{"report_id":"252ac557-b955-4a3b-a591-5cd71e024e1e","version":6,"status":"done","tags":[],"date":"2026-03-28T01:50:20Z","url":{"schema":"https","addr":"reefassetholm-system.cyou/","fqdn":"reefassetholm-system.cyou","domain":"reefassetholm-system.cyou","tld":"cyou"},"ip":{"addr":"104.21.71.239","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"reefassetholm-system.cyou/","fqdn":"reefassetholm-system.cyou","domain":"reefassetholm-system.cyou","tld":"cyou"},"title":"Reefassetholm | Marine Conservation Hub | Official Website","dom":{"size":131168,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20259)","md5":"8205a6a98bdab8986d34b57f01d98469","sha1":"5ac00c557c055a5ab2ae348b3774f022ce425883","sha256":"41ca33241ad002209e8ce62fa0a4094547b3ffcee379123b5bdb9156d2a64fc0","sha512":"7aa59aaab7ead3ab8dab377d95876b4771954efda0f93ecb557a144f8cae5a0b739ee1e4e870adb7ebbc552e5efbbc133e9857b1fb09ac8e18211fe5506d1494","ssdeep":"1536:xUL7A/sHOr7sOy2+UBH4cLIRPCikFKZzwMylwOACOw3v2PuMHKiC:5fID1TdC4PuMql","tlshash":"96d34c35d4cf043b192201cb758b372b52a8c2eeff9194da716ce12c17d5b625239bae","dom_hash":"domhash77a24614e011d19466ae5313190315d1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"reefassetholm-system.cyou/","fqdn":"reefassetholm-system.cyou","domain":"reefassetholm-system.cyou","tld":"cyou"},"ip":{"addr":"104.21.71.239","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T01:50:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"reefassetholm-system.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"reefassetholm-system.cyou","ip":{"addr":"172.67.172.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-02","domain_rank":0,"first_seen":"2026-03-27T21:44:57.84246Z","last_seen":"2026-03-27T21:44:57.84246Z","alert_count":9,"request_count":9,"received_data":187146,"sent_data":4200,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"ClientJS:0.2.1","description":"ClientJS is a JavaScript library for generating browser fingerprints, exposing all the browser data-points.","website":"https://clientjs.org","common_platform_enumeration":"","icon":"ClientJS.png","categories":["JavaScript libraries","Browser fingerprinting"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":488,"sent_data":501,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-22T22:34:23.857339Z","alert_count":0,"request_count":1,"received_data":55964,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-22T22:31:48.48691Z","alert_count":0,"request_count":2,"received_data":83359,"sent_data":1044,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflare.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":0,"first_seen":"2026-02-26T11:11:38.239945Z","last_seen":"2026-03-27T21:44:58.336343Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":866,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"reefassetholm-system.cyou/","fqdn":"reefassetholm-system.cyou","domain":"reefassetholm-system.cyou","tld":"cyou"},"ip":{"addr":"172.67.172.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0dd51bf58e18b1db566ad93f19e506c7","sha1":"906ba56d8a88a8505369ff5549f2498ae88b859c","sha256":"9345d27493504c8c9bbd19e5e0aba16099cfa6903089479811ad93ad99bdd543","sha512":"8faed9bc6f1ebac530c5e3ef10c8f2f96cf5c96030cf85bbfb2dd63abd98f60d170c03a1c392458882bac2d8a6113faceb9c516ff0e40e7c86403be22eb6c8f9","ssdeep":"","tlshash":"c860003030003cc3c00c0000c0000030c030c030c0003c000c00000fc3300c00000030","size":14,"data":"","first_seen":"2026-03-05T09:10:23.48722Z","last_seen":"2026-03-28T01:50:21.648786Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reefassetholm-system.cyou/","fqdn":"reefassetholm-system.cyou","domain":"reefassetholm-system.cyou","tld":"cyou"},"ip":{"addr":"172.67.172.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0abc945169649a8755ed8b3457049185","sha1":"05c763d704f34daa38c5d365b9a886eb056874a1","sha256":"f1cf82ef8ce5deb3fa3b2e8613ac356bbbbd8470f921956c940c1bb9590284de","sha512":"675195012e901c3d68031f8f986d81469a11e0cd77bf8eca022b438650b1f341659ba0fe56fd4f94ad7f7bec17b57f4de554d4033de6d6a5224b6354122e0d8d","ssdeep":"","tlshash":"71d0a75de620a76616f29130522ffb1259b341d70d409950491ade40ea38f8e92368ef","size":223,"data":"","first_seen":"2026-03-27T21:45:01.945196Z","last_seen":"2026-03-28T01:50:21.6498Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reefassetholm-system.cyou/","fqdn":"reefassetholm-system.cyou","domain":"reefassetholm-system.cyou","tld":"cyou"},"ip":{"addr":"172.67.172.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"58831d1e62fe810505d7beebf26e8a25","sha1":"ca6210e27ea2a721dde7cecb4378712dacac8581","sha256":"7a923300adcce6174841c53483774d990afde64369c390c3f628d6b3cd7de53c","sha512":"39249dacf5533e96603e7d0623e7671e3f29fed91fdc873cbad8de571414808def11608d34af267d1f292286484dce65086590786cb22f7b252ca62ab294f53f","ssdeep":"768:FsWL6tEaCikFKZ/7IH3tt38F7/qJeQgNOGo03svughfwBcwhuZVhqCOw3rWBDHs9:uPCikFKZzwMylwOACOw3v2Pu5","tlshash":"d363e725c9df549b0e2011cb688f3b2b539cc1fcffe1a9da8548f81c11d9762a51ce9a","size":70371,"data":"","first_seen":"2026-03-27T21:45:01.947507Z","last_seen":"2026-03-28T01:50:21.650917Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reefassetholm-system.cyou/","fqdn":"reefassetholm-system.cyou","domain":"reefassetholm-system.cyou","tld":"cyou"},"ip":{"addr":"172.67.172.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aeaec6f8d84661b7e4c0287ce4a41859","sha1":"35c63b605be231b1dc052fe8d1e1bf96d813895f","sha256":"8ff12fd7d2a4429a4ef081ac275e3436517eb613342ae3aadb9987230f2f9e38","sha512":"bbb44d26895e7e631efcc3efdfef8c0e9f6ec44774041d86678b2697ca45e74dd1cd59df3a7ba2e1fa9326d53c00e7a0ded15a82e94d9540838fb271044ec75a","ssdeep":"192:45Ab0I4b5FOwLZ74oaTzgtJR0GkPa7o0ASrO3AyK8BZNBSrTIsrLrEBfqQvJg0iP:uI4bbVEqdo0ASrCHS4s47hRiwuh","tlshash":"534272a6b43b04792af7446f3fdf6381a4b0804f7986d9147d1c64246fe4f422a7abe4","size":12876,"data":"","first_seen":"2026-03-27T21:45:01.949888Z","last_seen":"2026-03-28T01:50:21.651788Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b6a46b3fb2ab9307d013def98fd7289","sha1":"b45977827f6c96e0cdc9b73c489776ea81559938","sha256":"aa441106c183f4866b729dfc92f96a0bc97bccbf28f5c29b56053f71752ab196","sha512":"d962c6341a814b3f873175ae83221d90936be9f3da9ef5ec8e3e62bee3339b3b4d80a55a247248727ead92a995a15e0428961dce52df362d0ed4added44b5601","ssdeep":"1536:rnY4IOlII1MDSw4UnIASVg8fljAWgfPMatSsC:LY4IOuIu4+I6fUSC","tlshash":"a8434c9eb1cbb23947aa3195c13f4845377a45198c4cd0a8f9f1c9a0bd78a9d006bf7e","size":55174,"data":"","first_seen":"2023-03-07T01:42:50Z","last_seen":"2026-04-24T08:52:43.644203Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reefassetholm-system.cyou/","fqdn":"reefassetholm-system.cyou","domain":"reefassetholm-system.cyou","tld":"cyou"},"ip":{"addr":"172.67.172.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-04-25T04:55:34.320319Z","times_seen":253091,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reefassetholm-system.cyou/","fqdn":"reefassetholm-system.cyou","domain":"reefassetholm-system.cyou","tld":"cyou"},"ip":{"addr":"172.67.172.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fa3d096bffce38688949384e5284a5d","sha1":"b1ad5fc359bf90b6103ce5643be7ae2cb5645f19","sha256":"d53eb3b7aa6d1805bc3c0136673a23f9a73c208828d3e15210b1e65fe088cb67","sha512":"28dfcaa1324511d3aeb736cd335d08d023189a25cf503402f643c0c73be4e80b23027a9c9d3698422ab1888f5b794dba2fa5b0b0c269ec2213fd06dc0f22dd90","ssdeep":"","tlshash":"acc04c2096249edc9173c1602f5b2b01d245d9266831b690b7b0ae997e0298b45d889a","size":140,"data":"","first_seen":"2026-03-27T21:45:01.952176Z","last_seen":"2026-03-28T01:50:21.654252Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"reefassetholm-system.cyou/disclaimer-popup-mobile.svg","fqdn":"reefassetholm-system.cyou","domain":"reefassetholm-system.cyou","tld":"cyou"},"ip":{"addr":"172.67.172.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://reefassetholm-system.cyou/","date":"2026-03-28T01:49:59.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reefassetholm-system.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 15:07:10 GMT","end":"Mon, 01 Jun 2026 16:07:01 GMT"},"fingerprint":{"sha1":"9F:25:78:B4:85:C0:45:A3:DB:19:71:5F:ED:99:CE:90:20:A7:49:43","sha256":"72:EA:0B:ED:D7:16:50:42:58:BA:FA:ED:92:04:3B:7D:F6:CD:AC:04:46:86:F6:4C:6B:72:30:36:CD:86:79:DD"}}},"request":{"raw":"GET /disclaimer-popup-mobile.svg HTTP/1.1\r\nHost: reefassetholm-system.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://reefassetholm-system.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 28 Mar 2026 01:49:59 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncf-ray: 9e32fb3e3dbf5689-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"cf2398351389572f6c39d1715c2e54f8\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jyCyJENqAs%2FHHPaA4a1W%2FH2DxQGUPSrGJH9GEVK9VBVhooU91oIRN%2BfO2opT50Zpu57O6feoYtjkGeoF73zaS9FB4v0yj%2FaJT6RV%2FbD5p5k9VjfFcYHwvqcezdybNohuZe8dISCiVfxyDVk6\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2908,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43c1559d9e6095e940f221fe22f96ceb","sha1":"46ae86cf42ad7883829a564f41f50c71873f3231","sha256":"5a772d0d6ba9175afc2f57b8a9028af6131d39218f408f5b067a1ee823a76168","sha512":"c50d67dc9bff8f8d7432f6c80374d5aeb00e923517a87bfc0f87b844c5425a27feaa3d566c4fc21852fd56535f103733323015da637310b0551d45057533ae3f","ssdeep":"","tlshash":"1c51bb9292c8073dd26dcb68e35953bbe7e6d55ce346d56468e0020bdfc2c428ac70c9","first_seen":"2026-03-27T21:45:01.932583Z","last_seen":"2026-03-28T01:50:21.617732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"reefassetholm-system.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Helvetica\u0026family=Arial:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://reefassetholm-system.cyou/","date":"2026-03-28T01:49:59.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=Helvetica\u0026family=Arial:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://reefassetholm-system.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 28 Mar 2026 01:49:59 GMT\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T04:55:24.956043Z","times_seen":14164481,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":129,"dns":3,"connect":22,"send":0,"wait":33,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reefassetholm-system.cyou/terms-popup-mobile.svg","fqdn":"reefassetholm-system.cyou","domain":"reefassetholm-system.cyou","tld":"cyou"},"ip":{"addr":"172.67.172.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://reefassetholm-system.cyou/","date":"2026-03-28T01:49:59.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reefassetholm-system.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 15:07:10 GMT","end":"Mon, 01 Jun 2026 16:07:01 GMT"},"fingerprint":{"sha1":"9F:25:78:B4:85:C0:45:A3:DB:19:71:5F:ED:99:CE:90:20:A7:49:43","sha256":"72:EA:0B:ED:D7:16:50:42:58:BA:FA:ED:92:04:3B:7D:F6:CD:AC:04:46:86:F6:4C:6B:72:30:36:CD:86:79:DD"}}},"request":{"raw":"GET /terms-popup-mobile.svg HTTP/1.1\r\nHost: reefassetholm-system.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://reefassetholm-system.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 28 Mar 2026 01:49:59 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncf-ray: 9e32fb3cfdbb5689-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"f452e7e02704e2f88ee61bb324bee5fc\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fdtgs8Kf7tOEnJU%2F1DZm6Et2FXjXSPuHwNwuEOpppyiMz4oeh2Jerb2cEsC%2FuPupDPKBfviX9jY4U1hYfuT3QuwRuwM9hs%2FkT%2FxO0GJrmj7LXK5TXE5DZgOSCqirQR50V7wvxmqAx4Xgbp8b\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3689,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3c246f64391b98b3850d358f7c8b9f5e","sha1":"7ca0bbf034d1f0b45d27f6af8adf329e0e09dd04","sha256":"5655c291e7f44db99807b3e704b40bb942879a86231b5dd4ca5628474e7f5dcb","sha512":"5958e26cfc129101cb52112d97adc5892f6dc84f0260475c597975c2e5faf867e9293bf4c25b83ee81ddae5c656fd7a3bbae6df0b96e7ea3176ab991e4583346","ssdeep":"","tlshash":"4f719b91c2ca072de279cb65e30653bfe7a1d55cf34ac55469e6820b6fc2c464acb0ca","first_seen":"2026-03-27T21:45:01.927499Z","last_seen":"2026-03-28T01:50:21.623196Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"reefassetholm-system.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://reefassetholm-system.cyou/","date":"2026-03-28T01:49:59.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/clientjs@0.2.1/dist/client.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://reefassetholm-system.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.2.1\r\nx-jsd-version-type: version\r\netag: W/\"d786-tFl3gn9sluDNybc8SJd26oFVmTg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 746526\r\ndate: Sat, 28 Mar 2026 01:49:59 GMT\r\nx-served-by: cache-fra-etou8220185-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 21210\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55174,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (45676)","md5":"5b6a46b3fb2ab9307d013def98fd7289","sha1":"b45977827f6c96e0cdc9b73c489776ea81559938","sha256":"aa441106c183f4866b729dfc92f96a0bc97bccbf28f5c29b56053f71752ab196","sha512":"d962c6341a814b3f873175ae83221d90936be9f3da9ef5ec8e3e62bee3339b3b4d80a55a247248727ead92a995a15e0428961dce52df362d0ed4added44b5601","ssdeep":"1536:rnY4IOlII1MDSw4UnIASVg8fljAWgfPMatSsC:LY4IOuIu4+I6fUSC","tlshash":"a8434c9eb1cbb23947aa3195c13f4845377a45198c4cd0a8f9f1c9a0bd78a9d006bf7e","first_seen":"2023-03-07T01:42:50Z","last_seen":"2026-04-24T08:52:43.644203Z","times_seen":109,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":56,"dns":3,"connect":27,"send":0,"wait":27,"receive":6,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reefassetholm-system.cyou/","fqdn":"reefassetholm-system.cyou","domain":"reefassetholm-system.cyou","tld":"cyou"},"ip":{"addr":"172.67.172.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T01:49:58.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reefassetholm-system.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 15:07:10 GMT","end":"Mon, 01 Jun 2026 16:07:01 GMT"},"fingerprint":{"sha1":"9F:25:78:B4:85:C0:45:A3:DB:19:71:5F:ED:99:CE:90:20:A7:49:43","sha256":"72:EA:0B:ED:D7:16:50:42:58:BA:FA:ED:92:04:3B:7D:F6:CD:AC:04:46:86:F6:4C:6B:72:30:36:CD:86:79:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: reefassetholm-system.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 01:49:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncf-ray: 9e32fb3ada37b4f3-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, s-maxage=3600, stale-while-revalidate=86400\r\nlink: \u003chttps://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/fontawesome.min.css\u003e; rel=preload; as=style; crossorigin, \u003chttps://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/solid.min.css\u003e; rel=preload; as=style; crossorigin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: blob:; connect-src 'self' https://cloudflareinsights.com; frame-ancestors 'self'\r\ncross-origin-opener-policy: same-origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3GZbzHH3qDnrOY2b78InfJ4gfi2IWJJ971EDy9PmescURw%2BApfZPjIA5cGem77MVSWenrAD3sQIBOlSiRepsy5Y7HjrDoMPR72xpCVYTg5jJj41lsdRdVUIPRV11UpxMZBhsfYNNNOP5i57S\"}]}\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"ClientJS:0.2.1","description":"ClientJS is a JavaScript library for generating browser fingerprints, exposing all the browser data-points.","website":"https://clientjs.org","common_platform_enumeration":"","icon":"ClientJS.png","categories":["JavaScript libraries","Browser fingerprinting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131276,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19632), with CRLF line terminators","md5":"bfa11ec95d483c47f4b24191ea30d625","sha1":"c1a146ccc50d0d2a502cbd8bb361d58fb84f76c5","sha256":"8f175ce77116dd81cb1acbc11913ad288c97eb33459328cdf4cf6beddda53951","sha512":"fde18090b2dab59b1f4c9952dae46ac464718de7c2c491b09aac8315e72ed51f8e6b1e2ea41806899de1c14269606d9bc669c2cb95092c3336b1a4acc0a4c1b8","ssdeep":"1536:OUL7A/4XfZHOZ2+UBH4kTPCikFKZzwMylwOACOw3v2PuMHKqU:xh1TdC4PuMqx","tlshash":"6ed35b3194df083b193201ef7487371ba2a8c2deff9294c9716cf12a17d5b615239b9a","first_seen":"2026-03-27T21:45:01.912713Z","last_seen":"2026-03-28T01:50:21.627524Z","times_seen":2,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":69,"dns":56,"connect":1,"send":0,"wait":206,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"reefassetholm-system.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/solid.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://reefassetholm-system.cyou/","date":"2026-03-28T01:49:59.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/solid.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://reefassetholm-system.cyou/\r\nOrigin: https://reefassetholm-system.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 01:49:59 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 288\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65692999-120\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 132618\r\nexpires: Thu, 18 Mar 2027 01:49:59 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5NzK37OSTYfJNxZTVLCgvkPe29jnXoOh4inrWUf5sfUuOk35HiWCCbsDq94%2B9ZKMMT8dKBCd0PMAfIfbpl5Cptf21uvyn8wo7FkeziFWD0Iaeg%2BRQe1fqz9bJhBTlDwu34GfjVPD\"}]}\r\ncf-ray: 9e32fb3d1e7bb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":572,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (353)","md5":"4d63c1a82931dd3b2d8ba3135987b9c3","sha1":"b79ead6a4a6548ec021c030e9b0e95c9ba0648e7","sha256":"b8afa4243dd1bf735f512708da5335b0ed314d9e58a0a1cf1b781250cf5fb004","sha512":"a5994a1acee712a178ce81b47a078ad7aee5eb2a2fb2e2fc6a9df4774ee403900952af96cac165434d832d70263779f4f87dc9573e678bc489667ace6985d604","ssdeep":"","tlshash":"51f08b1d056504a042810d423c8dfa9dec02b0da7ca84b53f137986d98e9a5f31f8f18","first_seen":"2024-01-08T11:29:28Z","last_seen":"2026-04-20T09:09:53.591928Z","times_seen":257,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":14,"dns":0,"connect":3,"send":0,"wait":10,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reefassetholm-system.cyou/disclaimer-mobile.svg","fqdn":"reefassetholm-system.cyou","domain":"reefassetholm-system.cyou","tld":"cyou"},"ip":{"addr":"172.67.172.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://reefassetholm-system.cyou/","date":"2026-03-28T01:49:59.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reefassetholm-system.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 15:07:10 GMT","end":"Mon, 01 Jun 2026 16:07:01 GMT"},"fingerprint":{"sha1":"9F:25:78:B4:85:C0:45:A3:DB:19:71:5F:ED:99:CE:90:20:A7:49:43","sha256":"72:EA:0B:ED:D7:16:50:42:58:BA:FA:ED:92:04:3B:7D:F6:CD:AC:04:46:86:F6:4C:6B:72:30:36:CD:86:79:DD"}}},"request":{"raw":"GET /disclaimer-mobile.svg HTTP/1.1\r\nHost: reefassetholm-system.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://reefassetholm-system.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 28 Mar 2026 01:49:59 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncf-ray: 9e32fb3cfdb85689-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"17739ba7c4ff9c0674becb54cb684ae2\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6kSUn%2BKVCGygfwLHI6%2BULiJ0w%2FLA4ZgZJ%2FLyEHrUVH9sowjgbFQ24rpdYNbeN963RcR6JmFg6kUv8sFnOIaQMR1th5zsD8CXvWE6wjtNjFeDaU0zt1cl5h%2BuIEyp5QtJqs30PagiBZzQe0g0\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4663,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b5cf4cd763d3f468d8e2100df52a437b","sha1":"905b477463b6d86efd9d4c9b906b4c94ebcfb9ac","sha256":"c95515da339ac3ce4a8c4e9a84c24f24ed4beff39f138b135896655c6af3727a","sha512":"293a7508b1a7abab323805b7b1fae0002ff959af912a9ebbc75597fbe72bf38cd73d1c76412c2bdcf8d9e0626324ded0e8c022ae54d83254ef78fde9c5a05e36","ssdeep":"48:C8jiCJfxdWdQQPDWPohFqZvT9ML5mxhApqysEol9ji2J8XJwJOg/7ssQ9tfFeo4Y:Fi4JYDMoU9opypi22YUtnL5jqMp","tlshash":"72a18bb9a2de0a32f286d198d5d6f3e7f3f59099e258c19008ec416c0be3d4b94e35a5","first_seen":"2026-03-27T21:45:01.925447Z","last_seen":"2026-03-28T01:50:21.633912Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"reefassetholm-system.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reefassetholm-system.cyou/styles.css","fqdn":"reefassetholm-system.cyou","domain":"reefassetholm-system.cyou","tld":"cyou"},"ip":{"addr":"172.67.172.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://reefassetholm-system.cyou/","date":"2026-03-28T01:49:59.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reefassetholm-system.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 15:07:10 GMT","end":"Mon, 01 Jun 2026 16:07:01 GMT"},"fingerprint":{"sha1":"9F:25:78:B4:85:C0:45:A3:DB:19:71:5F:ED:99:CE:90:20:A7:49:43","sha256":"72:EA:0B:ED:D7:16:50:42:58:BA:FA:ED:92:04:3B:7D:F6:CD:AC:04:46:86:F6:4C:6B:72:30:36:CD:86:79:DD"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: reefassetholm-system.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://reefassetholm-system.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 28 Mar 2026 01:49:59 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-ray: 9e32fb3cfdb95689-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"1a2c0cb780cd90af048cea0b0b3f2822\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2BwTQaRn0du%2B%2By87N2ne3HEAQIpM9HaUt9cF%2Bwk6fUHrPFdh%2FXYIDv3nTFdS56QXsLuzhQBGf7gwThMZqoq30Pvyh6D6MuyC1RFUozqeE1Z7OPUKNsGgHTCT2Qlr6ZLJ7o9CLeYMjDuQjZn%2F\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25001,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (24998), with no line terminators","md5":"0ca064ec9d6e87bd258eebfaa8e3ec72","sha1":"f7d4ff68a433dbd940567c5e6be419d6e478360a","sha256":"16042e52dec48aa97750fcd2764f63634cf2636efb94d0c43cbbf93d94cd7b92","sha512":"a12d46f2755735bc30e211ef1fc219f0e1c7ec6548fe88c1c29d74bff9e1a1fdf3eb4f48d2642ac0e4279b6859fc16cf2f9e41fa467624facb9fd1147fe79207","ssdeep":"384:knpeLxag17cFaL7tFQgLG7xiC1ZPrWhBFbuzTGX4Vom0/f:u8L5cFM7tUxi4FrWhBFbuz81f/f","tlshash":"44b28571d540113df027d6dae9d4e3cf703aa012ea23039eeaa661b9cbcb1db1671709","first_seen":"2026-03-27T21:45:01.930342Z","last_seen":"2026-03-28T01:50:21.636003Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"reefassetholm-system.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reefassetholm-system.cyou/terms-popup.svg","fqdn":"reefassetholm-system.cyou","domain":"reefassetholm-system.cyou","tld":"cyou"},"ip":{"addr":"172.67.172.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://reefassetholm-system.cyou/","date":"2026-03-28T01:49:59.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reefassetholm-system.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 15:07:10 GMT","end":"Mon, 01 Jun 2026 16:07:01 GMT"},"fingerprint":{"sha1":"9F:25:78:B4:85:C0:45:A3:DB:19:71:5F:ED:99:CE:90:20:A7:49:43","sha256":"72:EA:0B:ED:D7:16:50:42:58:BA:FA:ED:92:04:3B:7D:F6:CD:AC:04:46:86:F6:4C:6B:72:30:36:CD:86:79:DD"}}},"request":{"raw":"GET /terms-popup.svg HTTP/1.1\r\nHost: reefassetholm-system.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://reefassetholm-system.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 28 Mar 2026 01:49:59 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncf-ray: 9e32fb3cfdba5689-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"a933499ace9454b686319040d5581a19\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bfM%2Fmj4buRmEnyOutGwpBZt84SPJut97KtIcjABv%2BLo23UQgjdHhPSatYLoc2YhzlN6%2FhE3Y%2BTguSJrfwftITokhT7DBWSSO7Ymm6PWUpGlzugJq0epxG3ozr7qKV8t7s1EstzW80rbPwDRm\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3120,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"385a69d149e07a87d20f79cda950ff23","sha1":"8398d3201894d433aba7fa12f63af289c1487cff","sha256":"cd1f131dfeda9999ca45f69ac0b3f25e43245aa6983185fc83c08680f0c35378","sha512":"ea277f22b59c3de7131a722a70e693aabbadb8bd0913fc25624eae14ed70b65967fda2f949dbd77daf9f4b164c36e0727be2f3331a6c73b8975bfd43b8cf60f1","ssdeep":"","tlshash":"25513182c1ca0b2ee7698b85e34657ffe7b1c55cf399c6542ce4024b27c2c064adb0d9","first_seen":"2026-03-27T21:45:01.935157Z","last_seen":"2026-03-28T01:50:21.637898Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"reefassetholm-system.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflare.com/beacon.min.js","fqdn":"static.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://reefassetholm-system.cyou/","date":"2026-03-28T01:49:59.207Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /beacon.min.js HTTP/1.1\r\nHost: static.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://reefassetholm-system.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T04:55:24.956043Z","times_seen":14164481,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflare.com/beacon.min.js","fqdn":"static.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://reefassetholm-system.cyou/","date":"2026-03-28T01:49:59.405Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /beacon.min.js HTTP/1.1\r\nHost: static.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://reefassetholm-system.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T04:55:24.956043Z","times_seen":14164481,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reefassetholm-system.cyou/favicon.svg","fqdn":"reefassetholm-system.cyou","domain":"reefassetholm-system.cyou","tld":"cyou"},"ip":{"addr":"172.67.172.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://reefassetholm-system.cyou/","date":"2026-03-28T01:49:59.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reefassetholm-system.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 15:07:10 GMT","end":"Mon, 01 Jun 2026 16:07:01 GMT"},"fingerprint":{"sha1":"9F:25:78:B4:85:C0:45:A3:DB:19:71:5F:ED:99:CE:90:20:A7:49:43","sha256":"72:EA:0B:ED:D7:16:50:42:58:BA:FA:ED:92:04:3B:7D:F6:CD:AC:04:46:86:F6:4C:6B:72:30:36:CD:86:79:DD"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: reefassetholm-system.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://reefassetholm-system.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 28 Mar 2026 01:49:59 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\ncf-ray: 9e32fb3ebdc25689-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"962fb37929a145315815e872af03b962\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dSeNKB%2BF2bUuBIyYRTxMxF8eAq4j5ApbMtXrJDsQ4k75KkggZMrBHzaq8IKyHM5y7gnTh2SDbx7YbIBz4o1YTNlvC6p%2BkYmVZq5MTT5oVpIZXU763zgDsZm66un4cgV0TABYwDcxLGdYU9cb\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":423,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b292620fd91a078e2c76778c0153247","sha1":"47c46812fc9e0401427a73e2c251765e700e21f9","sha256":"3198f32cbb1136919481a07b6c68ec2631043ac3876b059b37c8eea5bbc4c04e","sha512":"c3702c2f51e305e22bd4de551011b2ccb2f0fa530119e86942fa6defa890353811089ecf4606025897f31c6b71b306cafe02a09cacceb9dd63a18eb9c6e31b13","ssdeep":"","tlshash":"bee0e56090cd160cc3344b65371fba6e188bd4c962d14985f2c1292b20575f66d53689","first_seen":"2026-03-27T21:45:01.919067Z","last_seen":"2026-03-28T01:50:21.641417Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"reefassetholm-system.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/fontawesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://reefassetholm-system.cyou/","date":"2026-03-28T01:49:59.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/fontawesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://reefassetholm-system.cyou/\r\nOrigin: https://reefassetholm-system.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 01:49:59 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 14629\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65692999-3925\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1446939\r\nexpires: Thu, 18 Mar 2027 01:49:59 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qM7UrkPaBHbyBesdQCkMGFX4JkTJuKjmtV7FLIN9gvq4UOdVLXXGNUS74eTltCSFjLC5omrIxv22NXR%2FgjMuiMgGhRaeX%2Fhfrx2O5idDFL15fuUZoM2cXOp8G9LBb2dMpaevBJOx\"}]}\r\ncf-ray: 9e32fb3d1e7cb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80795,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"050a20fcaed9e77ff3c43b7aae625283","sha1":"397e1e16117c1a4166e52f424e2ae4a2b5fcbe09","sha256":"8eb5b44ce5971a501e5a17954c464b80aba0c4604675b5603a7f456459af88a1","sha512":"774a2534ddf90ba54b8ae940a1bc581d9897266abebe5f81188800c50b43e7e92ab9dae8ff134cbefdb220701c8861e9131b086ca5f788b83ed01e9dd24e3e64","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9f:O709gMGFiyPG9f","tlshash":"ac83cbf5e44c15d97732c44beb58b37c61b6f738d9810da9f02f580d1ac26a822c6b7a","first_seen":"2024-01-08T11:29:28Z","last_seen":"2026-04-25T04:41:11.796885Z","times_seen":1393,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":8,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reefassetholm-system.cyou/disclaimer-text.svg","fqdn":"reefassetholm-system.cyou","domain":"reefassetholm-system.cyou","tld":"cyou"},"ip":{"addr":"172.67.172.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://reefassetholm-system.cyou/","date":"2026-03-28T01:49:59.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reefassetholm-system.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 15:07:10 GMT","end":"Mon, 01 Jun 2026 16:07:01 GMT"},"fingerprint":{"sha1":"9F:25:78:B4:85:C0:45:A3:DB:19:71:5F:ED:99:CE:90:20:A7:49:43","sha256":"72:EA:0B:ED:D7:16:50:42:58:BA:FA:ED:92:04:3B:7D:F6:CD:AC:04:46:86:F6:4C:6B:72:30:36:CD:86:79:DD"}}},"request":{"raw":"GET /disclaimer-text.svg HTTP/1.1\r\nHost: reefassetholm-system.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://reefassetholm-system.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 28 Mar 2026 01:49:59 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncf-ray: 9e32fb3cfdb75689-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"c7b56346a0e1025228aa8ad940dd0d2e\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=735CJFd%2BVt%2B%2FvOWDItH32esnviLIgsAS0WE4518Y%2BhDviXhUuATfp%2BJ8UCph91X3b6xxo8oNrWDQ8inhp%2F67JwE4FKSTktrH8nvd7PXhdqA2Wt1o8IP8JTx3rytIKo2VMwS6%2Flozu6V708t8\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5696,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e07c9618b541e78a4e016058123fa59","sha1":"e55bf55fd36858d59df9af83735c7059c480aa1e","sha256":"fd55d6112229d4827f29dd143a3e3dacce889082791d856d4b1004e03bd25fa3","sha512":"0e74e62325765f38160092e8e6062d0c206964999f7b0b09b4060f317c7b3f642685cfe99af0e3c151559be47d07ce05f757a3d718f8c76638bf2a7420241d11","ssdeep":"96:IiJLr/MM/voIyMsOyZ4z5WSr77VIshjaQqZmhqm5QsDX9+OX3PtaEttK5GXwcRgG:IiJLr/MUvoIyMsVqzsSrushjqZ4qm5BJ","tlshash":"8fc1efbde2dd0731f25292b8aa86a7c7f6b5509cb318c1950ce8023d57ebd4e81e30a5","first_seen":"2026-03-27T21:45:01.923013Z","last_seen":"2026-03-28T01:50:21.644693Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"reefassetholm-system.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reefassetholm-system.cyou/disclaimer-popup.svg","fqdn":"reefassetholm-system.cyou","domain":"reefassetholm-system.cyou","tld":"cyou"},"ip":{"addr":"172.67.172.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://reefassetholm-system.cyou/","date":"2026-03-28T01:49:59.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reefassetholm-system.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 15:07:10 GMT","end":"Mon, 01 Jun 2026 16:07:01 GMT"},"fingerprint":{"sha1":"9F:25:78:B4:85:C0:45:A3:DB:19:71:5F:ED:99:CE:90:20:A7:49:43","sha256":"72:EA:0B:ED:D7:16:50:42:58:BA:FA:ED:92:04:3B:7D:F6:CD:AC:04:46:86:F6:4C:6B:72:30:36:CD:86:79:DD"}}},"request":{"raw":"GET /disclaimer-popup.svg HTTP/1.1\r\nHost: reefassetholm-system.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://reefassetholm-system.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 28 Mar 2026 01:49:59 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncf-ray: 9e32fb3e3dbe5689-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"8f9487947b532715092e0f106484691c\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lh1ZaiOiBe7rwja1ZsXkRgzkaHqYiBA%2Bcjivv0mL5VO3A7cWCMROE8m4XzxWK0It5Yj0ELAhDl5rtLXU9eqs1tmGrVmjQ3kU2zwM%2F8Lhk9u4N%2BoPYKm%2BuEk4ndOwcJkXw6o19UUw2lpJWBZn\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2061,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5e5a400c01edd2feb3c39bbb6cfed9b5","sha1":"cca10f871f3f0cdfb591af3daa9bbbb740a5d231","sha256":"c5bfaf1653a8bfadc87ea1a5e6467571cce083e2079644a3331a5c6561d24dbf","sha512":"80d83d60b51268f45063139691cf574e349c23e19ce96d4b270a3539df0c28430fb40a0fa3d2ac1b2ffc5a71988ba42908806cf4ff774f6fb4a6dc1f19faee64","ssdeep":"","tlshash":"8f41426a80ce0a26e2b28048f9e267d7b3f5905ea308c5903cd4002a5bd3c068ed76e9","first_seen":"2026-03-27T21:45:01.937596Z","last_seen":"2026-03-28T01:50:21.646563Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"reefassetholm-system.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}