{"report_id":"195610c0-f6ac-4cb6-960a-c07af3c1b353","version":6,"status":"done","tags":[],"date":"2026-03-27T22:52:47Z","url":{"schema":"http","addr":"asterdex-update.xyz","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"104.21.38.47","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"asterdex-update.xyz/","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"title":"Aster - The next-gen perp DEX for all traders","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T16:57:26.648985Z","times_seen":17840002,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"asterdex-update.xyz","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"104.21.38.47","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-01T22:52:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"asterdex-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"asterdex-update.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-27","domain_rank":0,"first_seen":"2026-03-27T22:52:49.446398Z","last_seen":"2026-03-27T22:52:49.446398Z","alert_count":21,"request_count":21,"received_data":8626818,"sent_data":9901,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"asterdex-update.xyz/","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f1f9d2d09e00d025b449024c0ba12780","sha1":"b138bc5cdf0408b91ff83d51ea8977d04a370c55","sha256":"108d1e703856df3988a08a38a2fa465b19fe273d9d496430278328e2f57a63e2","sha512":"7a901c6f7114ad0455a404684dad3f457f1461fdc70893b2ca7733c439457531e1060561e5562fb3b9623a344b068a206e518207d5e5727a45e32d1ea65405f5","ssdeep":"","tlshash":"23d0a75820b0657928ce2a2d4ccf08cf7f32e411e30889c9e9dcc4587ef1e6801e0949","size":239,"data":"","first_seen":"2025-09-11T12:33:12.921854Z","last_seen":"2026-03-27T23:55:55.592582Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-08-11T10:54:04.310295Z","times_seen":3240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/semantic-button-2.3.3.min.js","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9d58a2f67ae84d495e9a32d39357b85","sha1":"c483d87a189d39eebda041d0f4ef63339a61dd7c","sha256":"ef2a295f49bf4850b4bdf2f9866d42f6c6c0092520d068051955a07dca3b36eb","sha512":"da596658822b686ff91a74a2004662867c83851d95ba8d8356d86e0f929b1b301ff49f39b2db07595953fa5e3888017c507ee67667103cd63184a5a274b77ab6","ssdeep":"768:d+0AShQcI01DGSDGQ+Zxt9bDS1o25ZI0CYzD4pihcU3qYUb4izL7fBR9cic1W2zi:Q5r2fdkfSdrI0GeWJpXt9","tlshash":"7563b4da690ad0d98e5224ded433e516f4254e63ce6df163a23cdcc0746ef26888727b","size":71130,"data":"","first_seen":"2026-03-27T22:03:41.868269Z","last_seen":"2026-03-27T23:55:55.569396Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/index_2.html","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-08-11T10:08:19.189827Z","times_seen":1964,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"asterdex-update.xyz/logo.svg","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asterdex-update.xyz/","date":"2026-03-27T22:52:24.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asterdex-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:01:26 GMT","end":"Thu, 25 Jun 2026 18:01:25 GMT"},"fingerprint":{"sha1":"94:11:83:9D:AD:38:6F:90:22:BE:13:D7:20:AE:D4:C1:44:31:51:66","sha256":"7F:81:9C:1C:A1:04:2B:F6:84:86:52:D2:A0:AF:52:F2:98:BC:9B:D5:BA:8A:E2:2C:CA:7E:91:2C:98:A7:C6:43"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: asterdex-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asterdex-update.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 22:52:24 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 27 Mar 2026 18:39:06 GMT\r\netag: W/\"12c3-19d3097c8b4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fQWnSkqJS1zU7gnVEeqrhLwsXpdvKX8tMmcwrtwhhNSOJMRJzIL3ZRRWm%2FAfX5T3X4EOje377qDZexBd0nRBH%2FzeQLVyVhQtrAbI0qtb%2F2oGfHCoa0JTfQcifJObcmKDY%2FHQ7Dff\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e31f71dae5956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4803,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f9e198f05523bcca4b508cfff77f341","sha1":"a4903a956a84a1d4caf637d0a0ecb5f65b0b5d53","sha256":"4e3a9edb0c107290610d1583aa3cb7bfc8f0b117e7bd07876425ad057b8b4e4f","sha512":"09b4f0723c656908fb221ffc30c2cb88915708423801540cd984acb9010af72aadc965e56b6ee617fcaaa2bc79a86ac56007fef7bad855d4951ad6c460b02d37","ssdeep":"96:Ox54g8YOpC4oVJZK8bIq7YNFpicDNkdmGV6Ph:w54N/CJDbI+YNFLI2","tlshash":"c5a182f9a7fad5e0ee14f3b8ca12d94a346b24ff9a85cf55c390be1824210cd084e9d4","first_seen":"2025-06-18T19:58:19.063768Z","last_seen":"2026-08-01T19:06:45.068745Z","times_seen":242,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"asterdex-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/hidden_order_focus.webp","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asterdex-update.xyz/","date":"2026-03-27T22:52:24.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asterdex-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:01:26 GMT","end":"Thu, 25 Jun 2026 18:01:25 GMT"},"fingerprint":{"sha1":"94:11:83:9D:AD:38:6F:90:22:BE:13:D7:20:AE:D4:C1:44:31:51:66","sha256":"7F:81:9C:1C:A1:04:2B:F6:84:86:52:D2:A0:AF:52:F2:98:BC:9B:D5:BA:8A:E2:2C:CA:7E:91:2C:98:A7:C6:43"}}},"request":{"raw":"GET /hidden_order_focus.webp HTTP/1.1\r\nHost: asterdex-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asterdex-update.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 22:52:24 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 27 Mar 2026 18:39:06 GMT\r\netag: W/\"18044-19d3097c8e4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pIQllDfOE4NfBOfk5f2QyZvkjVKfexZU5f1ncqCaWnwqemFZ%2BpaaUh9N9a2NgE4tFTSmjRCnzW5DQQ8AEa32HmcqxBQbhM9%2FH1vDUpwRTWbcYusqPPrq1Xt8xh7WcHvrqJPj%2F86S\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31f71dae5a56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98372,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e7aac6d45662a4600c1cb2687cd24cc2","sha1":"29388b62ed4d8dfeaaae32de8362beee99effade","sha256":"a9053605e8c9bcd6a9434b1a21049cdbfa508b7cb131ea4403540c0220d370fd","sha512":"af9975ca759d833c6e927ab2cba13b79a6ff286ee040edd68f2a077b70492a7f45b5ad20760557ccfc9f6a6657b4d7da5b57398bea9d1582d15fface504a578f","ssdeep":"3072:A5c5xyVnUpw6kp43LwQlooW7kvsMlr9k8PiuO6b:lKVUFkYGovv/+869a","tlshash":"d4a3128f8a761c420733d5eb27ca115463c06b746b5864f463a2bc7027bf94ce6eb972","first_seen":"2025-09-11T10:22:24.838707Z","last_seen":"2026-07-28T16:42:50.732006Z","times_seen":84,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"asterdex-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/search_symbol.webp","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asterdex-update.xyz/","date":"2026-03-27T22:52:24.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asterdex-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:01:26 GMT","end":"Thu, 25 Jun 2026 18:01:25 GMT"},"fingerprint":{"sha1":"94:11:83:9D:AD:38:6F:90:22:BE:13:D7:20:AE:D4:C1:44:31:51:66","sha256":"7F:81:9C:1C:A1:04:2B:F6:84:86:52:D2:A0:AF:52:F2:98:BC:9B:D5:BA:8A:E2:2C:CA:7E:91:2C:98:A7:C6:43"}}},"request":{"raw":"GET /search_symbol.webp HTTP/1.1\r\nHost: asterdex-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asterdex-update.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 22:52:25 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 27 Mar 2026 18:39:06 GMT\r\netag: W/\"1a206-19d3097c8b8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ioEUsJbdwSDBiV5yrocxse3uKbIMaCPYhI4HoyuvS2NpFxbj6qYaAY9%2BolgjzioLBN5lZb%2BA28TV%2F8ROTn%2B84I4dwjf6B2jnWUhW%2BPADT%2F43Mvy4udoEFSTdDtMgz5n7W8P39BOc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31f71dae5b56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107014,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3d494116e551fe0fe44f9e0e9327c1ba","sha1":"bcbd1949251ddc20359c1eb36736ad5dbc3d2369","sha256":"c6465c05e4503d791782ee92aa3cfd7bbc3909e4385b99a61093a086b50e6a18","sha512":"54a4e6de1eee09235f3f737e2f48fcad3eac3e161392ec44291be858df9705052e634c339f09b7e994797c7299d07dbbfc9f4ce4c7027d122e545651631d1eb6","ssdeep":"1536:Imd2XeDUBzkPhfeQgkPIqoKtMl0UFIoSOidxMxXhjbEuhVO3Vfi+K5yNKHXeF:IzeDffd5oIM1SOidxMDkuhciiR","tlshash":"45a312bd8721e98dd12c6e78db193fdf654c8c104fd4aac43aaa4c91e2542b9bd43723","first_seen":"2025-09-11T10:22:24.795566Z","last_seen":"2026-07-28T16:42:50.797748Z","times_seen":84,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"asterdex-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/aster-hero.mp4","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://asterdex-update.xyz/","date":"2026-03-27T22:52:25.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asterdex-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:01:26 GMT","end":"Thu, 25 Jun 2026 18:01:25 GMT"},"fingerprint":{"sha1":"94:11:83:9D:AD:38:6F:90:22:BE:13:D7:20:AE:D4:C1:44:31:51:66","sha256":"7F:81:9C:1C:A1:04:2B:F6:84:86:52:D2:A0:AF:52:F2:98:BC:9B:D5:BA:8A:E2:2C:CA:7E:91:2C:98:A7:C6:43"}}},"request":{"raw":"GET /aster-hero.mp4 HTTP/1.1\r\nHost: asterdex-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asterdex-update.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Fri, 27 Mar 2026 22:52:25 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1251022\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nx-cast-cache: MISS\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 27 Mar 2026 18:39:06 GMT\r\netag: W/\"1316ce-19d3097c8dc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-range: bytes 0-1251021/1251022\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZnDI649mo7ZoJVQDTmqRr3yoBXlpE%2FRLNV7unuDa847yNNwz5rl2%2BLa35Fx4F4mVi3gQCxay6pdqV9JGh%2Fu5l%2FC2LA31svETJyCwFwqHfDAAKbAn2pqfbZyh%2B6jY9FuU%2F6AnGQdA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31f722897156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1251022,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"07f0100f3aff615fc0bbdef8b76cd0c9","sha1":"865aba5a0bb87e3d07642e05e18c3558b4deb82e","sha256":"389fce400d00855164dc62d5ec8a687db3096be69370195a2c469d2bd1871e23","sha512":"c42f5e60eef751edaeedb0e9eb3477c7941178072f9ed2c7e0bdcdf3bdb4bf5028e98475ab9320f8d275d0d6f0f8e07ab361c793e02fa036567d4e87d4224dbb","ssdeep":"24576:eMX7Q5QZO88A8yeEfLxx9aAyRdqZ4HdPh4TjkumLz:1ZO88zEv8AyTt9N","tlshash":"792533169bd8b995cc52e57c8dce6381fd94ca3012c443e73cbea5510683e9aeeac35c","first_seen":"2026-01-22T06:56:53.402412Z","last_seen":"2026-05-31T04:48:23.247895Z","times_seen":19,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":271,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"asterdex-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/46404643c22873c5.css","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://asterdex-update.xyz/","date":"2026-03-27T22:52:24.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asterdex-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:01:26 GMT","end":"Thu, 25 Jun 2026 18:01:25 GMT"},"fingerprint":{"sha1":"94:11:83:9D:AD:38:6F:90:22:BE:13:D7:20:AE:D4:C1:44:31:51:66","sha256":"7F:81:9C:1C:A1:04:2B:F6:84:86:52:D2:A0:AF:52:F2:98:BC:9B:D5:BA:8A:E2:2C:CA:7E:91:2C:98:A7:C6:43"}}},"request":{"raw":"GET /46404643c22873c5.css HTTP/1.1\r\nHost: asterdex-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asterdex-update.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 22:52:25 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 27 Mar 2026 18:39:06 GMT\r\netag: W/\"378b4-19d3097c8d4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xxc1dOr42Rf%2FSn4N%2FUz%2BgRS%2BreyHItffYwEGHgfi7sqHw6%2BpYghG1UrjEa95WqRe5bZzB5M9ruqPwx4%2BF2VeWArnBjaG%2FdAxTQTxiZKvpMLix2Y1KUBCw7qjxV2kIz9UZOcsneJY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31f71dae4c56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":227508,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65472)","md5":"9c490d4f70cb2f15fdc7b137f7ce6cee","sha1":"9a02d41f2cb1a1b77171af6a365a040dcb0076ca","sha256":"71599a72ca1384ac482a4efa2a15b90e4944f9cc8fc75aed8add38007c4b5145","sha512":"3a20644d819bd2c5fd6915411fdeb341d3ebd16a33043b896fa029bcd9c327c77fcdb422f7614b9d7b60ba267ec6fb71bd3cf3c6bf5c2624f281f87a85f8881e","ssdeep":"6144:oLyaNx/CHifUgh9HJJBh99ym6lwVMKzM4UTMQUlORZA87D4eAhXKH8fPcWYhMvxp:CxMCk3wRi4D8GHXXzvp","tlshash":"912471ada643717b7c2b80f5d268eddc9112b5c0df3906ebbe52151487c23e25dea328","first_seen":"2026-03-27T22:52:53.50426Z","last_seen":"2026-04-12T13:36:48.64533Z","times_seen":3,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"asterdex-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/7833f54131912576.css","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://asterdex-update.xyz/","date":"2026-03-27T22:52:24.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asterdex-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:01:26 GMT","end":"Thu, 25 Jun 2026 18:01:25 GMT"},"fingerprint":{"sha1":"94:11:83:9D:AD:38:6F:90:22:BE:13:D7:20:AE:D4:C1:44:31:51:66","sha256":"7F:81:9C:1C:A1:04:2B:F6:84:86:52:D2:A0:AF:52:F2:98:BC:9B:D5:BA:8A:E2:2C:CA:7E:91:2C:98:A7:C6:43"}}},"request":{"raw":"GET /7833f54131912576.css HTTP/1.1\r\nHost: asterdex-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asterdex-update.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 22:52:25 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 27 Mar 2026 18:39:06 GMT\r\netag: W/\"6e43-19d3097c8cc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UBwgCSg5V00n8dTwXA21OwBVuvqsyaVH9NJewG7FddwhevEy256gR0YT1uwh8yZL3QFWGtzKDAA2FSjR8ttUqM4gp1%2BAMWwteI9OLGmOo4ukKTnzQ3CfUU%2B0hbIjqS3iAbHXSjsB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31f71dae5056ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":28227,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (28179)","md5":"303621ed64f5950917535201f5db003d","sha1":"6b9b890aa4fe101969a4cf32b2eeee0e2bf820ce","sha256":"9386bf29ca13f8a5e6e20b58c8e0c0ef254de5ab8c6e3150deefad3b75b09fb6","sha512":"f737bc7d08c941bf12de25a4ea1795cc09da9b417a2c9da4c945841fd031a68ce2ca17f3568ef9b55c9114387cbab046fbef312eaf3e2aebcae8e08f3767d8ee","ssdeep":"384:9sj5g7OIMq1OkkFK+Pk/DXr6TclhTLfkRDJLZ:9sjw3AoPhTLsRDJLZ","tlshash":"64c23228f686503b7c17e0eab388dcac855575c58e650eabfa522954c7d23f36cc236c","first_seen":"2026-01-30T06:01:50.289557Z","last_seen":"2026-03-27T23:55:55.574638Z","times_seen":4,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"asterdex-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/006ea9b979777b4c.css","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://asterdex-update.xyz/","date":"2026-03-27T22:52:24.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asterdex-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:01:26 GMT","end":"Thu, 25 Jun 2026 18:01:25 GMT"},"fingerprint":{"sha1":"94:11:83:9D:AD:38:6F:90:22:BE:13:D7:20:AE:D4:C1:44:31:51:66","sha256":"7F:81:9C:1C:A1:04:2B:F6:84:86:52:D2:A0:AF:52:F2:98:BC:9B:D5:BA:8A:E2:2C:CA:7E:91:2C:98:A7:C6:43"}}},"request":{"raw":"GET /006ea9b979777b4c.css HTTP/1.1\r\nHost: asterdex-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asterdex-update.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 22:52:24 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 27 Mar 2026 18:39:06 GMT\r\netag: W/\"12b4-19d3097c8c8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jt4BRQEJNFMdzbFPVOW0PD9uF5wLtVSvBpiHNJ2MxcsrKlCDUDG9JDHgivS9oMYfE67wtRAqXiE4inwWU5X2lROiqchrQHN1oApy6w6kuZsg6Du8%2FzSadSm64vcs1ephx%2FG93FQa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31f71dae5356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4788,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (4740)","md5":"2840b63aba94c09ac20f3ee55f6ff300","sha1":"d4b2b932516070d75168705d036e133ae9360581","sha256":"56fb75d42369a38f7e669b11101b62deff29c9626420015b242a6fbf605c33ad","sha512":"19a33be87747718ef8c5bfd9deeece701ba4a181cbffcbf9270b4f215a08bb45b955f0572a5f5332252c5f358f59e02849c9d2287f8fb8ff1200c9497b89dc18","ssdeep":"96:KPEqLoIFgcOQ6Qg1iKdKZMpM5U6x4/GXYF3O4uE47Hnqh3aD505iqX8XFXgXcXPE:KPEqLoIFgcOQ6Qg1iKdKZMm5U6x4/GXO","tlshash":"0fa1cf428f753728f63bc34e3d928ad5f6d48f81b429553852a7235dc9cf04a0a6db4b","first_seen":"2025-10-09T03:32:58.040834Z","last_seen":"2026-08-01T19:06:45.124082Z","times_seen":90,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"asterdex-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/d27b182f1b81e1a4.css","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://asterdex-update.xyz/","date":"2026-03-27T22:52:24.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asterdex-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:01:26 GMT","end":"Thu, 25 Jun 2026 18:01:25 GMT"},"fingerprint":{"sha1":"94:11:83:9D:AD:38:6F:90:22:BE:13:D7:20:AE:D4:C1:44:31:51:66","sha256":"7F:81:9C:1C:A1:04:2B:F6:84:86:52:D2:A0:AF:52:F2:98:BC:9B:D5:BA:8A:E2:2C:CA:7E:91:2C:98:A7:C6:43"}}},"request":{"raw":"GET /d27b182f1b81e1a4.css HTTP/1.1\r\nHost: asterdex-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asterdex-update.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 22:52:25 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 27 Mar 2026 18:39:06 GMT\r\netag: W/\"578-19d3097c8dc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fcF2VFTQK9Qw%2B3D4Jl0g3GRyPgv56%2FM%2Bpgf2u83%2FFe3TAVhHvAog0h9uEGBEo9p%2FJIZO%2FyeuygF8q2qe3EG9Uq43O5OeyhYodSDM9RHp9r9bgp4S6zIGu76dES656U2uvkojD5c7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31f71dae5656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1400,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1352)","md5":"d9081027acf5f0b6eccaf094aaa889c6","sha1":"2477301f4c29ffb9ad8107c7c2427f37eb42b99e","sha256":"32b03452b1e8d7aba364c7a349bef7a3f527b4858347df1e1c01b407d6c05f81","sha512":"d7f3de2b854edd814aa68344ddabe58033f41f4995d1669dbf6607839d6f095634ea1fc7792f2417aa5959d37f052003c9c959f11c8a89118be9232a12011309","ssdeep":"","tlshash":"da21b0c5de90143da197052ed1c5252c4b3ccd63f32749fd32a4a99d26412da2372a2d","first_seen":"2025-09-11T10:22:24.823083Z","last_seen":"2026-07-28T16:42:50.666688Z","times_seen":99,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"asterdex-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/index_1.html","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://asterdex-update.xyz/","date":"2026-03-27T22:52:25.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asterdex-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:01:26 GMT","end":"Thu, 25 Jun 2026 18:01:25 GMT"},"fingerprint":{"sha1":"94:11:83:9D:AD:38:6F:90:22:BE:13:D7:20:AE:D4:C1:44:31:51:66","sha256":"7F:81:9C:1C:A1:04:2B:F6:84:86:52:D2:A0:AF:52:F2:98:BC:9B:D5:BA:8A:E2:2C:CA:7E:91:2C:98:A7:C6:43"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: asterdex-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asterdex-update.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 22:52:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 27 Mar 2026 18:39:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QIVKJ8N7kfg%2F37gVmqK2wL1Dxhp73CSNN55Cyvk%2Bwv5rjJQEimB4pUgdEyszynvgyD6ZfR0fF%2FgtigwfUjYof%2Bn%2F2k5vUiiGtj3zwfe584cGCgQQS%2FKSoMuaqO98bB0ECqYewL0i\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e31f722394856ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":234,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with no line terminators","md5":"6e017ce6a227853923aac58ff97a4d34","sha1":"e6f6bef667df9370c9d60e6cdfd19bac53742987","sha256":"9d877505487ca585effdf46e372f510e70d427cb275ad7d0d75cba37a329bc48","sha512":"835f8434e0c3cb64d8ab74c8932826987b2e66feb43983d1c9a7bc76516446bee213d23aece357b7f8fec5db5e21eec91652c6c91f6952e249db6ced92901b03","ssdeep":"","tlshash":"f0d0a7f6921168052a4b77d43bc1f34c0106ff2dfc4158557afc61a1cc6a1b1e85ae85","first_seen":"2026-03-27T22:52:53.509334Z","last_seen":"2026-03-27T23:55:55.588449Z","times_seen":2,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"asterdex-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-27T22:52:24.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asterdex-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:01:26 GMT","end":"Thu, 25 Jun 2026 18:01:25 GMT"},"fingerprint":{"sha1":"94:11:83:9D:AD:38:6F:90:22:BE:13:D7:20:AE:D4:C1:44:31:51:66","sha256":"7F:81:9C:1C:A1:04:2B:F6:84:86:52:D2:A0:AF:52:F2:98:BC:9B:D5:BA:8A:E2:2C:CA:7E:91:2C:98:A7:C6:43"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: asterdex-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 22:52:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 27 Mar 2026 18:39:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W60CHa5abWLeDH2YkyoxF66C%2BHKdEGpTJxqgDB8wvokY4TXytY9ZE5mvT1EbYZojbR0PQleEPJJulk1isCvL0mqKaqqX3vMPgH%2FP2Lwa8UylvmXWmy0Hvu8nuNYlYt2D%2FtDFSkdJ\"}]}\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9e31f71aac488deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":78421,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31377), with CRLF line terminators","md5":"a4bb3972fce310e92c8d77ef75f597c5","sha1":"170669ccab438c15512db227a1f4ee7c0d4df0c0","sha256":"28bf1b7a748e5f834409645c45cfdfc28105954cfa86e5b5510bed7e82ee78ef","sha512":"ec4f653e126b33fa273f035038edc8cea74abb8e67e6dff693d5081d3c6b8817642b241c41a36265fcb08a21769808f7e75da230d8e7f9190bc340f395ec5617","ssdeep":"1536:NYWgTebx/c64Jysq7v0S9c+4WJ/P9lnVaRwZeUVCDav7i5fVAvzoCx:e5TeCSb4w9ln2VK","tlshash":"95737ee0b1041238281787a5f7d5fbaca115b152eb274464f39c1087ebcaff47aa9f85","first_seen":"2026-03-27T22:52:53.510719Z","last_seen":"2026-03-27T23:55:55.573255Z","times_seen":2,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":64,"dns":38,"connect":3,"send":0,"wait":332,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"asterdex-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/trade_BG.webp","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asterdex-update.xyz/","date":"2026-03-27T22:52:24.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asterdex-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:01:26 GMT","end":"Thu, 25 Jun 2026 18:01:25 GMT"},"fingerprint":{"sha1":"94:11:83:9D:AD:38:6F:90:22:BE:13:D7:20:AE:D4:C1:44:31:51:66","sha256":"7F:81:9C:1C:A1:04:2B:F6:84:86:52:D2:A0:AF:52:F2:98:BC:9B:D5:BA:8A:E2:2C:CA:7E:91:2C:98:A7:C6:43"}}},"request":{"raw":"GET /trade_BG.webp HTTP/1.1\r\nHost: asterdex-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asterdex-update.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 22:52:24 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 27 Mar 2026 18:39:06 GMT\r\netag: W/\"a3776-19d3097c8c0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fpW1Vt3%2BjncMrUxi95Q8P46KI4GBLg8GGgtOIt1B%2F6FL5NC4wvvAPvkxNWCl35eo6QAnMqapmFJd1rVBC6%2BjecKhrWwSiw0UhKI5%2FLRbCCUNP7fSG8GjeOm2k03hcvfYddqiAqen\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31f71dae5d56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":669558,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c32f9d60ce60842faa8d040d9836b7f3","sha1":"0870bdb4b6180d8270881f905e4f27d38d511bec","sha256":"9e6c0211b491aecf190e5750284ae6c34654f181095026c2805fb770b8432bc7","sha512":"52202afae2c72d109ddaa64bc680bfec0a4180c0ef71da2a9089b6878ccefaa21e78d07de85062c12a08328be079c3ed169086c632ecca265fb67d431fe82cdd","ssdeep":"12288:0+jZJ3uzPbr3UQdNNoxNjLj3oOt5ex+yx8Wjyv8lL3Ib4LfLBYnb6uDVYfdAgwSB:0cvoxdzo/j4Y5y3ryklL3Ib4LfLmTDu5","tlshash":"24e423c402cc34f1533e41e8c95bbb465b48d7981c9ab970d2ead52f6648f8ef8e45d8","first_seen":"2025-09-11T10:22:24.831399Z","last_seen":"2026-07-28T16:42:50.6633Z","times_seen":88,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"asterdex-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/index_2.html","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://asterdex-update.xyz/","date":"2026-03-27T22:52:25.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asterdex-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:01:26 GMT","end":"Thu, 25 Jun 2026 18:01:25 GMT"},"fingerprint":{"sha1":"94:11:83:9D:AD:38:6F:90:22:BE:13:D7:20:AE:D4:C1:44:31:51:66","sha256":"7F:81:9C:1C:A1:04:2B:F6:84:86:52:D2:A0:AF:52:F2:98:BC:9B:D5:BA:8A:E2:2C:CA:7E:91:2C:98:A7:C6:43"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: asterdex-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asterdex-update.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 22:52:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 27 Mar 2026 18:39:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L31zYm1yYPACtjSk%2F8S8ZYb9RTr6flp3JwpA7HJE1iC2FnUVxyq0GlKRNzbCTlr5OUflps6kcBnyP2Spm3msV%2Bz51B66nDuO%2FImohUKRwfjcPDjDl1LjiB%2Fh5TdsAw86IIPcMRRU\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e31f722294156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1235,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1234), with no line terminators","md5":"dd7a37b262382d4fc223783871f8b3b4","sha1":"2a129c96773dc1028343a0a2c24f36eda3f00ed4","sha256":"afab38796e5be6e74729eac264c90c0c244eb57e693ef924a06e5101b831ec6b","sha512":"c0bed8e86fcdfa796bd274563c5e705f5d32aa08fafd7e17ba2c159a2aaa6651941c69de65f3333a39a9336abb9c47d4eb6a398d00fc5bac827038d2c457fcb2","ssdeep":"","tlshash":"9321b7f1a811ec19502b73e59dc9a04d6903ff2de74518c8fede981dddba93c50808c8","first_seen":"2026-03-27T22:52:53.513081Z","last_seen":"2026-03-27T23:55:55.591295Z","times_seen":2,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"asterdex-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/aster-hero.mp4","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://asterdex-update.xyz/","date":"2026-03-27T22:52:25.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asterdex-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:01:26 GMT","end":"Thu, 25 Jun 2026 18:01:25 GMT"},"fingerprint":{"sha1":"94:11:83:9D:AD:38:6F:90:22:BE:13:D7:20:AE:D4:C1:44:31:51:66","sha256":"7F:81:9C:1C:A1:04:2B:F6:84:86:52:D2:A0:AF:52:F2:98:BC:9B:D5:BA:8A:E2:2C:CA:7E:91:2C:98:A7:C6:43"}}},"request":{"raw":"GET /aster-hero.mp4 HTTP/1.1\r\nHost: asterdex-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asterdex-update.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Fri, 27 Mar 2026 22:52:25 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1251022\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 27 Mar 2026 18:39:06 GMT\r\netag: W/\"1316ce-19d3097c8dc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-range: bytes 0-1251021/1251022\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BXorXhuDahjNxzStl1EdTUuRSi7lR%2Bm%2BxlX851p580RJPehtqOdZFf5afuw3EE3iYhNlDu3ioHwplSnEtQVdBXnqy6N7Eosw3lRxCa6UogrxJV%2Fnq%2F8A%2FqXDYAFZhrQnZpYsZMAE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31f722897656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1251022,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"07f0100f3aff615fc0bbdef8b76cd0c9","sha1":"865aba5a0bb87e3d07642e05e18c3558b4deb82e","sha256":"389fce400d00855164dc62d5ec8a687db3096be69370195a2c469d2bd1871e23","sha512":"c42f5e60eef751edaeedb0e9eb3477c7941178072f9ed2c7e0bdcdf3bdb4bf5028e98475ab9320f8d275d0d6f0f8e07ab361c793e02fa036567d4e87d4224dbb","ssdeep":"24576:eMX7Q5QZO88A8yeEfLxx9aAyRdqZ4HdPh4TjkumLz:1ZO88zEv8AyTt9N","tlshash":"792533169bd8b995cc52e57c8dce6381fd94ca3012c443e73cbea5510683e9aeeac35c","first_seen":"2026-01-22T06:56:53.402412Z","last_seen":"2026-05-31T04:48:23.247895Z","times_seen":19,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":311,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"asterdex-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/aster-hero.mp4","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://asterdex-update.xyz/","date":"2026-03-27T22:52:25.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asterdex-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:01:26 GMT","end":"Thu, 25 Jun 2026 18:01:25 GMT"},"fingerprint":{"sha1":"94:11:83:9D:AD:38:6F:90:22:BE:13:D7:20:AE:D4:C1:44:31:51:66","sha256":"7F:81:9C:1C:A1:04:2B:F6:84:86:52:D2:A0:AF:52:F2:98:BC:9B:D5:BA:8A:E2:2C:CA:7E:91:2C:98:A7:C6:43"}}},"request":{"raw":"GET /aster-hero.mp4 HTTP/1.1\r\nHost: asterdex-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asterdex-update.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Fri, 27 Mar 2026 22:52:25 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1251022\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 27 Mar 2026 18:39:06 GMT\r\netag: W/\"1316ce-19d3097c8dc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-range: bytes 0-1251021/1251022\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mfxEQ1%2Fx%2BFPxDk7BAz9kYnIF7ml9BleXdRv32nknTbZXmgtNVCb%2B7EqeYGbJzrr9WPLhPKTgAL%2FSJBDSS13dyd6Kl0KdUYzeWutouDLbXsTO4z7LVtQ%2FUwdseYx%2B0LqQN98CfWqG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31f722897456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1251022,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"07f0100f3aff615fc0bbdef8b76cd0c9","sha1":"865aba5a0bb87e3d07642e05e18c3558b4deb82e","sha256":"389fce400d00855164dc62d5ec8a687db3096be69370195a2c469d2bd1871e23","sha512":"c42f5e60eef751edaeedb0e9eb3477c7941178072f9ed2c7e0bdcdf3bdb4bf5028e98475ab9320f8d275d0d6f0f8e07ab361c793e02fa036567d4e87d4224dbb","ssdeep":"24576:eMX7Q5QZO88A8yeEfLxx9aAyRdqZ4HdPh4TjkumLz:1ZO88zEv8AyTt9N","tlshash":"792533169bd8b995cc52e57c8dce6381fd94ca3012c443e73cbea5510683e9aeeac35c","first_seen":"2026-01-22T06:56:53.402412Z","last_seen":"2026-05-31T04:48:23.247895Z","times_seen":19,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":294,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"asterdex-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/98ed64b04b708b67.css","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://asterdex-update.xyz/","date":"2026-03-27T22:52:24.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asterdex-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:01:26 GMT","end":"Thu, 25 Jun 2026 18:01:25 GMT"},"fingerprint":{"sha1":"94:11:83:9D:AD:38:6F:90:22:BE:13:D7:20:AE:D4:C1:44:31:51:66","sha256":"7F:81:9C:1C:A1:04:2B:F6:84:86:52:D2:A0:AF:52:F2:98:BC:9B:D5:BA:8A:E2:2C:CA:7E:91:2C:98:A7:C6:43"}}},"request":{"raw":"GET /98ed64b04b708b67.css HTTP/1.1\r\nHost: asterdex-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asterdex-update.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 22:52:25 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 27 Mar 2026 18:39:06 GMT\r\netag: W/\"7ba-19d3097c8cc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ym%2FpV9%2FMj927xw%2BeJH0l2I2HCTss5KfXGoEVeqMC6FEDVNvvCe0J8OuO5U%2Bv%2FeCTOBOrqwQVmHAW1BHaipY8ro66CMuIcY%2B1AYFHVnQMRL%2Fpnuw9QAy984bhk4uKMr6RGRVU3Uy7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31f71dae5456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1978,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1930)","md5":"2dacde7e5da4a5f86464f274076bb35e","sha1":"bf6c31d4125d2d320bca19f230d2018129b531df","sha256":"5133bb14ca0bceb66f9b6b1add2dab99f9c8590166682eb5f9d506f1a52873a5","sha512":"91b6ad60120481a6ab75752f82d218f627aa90b61531b5d03774f3cf8f2e28b482e8a50c675d9015dbd1d90e86a9ff35c57b3ec65b9fd1dc4b29bf85caeb892c","ssdeep":"","tlshash":"86417f48f487a1753c2b64069b58a13cc0607841aea64aef7d082956d7d3be77cf4b54","first_seen":"2025-10-09T03:32:58.055433Z","last_seen":"2026-08-01T19:06:45.050103Z","times_seen":94,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"asterdex-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/secureproxy?e=jscdn/getFile","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://asterdex-update.xyz/","date":"2026-03-27T22:52:25.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asterdex-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:01:26 GMT","end":"Thu, 25 Jun 2026 18:01:25 GMT"},"fingerprint":{"sha1":"94:11:83:9D:AD:38:6F:90:22:BE:13:D7:20:AE:D4:C1:44:31:51:66","sha256":"7F:81:9C:1C:A1:04:2B:F6:84:86:52:D2:A0:AF:52:F2:98:BC:9B:D5:BA:8A:E2:2C:CA:7E:91:2C:98:A7:C6:43"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: asterdex-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://asterdex-update.xyz/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://asterdex-update.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"2efvk8o08evuub28q2k6\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 22:52:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2Fo4q44wwBRA%2BAUyMZ78MZXtBvROLyCjotbE8cpMex%2BTVIHDI6t%2FTIZMBYP0f8kVrgXO0GaTUkHJqAytGmmfVkFMDAmbQS7fMEsqQCw4DRj9gpOIalOuf6R78Vzi2N3YDAic3qc%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-ray: 9e31f722d99456ba-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3434701,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"84827513e9e83e8bb7cd9c8475773832","sha1":"c83ea48ebde4613991f1b7c51c5e8f6c5e165fd6","sha256":"d666acc382250618a966091da5ca0e9bfa06dee018a09db73b5bb48c59b15cd7","sha512":"93fd7ff03e5a8937e5308bf9539a61886b1ff3746de00de980290066bab8efb3922a5eaa7ebdc9df6e938c32ad3571fcd51b44bf5fdf534102546081f72ac875","ssdeep":"24576:7XUo6V8/8Yae0PgGswPpBroS7InwbjtsJshJuEbd4fuQL:DUz7OwPEZJsKN","tlshash":"222523061d4bf9e54f8c2bbab4bb2d4724509f43488c54cbdb62f8c07528bb681de65b","first_seen":"2026-03-27T22:03:41.897373Z","last_seen":"2026-03-27T23:55:55.565178Z","times_seen":5,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":373,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"asterdex-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/18568d231fc1faa5.css","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://asterdex-update.xyz/index_2.html","date":"2026-03-27T22:52:25.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asterdex-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:01:26 GMT","end":"Thu, 25 Jun 2026 18:01:25 GMT"},"fingerprint":{"sha1":"94:11:83:9D:AD:38:6F:90:22:BE:13:D7:20:AE:D4:C1:44:31:51:66","sha256":"7F:81:9C:1C:A1:04:2B:F6:84:86:52:D2:A0:AF:52:F2:98:BC:9B:D5:BA:8A:E2:2C:CA:7E:91:2C:98:A7:C6:43"}}},"request":{"raw":"GET /18568d231fc1faa5.css HTTP/1.1\r\nHost: asterdex-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asterdex-update.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 22:52:25 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 27 Mar 2026 18:39:06 GMT\r\netag: W/\"1ae5d-19d3097c8d0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2FuE0ejvmWkJX12mZ76cbEYvEg8i8V7Ujuzwk5p1hRCpAIGusYYqGOmiH0F1%2BcbAfbargypK4REwj26OJ7ZunLed134UtJV9AVle3raQrpHGj4FwO1tkxr4chQHkV86B2vUuO0G4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31f723da0356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":110173,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65472)","md5":"e55a90d5a6ec9e8ea614c52e54815444","sha1":"ec2410cc5dae5240c98d9a23d7c6001229915f04","sha256":"ecdd416b16bbfff0272730d6cd0706a41e37bf47c19fb1fda37d069288d967e4","sha512":"b724680fda03c229a4a62b37dfadbd58a131633bb339fb31d8b9850210b673d5caae79da7cfd8cbab838d5afd8ca21bd3edd648682b516b979c66b5d869eed54","ssdeep":"3072:MGjhfVZxPBCmUv84gI4Q2wVtybjrSWxDhbvZlv5zw0:MGjhfVZxPEmU0otybjrSWxDhbvZlv5zF","tlshash":"c9b3811df612113f3c2780fdc29cedada116b1c0ee296be6be4261118ac67e35de7254","first_seen":"2026-03-27T22:52:53.516618Z","last_seen":"2026-03-27T23:55:55.571571Z","times_seen":2,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"asterdex-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/aster-favicon.png","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asterdex-update.xyz/","date":"2026-03-27T22:52:25.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asterdex-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:01:26 GMT","end":"Thu, 25 Jun 2026 18:01:25 GMT"},"fingerprint":{"sha1":"94:11:83:9D:AD:38:6F:90:22:BE:13:D7:20:AE:D4:C1:44:31:51:66","sha256":"7F:81:9C:1C:A1:04:2B:F6:84:86:52:D2:A0:AF:52:F2:98:BC:9B:D5:BA:8A:E2:2C:CA:7E:91:2C:98:A7:C6:43"}}},"request":{"raw":"GET /aster-favicon.png HTTP/1.1\r\nHost: asterdex-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asterdex-update.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 22:52:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 7865\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 27 Mar 2026 18:39:06 GMT\r\netag: W/\"1eb9-19d3097c8d4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GMrP%2FpMQI70sstTVZfKvAlfWNVJMEwMz6Duw9Id39l%2Bl%2BKylQHF%2BBUIXz3xtTdPJfytunCDmkx%2BwFWDAtDxLZixdXoMhby%2F5ylM%2FFD9gIBFNBASNzRRH%2FyWon0TPxb50vl7wA8H2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31f7255b3f56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7865,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"ec46b6c8a59c8ed2d4cb0360950a0dfc","sha1":"8af01d0c2440599cbd0adda5726c5cb5f89737e7","sha256":"edb4014b073d69c293e4f5e2f54c8b5eb3c2f3642b2298e56ef2487292f07577","sha512":"0c8ac7f2c40b0597b8fc3f7f756bc9970b5f6ea414e7c798943714cb37b0e212c6419602326a3c272d11ae3358ea562fc5161eb3d46422fc16aa9550aec1f0a0","ssdeep":"192:Jwcu6wfZcn/104g7xZ9vQzZEEK869f+hBpbG3:JB+MN6xZ9vcZhpnVS","tlshash":"5ef18d9d2bc88180c94c9cbe57e0451fa7f38a050f417d2373a878fa2e3879a395d984","first_seen":"2025-10-29T01:54:59.561114Z","last_seen":"2026-08-01T19:06:44.998451Z","times_seen":75,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"asterdex-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/semantic-button-2.3.3.min.js","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://asterdex-update.xyz/","date":"2026-03-27T22:52:24.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asterdex-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:01:26 GMT","end":"Thu, 25 Jun 2026 18:01:25 GMT"},"fingerprint":{"sha1":"94:11:83:9D:AD:38:6F:90:22:BE:13:D7:20:AE:D4:C1:44:31:51:66","sha256":"7F:81:9C:1C:A1:04:2B:F6:84:86:52:D2:A0:AF:52:F2:98:BC:9B:D5:BA:8A:E2:2C:CA:7E:91:2C:98:A7:C6:43"}}},"request":{"raw":"GET /semantic-button-2.3.3.min.js HTTP/1.1\r\nHost: asterdex-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asterdex-update.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 22:52:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 27 Mar 2026 18:39:06 GMT\r\netag: W/\"115da-19d3097c8bc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Acv056xKxBRaKeH13U2BCqSmEdlV3wfqZ7jFezUZiapw2Axo%2FfOXB3KRiuBIvEd7gcvXEJvtfINu8mcwlIWhqGsKaXESW%2FOrD1M9HUnrMHd8P7pagZX3ewnCvqEa082485OZnpW5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31f71dae4a56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71130,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f9d58a2f67ae84d495e9a32d39357b85","sha1":"c483d87a189d39eebda041d0f4ef63339a61dd7c","sha256":"ef2a295f49bf4850b4bdf2f9866d42f6c6c0092520d068051955a07dca3b36eb","sha512":"da596658822b686ff91a74a2004662867c83851d95ba8d8356d86e0f929b1b301ff49f39b2db07595953fa5e3888017c507ee67667103cd63184a5a274b77ab6","ssdeep":"768:d+0AShQcI01DGSDGQ+Zxt9bDS1o25ZI0CYzD4pihcU3qYUb4izL7fBR9cic1W2zi:Q5r2fdkfSdrI0GeWJpXt9","tlshash":"7563b4da690ad0d98e5224ded433e516f4254e63ce6df163a23cdcc0746ef26888727b","first_seen":"2026-03-27T22:03:41.868269Z","last_seen":"2026-03-27T23:55:55.569396Z","times_seen":5,"resource_available":true,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"asterdex-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/4f69379355e98148.css","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://asterdex-update.xyz/","date":"2026-03-27T22:52:24.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asterdex-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:01:26 GMT","end":"Thu, 25 Jun 2026 18:01:25 GMT"},"fingerprint":{"sha1":"94:11:83:9D:AD:38:6F:90:22:BE:13:D7:20:AE:D4:C1:44:31:51:66","sha256":"7F:81:9C:1C:A1:04:2B:F6:84:86:52:D2:A0:AF:52:F2:98:BC:9B:D5:BA:8A:E2:2C:CA:7E:91:2C:98:A7:C6:43"}}},"request":{"raw":"GET /4f69379355e98148.css HTTP/1.1\r\nHost: asterdex-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asterdex-update.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 22:52:25 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 27 Mar 2026 18:39:06 GMT\r\netag: W/\"1081-19d3097c8c8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6wMKYfU8ju%2B0wcoZYhNO9dbh%2FP9N3Ve9XRDRys5X%2FiUfLheISjtjMmlgelah7n1UgWoRb7zHZwPNxSqqRr8Hv4Afs%2FVYssDhnNMgPhxBPubW5WpR2rcrWw8Os6wYSa2c1dwyvbOG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31f71dae5756ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4225,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (4177)","md5":"0276b8d94ef8334eb5c7b40a9fb114c0","sha1":"f15018c6b62e3685e4393eeff28586cb2ab5ead1","sha256":"caa7b215c821cf074c4417f2c2cd321e3ad40ec960924edd287f8e27e62b8a6a","sha512":"c45004ffef1447635cc65ebec953ffed52bd7d721187687ec629898d54c0cbb029c645a66099ad85509bbe72b930d885655192caeb866acb5cbc4b11a921c1d8","ssdeep":"48:sv9DP2352gmpCd8g0+71zH1f5LpSFSme+jeBhIOXIWI4mEuL/onA9/85Hg75+m54:TJToi95dKSme+jeHoaapU3Eyw0DZ","tlshash":"ad915630a3641c2791378f385784e6bd63e444618bd3892ae785ae3cdbfd8f5114e782","first_seen":"2025-09-18T18:13:43.845617Z","last_seen":"2026-03-27T23:55:55.586395Z","times_seen":28,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"asterdex-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asterdex-update.xyz/e8012caf56604ba7.css","fqdn":"asterdex-update.xyz","domain":"asterdex-update.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://asterdex-update.xyz/","date":"2026-03-27T22:52:24.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asterdex-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:01:26 GMT","end":"Thu, 25 Jun 2026 18:01:25 GMT"},"fingerprint":{"sha1":"94:11:83:9D:AD:38:6F:90:22:BE:13:D7:20:AE:D4:C1:44:31:51:66","sha256":"7F:81:9C:1C:A1:04:2B:F6:84:86:52:D2:A0:AF:52:F2:98:BC:9B:D5:BA:8A:E2:2C:CA:7E:91:2C:98:A7:C6:43"}}},"request":{"raw":"GET /e8012caf56604ba7.css HTTP/1.1\r\nHost: asterdex-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asterdex-update.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 22:52:24 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 27 Mar 2026 18:39:06 GMT\r\netag: W/\"491-19d3097c8e0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=okWIxFereRVC6Rd5NEe4HXHrq%2BdvU0AIWzdpDzgFUgokyZXg856kFmr5N9LZSTOIVAywRuXAviiFGLydMrGaE%2FTwXaovctrbOo0kyY0osxrOc1NOqFJxkmuSNmScUV55uq4SI2vn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31f71dae5856ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1169,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1121)","md5":"d3a5a0f39120c4926bd50998c1ef7408","sha1":"403ee0522773563d2ecfec0789938baf7385cc3c","sha256":"75928fd88004485fe637f691e7c3bf860515ba10d139fed580c11b71908d383b","sha512":"3286af3b7626ed74483ed8cb45efa28a84167f54b6dfcaf0ba6ef1bdb38cb12b9861a6d71778e5ff846c54ce35285bc963f540ecd2e67c24e5ecc9f265c0503a","ssdeep":"","tlshash":"88211190fa8a78bdfc67d10ca2e051ac420c9081f32f01d877552176a1c51c247fbb6f","first_seen":"2025-11-25T12:42:55.925721Z","last_seen":"2026-07-28T16:42:50.64606Z","times_seen":41,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"asterdex-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}