{"report_id":"271bd1a2-7ad7-44db-97a1-0a0a85b40519","version":6,"status":"done","tags":[],"date":"2026-03-06T19:08:43Z","url":{"schema":"https","addr":"arbcore.click/","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"arbcore.click/","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"title":"Page Not Available","dom":{"size":713,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (713), with no line terminators","md5":"acb2b5289717f3f5bfbdc7b1425da77b","sha1":"8006d32b250203319d18998ef09c95ea8c16c737","sha256":"d2c5df7bcf70a712780485d61162f6a928e469881fb10e6cbc0af4702cf30f0c","sha512":"36564234d1e8a1d954ab1c7dd39985be7bcb0db6dd73cc47ecbb51cdb4d1d630287f7d773086b9d453efc2d24a4944c9cd5b910ae6a82c841318decaa6f32b96","ssdeep":"","tlshash":"b20110dfe2c12019a5b7ca4425a2737c0404f8a003655d28a9477f7882ca39756a3b08","dom_hash":"domhashc62a37b44caf2ab86d1d29e24c294e35","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"arbcore.click/","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T19:08:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"arbcore.click","ip":{"addr":"104.21.6.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-06","domain_rank":0,"first_seen":"2026-03-06T19:08:22.950845Z","last_seen":"2026-03-06T19:08:22.950845Z","alert_count":9,"request_count":9,"received_data":2518966,"sent_data":4061,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"arbcore.click/","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"104.21.6.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3f480df24714c980afc05ce90a62b05d","sha1":"09f10c8677e44ceb169a0aeb4c58bf347223ccaf","sha256":"55d6343882fb60b73989d6cdc23bcce6398bd8ae58cc5c67023144ed61835293","sha512":"b8d32565bcb7db7fe73aae6d7c4b870a5e8686e7f23fe809b7694b280e5c49b1ed39785c55e7052390064a1ec0b3c154c3d6963cd7cba8518bd1a42858ce8708","ssdeep":"49152:PakouE2DQwl6i8VdACUIyJtInhhfmQG5kD1R0GxtYZpZZSntPjyCytwD7lU4o9JG:Yi8VdACUIDgwSFLMTR+W8OJ","tlshash":"f5069db173a5b0a5479351d814671001f234a88ab00d80ecf7ecd9eb7fa99ca957bf36","size":3990541,"data":"","first_seen":"2026-03-05T13:46:43.425415Z","last_seen":"2026-03-06T19:24:31.624294Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/protect.js?v=6","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"104.21.6.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37078474be98b7db76b5741fa1c1c764","sha1":"43c82d94f31f94d33c568ebb2f303168acba1db6","sha256":"8bf810837f8e8eb778abaa40e4ec6ae312b51d128d526667d8d76b9dfb58994d","sha512":"356e209edca144dc3efa1e2830138777b951a10740a530a1e8b46bc2ee12fc8cf0cf3f3cac511b9c5ee1e8c164f4702bf36ee4f09746df48c4cdc9ba28988051","ssdeep":"96:fwmr/gun3Ikb57Qz3XMFcuhlMb8U60qJWEa8YrxuBUH5dkeBSZSZSTCuhYb55n0F:J//n4ipq3cyuhlMb8J0q/a8YQUH5yeQh","tlshash":"11c1746a96c3047d3b63e06a9b9b73183c3a147b310b8d26744c3b691fd171246b6afc","size":6072,"data":"","first_seen":"2026-03-06T19:08:26.810139Z","last_seen":"2026-03-06T19:24:31.615893Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"104.21.6.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba839b4884c72fed5bebc886815efcde","sha1":"d28a7e779ee4da37433a40f15ea3e3df5886c2ac","sha256":"c643a1a93bf1f2b1c2f70b4fc90b9c4e1c76680e0335877d281cdecf225eb839","sha512":"ba4a6a0eca87429a7d371f852d766264d4630a3621f928a78d01c495fc7bce5398cbcfdd39bc0b3bff555ec0eefcf578556bf97ba90b560eecefa944c2cb04f0","ssdeep":"","tlshash":"0ef04c2b14b200720237e756571baba5aa31405b34c3ec5d7e0e8a0a5f94e6508f089b","size":610,"data":"","first_seen":"2025-05-18T19:50:38.458372Z","last_seen":"2026-03-06T19:10:32.841424Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"104.21.6.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dba7f53600e040d426fe3d4e138b767b","sha1":"7cb89ecb211fb51e8e5e5cbb869b46e5e4a9812e","sha256":"7f1a8e8f2376ff30b4982da4f4eaf6b98f6e9c96c75f2883e7a52059d64eba7f","sha512":"d93f9b3e44284ede9a8deaa4c75dc46c03b71196622f8e12c685d81bc15b90c0e99dc3a862ad7a3d3ee5a9916085f28a351e3520187b1f108f55faebf1d426c1","ssdeep":"","tlshash":"d0f0a06921f625310733b629d71fa64972322013210cab153b4d46f15fb0ada06f2fcf","size":461,"data":"","first_seen":"2026-03-06T19:08:26.821402Z","last_seen":"2026-03-06T19:24:31.624916Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"arbcore.click/protect.js?v=6","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"104.21.6.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbcore.click/","date":"2026-03-06T19:08:21.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET /protect.js?v=6 HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbcore.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:08:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 06 Mar 2026 03:18:59 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69aa47a3-17b8\"\r\nexpires: Sat, 07 Mar 2026 19:07:59 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 21\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8kSlbjgjSntRDi%2BrkVJ20ozzJ%2BOo5XHRpG%2Fu2AkB9KovQuadPva8Ql9X1WBMqvJI63XLSWjwQ%2B3MsUiuLzCn%2FnvwdAc9fAWM0TzmLUQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d83a6086d305868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6072,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"37078474be98b7db76b5741fa1c1c764","sha1":"43c82d94f31f94d33c568ebb2f303168acba1db6","sha256":"8bf810837f8e8eb778abaa40e4ec6ae312b51d128d526667d8d76b9dfb58994d","sha512":"356e209edca144dc3efa1e2830138777b951a10740a530a1e8b46bc2ee12fc8cf0cf3f3cac511b9c5ee1e8c164f4702bf36ee4f09746df48c4cdc9ba28988051","ssdeep":"96:fwmr/gun3Ikb57Qz3XMFcuhlMb8U60qJWEa8YrxuBUH5dkeBSZSZSTCuhYb55n0F:J//n4ipq3cyuhlMb8J0q/a8YQUH5yeQh","tlshash":"11c1746a96c3047d3b63e06a9b9b73183c3a147b310b8d26744c3b691fd171246b6afc","first_seen":"2026-03-06T19:08:26.810139Z","last_seen":"2026-03-06T19:24:31.615893Z","times_seen":5,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/55666b51ea.php","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"104.21.6.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbcore.click/","date":"2026-03-06T19:08:21.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET /55666b51ea.php HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbcore.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:08:21 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=3600\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7A%2BrlQi5DKSGwsV5C6r1OKCnn5FdBdW0ykn4fC2rPkcFzrqy01pW%2FeAYXt6Z6DgXETctXBcWOjNPK66%2BmiicPknJcbhwaMHw%2FxHteVo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d83a6086d315868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2449878,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"5347098c8b69758f4c9e9ffa5c07d2bb","sha1":"59c0fb921642589a30a80bdca221fa292121be84","sha256":"3fc0a5837e16f7dffaa4c9369e9cbb057a31dd065ae5a35457fe39ee64260515","sha512":"599d4583a93d2f7785a5c645bc8bdd96240c20a8c5ab3f8fcc54e1ca8fd8a3b0a61ab13023bb4e319be1555c7c804289c9f91105b11a25e7d05ac40a6dfeae24","ssdeep":"24576:fET06jmCWp3Ch7dNgn8DoQZWR8wPo9PrcF7kWZtfaRgn9e82hWfBR3wuhpmn1uoy:Tc7brwKCk0aR9hUl7InD8","tlshash":"61b5945a8673f3a49ec876e43c1152d4b9b843dfc6cda36d4b6bcce029c583c259a4e1","first_seen":"2026-03-06T19:08:46.324267Z","last_seen":"2026-03-06T19:08:46.324267Z","times_seen":1,"resource_available":false,"data":null}},"time_used":940,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/style.css","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"104.21.6.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbcore.click/","date":"2026-03-06T19:08:21.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbcore.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:08:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Mar 2026 03:19:00 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69aa47a4-786f\"\r\nexpires: Sat, 07 Mar 2026 19:07:59 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 21\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vOsN7P%2FZcB0t%2FXlpf4%2B%2FWrU3cG6MEINyK3O7ZQA7wUKuRnsu3OVYwgtVmCdth0il9xj42K3wyW3SwekdcLUSNN3uZehEHj752wLL3lQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d83a6086d335868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30831,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (462)","md5":"2fcef81a89ba36d78edff05dc60f4f2c","sha1":"69a0ed8b9228910ae234aca94e3f7452f1355aee","sha256":"820c61be3d0608af4f516572e29b0fff836f062f8a179c112e2fc72be6d151e9","sha512":"c4d0d976fdb2158403486300f92b1ed7ea1112d469f249f76a59521db7932afb2a48099ec2fc35f29d1a5cfe0e3563320694fadadac0af69256e2a2831fed233","ssdeep":"384:nP8zsrwi3N+TtDA6Swu4KtwN/d157cpks:P8zWD7eN2pks","tlshash":"20d2abab5253160478079c481bea175163bcc013940ef6f83edf66988f8bac9d9d27de","first_seen":"2025-05-18T19:50:38.436276Z","last_seen":"2026-03-06T19:10:32.840061Z","times_seen":86,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/assets/index-vMRztd5t.js%3E%3C/script%3E%3C/head%3E%20%20%20%20%3Cbody%3E%20%20%20%20%3Cmeta%20charset=","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"104.21.6.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbcore.click/","date":"2026-03-06T19:08:21.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET /assets/index-vMRztd5t.js%3E%3C/script%3E%3C/head%3E%20%20%20%20%3Cbody%3E%20%20%20%20%3Cmeta%20charset= HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbcore.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:08:21 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mZ3n2PJjWhavfEvmKi2obuciFTLpnMFQAkr5AYA%2B8a0CWfgydmQoXPDic%2BRlz90DZn%2FIA79nsZcMDfwZyWV4sfo14QD79nedhDz7wbs%3D\"}]}\r\ncf-ray: 9d83a6086d345868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T21:09:45.625607Z","times_seen":16191656,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"104.21.6.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T19:08:20.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 19:08:21 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2026 03:19:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RKjxP%2Bh0p8T%2B%2FNQA7tLbW%2F%2FIj3LD1H3sRj%2FuXbEo62O3MvWiPJw0GsTzH5oYIZTbc6aqIiG2yCqANRCl58aO0%2F1ZCt%2BgDQb%2B9Hxl6s8%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d83a60728d1de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10756,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (358)","md5":"45bc68c6910872fa9ea0d83132f2de67","sha1":"7d3aef7360701db62ab04c04976964ce43da7646","sha256":"c06dd3dd9e07d5b70ef529cb684f9916acc49744a57847429deb35261a8c0c71","sha512":"f9840095bef77fbed9096303e56476ad13778c0e2628b7d11ee150b27583ee997e8088ffa5cabba6b4bcf5a14efe8054957018230de3d5e206c07b003088eb3d","ssdeep":"192:ESCKfpcOKihU3ILYhngmIuSOTkUTqWkN5/1RAwcRZ7n:ESCKfKiaIL8YuS6kUTq1cP","tlshash":"7022433291f10037439392c1666767bbafa0d107da0bd61536ed47d94fc2e8acea368d","first_seen":"2026-03-06T19:08:26.806661Z","last_seen":"2026-03-06T19:10:32.828207Z","times_seen":3,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":27,"dns":1,"connect":8,"send":0,"wait":39,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/fonts.css","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"104.21.6.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbcore.click/","date":"2026-03-06T19:08:21.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET /fonts.css HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbcore.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:08:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Mar 2026 03:18:59 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69aa47a3-a94\"\r\nexpires: Sat, 07 Mar 2026 19:07:59 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 21\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PuTyPfSoHl9WKxhlCbhlUFpcFkDxzN7B%2Fm8TOnJt3VF%2Bxf4nO4dLUfenQfLmqbECkDHAvCDTnnQxJGVyrCM8oOoczp9BhASx8ZlzbQM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d83a6086d325868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2708,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7a3379c63a773a6f4d6ac4a7a8297589","sha1":"37619b299bc15c0411017dfcaa50bd5adb913b43","sha256":"48a8db56a615295d8ed7fbd2b8c39cf3c3a89c96aacb824711ded786a322581f","sha512":"73f383eb26c548a0505be067e2b3ec7869e9b459e1c4c79d3a561bbdb318022c01094f54a0625b5501242044332f49e56ac5faf5f634dc2a2aee8fbb7680e0e0","ssdeep":"","tlshash":"7b517b90041b2104e2730c8e63de7f21d99d60539280a239bffd3a996ffbdb91265b4d","first_seen":"2025-05-18T19:50:38.418241Z","last_seen":"2026-03-06T19:10:32.838812Z","times_seen":83,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/logo.svg","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"104.21.6.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbcore.click/","date":"2026-03-06T19:08:21.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbcore.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:08:21 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 06 Mar 2026 03:19:00 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69aa47a4-266c\"\r\nexpires: Sat, 07 Mar 2026 19:07:59 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 21\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MBHGB1mmlhlabtYjUnCyrPIFGvyYks9pBpX7Bfd%2F8NCiZettWA%2BQDtdDbuo2Hz5h5I3nF%2FnTcJ8pT1wvgYAmLL45yzz8tPnwaBJu90w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d83a6086d365868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9836,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"075a816d5a40d9d7b7a43c8100d78314","sha1":"02143fdf464b5ce914e840be0a45152982a791bd","sha256":"467e80233c085d89bbe9411653f157daf377ea316f08eb761e7ba1e38e265f28","sha512":"815b7751e643bf496c0f6575d2eacff367336c62db39802ddaeaabf98cf4c1624e30c37815b76458148b8f6fbee59cdeb11d55ca9ffbc5edbfae95dc8577fe3a","ssdeep":"192:ZzjRONG6IXVCyMCePZ/CoY0RH7d+2esFWDjwe9D1M4jC:ZHPVCylePZ/TRRH7dxXFWDjV9D1M4W","tlshash":"6112b6ddebf5d2e1e904b3e4abd3502d3b1264f7a796cab5c3862e65e91104cc489cc2","first_seen":"2024-12-23T21:37:25.887822Z","last_seen":"2026-05-23T13:11:24.689112Z","times_seen":94,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/favicon.svg","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"104.21.6.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbcore.click/","date":"2026-03-06T19:08:23.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbcore.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:08:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 06 Mar 2026 03:18:59 GMT\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\netag: W/\"69aa47a3-91b\"\r\nexpires: Sat, 07 Mar 2026 19:08:01 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 21\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2BM7A7wkXKNIee5HYoSvqBwa00vOIM0uhnNQjUtDq9CSCZqDFY0s5KQKBZfJ99RSxFvkKVvclmrdyWmqbjFZPhHjoeSvGZmdAoZQudY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d83a6179ee35868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2331,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6402120fd8435947c8b18327701f1612","sha1":"d7fdc769f65013daf22cbf171aa6576a38e419e2","sha256":"ee23ddfb480b71782a9d303d76a3aecfab96f942a88266d364d97a5344aae9ff","sha512":"a5a7b36e842ca7b0567121c064102eb5b756e9946692296a8d4c899ba9fd5313c1ae08621f96cad2eb925c401c4a84573fec70e94584c227483ac8df483da9f5","ssdeep":"","tlshash":"22413ec3e384a8d4d4a4a7f84a1e60282b1778e79d10c150aad62e33f8421bd4d9aed3","first_seen":"2024-12-23T21:37:25.920331Z","last_seen":"2026-05-23T13:11:24.772708Z","times_seen":91,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/55666b51ea.php?e=/api/fp","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"104.21.6.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arbcore.click/","date":"2026-03-06T19:08:24.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"POST /55666b51ea.php?e=/api/fp HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://arbcore.click/\r\nContent-Type: text/plain\r\nX-Worker-Hint: 35E0-8509-B5BC-9B51\r\nContent-Length: 1292\r\nOrigin: https://arbcore.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1292,"data":"DUBnOHbT9zyrkSLKcwRgLhCqWJYfbZmRUL6+EvI0O+UiqXoDryQQo64dxtt/mdUpifuhHWpqZmu2GdEB1AIxTeHYcYTjI4pvehNwJVKcYDY3bwotzFmdHfW4AgypyD1aduMvMzPdeEis/osErlJMpoIhfgK84oJyoy0OKpNF2GGsksRg6ZrCF30pH/xD+/seeBrwOlu6TCd17lJyplEcC02cMPFmDnlFwl4GN9XFIBnbTH16oUt9hXYN4U+X1CuBsAcZP4St11H4IqXgDABFhG6yhu7LqsqSrUXzW9JLwT4keO8HlMa60nGo4K4HQZFTnMrPsZT84s/mQgR3VjORYlQzlb6VqTw6ZS4C7Iv4gf3BKmHugevtrWG9wAtOCpxEulnDOoTgtsdoKmlid6QOJvgmKaCQWyJkYQHiPIKTknyJUEAUrUCaXq7+W4MuSdsXD/5FADEZ0oJQp89mKu7mOVBsTUc5FbB17zmMdekYPBalaVxR+L8e+jfw5mCb6WlFP6zPvc7VTHu8BoJuUPN+WTr7qfPsL1yLjC7HS8rzEqrQqVZzkMXDaRgBFexYGuRPwVvALK/s2cEsCKIwCh+3W/zwvXBAyaCdnF4qLyA9NtQmsTVjdxdkczD4Hnye9h95dYfZBdOSAiD/p9d9PAbm6o41ngqSEMmVbQaXszt2IQdAxTox7f2BX5ukoejW0/oPDf+HWFdzL/opreXKP79Wmdz6iqadycGe81cRu98FGCB5vdyU0q90mGrCUVeSAt6sNUxG73YW7UxY3HhXDfqj/1a06tUWZvQ5vU3/63T2veLQO6GM/rDq0QwzoIAGvqktXClsXkioJaR21dkxBrE0z7z0XG3nTJHaVnB5vJ/zHfMfLzXp2wftUmk2nidu9iOikXNK9erqVInXIYIZxH6AQnGmkvl4clH+xMvQb9YWgnQJaNkVWTO7vw46XieS4d0C0hJ7me+N3JWvKTalFD7EVTiSzEAneyam21RhsZMB/p7uJ+zAjkRUrTulglbXdhTomX413L6X/n1gjq63crA0W93s8Ur8luDufsIf/0J2PiAusnMhc0JCKQAMG692IpyYoht1A7clk0NE+nHG9yY9ZULQjU9cyuW9+4cb/JRdzApWwpEPffIwv8E+mtH8l9TaGAcJsEA5xgCmjRCCJSdYJTsOMmFL0YARI1UxP5JNgQNwaSQU166dKgM3pspDuDLaO4uyE/RxkDN5VdsJUzfs0tW6R+pPk3RUYcVK9m53+5kGz73geZvIdjy5HR1gNAch2QSZSkoV1/Q="}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:08:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=blfy8HUVm6gYawD8ilxWTfPoAClyE1pu8714PdSOR%2BCtVWhF5BPRjTADu4IjSoRxy%2FeOn3aKs243yltYmgjwqh6%2BMq23hNsaBZgmZFo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d83a61b8f295868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5427d181cc6baa750456728f6cf48590","sha1":"2abbcbd600ab018e856c9d896272c15265ff68b6","sha256":"a8ed691fa95deab89f7305b7e2a04b4219a0e6941a92aacb4196c5820382126a","sha512":"52a3690e6a84421ab0bedb1c9736b1d9ddff09c3b87d01d46c15476e5833d74c109216af4e20abb459945dcc9c88847b681929983f438df66c80bad3073f0f75","ssdeep":"","tlshash":"efd095f88a5be933e965102151c4df40c413deee5a41ce3ef41d001d25c006e99b45cf","first_seen":"2026-03-06T19:08:46.33085Z","last_seen":"2026-03-06T19:08:46.33085Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}