{"report_id":"1eabb214-f1b5-494c-b6e8-7125979950aa","version":6,"status":"done","tags":[],"date":"2025-08-11T22:32:12Z","url":{"schema":"https","addr":"project-mainnetapp.com/","fqdn":"project-mainnetapp.com","domain":"project-mainnetapp.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":0,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"project-mainnetapp.com/","fqdn":"project-mainnetapp.com","domain":"project-mainnetapp.com","tld":"com"},"title":"SystemAppMainNet"},"submit":{"url":{"schema":"https","addr":"project-mainnetapp.com/","fqdn":"project-mainnetapp.com","domain":"project-mainnetapp.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":0,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-15T22:32:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"project-mainnetapp.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"project-mainnetapp.com","ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"domain_registered":"2025-02-04","domain_rank":0,"first_seen":"2025-08-11T22:32:12.87358Z","last_seen":"2025-08-11T22:32:12.873581Z","alert_count":4,"request_count":4,"received_data":1456649,"sent_data":1850,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-06T15:14:12.503348Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"project-mainnetapp.com/assets/index-s9Wh3ZGw.js","fqdn":"project-mainnetapp.com","domain":"project-mainnetapp.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"885fed2ce3a3d09299dd20a39265d200","sha1":"87368447e9d93557b7c9c089d18ff7abe09f8dc0","sha256":"2779cb1c1f276abed069ea2fa2e3feba1677c7c82e0301c44e2c8e5158bb34a0","sha512":"20ffe4d3307bc67dce9696a235934b3d3a1c1415c5b016e3250f18cd9e69127b3300e66727e32a9af8753708a5ee133b754111fd13a5b2fbdc3723869e43befb","ssdeep":"3072:BxWAaZ57w2Y5ZNt6mQ66iTB3xVAtKkxvFah:7W9A2eZNt6uB3ONyh","tlshash":"6b043bdc70aafaab6ba316b5106f0507b23d1d175c0c8860b211fd9966f5006b1bbfed","size":174422,"data":"","first_seen":"2025-08-11T22:32:14.902177Z","last_seen":"2025-08-11T22:32:14.902177Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"project-mainnetapp.com/","fqdn":"project-mainnetapp.com","domain":"project-mainnetapp.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-11T22:31:49.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"project-mainnetapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Jul 2025 13:29:48 GMT","end":"Tue, 30 Sep 2025 14:29:43 GMT"},"fingerprint":{"sha1":"83:63:CE:FF:4C:AE:5C:90:2A:54:4F:87:0E:14:A1:EC:A8:BB:7E:2E","sha256":"DC:33:A6:D9:ED:16:E1:FE:89:38:BE:5A:CB:96:56:11:CD:DD:D2:39:6E:A1:D5:65:DF:EC:73:56:80:98:B8:A4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: project-mainnetapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 22:31:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-ray: 96db2f75bb17eb54-CPH\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"c3deffc3cb88a94703e9dcf7d8494ded\"\r\nlast-modified: Sun, 04 May 2025 11:41:09 UTC\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1257386,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (26633)","md5":"150e2fb8269e352b6b77bd0c508208a8","sha1":"d50a26dde3f6ad5d774a1497f8b5a92086e6e456","sha256":"968e561bd767e964355af736a766d08449f13793afea96d1e02c5b3a4e991df4","sha512":"8d1a7a5c29641ea67f5365e527d210b83509eceba4676af191819ae711829f2e041270a793ffd833b1228a079b4e2fcb4aaf6d49e35dcdbb7c74dd295b6a9127","ssdeep":"24576:OYKqzXgUH2fNJ3WWVtq0qihQP1bAGq0qihQP1bAJ2tay/taNEtaD:RSTwiG7wiGDh/W","tlshash":"fb251271e9abadae7517e15d33ebad555f60a0034105fea075ff22814f8a3306d33988","first_seen":"2025-08-11T22:32:14.899009Z","last_seen":"2025-08-11T22:32:14.899009Z","times_seen":1,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":134,"dns":69,"connect":26,"send":0,"wait":376,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"project-mainnetapp.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://project-mainnetapp.com/","date":"2025-08-11T22:31:50.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://project-mainnetapp.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 11 Aug 2025 22:31:50 GMT\r\ndate: Mon, 11 Aug 2025 22:31:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"eea55531c78093c1f80ece9ef6485401","sha1":"406db5cf6ad96dd0b4f7b40dab664c24605e63be","sha256":"b984ffbaf076dc36a9c279697c9eed1539c031769c94aba15ea9b0c4782ddb1a","sha512":"72b0b3950b215a114a026c075d34f79fcc75d58bb13ae230a6afb8130c1470f3ac78900168626b0f9cb88bedb0afa22feba4b00fedb86295d532d55a8618c5f6","ssdeep":"192:9xNktq346lDYxOLuq3/pl8xxruLq3iwllCxEtkq3RXlGV:/bGo4VuCI","tlshash":"93228c92402b9500ab971cc233cf7f3aaece50896485d1b96ff90cd59ceeda6436871d","first_seen":"2025-05-29T20:41:13.521716Z","last_seen":"2025-09-10T17:16:34.521529Z","times_seen":3000,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":123,"dns":1,"connect":28,"send":0,"wait":50,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"project-mainnetapp.com/assets/index-BcEfSY_I.css","fqdn":"project-mainnetapp.com","domain":"project-mainnetapp.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://project-mainnetapp.com/","date":"2025-08-11T22:31:50.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"project-mainnetapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Jul 2025 13:29:48 GMT","end":"Tue, 30 Sep 2025 14:29:43 GMT"},"fingerprint":{"sha1":"83:63:CE:FF:4C:AE:5C:90:2A:54:4F:87:0E:14:A1:EC:A8:BB:7E:2E","sha256":"DC:33:A6:D9:ED:16:E1:FE:89:38:BE:5A:CB:96:56:11:CD:DD:D2:39:6E:A1:D5:65:DF:EC:73:56:80:98:B8:A4"}}},"request":{"raw":"GET /assets/index-BcEfSY_I.css HTTP/1.1\r\nHost: project-mainnetapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://project-mainnetapp.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 Aug 2025 22:31:50 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 96db2f7b4e93ebc5-CPH\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"1307da6698c9ef07f8182d1f052cdaa3\"\r\nlast-modified: Sun, 04 May 2025 11:41:07 UTC\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: EXPIRED\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18273,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (18272)","md5":"1307da6698c9ef07f8182d1f052cdaa3","sha1":"3616f84978ffc55628d42f2607358bc206f4978d","sha256":"40bcd17c8d3170dca461cb0015e3033bc5134cd0b1ea7a7b673b937d58a44922","sha512":"aede3a3d6cca7af2563d24af701370410c1d84e9309675e3825f38e16eefe56e492c2e51b87154313d6ab44278accf511fca9fe5d2d6a3ed3139ae6aedf25a3a","ssdeep":"192:yDa3yx9W9JyQ9JyKA2zsfDsfzsfKLq4iVE1Vif/80jNcLKGgjG1CgeZNDhnX:DU0xLJL1snFjN5oeZNDJX","tlshash":"8382982e6b14143e6c6781f6d5d4ba9db22af1c0df3a56eaf8431111abd33f60d93608","first_seen":"2025-08-11T22:32:14.901067Z","last_seen":"2025-09-11T15:36:11.47922Z","times_seen":2,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"project-mainnetapp.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"project-mainnetapp.com/assets/index-s9Wh3ZGw.js","fqdn":"project-mainnetapp.com","domain":"project-mainnetapp.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://project-mainnetapp.com/","date":"2025-08-11T22:31:50.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"project-mainnetapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Jul 2025 13:29:48 GMT","end":"Tue, 30 Sep 2025 14:29:43 GMT"},"fingerprint":{"sha1":"83:63:CE:FF:4C:AE:5C:90:2A:54:4F:87:0E:14:A1:EC:A8:BB:7E:2E","sha256":"DC:33:A6:D9:ED:16:E1:FE:89:38:BE:5A:CB:96:56:11:CD:DD:D2:39:6E:A1:D5:65:DF:EC:73:56:80:98:B8:A4"}}},"request":{"raw":"GET /assets/index-s9Wh3ZGw.js HTTP/1.1\r\nHost: project-mainnetapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://project-mainnetapp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 Aug 2025 22:31:51 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 96db2f7b4e91ebc5-CPH\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"885fed2ce3a3d09299dd20a39265d200\"\r\nlast-modified: Sun, 04 May 2025 11:41:07 UTC\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: EXPIRED\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":174422,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37472)","md5":"885fed2ce3a3d09299dd20a39265d200","sha1":"87368447e9d93557b7c9c089d18ff7abe09f8dc0","sha256":"2779cb1c1f276abed069ea2fa2e3feba1677c7c82e0301c44e2c8e5158bb34a0","sha512":"20ffe4d3307bc67dce9696a235934b3d3a1c1415c5b016e3250f18cd9e69127b3300e66727e32a9af8753708a5ee133b754111fd13a5b2fbdc3723869e43befb","ssdeep":"3072:BxWAaZ57w2Y5ZNt6mQ66iTB3xVAtKkxvFah:7W9A2eZNt6uB3ONyh","tlshash":"6b043bdc70aafaab6ba316b5106f0507b23d1d175c0c8860b211fd9966f5006b1bbfed","first_seen":"2025-08-11T22:32:14.902177Z","last_seen":"2025-08-11T22:32:14.902177Z","times_seen":1,"resource_available":true,"data":null}},"time_used":880,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":826,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"project-mainnetapp.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"project-mainnetapp.com/assets/logo-Dnme5thx.png","fqdn":"project-mainnetapp.com","domain":"project-mainnetapp.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://project-mainnetapp.com/","date":"2025-08-11T22:31:51.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"project-mainnetapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Jul 2025 13:29:48 GMT","end":"Tue, 30 Sep 2025 14:29:43 GMT"},"fingerprint":{"sha1":"83:63:CE:FF:4C:AE:5C:90:2A:54:4F:87:0E:14:A1:EC:A8:BB:7E:2E","sha256":"DC:33:A6:D9:ED:16:E1:FE:89:38:BE:5A:CB:96:56:11:CD:DD:D2:39:6E:A1:D5:65:DF:EC:73:56:80:98:B8:A4"}}},"request":{"raw":"GET /assets/logo-Dnme5thx.png HTTP/1.1\r\nHost: project-mainnetapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://project-mainnetapp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 Aug 2025 22:31:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4594\r\ncf-ray: 96db2f81cbb5ebc5-CPH\r\ncache-control: public, max-age=0, s-maxage=300\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=7426\r\ncontent-disposition: inline; filename=\"logo-Dnme5thx.webp\"\r\netag: \"3a89443d80ea38770b6dd6c868ef4660\"\r\nlast-modified: Sun, 04 May 2025 11:41:07 UTC\r\nvary: Accept\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4594,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c78275288f99ca31710e295a846ad962","sha1":"fb782c537befceabeacc4d4d763a810eca5eb0e7","sha256":"c05bbfb545d10e5dd0f7ec81f4c712361dad688bd24a661f66f3c970ddd3dda2","sha512":"28720a3bda72ae5791f01f7cc215809a6ce206e3d85bcd25e6ba429c8a9aba4ab4c5d7108037d6383b21967ece48b4afbdf396cbe52e72af78edbe69858f3adf","ssdeep":"96:J7cvLhMcwWzzcwyo3oO040uSqz1vxOhP3TBgvpn30DGi3eM:JAvLhMcHvRX3oOx0uSExOLwp8/3h","tlshash":"1b918dd88e95f38847f2b9c6016442d76d719bd0cf0a251be99cbf297e4e7015ec218d","first_seen":"2025-08-11T22:32:14.903217Z","last_seen":"2025-08-11T22:32:14.903217Z","times_seen":1,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"project-mainnetapp.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}