:26 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"697b2b46-7a6\"\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bnb8kOMVwCqEfNzxotrJamuNv9DcbNBfZuaCdFzo3ljNrbPhTzb85cVa5vdN%2BtMH6nVqTXvaKoZw8M6pW%2FPICcS8U8vfwUzYXRWLXuw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db415375cddacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1958,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1957)","md5":"81b68467baf0421d250a97eb76f3da2f","sha1":"b2cf4586351c19aa36215446c37ce86f7b2f8bf3","sha256":"40dc596ac2cc82ea908f388a7b602582a16639aa70b47a667074b3f45eb88a68","sha512":"9901c5bbd146611e781e892dd703ce16d4356fe45bfcebc5fd0e1d7f8dc1139e0b52a854be424825e6e66b647bcd78d3cb391065967c255b8bd5672cf7a90c8b","ssdeep":"","tlshash":"dc41726d78cc1035cbbbe888846a4913b22f8b1c022889f1d0ab1d9c2e2f10cf177e31","first_seen":"2026-01-31T14:12:27.003527Z","last_seen":"2026-03-12T16:13:20.95737Z","times_seen":8,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/#/register?ref=806595","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-12T16:12:48.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 03 Feb 2026 10:55:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7kJvo3H6rQ9U%2BwYZkaVjbqw3ccTgksbr5dSrElVRcZZczdv4zSa3pe2C%2Ftm3xsR4uTME54dOyeVoaHCAYfnJcfw9O9UUS7zR2ayFelo%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\ncf-ray: 9db415245d571806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152986,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (54279)","md5":"e5088b9e2924ff6158d03d5f1cf1a865","sha1":"98993ceeaf646591ccad933aa343d991164bc662","sha256":"b86d7d4be19c7c5c2de865342f891a347f12b8dbfc32a04a1a525963defd2a7e","sha512":"9c79bfcb3560213e810d245f458d9bf69a381206b7bd6ea9f28b6bb5b16fef8d833569cde9a4f52c4b7f1817bc5a8ddc086cafe7c3299d4637643e4601c4b8b8","ssdeep":"1536:imoOZI7RqsqLQJFApnPq4LBjJPu9WYZ9uGptLLWv2XyTO5Kwulq:Dmuq","tlshash":"97e309f6a3e8a1e8e80bd3b8e676a476312b30ff3f45c648719c5a64fb2105d855dd80","first_seen":"2026-01-31T14:12:27.032088Z","last_seen":"2026-03-12T16:25:00.649655Z","times_seen":14,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":44,"dns":20,"connect":8,"send":0,"wait":296,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/index-fbfb58ce.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:49.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/index-fbfb58ce.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 09:41:26 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"697b2b46-16144b\"\r\nexpires: Fri, 13 Mar 2026 04:12:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eBiD5I7H6w%2FFFpdOJys1Ko7q07vn76NZTpoP2A2g5IvvtZ2eGf0crrLnaXv%2BRHsSn6b%2Fh4Dq4X10kE4A2uceNm2F6Vp0yhk7w7oywqc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db415279fdbacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1446987,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6836)","md5":"de8402f38f9edc30c11aca2b8355e4f9","sha1":"a38aa7cda6c8109b0bcccf57f37da020fded42d9","sha256":"2d4266ccad3903f50bc848144c5bd9d97a8898af81c3ec9a4894740c94f48b57","sha512":"f5dc7275ee05de63dad6abf93f2e3d92b9c0f0962c544b6afdb20231c7281087d8a06606eb44e6469ac0b1d3d339fd3129c7594d76e5ddba52cbd411fb9a8f03","ssdeep":"12288:mtF2wMS3OXLgUUnhIHAn0ZesneDcpVo2I:mjOb+n2pwseDL","tlshash":"ef254a282a5bf344a819c0dbea373c84c59de18ab40b54d15f7547b31bb2793eaacd13","first_seen":"2026-01-31T14:12:27.029727Z","last_seen":"2026-03-12T16:25:00.645932Z","times_seen":16,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":522,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/index-9e27b9a5.css","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/index-9e27b9a5.css HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 08:38:19 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68d3adfb-8b1\"\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5NW6hx%2Fru0Mcc6ljP7POmdklydYUAeSQiJmWC85jscGj6ABBTqGyiX5kj%2BrhUbZUnI2Ys1dpzc4E5lC903E25%2FqKRPoXUeGaPLK37IM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db415345c8eacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2225,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2224)","md5":"291bcc8d7a5ff72598f2133c707795f4","sha1":"e802d64cec514c1bba71d5924634ff5f446ec12c","sha256":"9e27b9a5b1a029c7571fb301b2c6f1b38c813f064b1b739515f31fb95bf40768","sha512":"4267b9006927c13708bc59cbb549b5820c15563b4ec9320180fb2949c7a1a1e88c237beb580e60c9e8759cb8182f22c0bf526e9b3d680d2270e7cfc95c95e6d1","ssdeep":"","tlshash":"f041f367daa045faae33a5990f5588c9b13ce9208e00df72b180d11c8dcf6f626136ec","first_seen":"2025-05-06T14:23:01.801794Z","last_seen":"2026-08-09T10:03:19.799323Z","times_seen":154,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/BaseInput-6cb66fbc.css","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/BaseInput-6cb66fbc.css HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Dec 2025 09:50:52 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694e5a7c-597\"\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z3c%2Bc9Zl3nFHh8zm1hNpfX08ubTufkYXLsh%2BfripXQWXq3GVe2NvAfB9vJhEymJdzG0mEaMOcgnulJhifXt7O%2FJ92hAcXVX042AOjLw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db415345caaacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1431,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1430)","md5":"b3d037c37356ce62fe0bfb73ca394c95","sha1":"d77a30c52c8b7b275f944bff952376f2ea4d54b0","sha256":"6cb66fbcdf648305a59b5c33637cf0e9969cbbe498dc8fc3627d89019e64317f","sha512":"32c4d7e029372cebef4d89d0e3d119302fe562441306d600e84fee35b1672371ed5765778f7b6fcffe8d3669d9b9e5a7bcf2086967fd269fc855f4a6fff1353e","ssdeep":"","tlshash":"39217d080d60df1b2caa6ef3e5c8da872c0854b34fb39d05d140602687958b53f3fe68","first_seen":"2026-01-03T15:18:18.18816Z","last_seen":"2026-08-09T10:03:19.846391Z","times_seen":97,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/ContainerForm-e939f23f.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/ContainerForm-e939f23f.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.herb6.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 09:41:26 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P2wDVhSeFW2kdgA14FFDvTIRU0i00dwFTswIM4BSrksKAqzACyhJ2hkuZ%2F1dt8azUzlhadTgGFlOKfjHe8k8qN2AyDI8AK7zD%2BIiyi4%3D\"}]}\r\netag: W/\"697b2b46-d9\"\r\ncontent-encoding: br\r\ncf-ray: 9db415347cfbacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"4934c4c5ca0f46fb55362b82c84b510c","sha1":"4eeaa0856adff81fe0c353d78f3dcb1171a9935b","sha256":"91e17b29f21e01b2babc8a4764c88a97511df03130a1c662547a99aa902f834b","sha512":"a1aa2f087b2c06bc9bc5ed2df175666934997bfd3614f080ee181e8c3ea4e51d365eb781135d7eaed500ba85c24639880ebf918a62bd7b52e7df232bfb696eac","ssdeep":"","tlshash":"0bd0220e6c5096f280126a8c336a3437db5e3e2633b49d52109b48a94b1a4af220ff4c","first_seen":"2026-01-31T14:12:26.997757Z","last_seen":"2026-03-12T16:13:20.935239Z","times_seen":8,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/login-c6e297-5638315b.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/login-c6e297-5638315b.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.herb6.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 08:38:19 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1bw5WqqwQtFoLBbPvg3ju55a5Wtf61UbXb5uCd52VV%2FLeeMP6uiQjlNuzlYs0MipZXJ7rUNVpY9QpHfKcFJKIYdBiiblLFlOcDULbCQ%3D\"}]}\r\netag: W/\"68d3adfb-3bb\"\r\ncontent-encoding: br\r\ncf-ray: 9db415347d1cacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":955,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (954)","md5":"8d4976d22aa948250a135c00d3d9a28b","sha1":"80d5ae9a3c2e3ddefc51119105b945e7ecacf92d","sha256":"80ac60742cda817e1d84a928ff9d93588793b60acd461fb0dd0a1291cb4ce262","sha512":"b6213399deb3a996557ca5ed9026d2a49c63966495f9ca854c5548c7b5222cbccb309c84539645db2d74df21c66f62cfd3f28db5a0f87a193aea4e58b3361d15","ssdeep":"","tlshash":"bb11822aca585d3f112c390d02c6e9e4010d332b9868ef7cc336852c6c18b1746d6c70","first_seen":"2025-02-18T16:23:29.571893Z","last_seen":"2026-08-09T10:03:19.802024Z","times_seen":139,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.herb6.vip/assets/BaseLogo.vue_vue_type_script_setup_true_lang-d0ee7399.js","fqdn":"www.herb6.vip","domain":"herb6.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.herb6.vip/#/register?ref=806595","date":"2026-03-12T16:12:51.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herb6.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 07:30:39 GMT","end":"Sun, 07 Jun 2026 07:30:38 GMT"},"fingerprint":{"sha1":"25:B9:0F:6C:E3:10:BD:92:FA:9D:DA:B9:92:7D:C2:1C:55:28:B7:81","sha256":"8B:F8:3D:DA:8D:9B:98:90:89:69:3D:36:DC:D1:26:0E:8F:01:91:89:A8:AE:14:E3:3F:88:3C:BD:D2:E3:18:C6"}}},"request":{"raw":"GET /assets/BaseLogo.vue_vue_type_script_setup_true_lang-d0ee7399.js HTTP/1.1\r\nHost: www.herb6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.herb6.vip/assets/register-58cfe9a8.js\r\nCookie: _scid=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO; _scid_r=PMLlpyWYFzqnrxmxneVD2SvXoSsUqNDO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:12:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 09:41:26 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 13 Mar 2026 04:12:51 GMT\r\ncache-control: max-age=43200\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ruN2M%2BMTrNBk4auwYmZaK29fRnslqjKlIK%2F3T7LOipaQF%2Fs%2BPi5PNwEkN49NRcgokV9V5SFr%2F49KSGHQvzFir303KTrIagHKakD%2BwU%3D\"}]}\r\netag: W/\"697b2b46-20a\"\r\ncontent-encoding: br\r\ncf-ray: 9db415376d0dacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (521)","md5":"f8a1a4c2a666d6c80c3392ba03c68d73","sha1":"811444ae2df08cdd88dfa852ae85bd66103d67e2","sha256":"19640ef00927e70adbd4f67a9c0d35c87ba927ab2707062fec580afb37aaed52","sha512":"0f07c85b9a441475058e5cc64d3be13707229ac8bdfeb1f0c87bb20d2802564b7d481be86004f6c86ffb5b64cdb58298e48e5f82c13c985d9c7f949b6b24b6c6","ssdeep":"","tlshash":"d7f0c00f5c2a95ff40a669942b47204212045eadc6209994f2e52278624185a701e768","first_seen":"2026-01-31T14:12:26.987602Z","last_seen":"2026-03-12T16:25:00.604715Z","times_seen":16,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.herb6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}