{"report_id":"234f431f-484d-4742-9046-7fc931b48c67","version":0,"status":"done","tags":[],"date":"2026-07-14T17:45:18Z","url":{"schema":"http","addr":"crownspin-panel.xyz","fqdn":"crownspin-panel.xyz","domain":"crownspin-panel.xyz","tld":"xyz"},"ip":{"addr":"172.67.172.65","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"crownspin-panel.xyz/","fqdn":"crownspin-panel.xyz","domain":"crownspin-panel.xyz","tld":"xyz"},"title":"Crownspin — Streamer Payroll, On-Chain","dom":{"size":58064,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28117)","md5":"378a473d9e38e7da4524acde408f1d64","sha1":"d96ae6db94d31eb52197517d0a6356f2aeb852e1","sha256":"727dfafd0a6d7ef014b838b201dbdeda1ba952791aeb1413754b3f436dcac26a","sha512":"1ff99ad5bff059abe6b73491ece77f1027d4abf9e4bed48d2de6f4d44528253436ea88d828db09e8e60d2f5a4e49b02b77c53b9e5c6c17e76689c9ace938ca3e","ssdeep":"768:CN2Tz56UJoYgzQISoKPFEwI+fXoFoSJYDK25oIIfzC+BS8:O2TSYgzQIb+f4oK2yIIf/t","tlshash":"23432d193e2d3a387513a36456c1869c6207b70bde7e47a77cec135c8f8eb8435ad628","dom_hash":"domhash794465489b77cd5b188bdbfd881df1f4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"crownspin-panel.xyz","fqdn":"crownspin-panel.xyz","domain":"crownspin-panel.xyz","tld":"xyz"},"ip":{"addr":"172.67.172.65","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-18T17:45:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"crownspin-panel.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bsc-dataseed2.bnbchain.org","ip":{"addr":"54.220.41.248","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":4924478,"first_seen":"2023-11-12T11:28:58Z","last_seen":"2026-07-05T10:30:04.182935Z","alert_count":0,"request_count":1,"received_data":458,"sent_data":564,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"crownspin-panel.xyz","ip":{"addr":"104.21.96.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-30","domain_rank":0,"first_seen":"2026-07-14T17:45:24.465264Z","last_seen":"2026-07-14T17:45:24.465265Z","alert_count":3,"request_count":3,"received_data":27726,"sent_data":1438,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":1,"received_data":9576,"sent_data":587,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zen.claims","ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-05T10:30:02.141035Z","last_seen":"2026-07-05T10:30:02.141035Z","alert_count":15,"request_count":5,"received_data":3459569,"sent_data":2748,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"guard-api-b4ca.pages.dev","ip":{"addr":"172.66.44.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-07-14T17:45:24.468227Z","last_seen":"2026-07-14T17:45:24.468228Z","alert_count":0,"request_count":2,"received_data":45494,"sent_data":1097,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-12T22:19:35.511658Z","alert_count":0,"request_count":6,"received_data":123598,"sent_data":3398,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"crownspin-panel.xyz/6d4950e4d8.js","fqdn":"crownspin-panel.xyz","domain":"crownspin-panel.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4b42d6fa5d01e35c13c481f446b1698","sha1":"108e61ade2db51f026be29192a55d079c2f3d092","sha256":"92ca5838302d1120da2d28160f941221f6ef0d6fc38c8b213ac79cf718e9a37e","sha512":"3328bed0d4b76360bf7dd9815e16996db604afc4f4e02ff84baa34580a0e8d642ef8558a6b4206824eb9f77cc210b0722a979e25c3906f166c92806b489dd44a","ssdeep":"","tlshash":"7b21e0dbba42b8402785f7b6986f740d9767bd0edcda4428d4005ac23dbeb2fd012568","size":1416,"data":"","first_seen":"2026-07-14T17:45:28.791403Z","last_seen":"2026-07-14T17:46:36.076463Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspin-panel.xyz/","fqdn":"crownspin-panel.xyz","domain":"crownspin-panel.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8c00078efb14a537b6541ed3b10d30af","sha1":"284555258408c420be52892271d995b693bcbd03","sha256":"65c05d79558b3f4ab7f92c3849d250b5506490f4c00108a65afdf55433952987","sha512":"1179e60de57731d07ce153c640c10c0391afc8063d2d676acf4042df5b6d51cac4285bbef76fb83a71c333dba61c502fc97b906f8f080ef91e3abea92622c73f","ssdeep":"192:SbQQQok9EdwnT2b3pEWUnaC3eX/OvEfag1HGK2Tnf:Zrok9EdhbFjN+EUnf","tlshash":"6ae1492374c2b10e01c64b3e365917e1d066c91ada8ec00ef758eee8b4dd8d77a4c6b1","size":7346,"data":"","first_seen":"2026-07-14T17:45:28.798892Z","last_seen":"2026-07-14T17:45:28.798892Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspin-panel.xyz/","fqdn":"crownspin-panel.xyz","domain":"crownspin-panel.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"99670ab931dc13ca20f1da322cdb1da7","sha1":"42a33c9a6d2719f4666339f5c3e82a2a7e7171df","sha256":"a1e304b9947158a63f1ec65430abe469e7d4c044799de302c09df4dc5584ea0f","sha512":"a6fc8040849ae1d574622a911a57670791ba9c16fe4431c71b69a3e19bfae69919a73f69bc14843731505d21023051363bd6949f0f5e3314a05507a6265225ed","ssdeep":"24576:yCEdyTgXCJcN+K4zC+lYp4+xVwW1wneDRohPS0qHtoSTr+V5kGR/uB2pv/TK6LTX:yfD+X1LrzHrH5LGBI7FpkZ3GqY","tlshash":"bbf5f1994c33427567cc02f86c5f0fc83a982bdca098a32f5475e0b6a7c66bf50d6976","size":3455897,"data":"","first_seen":"2026-07-14T17:45:28.816748Z","last_seen":"2026-07-14T17:46:36.08074Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspin-panel.xyz/","fqdn":"crownspin-panel.xyz","domain":"crownspin-panel.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"39911037ce9327df9baa15d34be75876","sha1":"2451cd607ab218999fb59332d28f31eaf9835b52","sha256":"6733067ca033f11e9fcc264eb19d7995fabac268a4aa2baca138065d6a7d6d2f","sha512":"2b53df7c221990deb95c0af335e672a4410cb03a7bfcb6aaa7a7ede5ea608a90c35045f1a9bd37ede8a73870f76406d0990ca1f7ebc48521630150a9d49c215d","ssdeep":"49152:wdj5XE88k4vKfLlCUpGzIzzlLdLLkaZ/4cSof9moLVVgpAWfx0qOXkMc62W4f6Xp:8naYrtF/lH/qaWWE3M","tlshash":"b0566c49b760bc36025365da887a3014f2343f6e7518c0e47e9ca8df2b96ed9d0b6b35","size":5920759,"data":"","first_seen":"2026-07-14T17:45:28.824101Z","last_seen":"2026-07-14T17:46:36.082179Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guard-api-b4ca.pages.dev/?host=https%3A%2F%2Fcrownspin-panel.xyz","fqdn":"guard-api-b4ca.pages.dev","domain":"guard-api-b4ca.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"030125497fcc7b8de5dbaeada99c12ae","sha1":"1eeb65c627fb6f825d50b78ea53184a393e61b52","sha256":"2b7537ddbe256bd2b435101e4f8076f4cc225548342ae58a1b4861a6c494a7f2","sha512":"c9d8b59527527c6f24b931e622a756936e5b87021ba851b28c9833a51c6d8ba036f10b9c810cec75f1995dfc26aee4e47d0e5248ae340c4dc1e5daf722b30804","ssdeep":"","tlshash":"310128a54a9700b108f7dae63f5f3f12776201460084c5103ebde7aaaf23d5b84199c4","size":733,"data":"","first_seen":"2026-06-11T06:03:26.798628Z","last_seen":"2026-07-17T08:28:38.499704Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guard-api-b4ca.pages.dev/assets/index-BFMgf9ym.js","fqdn":"guard-api-b4ca.pages.dev","domain":"guard-api-b4ca.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56294c73a80b3ddb73a406da7988fb34","sha1":"e43f2383d3f90812968b75f5179f4e9d50c90c8f","sha256":"e91887a772df8a5d107f9236ea55744971098342b25df684c157667521439f60","sha512":"94a648bf5058b6adf1185269ba9136b9e07021048ae095ac23c3c3d4b54a9fc6a7906f34d8af535ad76c96e7c1045175f1ff1e3dceae33f85a49b29e56628b9f","ssdeep":"768:2EmJl42/wD5Uk6Od+ghdKIx+Qoydzje4dvE7OYbN0jMyppQanIMI8:2Em82Idd+g3K/QoydG4UrbN0jMyrNbI8","tlshash":"7d13c09c3972224102ad1fe82e9f59c86e1ccfe1a55c986fc022c091df6a1ab14efdd5","size":42907,"data":"","first_seen":"2026-07-14T17:45:28.777315Z","last_seen":"2026-07-14T17:50:59.788254Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guard-api-b4ca.pages.dev/?host=https%3A%2F%2Fcrownspin-panel.xyz","fqdn":"guard-api-b4ca.pages.dev","domain":"guard-api-b4ca.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d42750fda9fed4d066f571a103c1f9f2","sha1":"850b5157a9915cc881774a8a6fc719ff16423fa7","sha256":"69f32fbd96c5f048587d9d15d82bbc5bd002446f80a78bc8aebd38822e51f912","sha512":"fd2372d735dd0f1d71677f5b524b0e26f0f585a04e0e13717b39ac3d49047d3e714038d70882215f0a2fa60d7410ff2d564916cff3597e86397ce903696598a6","ssdeep":"768:GWgxSgcPsNXCXWPrtfbqBSENokm+vliE8508Tggif7mP+OmnDhC6xQHo+WjWkhEV:GRfcPsNOB82yQL8xN","tlshash":"d733a66062d07d94274b5ff7332f7ae1f85f088e79644d8fc254bc94a6aa21bd6e0930","size":50716,"data":"","first_seen":"2026-07-14T17:45:28.831671Z","last_seen":"2026-07-14T17:50:59.847592Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspin-panel.xyz/","fqdn":"crownspin-panel.xyz","domain":"crownspin-panel.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b202cf95f3d409300709b301c37be347","sha1":"4eff44049d27f95ec0af1754aab0e159e6b5ff84","sha256":"cfb173529dcb371c38cdfdc32216704c1e4879990c70be3e5206ab27186f7175","sha512":"26fa573f343c4772de209ff8e82ca519e5fe6f1abb14e0dddda53c7010b9303201a7f13424f6021fbc544ea7ebe8a763c9e2b9457116cb323e723fd232af6548","ssdeep":"","tlshash":"51e020ea6b3214f25b5b7366e65b0351347190013407845c7df910c98fe2d6443c25fd","size":347,"data":"","first_seen":"2026-07-14T17:45:28.835116Z","last_seen":"2026-07-14T17:46:36.084354Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zen.claims/x7k/gc","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crownspin-panel.xyz/","date":"2026-07-14T17:44:51.162Z","timestamp":1784051091162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"OPTIONS /x7k/gc HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://crownspin-panel.xyz/\r\nOrigin: https://crownspin-panel.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 17:44:51 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dclyOpADm6nm0zdG%2Ff9sqOmDytQeSt7uO2Ryl6M0SqTGs5hlEXjT%2Bi8Rk7w3F3idFJYmfnjQGs%2B9MTbxPoqqqBUnFsY%2FqoxEF45V7AzhSX7JIxCBYX0%2FEfqCwuj5\"}]}\r\ncf-ray: a1b2567878bdb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":666,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T17:18:38.641517Z","times_seen":17343882,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":80,"connect":28,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/api/fp","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crownspin-panel.xyz/","date":"2026-07-14T17:44:53.471Z","timestamp":1784051093471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"OPTIONS /api/fp HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-worker-hint\r\nReferer: https://crownspin-panel.xyz/\r\nOrigin: https://crownspin-panel.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 17:44:53 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cVsl7jMG7i3iIxe7a9Y2%2FgcgE5%2By9cWWKeqJbt0pRLlD8z%2BwXa9xeYUljD12zkJ43YV%2BKqNi88kqycbaeeWSkNUkF2VlmYillkZuEaXuld4L3kKaqdaMxt1e5Id5\"}]}\r\ncf-ray: a1b256863997b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":664,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T17:18:38.641517Z","times_seen":17343882,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"guard-api-b4ca.pages.dev/assets/index-BFMgf9ym.js","fqdn":"guard-api-b4ca.pages.dev","domain":"guard-api-b4ca.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://guard-api-b4ca.pages.dev/?host=https%3A%2F%2Fcrownspin-panel.xyz","date":"2026-07-14T17:44:53.536Z","timestamp":1784051093536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guard-api-b4ca.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 13:52:24 GMT","end":"Sun, 11 Oct 2026 14:50:55 GMT"},"fingerprint":{"sha1":"08:31:E0:9A:C4:DE:4C:97:3A:3C:15:EC:09:2E:6D:9F:FA:23:C1:E4","sha256":"09:51:8C:5C:07:AA:86:21:E5:E7:BC:F8:84:2F:A5:0F:B3:EB:C9:A7:F9:71:12:FD:CC:D1:47:09:C1:EE:D5:A8"}}},"request":{"raw":"GET /assets/index-BFMgf9ym.js HTTP/1.1\r\nHost: guard-api-b4ca.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://guard-api-b4ca.pages.dev/?host=https%3A%2F%2Fcrownspin-panel.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 14 Jul 2026 17:44:53 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FCBs9s3XiQ8ZUTEq3MOxZ0pkR8zomjp3vto8ky6dCIyLTgEppFAwgiX3iLkqKASXgLOC9%2F%2B5TIXdePq%2F6rGgIm9QOhwfe1z3EmGJBfdyKtQLiINknDxCIHDHs0LH1J4DXt0lsXDBlbK7RAw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f607c59b23e15d664fe420da215b20a1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1b2568699450daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42907,"size_decoded":31634,"mime_type":"application/javascript","magic":"data","md5":"56294c73a80b3ddb73a406da7988fb34","sha1":"e43f2383d3f90812968b75f5179f4e9d50c90c8f","sha256":"e91887a772df8a5d107f9236ea55744971098342b25df684c157667521439f60","sha512":"94a648bf5058b6adf1185269ba9136b9e07021048ae095ac23c3c3d4b54a9fc6a7906f34d8af535ad76c96e7c1045175f1ff1e3dceae33f85a49b29e56628b9f","ssdeep":"768:2EmJl42/wD5Uk6Od+ghdKIx+Qoydzje4dvE7OYbN0jMyppQanIMI8:2Em82Idd+g3K/QoydG4UrbN0jMyrNbI8","tlshash":"7d13c09c3972224102ad1fe82e9f59c86e1ccfe1a55c986fc022c091df6a1ab14efdd5","first_seen":"2026-07-14T17:45:28.777315Z","last_seen":"2026-07-14T17:50:59.788254Z","times_seen":9,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crownspin-panel.xyz/","date":"2026-07-14T17:44:50.919Z","timestamp":1784051090919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crownspin-panel.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 10:41:35 GMT\r\nexpires: Mon, 12 Jul 2027 10:41:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 198195\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-07-18T16:58:31.761982Z","times_seen":23739,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":2,"connect":29,"send":0,"wait":34,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/anton/v27/1Ptgg87LROyAm3Kz-C8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crownspin-panel.xyz/","date":"2026-07-14T17:44:50.921Z","timestamp":1784051090921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/anton/v27/1Ptgg87LROyAm3Kz-C8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crownspin-panel.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 02:55:24 GMT\r\nexpires: Fri, 09 Jul 2027 02:55:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 485366\r\nlast-modified: Mon, 15 Sep 2025 16:32:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":18612,"size_decoded":19425,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18612, version 1.0","md5":"912c3c9f2621e1b6f8bc0b6c8c1dde27","sha1":"b9beea08045a9cbadc819734ff402abe8c081bfb","sha256":"d0fa07ff63dd60cbc0e2f58e29c802dca2a5ae0276c999f59c6111ab7bbaec3b","sha512":"4e863160381eef28a10e3a7c51ccc6b23cd3f56ebea6612ecdbbf5fd89304f54d2254e3e9078fa5ddabc433764e174d45fd1885841135fb65f33d20d56195fb8","ssdeep":"384:CAssOmx/NqZjQxV2TegKmq8vYxp1tpubA6TyDMHM+OGD5J:C7mx/NqZjQxVYNKPnZ6TyDMHM+bVJ","tlshash":"7182e092cc6c880fd48d14ee865171b76fc96fe10221feec9826e911a19ee09d6d01be","first_seen":"2025-09-17T01:49:45.641161Z","last_seen":"2026-07-18T16:39:58.929589Z","times_seen":6314,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":29,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"54.220.41.248","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crownspin-panel.xyz/","date":"2026-07-14T17:44:50.933Z","timestamp":1784051090933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:51:35:3C:6A:BD:00:80:7E:C2:BB:61:75:B1:0A:D8:28:8C:62:89","sha256":"3E:F5:AA:B6:AF:7A:6B:4C:8C:99:02:80:C8:8D:C7:A8:56:7D:40:10:01:15:9D:68:B3:94:4D:05:F5:41:C3:94"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://crownspin-panel.xyz/\r\nOrigin: https://crownspin-panel.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Tue, 14 Jul 2026 17:44:51 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":458,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T17:18:38.641517Z","times_seen":17343882,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":0,"dns":26,"connect":31,"send":0,"wait":33,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/api/fp","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crownspin-panel.xyz/","date":"2026-07-14T17:44:53.468Z","timestamp":1784051093468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"POST /api/fp HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nX-Worker-Hint: f73ec1956ceac45b54b711848acc23ed\r\nContent-Length: 1316\r\nOrigin: https://crownspin-panel.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspin-panel.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1316,"data":"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"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 17:44:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yaw8G%2B2qfs%2BB6it%2FqMMZ5ChiaujaZjE4ex2jIw4rbPqfuJo8Vbi7tLSMmsjUmlLq47p%2ByTYVqJz6HGWqvkSVf%2Bd%2BsxLm%2BQ6AKEwDjk%2F0jQuUYomqnuvdWwwVRhy9\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\ncf-ray: a1b25686799cb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":969,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7199c406929915f79d8d6ffca2bac494","sha1":"30dd8f84c3355641f1ed3cf74f7d809ae10bed8e","sha256":"23e35987a88e39bbcf1176af962ed766104a9b053f6044e6e5890c7f00c62799","sha512":"2d80262273000dfe8c461bcdcd7f313755fed735711e3f9652ddf50d8947f64ade415f0eb60c01757b5d2ce15b2e4c9493dd6190fb2e0dae0c5324c62e4d0d5c","ssdeep":"","tlshash":"eed0950b8b4c513e00dd2f36c085e638595c04f8f41135ed802f5f005463075833ece1","first_seen":"2026-07-14T17:45:28.781782Z","last_seen":"2026-07-14T17:45:28.781782Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gf","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crownspin-panel.xyz/","date":"2026-07-14T17:44:51.674Z","timestamp":1784051091674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"OPTIONS /x7k/gf HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://crownspin-panel.xyz/\r\nOrigin: https://crownspin-panel.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 17:44:51 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IiM9CR6EE3HpkNChnhCuanr9f36dVEJOlxm2J5%2BZ7dd0P9FMo7tmmu4a0c0V4H7pF9sMimvZZzHkXix%2Bg%2BvDafbRotQoejADK3QKoU3JQrrzAqHPcIKS7aJQ3utj\"}]}\r\ncf-ray: a1b2567af8f3b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":662,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T17:18:38.641517Z","times_seen":17343882,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"guard-api-b4ca.pages.dev/?host=https%3A%2F%2Fcrownspin-panel.xyz","fqdn":"guard-api-b4ca.pages.dev","domain":"guard-api-b4ca.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://crownspin-panel.xyz/","date":"2026-07-14T17:44:53.276Z","timestamp":1784051093276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guard-api-b4ca.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 13:52:24 GMT","end":"Sun, 11 Oct 2026 14:50:55 GMT"},"fingerprint":{"sha1":"08:31:E0:9A:C4:DE:4C:97:3A:3C:15:EC:09:2E:6D:9F:FA:23:C1:E4","sha256":"09:51:8C:5C:07:AA:86:21:E5:E7:BC:F8:84:2F:A5:0F:B3:EB:C9:A7:F9:71:12:FD:CC:D1:47:09:C1:EE:D5:A8"}}},"request":{"raw":"GET /?host=https%3A%2F%2Fcrownspin-panel.xyz HTTP/1.1\r\nHost: guard-api-b4ca.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspin-panel.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 14 Jul 2026 17:44:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wYEIoMtVaWBNOqoYYxTXZusL9vfx11z2B1nKNQl0tZOKzz8tsEzPGhsC20%2BiMlZj3kff94YSepVmtKoZDy4e6mGdGhVnLqTwbD0%2B0oGJM5%2FluIt8jEsdkPD8Dvy%2F6CgWOUYIrnJMsGagxuc%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1b256852e61b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1086,"size_decoded":1163,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"dccd9e9ab7c59b0179197f3066815b4f","sha1":"c88f2217ef9b20f9fcebe05f1e532030e9936957","sha256":"9c7e96b7633e4aaeae6e0eab538aa4b370ef13241193e04e43fb4a34283b8b3a","sha512":"20f8f4962982e0e46980d2ba556c753ccefc9e5817b2f2cad9911d8489272be73dd95527cb5c5dc7a48fbc5cf189e511d5d2120e0584c9c44b49cc16cdf97ae3","ssdeep":"","tlshash":"69118e450d57407115f38a963b5f7e05a666924640c4c5002ffae2a7af53e4b8805ad8","first_seen":"2026-07-14T17:45:28.783981Z","last_seen":"2026-07-14T17:50:59.77625Z","times_seen":9,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":7,"connect":1,"send":0,"wait":196,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspin-panel.xyz/","fqdn":"crownspin-panel.xyz","domain":"crownspin-panel.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-14T17:44:50.200Z","timestamp":1784051090200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crownspin-panel.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 21:11:17 GMT","end":"Wed, 30 Sep 2026 22:11:11 GMT"},"fingerprint":{"sha1":"A9:1E:3A:0A:E3:CA:05:26:6B:E3:11:6B:F6:84:61:84:58:6D:78:AE","sha256":"3C:99:38:77:6C:E4:E8:1D:41:22:3D:4F:18:FF:9D:CE:71:AD:A6:B0:E0:8A:94:8B:F5:79:A7:D0:F9:AF:CB:60"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: crownspin-panel.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 17:44:50 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c6XHTkWHg17lW6MTdrxi1lw%2Br062dpkKFwxKW7Ai6FkN%2FwuqCXxRvzQpSeGanRZhvgpzSb7F2Q0MuUcL5pzahy4lKNOhSoU3nvR%2BhY8LmMielcWb85PKfIocc%2FaekdMjEdSw9Jv%2F\"}]}\r\npriority: u=0,i\r\nlast-modified: Fri, 03 Jul 2026 00:44:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\npermissions-policy: camera=(), microphone=(), geolocation=(), camera=(), microphone=(), geolocation=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1b256724d1a5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23233,"size_decoded":7881,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (318), with CRLF line terminators","md5":"ae078df1cf06e22e95e299c03e66c0bd","sha1":"da2b19aae7f131c6ba28a90047c0a1776b4c4749","sha256":"d384d2d8599a0b7ee4feb6abf8f14047b1c02182e15ce85545ec2db052e95073","sha512":"84f50ddd4b61b03698c126576781ddd120b39d6f6c19b3f9ad439e797bfbc35fc5b5764892671550867cb6d3e4d74804216b0273cf98a402f75ae1e22c293446","ssdeep":"384:yqfpVI+9NLsHotbcnBjWV3ngoOSkdBD4X2II4qttXLCuY:bnClTdBG2II4qLZY","tlshash":"18a296306681002675b7e195bf9687aef9a4d403c503036932ed9397cff7ee2865fa84","first_seen":"2026-07-14T17:45:28.78639Z","last_seen":"2026-07-14T17:46:36.067533Z","times_seen":2,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":70,"connect":15,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"crownspin-panel.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Anton\u0026family=Space+Grotesk:wght@400;500;600;700\u0026family=Space+Mono:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspin-panel.xyz/","date":"2026-07-14T17:44:50.744Z","timestamp":1784051090744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=Anton\u0026family=Space+Grotesk:wght@400;500;600;700\u0026family=Space+Mono:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspin-panel.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 14 Jul 2026 17:44:50 GMT\r\ndate: Tue, 14 Jul 2026 17:44:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8892,"size_decoded":1376,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6266b5a788c2c61fa121c357fc37b0fb","sha1":"d374daee68d30e674e7ffac19eee2589a2425f75","sha256":"46889617e8ea5783d6de2230f20ad6952f28577bb7f1211320992aef6b755a1b","sha512":"f5447ed416085a9c12b2983caec0c3d95158353bc5324ac39efce40ff8ded356b061c5da860cb968c4875e839e8c99b531ab493cf5e74ed713252c5cbcb057fd","ssdeep":"192:cqGhlSx/GiZC4GRZfRG4ZYiG/ZV6FY7sbBxx:c2DgR+be","tlshash":"d5022092006ba500eb575cc227cebe32ee8ea0556051d9396ffe18d8ed9bc316315b2d","first_seen":"2026-07-14T17:45:28.788992Z","last_seen":"2026-07-14T17:46:36.075517Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":32,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspin-panel.xyz/6d4950e4d8.js","fqdn":"crownspin-panel.xyz","domain":"crownspin-panel.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspin-panel.xyz/","date":"2026-07-14T17:44:50.748Z","timestamp":1784051090748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crownspin-panel.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 21:11:17 GMT","end":"Wed, 30 Sep 2026 22:11:11 GMT"},"fingerprint":{"sha1":"A9:1E:3A:0A:E3:CA:05:26:6B:E3:11:6B:F6:84:61:84:58:6D:78:AE","sha256":"3C:99:38:77:6C:E4:E8:1D:41:22:3D:4F:18:FF:9D:CE:71:AD:A6:B0:E0:8A:94:8B:F5:79:A7:D0:F9:AF:CB:60"}}},"request":{"raw":"GET /6d4950e4d8.js HTTP/1.1\r\nHost: crownspin-panel.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crownspin-panel.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 17:44:50 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a47047a-588\"\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 03 Jul 2026 00:38:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\npermissions-policy: camera=(), microphone=(), geolocation=(), camera=(), microphone=(), geolocation=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=brwIs3H620sWCtktkwSKMN4e3TbCBxPunr4r0Or0gC13PxI1yWcvHibpA%2Frk9kkiPYx2eZgaLr0nVQZX7k2GhPziusPiavjFjQYhfn2m91XfeIEPIxjFDW43uFwi9NTsKjos2qyj\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1b256752d655695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1416,"size_decoded":1722,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1416), with no line terminators","md5":"e4b42d6fa5d01e35c13c481f446b1698","sha1":"108e61ade2db51f026be29192a55d079c2f3d092","sha256":"92ca5838302d1120da2d28160f941221f6ef0d6fc38c8b213ac79cf718e9a37e","sha512":"3328bed0d4b76360bf7dd9815e16996db604afc4f4e02ff84baa34580a0e8d642ef8558a6b4206824eb9f77cc210b0722a979e25c3906f166c92806b489dd44a","ssdeep":"","tlshash":"7b21e0dbba42b8402785f7b6986f740d9767bd0edcda4428d4005ac23dbeb2fd012568","first_seen":"2026-07-14T17:45:28.791403Z","last_seen":"2026-07-14T17:46:36.076463Z","times_seen":2,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"crownspin-panel.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gf","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crownspin-panel.xyz/","date":"2026-07-14T17:44:51.672Z","timestamp":1784051091672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"POST /x7k/gf HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://crownspin-panel.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspin-panel.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"f9VYMwKAxhuax8hMoHgn\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 17:44:51 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kd6wQgh%2FiEaqqqlWn%2FA9e9JBvCkWd%2Fx%2FBoFWpfe%2FPZ32%2F8PdSywNIellj3s0QIL2LDwHn2HwQXL7422DtLpxYpgd3JlXFgdjwlRflUC2ljNZuIdRx1vXwrgyBw6I\"}]}\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\ncf-ray: a1b2567b38f6b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3455871,"size_decoded":2653465,"mime_type":"application/javascript","magic":"data","md5":"fa7c779ce68663c6fa364c2d9748daf1","sha1":"670392dc690a980eaa915f7f713b9cdac4198e9e","sha256":"1fdd184b0ee6aef5def97f4996dc49f88d8e7377bde37a8d5d255f66a6a397f3","sha512":"bc831fb904de31176751004a90cf69e03c11464893b2c1b1d42cd412d1d5409754f662709a61e5bbcfa6c78ee70a4c232ef10d1a2d21a7b23a552cd4a234f546","ssdeep":"12288:ZCFTzadkFtW8hN5sJXCJcVIE0A+CAhinJZMzef+BJkw/pepTwRoEvCWqxyM4kj8l:ZCEdyTgXCJcN+K4zC+lYp4+xVwW1wnN","tlshash":"2635f1ad4833426596cc07b86c1f0bc83ea52bdca498a72f5475d0b67bd26ff10c7866","first_seen":"2026-07-14T17:45:28.793625Z","last_seen":"2026-07-14T17:45:28.793625Z","times_seen":1,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":177,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crownspin-panel.xyz/","date":"2026-07-14T17:44:50.923Z","timestamp":1784051090923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crownspin-panel.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 10:41:35 GMT\r\nexpires: Mon, 12 Jul 2027 10:41:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 198195\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-07-18T16:58:31.761982Z","times_seen":23739,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":46,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacemono/v17/i7dPIFZifjKcF5UAWdDRYEF8RQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crownspin-panel.xyz/","date":"2026-07-14T17:44:50.925Z","timestamp":1784051090925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/spacemono/v17/i7dPIFZifjKcF5UAWdDRYEF8RQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crownspin-panel.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16520\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 04:47:59 GMT\r\nexpires: Fri, 09 Jul 2027 04:47:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 478611\r\nlast-modified: Wed, 25 Jun 2025 16:58:01 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":16520,"size_decoded":17333,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16520, version 1.0","md5":"049dfc5919c21896a13296775d80b8c0","sha1":"e2ee2d370f0d46ca5a113126da3b58e16240fdec","sha256":"fb4a81a2d0a893e5c38c394a7e716a1cef0b24610a0af49c96f6d529bd66bf2b","sha512":"ffe3d5afd5a536cb2e78212c39163f16c254fbddca8c586ad99f0f06d27dad6af5b664d523909a0e3c5ed10d239e7f0fd96f2b2970163b23082f8be15a62cea2","ssdeep":"384:KWnkX//eTuOOsUGC9voO/fHl7exLa4Mp2e0+9NxHg+UM:KSm/GTuPsUG8vnnl7aL2pJHg+UM","tlshash":"0272d148764753bdec6bc86ce1e9ebd2e835b934c83c428fc858d8152161a53e86e34c","first_seen":"2025-02-19T12:54:04.599046Z","last_seen":"2026-07-18T17:03:07.023729Z","times_seen":2942,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":22,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacemono/v17/i7dMIFZifjKcF5UAWdDRaPpZUFWaHg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crownspin-panel.xyz/","date":"2026-07-14T17:44:50.926Z","timestamp":1784051090926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/spacemono/v17/i7dMIFZifjKcF5UAWdDRaPpZUFWaHg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crownspin-panel.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16724\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 12:57:44 GMT\r\nexpires: Mon, 12 Jul 2027 12:57:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 190026\r\nlast-modified: Wed, 25 Jun 2025 16:58:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":16724,"size_decoded":17537,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16724, version 1.0","md5":"e5e908997a453e21f2fe41cb72e186d2","sha1":"d0c504bd8f896d39883e0ddfc81c511af526656b","sha256":"2d46bd159b53f55c41167a4f1540a074649464194fd1e416f5b4694a6c0f282c","sha512":"dd6bf730a4b16a50b0977b2d8efe865be0805da41c50aa86d39b4892c79db91f354e91b1a2ce4198e4b58e26752d4e9a06e33e9911e63f2df2e004d610685cd8","ssdeep":"384:ZRyfvfqIrJOZA3s5dQsQLR7JIWapcGsukRYRv5fpD:ZUXfNs5IRQ3zkCZ5fpD","tlshash":"8f72d0b8fe064610c2542fbf06209de1831895fe192e4f24f8aa74ac4f1715e3f117ba","first_seen":"2025-02-19T12:54:04.600022Z","last_seen":"2026-07-18T17:03:07.059267Z","times_seen":1938,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crownspin-panel.xyz/","date":"2026-07-14T17:44:50.928Z","timestamp":1784051090928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crownspin-panel.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 10:41:35 GMT\r\nexpires: Mon, 12 Jul 2027 10:41:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 198195\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-07-18T16:58:31.761982Z","times_seen":23739,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":41,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspin-panel.xyz/favicon.ico","fqdn":"crownspin-panel.xyz","domain":"crownspin-panel.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspin-panel.xyz/","date":"2026-07-14T17:44:51.138Z","timestamp":1784051091138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crownspin-panel.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 21:11:17 GMT","end":"Wed, 30 Sep 2026 22:11:11 GMT"},"fingerprint":{"sha1":"A9:1E:3A:0A:E3:CA:05:26:6B:E3:11:6B:F6:84:61:84:58:6D:78:AE","sha256":"3C:99:38:77:6C:E4:E8:1D:41:22:3D:4F:18:FF:9D:CE:71:AD:A6:B0:E0:8A:94:8B:F5:79:A7:D0:F9:AF:CB:60"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: crownspin-panel.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crownspin-panel.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 17:44:51 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\npermissions-policy: camera=(), microphone=(), geolocation=(), camera=(), microphone=(), geolocation=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UQD%2F1LKJYAc7xqLvkEzW6dav3rq8HHHdSdaPLHfZjSnqti0X1UiP6J8QGNw2X6EM3YwvdRQ%2BshoENjWoIoG%2BByWkSnsZq5iBXcVgXwm0mBUm72%2BgukXcZY5b2aBYUhubfSNXi75G\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b256779da55695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":1057,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-18T17:16:09.811281Z","times_seen":541201,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"crownspin-panel.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}