{"report_id":"2faf6aaf-49dc-431f-9613-7839f5b0cf0f","version":6,"status":"done","tags":[],"date":"2026-02-03T22:06:44Z","url":{"schema":"https","addr":"mobile.authg.top/a4f07","fqdn":"mobile.authg.top","domain":"authg.top","tld":"top"},"ip":{"addr":"104.21.89.73","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mobile.authg.top/a4f07","fqdn":"mobile.authg.top","domain":"authg.top","tld":"top"},"title":"Sign In","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mobile.authg.top/a4f07","fqdn":"mobile.authg.top","domain":"authg.top","tld":"top"},"ip":{"addr":"104.21.89.73","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-10T22:06:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"mobile.authg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mobile.authg.top","ip":{"addr":"172.67.156.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-03","domain_rank":0,"first_seen":"2026-02-03T22:06:45.337032Z","last_seen":"2026-02-03T22:06:45.337032Z","alert_count":11,"request_count":11,"received_data":1678955,"sent_data":5075,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mobile.authg.top/626374a31/b4dbb/9823c18.js?v=RMio7aZ7G","fqdn":"mobile.authg.top","domain":"authg.top","tld":"top"},"ip":{"addr":"172.67.156.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eba51a61894a773df5cab2a18e499c0b","sha1":"e028428f4f367af2660a66e976f223695020e732","sha256":"225edf54855697e6207ba9bded4d041d824e44c7c842f2803ede51764a9e54ab","sha512":"a57c4b5a43b3b629737c98ca9fb0cd549bc35c300208c23690bf9f04312d2aaca179d6cf523f031f2d6dcd42b4e8156a149b0ae676cc09737a6615c8d7119cfc","ssdeep":"1536:DPEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzmQ:oNMyqhJvN32cBC7M6Whca98Hrp","tlshash":"bd93d8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","size":95701,"data":"","first_seen":"2023-03-07T12:27:03Z","last_seen":"2026-08-10T20:46:01.132915Z","times_seen":227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobile.authg.top/a4f07","fqdn":"mobile.authg.top","domain":"authg.top","tld":"top"},"ip":{"addr":"172.67.156.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"948891eda016badb38c357b97e4308be","sha1":"b55c40e4ed3db1224a194f3f3a76ee04efd993a1","sha256":"f9eae07d72834ff53b88f81b53c8bd3c571eaa110f04625009aafec6a6bddfc6","sha512":"3560258262d49617fbc02f89f0df60a00d5894051f4eb2857ab6761bd58b3d4a9955db178a61cd23438cf94fb6f4d0fb7376ed627eee9dec0919460f6ec880bc","ssdeep":"","tlshash":"c5e0c0eb4c212a4bb9ff84f21c5d020d1f64939150a5130edb98800b78d01c6d0751a0","size":333,"data":"","first_seen":"2026-02-03T22:06:48.974714Z","last_seen":"2026-02-03T22:06:48.974714Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mobile.authg.top/626374a31/b4dbb/9823c18.js?v=RMio7aZ7G","fqdn":"mobile.authg.top","domain":"authg.top","tld":"top"},"ip":{"addr":"172.67.156.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mobile.authg.top/a4f07","date":"2026-02-03T22:06:21.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"authg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 12:25:45 GMT","end":"Mon, 04 May 2026 13:24:30 GMT"},"fingerprint":{"sha1":"FA:06:B9:0C:92:83:A5:7C:C4:41:7E:AE:F5:A4:6A:CC:5E:55:68:28","sha256":"74:03:E9:A5:B2:08:23:ED:CC:88:A3:27:0A:BE:5B:EC:8D:68:EE:95:A3:72:EF:FB:CA:61:C9:26:2E:DE:BB:44"}}},"request":{"raw":"GET /626374a31/b4dbb/9823c18.js?v=RMio7aZ7G HTTP/1.1\r\nHost: mobile.authg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobile.authg.top/a4f07\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 22:06:21 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nBRWFbFCaEzl0TYRLWRnHIPqCuaiLB5scgXatXf%2BPSAk6GEnIezSq1HXvpmVyaFjmyhG4dVs8DRJNhEY8VOpvuwps5WM5F9TBPWxRN2j\"}]}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Tue, 03 Feb 2026 22:06:21 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c853c29df855690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95701,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32086)","md5":"eba51a61894a773df5cab2a18e499c0b","sha1":"e028428f4f367af2660a66e976f223695020e732","sha256":"225edf54855697e6207ba9bded4d041d824e44c7c842f2803ede51764a9e54ab","sha512":"a57c4b5a43b3b629737c98ca9fb0cd549bc35c300208c23690bf9f04312d2aaca179d6cf523f031f2d6dcd42b4e8156a149b0ae676cc09737a6615c8d7119cfc","ssdeep":"1536:DPEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzmQ:oNMyqhJvN32cBC7M6Whca98Hrp","tlshash":"bd93d8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","first_seen":"2023-03-07T12:27:03Z","last_seen":"2026-08-10T20:46:01.132915Z","times_seen":227,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"mobile.authg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobile.authg.top/626374a31/b4dbb/2c0c4b6.js?v=RMio7aZ7G","fqdn":"mobile.authg.top","domain":"authg.top","tld":"top"},"ip":{"addr":"172.67.156.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mobile.authg.top/a4f07","date":"2026-02-03T22:06:21.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"authg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 12:25:45 GMT","end":"Mon, 04 May 2026 13:24:30 GMT"},"fingerprint":{"sha1":"FA:06:B9:0C:92:83:A5:7C:C4:41:7E:AE:F5:A4:6A:CC:5E:55:68:28","sha256":"74:03:E9:A5:B2:08:23:ED:CC:88:A3:27:0A:BE:5B:EC:8D:68:EE:95:A3:72:EF:FB:CA:61:C9:26:2E:DE:BB:44"}}},"request":{"raw":"GET /626374a31/b4dbb/2c0c4b6.js?v=RMio7aZ7G HTTP/1.1\r\nHost: mobile.authg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobile.authg.top/a4f07\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 22:06:21 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i88qNlEPKhtWJBj4MTQEaGv3vDZg3y3j6jptOQwRCwj1CjcoG8N%2Bk%2BeazYXY%2BNWRNB0mRK1hOPnBh3PgaU5s3VhNgVqudRHef72d9YSV\"}]}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Tue, 03 Feb 2026 22:06:21 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c853c29df865690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1331844,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65454), with no line terminators","md5":"aeade4bd6dfc3c6beb510fbe2a50d677","sha1":"fe6d7da1a6457db5733c42591af196c951c8c2fa","sha256":"4c8324405e30f8c6134e05104d873623d9f68ae33d21fec576eef9f5e25642d3","sha512":"0fee3a04cf1f483c9483b8e91a9a14dc5e3fe55c6a960cddc3ef8c2550dec6249fafc2435f1e8fd7c6ee272ba4bb58e4b592970885f0867de3ab0fcdc0d6ea9f","ssdeep":"24576:DEamJR8vdC+FQEQgWu0gTimBnL5+7+ZpXMStNRN+FEOo3uiRTfzGkqY3iVJjel/S:5D3lty6yr","tlshash":"162560c72eacab20225b91b3226a9cfcc73a944c43ebdf14b095de94b0944f7d752671","first_seen":"2026-02-03T22:06:48.947646Z","last_seen":"2026-02-03T22:06:48.947646Z","times_seen":1,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"mobile.authg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobile.authg.top/626374a31/b4dbb/23bdd23.png","fqdn":"mobile.authg.top","domain":"authg.top","tld":"top"},"ip":{"addr":"172.67.156.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mobile.authg.top/a4f07","date":"2026-02-03T22:06:21.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"authg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 12:25:45 GMT","end":"Mon, 04 May 2026 13:24:30 GMT"},"fingerprint":{"sha1":"FA:06:B9:0C:92:83:A5:7C:C4:41:7E:AE:F5:A4:6A:CC:5E:55:68:28","sha256":"74:03:E9:A5:B2:08:23:ED:CC:88:A3:27:0A:BE:5B:EC:8D:68:EE:95:A3:72:EF:FB:CA:61:C9:26:2E:DE:BB:44"}}},"request":{"raw":"GET /626374a31/b4dbb/23bdd23.png HTTP/1.1\r\nHost: mobile.authg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobile.authg.top/a4f07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 22:06:21 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Tue, 03 Feb 2026 22:06:21 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vNyZDK4Q3uOlOq9V5M7SZSotyRsqI9G1z%2BA0BpiWUAIO4aGRn8yT8MuPBz36NjGrtSyIdiEtXPaIOvpz7TaOIFRBl0%2F1Cag8Xq0%2FoXsm\"}]}\r\ncf-ray: 9c853c29df875690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":975,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced","md5":"82fbbf3bffb4786aef783bf67eb2a12b","sha1":"5d82e0a476299987a01ab268a028e621e5a3e10c","sha256":"33b5f987123743e89678198a1c923df75da780a30ac60ec78556bffa75c8cb84","sha512":"8676493ebf9c96d40b68902a1a967dade4a12d4b9e8c2b35f415c744bf579224c4921298252eded1235ab978d212267a7dfb65f85c78085b917edd6035358910","ssdeep":"","tlshash":"2b11c8806cfd78764619990f143595d50bb20296982327e4da17c1b1174450fc080373","first_seen":"2025-11-26T00:23:13.882926Z","last_seen":"2026-06-30T22:04:48.987362Z","times_seen":5,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"mobile.authg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobile.authg.top/626374a31/b4dbb/28bd82a.png","fqdn":"mobile.authg.top","domain":"authg.top","tld":"top"},"ip":{"addr":"172.67.156.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mobile.authg.top/a4f07","date":"2026-02-03T22:06:21.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"authg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 12:25:45 GMT","end":"Mon, 04 May 2026 13:24:30 GMT"},"fingerprint":{"sha1":"FA:06:B9:0C:92:83:A5:7C:C4:41:7E:AE:F5:A4:6A:CC:5E:55:68:28","sha256":"74:03:E9:A5:B2:08:23:ED:CC:88:A3:27:0A:BE:5B:EC:8D:68:EE:95:A3:72:EF:FB:CA:61:C9:26:2E:DE:BB:44"}}},"request":{"raw":"GET /626374a31/b4dbb/28bd82a.png HTTP/1.1\r\nHost: mobile.authg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobile.authg.top/a4f07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 22:06:21 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Tue, 03 Feb 2026 22:06:21 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2FWB4vVGeWI2pLNDJ9SGIACaC3PYw7CHje47DnCC0eGjS94bS4jn87CbSDDpcwBGLCBYF3Ipycm%2Fbd%2Bq2d4uFuzY2iAApjd1XuxnuCmh\"}]}\r\ncf-ray: 9c853c29ef8a5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7836,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 356 x 89, 8-bit/color RGBA, non-interlaced","md5":"8fc31757f9cb2aacba1ab381517f7d0d","sha1":"f678427cfaccd7c7c3e195eaff5abe6bf7747b2d","sha256":"19220a1604c561087de22991f8106ae7aa32742477d64e6a16d4aa896eb6fea6","sha512":"4477d9cb042dedd72dc605c8b0dd4459315aaf05bdbfa8f3a6dbd3d40ef06ce835a626ee75582902cf7c365c79c385bc056410538bea2d94a1a3ee90472dddd3","ssdeep":"192:q1Ys8jt1uy2mkg47WA5geBhlUT/fwfbzl/hrlte57GtvHKTL:ttEysnWATFUT/fIl/hhti+vqf","tlshash":"7cf1bfa4b9d014e12fe187ede34c62ff9d1f58a35c864cd081cd9d0a75632ea876096c","first_seen":"2026-02-03T22:06:48.954896Z","last_seen":"2026-02-03T22:06:48.954896Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"mobile.authg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobile.authg.top/626374a31/b4dbb/c11f3bc.png","fqdn":"mobile.authg.top","domain":"authg.top","tld":"top"},"ip":{"addr":"172.67.156.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mobile.authg.top/a4f07","date":"2026-02-03T22:06:21.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"authg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 12:25:45 GMT","end":"Mon, 04 May 2026 13:24:30 GMT"},"fingerprint":{"sha1":"FA:06:B9:0C:92:83:A5:7C:C4:41:7E:AE:F5:A4:6A:CC:5E:55:68:28","sha256":"74:03:E9:A5:B2:08:23:ED:CC:88:A3:27:0A:BE:5B:EC:8D:68:EE:95:A3:72:EF:FB:CA:61:C9:26:2E:DE:BB:44"}}},"request":{"raw":"GET /626374a31/b4dbb/c11f3bc.png HTTP/1.1\r\nHost: mobile.authg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobile.authg.top/a4f07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 22:06:22 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Tue, 03 Feb 2026 22:06:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rzf8zY85VSVqzTlvFmmfhqMRJSiWHwLDUprg6asb9h5vNqe9ApX0CQT1tyLFByV0sQwiwBj%2B6m3Ecmq06S5%2FXDm08Wwb582FH7S5G2zC\"}]}\r\ncf-ray: 9c853c29df885690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3863,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced","md5":"28d29bb14bd7e5e92fc4d16e5eb8a6b2","sha1":"dafaffd2e17a8639c3767da0c5fd337fa70e63ef","sha256":"9b777f238455a6052ecd3ea3bfafe732076395468b51e65eff380be6b513cf9c","sha512":"44b4b8c750f4a53eaf5262737878318c97fb3a98d024de30dd7ab2b4077124d0a5e144b2371bb5c963169f4eb96834300d6c9de77273f9af5cb5083714b572a8","ssdeep":"","tlshash":"73811a780cefce974a6d0c4338f56e095462a8235829304bd89ddd28badb525783e7df","first_seen":"2025-10-21T10:08:41.626564Z","last_seen":"2026-07-26T16:19:38.210726Z","times_seen":4,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"mobile.authg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobile.authg.top/626374a31/b4dbb/5063060.png","fqdn":"mobile.authg.top","domain":"authg.top","tld":"top"},"ip":{"addr":"172.67.156.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mobile.authg.top/a4f07","date":"2026-02-03T22:06:21.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"authg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 12:25:45 GMT","end":"Mon, 04 May 2026 13:24:30 GMT"},"fingerprint":{"sha1":"FA:06:B9:0C:92:83:A5:7C:C4:41:7E:AE:F5:A4:6A:CC:5E:55:68:28","sha256":"74:03:E9:A5:B2:08:23:ED:CC:88:A3:27:0A:BE:5B:EC:8D:68:EE:95:A3:72:EF:FB:CA:61:C9:26:2E:DE:BB:44"}}},"request":{"raw":"GET /626374a31/b4dbb/5063060.png HTTP/1.1\r\nHost: mobile.authg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobile.authg.top/a4f07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 22:06:21 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Tue, 03 Feb 2026 22:06:21 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F0F8nJR8TmqmAV8oFCVgk6iGglOsuR4hFr5V1pTlX40XjI38yw9IbyaSPqCZfG5L8Pnc9r2j8KxjRCfxc8%2F0hgX29UnY6kyloWJsHhXD\"}]}\r\ncf-ray: 9c853c29ef8c5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":990,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced","md5":"75cf7aaac93bf4cd49957bf573375f7c","sha1":"a396710f83c29866966ac10021543e06e35e393d","sha256":"08caecdef2217519bca17c06b9733d83c9160b288f8465608822a0931b782ea7","sha512":"248e0737770544aa184c958cb16ff7233ceaac18556e3f744726506913b833ca2014bc43d855b64665b13a6e66ccd998a3a768743b6bdefb93b2eff45217415e","ssdeep":"","tlshash":"3611c8c4d6003f1a7fa053161cc86fa39d3fc01e3532e930456e6ca2618f126e57511b","first_seen":"2025-08-18T12:47:39.697174Z","last_seen":"2026-02-03T22:06:48.960014Z","times_seen":3,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"mobile.authg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobile.authg.top/a4f07","fqdn":"mobile.authg.top","domain":"authg.top","tld":"top"},"ip":{"addr":"172.67.156.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-03T22:06:21.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"authg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 12:25:45 GMT","end":"Mon, 04 May 2026 13:24:30 GMT"},"fingerprint":{"sha1":"FA:06:B9:0C:92:83:A5:7C:C4:41:7E:AE:F5:A4:6A:CC:5E:55:68:28","sha256":"74:03:E9:A5:B2:08:23:ED:CC:88:A3:27:0A:BE:5B:EC:8D:68:EE:95:A3:72:EF:FB:CA:61:C9:26:2E:DE:BB:44"}}},"request":{"raw":"GET /a4f07 HTTP/1.1\r\nHost: mobile.authg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 22:06:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FTT4LcmzlutwElRWo5O8N6iSR1AaT5hQgbqk27yu8Zi3Y%2BjwACqdPU7R%2BG4aOC3IM0mIDxetMWZNXRRLL5j2E8aBOnyzfysnKVkJ22Uo\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c853c27d8a6b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120426,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (44468)","md5":"f99f29c82fd7caa29042bd5a806e09c1","sha1":"1bcd9bf5a4b664492123e1a224d3088d8799adb1","sha256":"f339ce09538164cc0c882fc6c0f56754b198c5fd74927445353590363750bc79","sha512":"0d4d11267ac99572480f9ea78c4d93d4b398f09ceb4ba07146d82f8145bd42065f9050c5ab47c630bc222fa8b6a89eb745ceae2e70db9da2d47f2ff67dc90121","ssdeep":"1536:aOuxjGVvkXxJL3U7MDXXuxjGVvkXxJL3fCuYBEWHVbVr/xa/yiPMFpy+bjuF3J8y:z","tlshash":"0bc324730c539032d52f6bc0b2b5ab4e35f38b4ee803142afabec6945bc5d669d8641d","first_seen":"2026-02-03T22:06:48.961672Z","last_seen":"2026-02-03T22:06:48.961672Z","times_seen":1,"resource_available":false,"data":null}},"time_used":719,"timings":{"blocked":297,"dns":280,"connect":1,"send":0,"wait":117,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"mobile.authg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobile.authg.top/626374a31/b4dbb/f7eac7c.css?v=RMio7aZ7G","fqdn":"mobile.authg.top","domain":"authg.top","tld":"top"},"ip":{"addr":"172.67.156.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mobile.authg.top/a4f07","date":"2026-02-03T22:06:21.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"authg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 12:25:45 GMT","end":"Mon, 04 May 2026 13:24:30 GMT"},"fingerprint":{"sha1":"FA:06:B9:0C:92:83:A5:7C:C4:41:7E:AE:F5:A4:6A:CC:5E:55:68:28","sha256":"74:03:E9:A5:B2:08:23:ED:CC:88:A3:27:0A:BE:5B:EC:8D:68:EE:95:A3:72:EF:FB:CA:61:C9:26:2E:DE:BB:44"}}},"request":{"raw":"GET /626374a31/b4dbb/f7eac7c.css?v=RMio7aZ7G HTTP/1.1\r\nHost: mobile.authg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobile.authg.top/a4f07\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 22:06:21 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ogR%2Fzf1rhMYfcv%2Fr6kZdHZ%2F9OxWhRTujyKpB3E9HkjH9UDvQPUMlpD98vxLiJ1NMswanJGZ5h5TWGcPR7umRWitdvnLf9IRr7bHkgUcs\"}]}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Tue, 03 Feb 2026 22:06:21 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c853c29df845690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41482,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (41482), with no line terminators","md5":"7dddbb72e134f171a19cb10720318299","sha1":"2b6a532430b345848cfc019da7000e835a89acc1","sha256":"a87d26bdad13855b05bacc983fa75c651600f79e6e58fbf50b9649b2e641bb49","sha512":"15ee885c4da17e542ffbe102c7802270c8f5608508500001dbe8193c08a4197b1081f62126149115715a9f04c16e2d8a11a967e5423521339b9be6bceeff5715","ssdeep":"768:WrT0hURgKIAFUNXCFFThfK2ohss0M2o2d3Bf:Wr4aiGFPlXPdF","tlshash":"fc132a7195c13039b43bc8aab9d026ae313a841bd1231b7ef36575f9ca826e717b3744","first_seen":"2026-02-03T22:06:48.964141Z","last_seen":"2026-02-03T22:06:48.964141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"mobile.authg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobile.authg.top/626374a31/b4dbb/48cbf7d.png","fqdn":"mobile.authg.top","domain":"authg.top","tld":"top"},"ip":{"addr":"172.67.156.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mobile.authg.top/a4f07","date":"2026-02-03T22:06:21.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"authg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 12:25:45 GMT","end":"Mon, 04 May 2026 13:24:30 GMT"},"fingerprint":{"sha1":"FA:06:B9:0C:92:83:A5:7C:C4:41:7E:AE:F5:A4:6A:CC:5E:55:68:28","sha256":"74:03:E9:A5:B2:08:23:ED:CC:88:A3:27:0A:BE:5B:EC:8D:68:EE:95:A3:72:EF:FB:CA:61:C9:26:2E:DE:BB:44"}}},"request":{"raw":"GET /626374a31/b4dbb/48cbf7d.png HTTP/1.1\r\nHost: mobile.authg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobile.authg.top/a4f07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 22:06:21 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Tue, 03 Feb 2026 22:06:21 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K7cBxq4eMn8IUSIkbTIkVXwZVQQT3lAkr1BQI8%2BUXTEg52ZEn4X%2FAcenEGeYNobej681Nznwx%2BivYf1ChC0aU0nJK9cQPLzKpEav4Klh\"}]}\r\ncf-ray: 9c853c29df895690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8553,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced","md5":"d7d20b033fa8438f615ce3f348bf3c59","sha1":"12703b091f4b38e93164088064f79d68029413c7","sha256":"cb68048c7a60b4cd2a0fc49ba17e52beb8d5bf900663444cc4421f6e322dc197","sha512":"b87565c999a86e5bb5651b6ffa4353bb7aecbc48464f7f636cab56aec015f381b62ce6afffd64c679ce1c7a35a3a63c528cbcb78810402afc9c58b33ae4b9dc1","ssdeep":"192:C4/FSmm0WA+ZDJDnKQ5My5wQSzY1h15adP5Gd/U+6u6Rv1:C4Id1hJDK40yT5adEU+6u6f","tlshash":"2e02ae59aa143d4f5e1e2f4473c7900d6d60e8eb882e8072c4119f3d9b2f8984e6e62a","first_seen":"2023-11-20T16:02:36Z","last_seen":"2026-06-30T22:04:48.991673Z","times_seen":11,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"mobile.authg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobile.authg.top/626374a31/b4dbb/7bebc67.png","fqdn":"mobile.authg.top","domain":"authg.top","tld":"top"},"ip":{"addr":"172.67.156.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mobile.authg.top/a4f07","date":"2026-02-03T22:06:21.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"authg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 12:25:45 GMT","end":"Mon, 04 May 2026 13:24:30 GMT"},"fingerprint":{"sha1":"FA:06:B9:0C:92:83:A5:7C:C4:41:7E:AE:F5:A4:6A:CC:5E:55:68:28","sha256":"74:03:E9:A5:B2:08:23:ED:CC:88:A3:27:0A:BE:5B:EC:8D:68:EE:95:A3:72:EF:FB:CA:61:C9:26:2E:DE:BB:44"}}},"request":{"raw":"GET /626374a31/b4dbb/7bebc67.png HTTP/1.1\r\nHost: mobile.authg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobile.authg.top/a4f07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 22:06:21 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Tue, 03 Feb 2026 22:06:21 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pgDLMYrP2%2B5SUADbyR9bSKDGsTcE4n5%2B%2BF%2Fcu%2FiaD6hLxFDhKpz396om%2FECCmuASK%2BKkWc4EE5cQQzUY8oeJgPW7coP5pmAq50vvtyyV\"}]}\r\ncf-ray: 9c853c29ef8b5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34034,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 772 x 528, 8-bit/color RGBA, non-interlaced","md5":"0bd8745c0f8e1f641b4721974c919aa9","sha1":"f9b3a5b75eb63d310d0aaa34f155a3e5bae21fa1","sha256":"272d005d99f732fa3fc7151f3427207eca8428d5f06fd945bb74f94dea3e0c72","sha512":"e089215b090846c5bc857ec696745fe9ce29cea732918c2dbd9b7425c0f75f77c684fd59d6d965fee6f4dcb85b96b215fb103790faccda5664689019083fa641","ssdeep":"768:aM0CjRHFYc6XG/E7hlqGzAYa0x9WU7A9d5IRj89V:aM06acsGc9IGzha0XP7Aa4/","tlshash":"e2e2e023ea9ec0477a6c90a0c3fd407ed4d99a2612d354cfc7f6af98460761eb0e61c9","first_seen":"2026-02-03T22:06:48.969873Z","last_seen":"2026-07-05T11:26:06.220539Z","times_seen":4,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"mobile.authg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobile.authg.top/626374a31/b4dbb/2da31fe.png","fqdn":"mobile.authg.top","domain":"authg.top","tld":"top"},"ip":{"addr":"172.67.156.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mobile.authg.top/a4f07","date":"2026-02-03T22:06:22.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"authg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 12:25:45 GMT","end":"Mon, 04 May 2026 13:24:30 GMT"},"fingerprint":{"sha1":"FA:06:B9:0C:92:83:A5:7C:C4:41:7E:AE:F5:A4:6A:CC:5E:55:68:28","sha256":"74:03:E9:A5:B2:08:23:ED:CC:88:A3:27:0A:BE:5B:EC:8D:68:EE:95:A3:72:EF:FB:CA:61:C9:26:2E:DE:BB:44"}}},"request":{"raw":"GET /626374a31/b4dbb/2da31fe.png HTTP/1.1\r\nHost: mobile.authg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobile.authg.top/a4f07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 22:06:22 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 03 Feb 2026 22:06:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kTkfskgAM9GwNjgFhOcVujC4HE4%2FrC2IPoXOTrh4S%2Ft26G6cU37tU2RNrG8%2BucBoeIiMozlm1XggqwAa07uZ4QlMydA%2BKJ2ddmLzJKjU\"}]}\r\ncf-ray: 9c853c2fcfb35690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26652,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"c5d5cc818c4f88fed49503fc3b378e22","sha1":"924b7fc2f1aabac3fcb0631fed67dbefcbb48c8a","sha256":"b54d896c4efa1f0a0550451080e994aef486d4cb8472c9c81d3295752f35ae9a","sha512":"8f757af40777ec22686e0c3f10740884eb2bfc7e3ff4ff152788ceb228670632de65c4b1bb27539df0bfe51d05a4a47cf985d4711df7085527a479df1de19a0d","ssdeep":"384:GpJ/iZq7upnR0cnauyPwWlzfCf74K6fM4VY43Z38gm0IiaXhdqkH8RGzkhb0xJ:KJIq7eqDBf07Nsly4JMgm0rWLGqkN0xJ","tlshash":"45c2e19895b2c6512cab853f3de88f2f8637400391fd183cc761bc2e4556cb96fa584b","first_seen":"2026-02-03T22:06:48.972906Z","last_seen":"2026-02-03T22:06:48.972906Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"mobile.authg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}