{"report_id":"308c79c9-60f0-4868-bc46-0ce13a782072","version":6,"status":"done","tags":[],"date":"2026-06-03T12:18:23Z","url":{"schema":"http","addr":"patterndomain.info/420-1524-290526/email@example.com","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/email@example.com","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"title":"SOUTĚŽ UKONČENA","dom":{"size":26664,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (372)","md5":"498ccee9bdf95751b296ebf3d091610d","sha1":"64703a871a4679e05d7bc25e7eabb605bc8a1311","sha256":"0e11c68b4a007539a07cb51e7aea5a0971ec3eb873989b21b44e6914579782b1","sha512":"57f8dff46a492df46c2bc7f179d22e85496a0395fcf1b10234b6d971582489230ba16de253e2c9bc037484ac31ef9c7aa36702a5e3f41c70c3246a0342ed5e8c","ssdeep":"384:MrycUZ01OW963AseL/8GsmGARmxtC4faDVi0GzigigiOisieidiTBrhN0J:MrycUQdQ3Ax/PcHCAju99fhvMJ0J","tlshash":"50c2fb66d4f64573069380e56e765f0e3ea1d607ca1b8a043afc4bd8afd6d87cd13218","dom_hash":"domhash2cef4befcce726f31f1fa4c753c042c4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"patterndomain.info/420-1524-290526/email@example.com","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-08T12:18:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.google.no","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-05-31T22:47:07.964282Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":651,"comment":"","tags":null,"fingerprints":null},{"fqdn":"natureviewer.in","ip":{"addr":"104.21.20.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-19","domain_rank":3343791,"first_seen":"2023-06-19T11:10:09Z","last_seen":"2026-05-29T09:46:22.676182Z","alert_count":0,"request_count":2,"received_data":1544,"sent_data":831,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-05-31T22:50:38.396379Z","alert_count":0,"request_count":1,"received_data":830,"sent_data":900,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-06-01T07:27:10.818968Z","alert_count":0,"request_count":1,"received_data":90781,"sent_data":409,"comment":"","tags":null,"fingerprints":null},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2026-06-01T07:30:26.606028Z","alert_count":0,"request_count":2,"received_data":162991,"sent_data":840,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-05-31T22:26:05.480738Z","alert_count":0,"request_count":1,"received_data":478992,"sent_data":401,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"patterndomain.info","ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-12T06:05:59.571279Z","last_seen":"2026-06-01T07:26:41.202257Z","alert_count":252,"request_count":42,"received_data":2921899,"sent_data":17980,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Bootstrap:3.4.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"BootstrapCDN:3.4.1","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"641dd14370106e992d352166f5a07e99","sha1":"eda46747c71d38a880bee44f9a439c3858bb8f99","sha256":"a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af","sha512":"a6e981b23351186aa43f32879dd64c6801be6e2af7ef8b0e472cccdeeba52d5d7894de4bcb292a364f1e11e525524077534338140a72687ada4fae62849843a5","ssdeep":"1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH","tlshash":"d193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89795,"data":"","first_seen":"2023-03-26T04:59:07Z","last_seen":"2026-06-07T19:40:20.697263Z","times_seen":24859,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/email@example.com","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9865e082ce464be3e92b96e7240f9480","sha1":"c0cb21290b77c70bb873d932ef5e8fc6d6ce70c3","sha256":"cbacaccc01608e175df4cd24b8e10ab4f4e4b6708013b709250519be4b29affd","sha512":"37bc3dd414ec7efbc79c68d6316923b011c8ee83213407d49ea02fb8aef41fd00c6d8087cefc05a30e33e7365a48d4a331d8a91a609024e9044e204fdb875821","ssdeep":"","tlshash":"67c09bdc214b5db595db2b414b3ff644f4563211a5a11c3109166344da30e17ab5cc58","size":144,"data":"","first_seen":"2023-04-26T20:30:02Z","last_seen":"2026-06-07T07:27:41.093035Z","times_seen":1206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MB2WV0SZV7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"261df5f7ca4d624b08f95a2bcc153a2b","sha1":"341d0263521e97a6412ed9c4f6e7f567dfe2c13a","sha256":"750783e7cb3363813888437ffb37b3715c26fd16425781afd263f8d040c681bc","sha512":"30bc5f89c782a6ec761099d9e1c34fd7af12a59dae065f4d41622201c49f0ddaa4c526a7998d4fd74aedc25f854f64d010c0a9ceabf6fc57fef618fb779f8b65","ssdeep":"6144:cQk9D3rZk5hGQC2FbMtTVO1AXucZd/AmDylgEuPcJP:Lmk5hGQCFtTzEu0JP","tlshash":"85a4f9cdb3d674625296f478503f01cba57b28e2b44cc89ab189cce42e7469a4277f7c","size":478388,"data":"","first_seen":"2026-06-03T07:09:57.854962Z","last_seen":"2026-06-03T15:48:42.441712Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/js/custom.js","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a1c4976e721196128a050d11d1e854c","sha1":"59549f00cbe76b113a50dbc60584e71d8da7f1d4","sha256":"111e5a335975b9daf6a59e7a078e6bddfb2309a22dc08c0d1d9351a01ffdcb67","sha512":"07dce45cbc9e4f02fa0a491abc70799922828975c68b95270d05628cd5cffad156aa94acff07ff2ada9ec4208f0d8a573a2cf79e75530251c4d92928e2ddfb6b","ssdeep":"","tlshash":"c9e0c21a75740e3cd47f719a107b8acc2b37019286420b0de5bc47812620e892e7308d","size":299,"data":"","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T13:47:13.663761Z","times_seen":197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/email@example.com","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4e81689b722522fc87e221258034b6e","sha1":"93d7e2a0b4560ff6fdc555b044bac2c3ea4a843f","sha256":"2b370629fec3a92055e0d6d40e98ea7b0b0bf7452a0211d334abfdc1d557ec16","sha512":"f5dd5afa90a9ea63adc68ce58b27db1b509a38a715ff21e577c64a34ca8350c20b9c6ec5d80ee424c2d2a52b130f9b5f3355fa44c5fa211130f06ded55fe5f74","ssdeep":"","tlshash":"7fc0222cfcb8d20094bb20ab2e2f9a281a3124233c0bd40800cc13442e0c91c0502402","size":184,"data":"","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.117056Z","times_seen":485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/email@example.com","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e01055d59660c5ddda6bb8357c32565f","sha1":"18c100582fbd1b048ad38fbd9f0f47b717cbe810","sha256":"5475bb22a3cf354b92628f1ffa51366bde558ab3f30f0de0b3f6d2dc320c71fa","sha512":"f8604783330ae72ab45213f3ab3de0e79bd5d2281f782a9b11d414d2bf999b293fff84dcbbbf383b8ff5dbbd4020a0e4b417db676311f8348f5bc76edd46c55f","ssdeep":"","tlshash":"2fe06f4ef1aa1a101533707e1e2fd2482d36642b2800ca8cbadc8ae88f2ca8d204300a","size":367,"data":"","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.117663Z","times_seen":488,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/email@example.com","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fb181c93821307a768ad458deb2a64d","sha1":"38013ea8c9a4016524e4e811a1f7c3578383491c","sha256":"009773d33f36085d8c464bc22c8e45da85819d4384a497085c56e3f5a1c6296b","sha512":"2685658337ed7bf746d588daf854420d880d028810fe3966d2c82c5f9d2af3854dab1b6fac82c5917901eae2db546cd5e919a83acadb657f12a487e0dec7f100","ssdeep":"","tlshash":"f321eb8bf1f7156113bbf13a0a7bdb083831711b7908cb08bd6d49e19f69d4ab417a89","size":1132,"data":"","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.118296Z","times_seen":486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/3.4.1/js/bootstrap.min.js","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f34b630ffe30ba2ff2b91e3f3c322a1","sha1":"b16fd8226bd6bfb08e568f1b1d0a21d60247cefb","sha256":"9ee2fcff6709e4d0d24b09ca0fc56aade12b4961ed9c43fd13b03248bfb57afe","sha512":"a014e9acc78d10a0a7a9fbaa29deac6ef17398542d9574b77b40bf446155d210fa43384757e3837da41b025998ebfab4b9b6f094033f9c226392b800df068bce","ssdeep":"768:up/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:NorXfURXiUrmq5YW","tlshash":"1b03950ab22031a107efa1a5414b020e73366a7df94791ac78a9d9f22db4c49717bf7d","size":39680,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-07T18:07:47.722949Z","times_seen":28790,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/email@example.com","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"44a6a9f95d29d1b108df5246fb8f85d7","sha1":"fd446ed2bae9e883f37922a6380c082ff3c3f0ff","sha256":"d27dd36fa4987fbb6ae8077bdb330354a7beb27b895815d5db7a9abb0189e137","sha512":"693d85d95c001f28ced348651e958fe548955d7a17f16e3f668f71d9c63d5de2034f3a675eb5b4f6ba3135c73100134906a536700ed9554615f198d76fc36a3d","ssdeep":"","tlshash":"d501b128a6f5a5c20913c8727d7f944475ac16457635cf41388f90c1afb4b2b303abd0","size":799,"data":"","first_seen":"2023-07-17T02:20:27Z","last_seen":"2026-06-07T07:27:35.119122Z","times_seen":174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/email@example.com","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b8a01b2609232226459e4ced7f4ae20","sha1":"c3ae4ab3504c3ccf216662e2e2539e2782f89978","sha256":"30ed6f0b93e4adade384e8286baf21c5763708efa822fa524efebe2ce512a7e3","sha512":"dd2e2e830f4f0b86d2d745c544a348d88f504a86806ccd9002bd6d3576d514379b37d72234a1c0d675a492432c38076b0586c0d17cdbe4d112e90a460d8e4822","ssdeep":"","tlshash":"f211802d987612600db76cbb1b6ff7443176e4132009dd0c3cce8090cf6de1a458abe4","size":1020,"data":"","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.119821Z","times_seen":400,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/email@example.com","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"321590060c7ae8eaa24958971be0390e","sha1":"2f44c6f1befb8676faa6a512133afabfc8c29e98","sha256":"6fd5adf0125390f5620c7410d96cf4e8a4b508ae92f457a4d52713f2e23ab8cd","sha512":"53208dd9e4a5e3dcd5edbeaf6931445578178da5e41b09b015d758c53863911fccdd4cd13274e7676488dc83efe8507ddb25f73e7191791dfd8616b2b7e1fc42","ssdeep":"","tlshash":"15d0a79550d16b20ddbb21ea623b9604252141533cc8466a779de3c07f52e12c5afacc","size":264,"data":"","first_seen":"2026-06-01T07:26:38.593796Z","last_seen":"2026-06-03T16:03:18.201585Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/nav-center.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/nav-center.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:01 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:24:04 GMT\r\netag: \"6fe-652f167efb0e3\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gfFr%2Fku6wEE9r7lY7PKip%2FdpXanYF1jxOJ657dFmxCVSYxmpwUJ%2BODF91l8txnsDB8dyBVCVEo1UZxdCx%2FF0m9Xg9g2IBJrxLTdEiDUHyhioyyjtBUZwPO2ichxmxjmxQIputtE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 1790\r\ncf-ray: a05ea359e8b8b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1790,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 530 x 46, 8-bit/color RGBA, non-interlaced","md5":"758db83f03eaa6af4e417c2a19650852","sha1":"ab838a789f5eb4a63a3fbcdd5025b23ea9386f21","sha256":"71d2638625c036f221d0593016d89573c90a4169e86d2c6757f10e29a850fcdb","sha512":"350fb03e8fceffa022f6d67abceb7711881702831c0b1c6ebae5632682b79846b4d437d02374e2c68dc9ab562e05251191ab4e792a95f4bb9d16e80cf0416cab","ssdeep":"","tlshash":"9d310d41588c10508ef9d585e7a87c247cdd94adc13b12b5fc74053f950aa9dd3732af","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.066353Z","times_seen":468,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/logo.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/logo.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:01 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:24:01 GMT\r\netag: \"553-652f167bf51c5\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=urmxvmx8RLUpQAEXqs19%2FCDgGyQuHHqcpdyta0%2BF0tQ%2Bm6uYkSK6WzmYS3ik8Ypa9oT4MGHBeu1tT9R8m0l3GV%2FYbaRwhu7TTFbTaUFa9JYkaXL9gpz30HTwJ6sZCiccQtee0yo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 1363\r\ncf-ray: a05ea359e8b7b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1363,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 51, 8-bit/color RGBA, non-interlaced","md5":"aa592b09c06a95511c5ead39876e14fc","sha1":"850537c9c02d96194ce96f91696e537cd7f61b63","sha256":"3d24fdc55c9daff9c2fbc05ef988a0452ec2a1940f50dbc66a0141ec7ef80fb9","sha512":"87825763105cca087f163c6128320802ad8012a0af7ba734fef0266085e80de98aac083b8d9c7e479f6153f43626224cf41cccef78eb38f750060400ab96c1ec","ssdeep":"","tlshash":"862108b26347dd19894331e1a2b2d830855f02ba3a664039a2e3b2d11aa02059a43ba5","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.083563Z","times_seen":468,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/3dots.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/3dots.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:03 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:23:50 GMT\r\netag: \"c76-652f16719be04\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tnJt762nwojfS08iypiFVtUF%2BbbzHx6kxyUZ1u%2B98GR1PKKRFWvxpdRF7gDGH2m2becG3QXy%2BEn3LKYJ7SJjyj1PItrm%2BVxPGpbfngNNCSWiHjme52o4KIusZRMqlR8%2BbnnqBU4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 3190\r\ncf-ray: a05ea359e8beb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3190,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 8, 8-bit gray+alpha, non-interlaced","md5":"7153b61dccaf8ac39c982d627a0bbd46","sha1":"8fb66305115e65201326a868d703ff37fcddadf3","sha256":"2c26d7b45dfdac8e81f53a8a6b4d3bc2cae16ded9954bcc6720ee620a58d7b86","sha512":"20a89dfb07a39d162de95583b445411fc887dd00b7e463c6d7dce1db95796a9b3dc3ad37fdf680e14800888a5ff5e1497a4209952b394c846651656b7ec1365a","ssdeep":"","tlshash":"ad617909b802a8104a9eb5c4f9d991479a778fc0dde1524a7ed5c8331cb11f9ecdd7d2","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.105007Z","times_seen":487,"resource_available":false,"data":null}},"time_used":1142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/favicon.ico","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:03.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_MB2WV0SZV7=GS2.1.s1780489082$o1$g0$t1780489082$j60$l0$h0; _ga=GA1.1.930913453.1780489083\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 03 Jun 2026 12:18:03 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dYJD8XBoD8KgZMfGnDcq1gwCRWx2h7rF4MRGvQXo30ZsjylLSMZBh9qmEBr%2FBq16yfzlLZ%2BGSqVnjQrv86ceedJJyx1%2FtAWeDeQ1GuR2j2H6o3HmtD8Vv7cbPazMJ6clnLyyL1A%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a05ea3617976b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"18ffb59b61525f781cf9251045be575d","sha1":"bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d","sha256":"b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642","sha512":"a032f853abd9492232e1183d1cb1d14110b623f2e9dec56b7b64dd576a0317dda8d51125763e11d6642433c5364b2bd10a994ee4f1514629a4950bbab3aba499","ssdeep":"","tlshash":"ebd0229ea083228f452321903ac211d2a54d23a6bc7a42e83c83a88a921893dc4ca29d","first_seen":"2023-04-05T03:16:16Z","last_seen":"2026-06-07T19:39:48.422601Z","times_seen":37013,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/Screenshot_1.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/Screenshot_1.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:24:09 GMT\r\netag: \"cc5f-652f16834b54a\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bGdH9UsIDVAzaAJ5OI%2BykL%2BLwJ65O5o9Xeqdbife2QxZom%2BHZ2Rc6q8yGSe%2B8MiPcTS3IHErIRiTPFRbRQYYJv1AfyMdrlCMNDMxAPd2r78Ji99QFKn2fso4pNzucEJmQYf9o58%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 52319\r\ncf-ray: a05ea359f8c6b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52319,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced","md5":"efa6e6b0fa97892356c6637c324f4cf4","sha1":"1bd38dbd888acbb415fd9967d41c333d64a33ae3","sha256":"0c3de72152c3f4fe5d46205eeaf3dd6e3316123694ea43ff431c90423ce5c98a","sha512":"0e0f1deff7e9712ea55aa551f8a3f3052179d90e1cc53aefb61f432938495f92be3acf919eded93ab6ecfe3e4bacdef0de590f0de520d954737076f06ab14fd7","ssdeep":"1536:jnon1YVtcjzbOw3PhOYj6NPIrhQs6eHwFH:jon1YXubOw7qPIrhB6eHqH","tlshash":"ee33012baf1f481aa1f6e5037ad7faa381b617830b1dfd6994d51ba002d14c213ec26d","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.098069Z","times_seen":346,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/profile.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/profile.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:01 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:24:06 GMT\r\netag: \"a949-652f1680ca721\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rZ%2FteDZXtgcI4o185ImgnUWzY6LqhY6CiESLZ8HxjG3fHylqGkLXvhKYhTd1DtXU1luhDUzZs82Q%2B%2BB0EQPOdhziuhxJTwOjE3KiOv0ONqFDtMTgFuFYekV%2B50wRNTHoe73N594%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 43337\r\ncf-ray: a05ea359e8b9b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43337,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 976 x 976, 8-bit/color RGB, non-interlaced","md5":"c588a8f3e9aa3c9e89d8a219217d287f","sha1":"e5e93033cbc37fb59bd1242206cb5062a5937a1b","sha256":"83ae807f7cc389ee63e3bf7f66106a07659da71e15b4316d3015f63732d8c726","sha512":"69b2ecb42d02317e685b137db911939ff1bbbbf8007b3f67ab058e9c146bb20ca82cc8cd1a53e0a7edb2a3589985b7ba6813337707d4a5b0d0ba3bebd0efbfca","ssdeep":"768:bA2W0iXNiszQQC2pAQP9PapLC7e1NtHEqFMzlMBJU6chw5IDZLt7DinOs:bplKNisT9P9PapLCoNt1FMcUY5IRt7GP","tlshash":"1513f16ccd51b350f7a65590124f38bbb76d0df1f19e8eb2225124171ac32aad2bc587","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.088786Z","times_seen":468,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/fav.jpg","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/fav.jpg HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:23:56 GMT\r\netag: \"10e9-652f16773e4b5\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=grSOlzwKG%2BkPnyfa29YF%2BIh%2Byw1lSO2xoGWuAJacl%2FGjgPP%2Fk4luvI8khG5fQG6uL%2B43x8xnczLPt93wsKR6AMSWt5qNqIUCLTXF0grIzfUTe%2BDD5ACHVkTg0AWVDY134keeYjc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 4329\r\ncf-ray: a05ea359e8bcb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4329,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3","md5":"a8072edcfe4bc1575de3fd39f256d4bd","sha1":"b4b6968bdac45d2a42f173384afe46b2a9bcf79e","sha256":"bc2b7e9dfe76aca7408fb750a8bf2b8a37fdfa269f4384779fe9d7eaecb76de8","sha512":"ee83618164b8a8471f28a9ed5aa46d71bd47c27c4d114ff7983b6a7b088d0a24f236285cd37b0b381e86035602966599a4361976b0df586242a18744d8766b9d","ssdeep":"96:53BkU2zvqionIWJ9gWATbJA4oYTYS7vUvak3MWOn/vGO4ss51lrp2iuPLbjK:0Hzv/oIg94Tb/oYf8mWjsY14bjK","tlshash":"3c915c4f16c5492bea4e03f7cc25776da36c3dc46dc265ebc964d001da6d17203a82dc","first_seen":"2026-06-01T07:26:38.563278Z","last_seen":"2026-06-03T16:03:18.176902Z","times_seen":7,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/comment-icon.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/comment-icon.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:23:53 GMT\r\netag: \"177-652f1673ee210\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f1z0U3I0jSOhrLwDXXj1XaW3cnBY%2FveYvK6p7vgbfG0bewhiYLFUWJkmiLP8%2BgdKCH4llCkVqQ4XLFuG4VmCqOyx0oRBGSUoHK2wUSik6%2BCnQt8Jg5kVKwmnzHACFa4WbOWV5gw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 375\r\ncf-ray: a05ea359e8c3b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":375,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 26 x 25, 8-bit/color RGBA, non-interlaced","md5":"a86fc0de59a527d6c541fe8184036939","sha1":"b039b18ec6504f45b9951d8a68d82f31cfa1400a","sha256":"b583d20e0066f6b10712932936d60b299b74d278d66c7276ad27ee21366b3260","sha512":"ca1970819ea33e18d9d9a9af003b5c46d9a977d85a06166794bc1985ffaff903f20d8362f9e34ecc9e10acf5edc1c0ba2efa771cd6c33cdf89ef0f752a9518c1","ssdeep":"","tlshash":"f3e061b297c8546d9f928d5e13970161789710970057552d1bb3d9151c147484e98b61","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.097428Z","times_seen":486,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/js/custom.js","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/js/custom.js HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:03 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:24:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xR1DHBkcAHbBNS5FNYzWF9Hsc%2B4nAQmqxHlnUXRIxiIZu90Zj8HpTfuOweEIYIaxj8WB6%2Fv41zU8QUm4Z4O6fPuVPJAwyvCjjIYuMa7zeH%2Fix%2BxcDdwN99fXv94aUjG8OLADjoo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\netag: W/\"12b-652f168c62c7b\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a05ea359f8d3b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":299,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"5a1c4976e721196128a050d11d1e854c","sha1":"59549f00cbe76b113a50dbc60584e71d8da7f1d4","sha256":"111e5a335975b9daf6a59e7a078e6bddfb2309a22dc08c0d1d9351a01ffdcb67","sha512":"07dce45cbc9e4f02fa0a491abc70799922828975c68b95270d05628cd5cffad156aa94acff07ff2ada9ec4208f0d8a573a2cf79e75530251c4d92928e2ddfb6b","ssdeep":"","tlshash":"c9e0c21a75740e3cd47f719a107b8acc2b37019286420b0de5bc47812620e892e7308d","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T13:47:13.663761Z","times_seen":197,"resource_available":true,"data":null}},"time_used":1120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/notification-icon.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/notification-icon.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:01 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:24:06 GMT\r\netag: \"f7b-652f16806c730\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RXsrixiWYckQrzn7dCOHWSbz25xouCDpCrirUvEz4uKduNIgkCIrgHqyExTBBBmtUQFAgGVWwhIKn95Ot5dmuRv5lQ4ro2HalRa1hDwbC%2FqnjBSfZxoTmok72LUZJjs4sJws4vs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 3963\r\ncf-ray: a05ea359e8b5b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3963,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit/color RGB, non-interlaced","md5":"7449e968477378e41c0fe3fbf95005c3","sha1":"4c591e2bf271b3319f37f3620f65f5aa2787bb1c","sha256":"ee24ab960aab7b1c0fb2fee107ff215e1142f166aecdb32394f2b92c97e5d334","sha512":"7f992672cc4d677433495d85bd88e293dcfb1ef54cd2fe67c3d9fadcf01fbde3c3dc71dc916ae39eb289a634b435724b50c42240ca3eaf88731f79fee86995c5","ssdeep":"","tlshash":"d5811a5cb5237c1d6745fa8479fc610b6a6b22d089806d00adc7a673ec724fe8608fd7","first_seen":"2023-06-05T00:03:40Z","last_seen":"2026-06-07T07:27:35.083061Z","times_seen":488,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/like-icon.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/like-icon.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:23:58 GMT\r\netag: \"225-652f167920f8d\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TyTqf0%2FWq1ie6kKVGQ1lsiAwrYTEEgm7vHcOsL43CM52aGNziBJ22yw7Zp4JEgOyy4ejqcDVt9JXl%2BmTlg3IhIYMcL8IvYtTg9V16BoGXRPJxwbtSe1pwk3lzlT%2BuVI%2BAfjrv8I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-length: 549\r\ncf-ray: a05ea359e8c1b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":549,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 26 x 25, 8-bit/color RGBA, non-interlaced","md5":"4854b3b5acf97f9d9b269f9e1457a24c","sha1":"272ae2eaac646556793363c925b514834546fc8a","sha256":"d1e3734b548f1a23f0f2411fd1abc6fb0abfb8c9022395108e5de486071fd3d0","sha512":"b459f946f92624cb016170e0930291451246f94bd9655eea9b13811ae52196fd18ca7dc3e6fd2ed07cd005f168516a0c3d6db072d78da9bda2271a9542eabbb1","ssdeep":"","tlshash":"b6f020cba2e9dc689b665106529b65d2e044864f202ab3cbac888e2853023081a26a88","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.070507Z","times_seen":486,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-MB2WV0SZV7\u0026cid=930913453.1780489083\u0026gtm=45je6611v9115169269za200zd9115169269\u0026rcb=12\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115616986~115938465~115938469~118228214~119027222~119064971\u0026z=1926909032","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:03.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:55:19 GMT","end":"Thu, 30 Jul 2026 15:55:18 GMT"},"fingerprint":{"sha1":"0B:35:DC:89:EA:6C:6B:84:37:37:B0:28:E3:EE:28:BF:30:63:E1:98","sha256":"0D:F4:09:F4:10:6D:23:C9:1F:1A:51:B4:6C:60:CE:E0:19:D8:B6:19:C5:C4:86:1B:00:2E:EA:54:40:0A:0E:26"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-MB2WV0SZV7\u0026cid=930913453.1780489083\u0026gtm=45je6611v9115169269za200zd9115169269\u0026rcb=12\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115616986~115938465~115938469~118228214~119027222~119064971\u0026z=1926909032 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 03 Jun 2026 12:18:03 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T19:34:26.603141Z","times_seen":940232,"resource_available":true,"data":null}},"time_used":454,"timings":{"blocked":200,"dns":3,"connect":34,"send":0,"wait":50,"receive":0,"ssl":164},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/user-icon.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/user-icon.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:24:11 GMT\r\netag: \"1340-652f168525f39\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pf%2ByGVX6CoAjI0zAEE%2BgDyP%2F4zAh7f0slMwfstkOhTellPm%2BZmVf9%2FZZxJMv%2B6c32lvtd0Mz1g%2FpjmdFuYsiad3PXV7MiExSd2NcfBV6%2BA5xiP3dQKDYB1Rl2hKK2j8NYEI9VLs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 4928\r\ncf-ray: a05ea359e8b3b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4928,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit/color RGB, non-interlaced","md5":"11434eafe764b1eeaaed36d061891ff2","sha1":"a7b5409bd4bc946cc429da4f9742d66c1b2a611d","sha256":"8322f3b8328e36f09227b97f299103ebda9aebaa29a3fcc7c2d437cfaf48755a","sha512":"3318dc48cece22cae4bedf5f7033eca65aead23ad2fbcbf015b9cc9918ae2cdfe06905171582aa5e48685d64b4e95333cc1899bb3260d87201fd7a22fb7a4346","ssdeep":"96:xSOknmWp8FUZqeONoHb8oHogRLlCipn9avSYLe0r28F6I0PsYHmpiSLJd7kg5X:xSOkn/b7l/R5CinoazSUTs0Ud7ky","tlshash":"aca11c86bb71f886870c214599d8530aeb37d6c58ed021629fdbcd17f1206bdd90c29b","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.100396Z","times_seen":487,"resource_available":false,"data":null}},"time_used":937,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":936,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natureviewer.in/clicks?p=1524Pemail@example.com\u0026e=\u0026s3=\u0026s4=","fqdn":"natureviewer.in","domain":"natureviewer.in","tld":"in"},"ip":{"addr":"104.21.20.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:02.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natureviewer.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 May 2026 13:23:29 GMT","end":"Thu, 20 Aug 2026 14:22:17 GMT"},"fingerprint":{"sha1":"26:DF:3E:FA:3C:E2:02:43:EC:F6:0B:03:CB:89:87:1C:49:96:B4:EE","sha256":"45:E4:B7:6E:E4:00:B6:93:B3:64:C6:FF:80:EF:4F:70:C3:93:EA:9F:5B:33:D4:8C:FE:75:B7:5E:6F:F1:A3:AB"}}},"request":{"raw":"GET /clicks?p=1524Pemail@example.com\u0026e=\u0026s3=\u0026s4= HTTP/1.1\r\nHost: natureviewer.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://natureviewer.in/error.php\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OTbHHDQdS8%2BDMxgOL%2FfXMhEFkhtxXlSF%2F4%2FZAuTWR6zKMcVCCfQ1JEc5Q84OBjXlrkzUNE%2FKB7MMHys3gF177pgCHIdgCtOXGr6NibMQdj%2BK8UoDwMp%2B8fX2bF%2B2Tc9auOw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a05ea35b8c055a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T19:34:24.271823Z","times_seen":16219631,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"natureviewer.in/error.php","fqdn":"natureviewer.in","domain":"natureviewer.in","tld":"in"},"ip":{"addr":"104.21.20.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:02.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natureviewer.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 May 2026 13:23:29 GMT","end":"Thu, 20 Aug 2026 14:22:17 GMT"},"fingerprint":{"sha1":"26:DF:3E:FA:3C:E2:02:43:EC:F6:0B:03:CB:89:87:1C:49:96:B4:EE","sha256":"45:E4:B7:6E:E4:00:B6:93:B3:64:C6:FF:80:EF:4F:70:C3:93:EA:9F:5B:33:D4:8C:FE:75:B7:5E:6F:F1:A3:AB"}}},"request":{"raw":"GET /error.php HTTP/1.1\r\nHost: natureviewer.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZjBXEhehOi2wGcDzFGnSMV9ogu03vlTE8oQ7Gb3wHYFGQAIUqeIVFU7yglV0KLpX9yfJbkk7Mb3kS2GqHgSGgJ5lMJLr52w5cOPatWKwIRDkaSKkDsQUj8nsX%2BuDcszAAK8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a05ea35d09495a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T19:34:24.271823Z","times_seen":16219631,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/verify-icon.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/verify-icon.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:03 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:24:11 GMT\r\netag: \"16b-652f1685b5ff7\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vzolMjrn5fAyru27hZHrcr2suxZeItBCiUP8f5ZQKWe6vI3AUIr8s2JwILeY%2FLWPt4JWELb9VIl19nfM7ma3ZQ6kYc0tBshBAod5nWssYrY0j8MPt%2BzmapumfVk5Zn6Sv1B1TPY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 363\r\ncf-ray: a05ea359e8bdb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":363,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 34, 8-bit colormap, non-interlaced","md5":"71bd320f3e466184720c875a29ee7479","sha1":"d4fe8cc7d57d2c1a7ced60b24185805f9947cfd2","sha256":"baf4b8f7ded079ebf51b94b04ab36a71c26427e2f3abf5c4d038d3455c3650ca","sha512":"f1d78f4f1993eb06c9f11c046480325f692324c472dff910b8a79ef41d47dc10e6257b9f45e44d873adef3fdde7831ac9a71acdccbb22449bbd0dd8e52affd24","ssdeep":"","tlshash":"95e060c4ab824e2dc14ac0b93a2e62102d3b004041a9e806b003fd300e2bfc0b4ccb42","first_seen":"2023-07-17T02:20:27Z","last_seen":"2026-06-07T07:27:35.101974Z","times_seen":451,"resource_available":false,"data":null}},"time_used":1153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/like-comment.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/like-comment.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:23:58 GMT\r\netag: \"1ec1-652f167921375\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zxT83CrxPSh%2Fm6CnFpBkkZJ6QsLKi1GIrlPHS2OGOw9tmHiW2Duyn0NOb0156go6Kckj6aeryf3Tuz6CmrkEqFYxkRAzaoM2ddrvMf9Szup1OoGRJVdQMidzvnWioWUOICdglJo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 7873\r\ncf-ray: a05ea359f8c5b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7873,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 186 x 186, 8-bit/color RGBA, non-interlaced","md5":"a856ab9c399bc836513e4eb501a2b86e","sha1":"6ca54aca2bc3f389a548a7558a01e738a3b50999","sha256":"7c0e31d40de2fa662e48135b9daed7383a5765c14a31dbed842551df9f1972d3","sha512":"d576dd3fb6a43b392758531e2b88ed6197b2d7465500f42a9557017baa9cfe1ec2b59c71fe04d488dec99fc2aa9b67754752a00c653566fd64d7c7376835baad","ssdeep":"192:IS7kny7TJsP+Rk61nxDwHpdt4AYn79tc2ZvjvdO83J:PQny58W1xDwHpfirTvjvn","tlshash":"7af18d46ad159c4453499e16c9eb5233ae633ac4fad4c092fc9a9c8a48824b7b80e1da","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.106726Z","times_seen":486,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/rlogo.svg","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/rlogo.svg HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:24:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eQuZzlGqrSF9ZdrgX0KUdcbjkj6cBWFSFbfnwB1HoQsCOx0lyJAYR%2BEvUIypoPXmJiqvQ1krhW2qb5slWqEW5LBzRPQY69I9Fxe9WPu3ckW5FgCc94a%2BvvqAbilJPp5ZLO113l8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\netag: W/\"85f-652f16821b5e3\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a05ea359f8c8b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2143,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"db0f19e3d73ba286010d04df3126b56d","sha1":"5d24a34eb03bd971aebbf2179469302780da179c","sha256":"0fc3f943f2d77207076a8121f0c0e2494cd795445d66e959cebfcaa8c46cd73f","sha512":"f2096c47ba8188529cce421c53f35e7114cc411595faec0e9a949cb1cb2e87b9185235b327144920448fae4bbb7e89bb80a5aee91270421d48b18aa0651cb869","ssdeep":"","tlshash":"e9419cb9cf8e523c15538b884a228551bb5f74bb7385a7f11e1e87b0b2039a9c653c1c","first_seen":"2023-05-20T14:13:59Z","last_seen":"2026-06-07T07:27:41.080579Z","times_seen":482,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/sad.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/sad.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:03 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:24:08 GMT\r\netag: \"7d3-652f1682e5c3f\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4UbD2o2%2B0nVkb0CorcNwUq99hstGtFoh%2BDZvDlhtJCORIo0RZ8c7Yna8QWlieTvkpro5K31mb5H%2FJdmnAS9BAlTkiQbaLmt%2Bc8vuFFV7iswubpBY0G6%2B5DJz3a%2BlWu%2FrplqQkCw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 2003\r\ncf-ray: a05ea359f8d0b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2003,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"bd5ee20b5950350993faa7d4ddd678d4","sha1":"132ba48445b59834ebd05f2634c1d2839237cc9d","sha256":"a2fd1d819404879fa5b646eaa58beb8537ff9d23097057ca9a55199f2f12a1b2","sha512":"dac603dcf803d1a79ef0a91683515427932cb3f6127dc69e8d34dc42d3e4bf6bccef0719667531f0625fe8cd67d58a56272ddc0e4735f3b071831eb3678a20a0","ssdeep":"","tlshash":"11416ccffb0ac8cdf0857e16508f4075802e0b88958def183a42ad3411c65a3457e8ee","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.082009Z","times_seen":179,"resource_available":false,"data":null}},"time_used":1130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-MB2WV0SZV7\u0026gtm=45je6611v9115169269za200zd9115169269\u0026_p=1780489082461\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AAAAAGA\u0026cid=930913453.1780489083\u0026frm=0\u0026pscdl=noapi\u0026rcb=12\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115616986~115938465~115938469~118228214~119027222~119064971\u0026sid=1780489082\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fpatterndomain.info%2F420-1524-290526%2Femail%40example.com\u0026dt=SOUT%C4%9A%C5%BD%20UKON%C4%8CENA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=1199","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:03.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"E5:3F:1D:8A:67:60:A8:60:56:38:E4:E3:ED:A6:64:D9:7C:89:E1:E1","sha256":"39:E2:E8:B9:46:82:06:98:FA:92:0A:A2:4F:57:DF:DF:EF:00:44:4A:27:C0:C4:99:EC:A5:E3:D4:1A:A8:A5:D4"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-MB2WV0SZV7\u0026gtm=45je6611v9115169269za200zd9115169269\u0026_p=1780489082461\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AAAAAGA\u0026cid=930913453.1780489083\u0026frm=0\u0026pscdl=noapi\u0026rcb=12\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115616986~115938465~115938469~118228214~119027222~119064971\u0026sid=1780489082\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fpatterndomain.info%2F420-1524-290526%2Femail%40example.com\u0026dt=SOUT%C4%9A%C5%BD%20UKON%C4%8CENA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=1199 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: null\r\ndate: Wed, 03 Jun 2026 12:18:03 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T19:34:24.271823Z","times_seen":16219631,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":89,"dns":1,"connect":10,"send":0,"wait":20,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/email@example.com","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-03T12:18:01.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/email@example.com HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:01 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: PHP/7.4.33\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PA%2Bf6EVWujE78EacZ9RDxbomZb5t05a4sSXBVEHyZYVXBfkE9YNk7t%2F0BNoUXIxdUaMyJq4L4Bgin92%2FffRUpDe30QJWiHT%2FVxNlNfpscZMF%2FT1WX%2BJYx%2BsP8uH%2B%2BEBujDjtaXk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a05ea3580cc70731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:3.4.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"BootstrapCDN:3.4.1","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]}],"data":{"size":26635,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (336)","md5":"92da3a9dfc0a39eeee935fc177f30171","sha1":"803bdd0a14161b86e9ad32a3607d13c8c4e2f01c","sha256":"8bd78f6bd4fd15f1095a63b9caa00dbbfbead45234d55708ff5309c1f6194062","sha512":"49cdc84d57395e66e7015313aa5722469e62e48165c9b347b12f760b22c8d5b51b12125d6d719847b3e259f31de0e877fe26a771e44370c26be357f6db9a8f38","ssdeep":"384:ZNZYUZ01OW963aseL/8GsmGARmxrI7faDVi0GzigigiOisieidiTBrhN0uM:ZNZYUQdQ3ax/Pc5Izju99fhvMJ0l","tlshash":"c9c20c65d4f64573069380e57e765f0e3ea1d607ca1b8a0436fc4ad8afd6d87cd17208","first_seen":"2026-06-03T12:18:27.431142Z","last_seen":"2026-06-03T12:18:27.431142Z","times_seen":1,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":72,"dns":54,"connect":1,"send":0,"wait":79,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/css/css.css","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/css/css.css HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:23:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jRQn%2BfSZfO1NlP7ZMjxGbIYjbfeisUdL3ni9H2xDFLFEK6TFDPS4jt5g7UejFhSEColjczJgAo9FD6tkH3%2Fm0RIuPFQbKNT8X%2BaVqflkkcpcGaDD3bGYMpp3tUhQWRZ6pI%2BaAT8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\netag: W/\"2de7-652f16661f9e6\"\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a05ea359c8a9b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11751,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"264a0f3ab260f6257ea2e8ff4a9a053d","sha1":"c9fc14b32d5dfe48955d4e11fdb327a8200d7745","sha256":"1ec03c480ce853f26435e633e76190fcab1e3765175d2140fe73aff628705833","sha512":"da99348b967221074912405b37b6c540f64e38f15b5f77a07c965be74feb1ecf541a4235066fb189a65afce8c2e61ef877e907c20aca99d9f1d239451cb6f13e","ssdeep":"192:gqjWZAP9cul56ll80Su/hCaP0ruYipX2ZSgV/weHCZwCZ/ClUCZIuGruW:hVyd5sBipX+yuGruW","tlshash":"0a321099da4510467233da742bb20ba6f6980063db0711b97fe473908fba66c8671fcd","first_seen":"2026-06-01T07:26:38.550433Z","last_seen":"2026-06-03T16:03:18.169069Z","times_seen":7,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /ajax/libs/jquery/3.6.4/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31154\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 27 May 2026 21:24:52 GMT\r\nexpires: Thu, 27 May 2027 21:24:52 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 571990\r\nlast-modified: Tue, 04 Apr 2023 03:27:01 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89795,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"641dd14370106e992d352166f5a07e99","sha1":"eda46747c71d38a880bee44f9a439c3858bb8f99","sha256":"a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af","sha512":"a6e981b23351186aa43f32879dd64c6801be6e2af7ef8b0e472cccdeeba52d5d7894de4bcb292a364f1e11e525524077534338140a72687ada4fae62849843a5","ssdeep":"1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH","tlshash":"d193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-26T04:59:07Z","last_seen":"2026-06-07T19:40:20.697263Z","times_seen":24859,"resource_available":true,"data":null}},"time_used":796,"timings":{"blocked":312,"dns":3,"connect":29,"send":0,"wait":30,"receive":110,"ssl":309},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/right-nav.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/right-nav.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:24:07 GMT\r\netag: \"67e-652f1681baee1\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4bp12rJUMmwrRCxqZM6PN3FCsiYaQXfLQ9yQMWdcm0VcWvJjGo9QLmSbkyyd2Ilk1u4AdsfufIuufyMqwGJV66Ltj3a%2BtfcDNYZ7Bty5IJk7n4gaZeiYnIOpI0uyw8eZgWglu3Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 1662\r\ncf-ray: a05ea359e8b6b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1662,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 46, 8-bit/color RGBA, non-interlaced","md5":"9a62f18b8017a926acb2a3cf219c1c0c","sha1":"8ef9435964561ace0d39c131158c4a20b8264226","sha256":"58fb82d2822bcd813eccd22c3b11930fe1a98dd7bb7b791f29dd5771c26afd09","sha512":"30df2be1200c16c5374fa26c35a0fa3b3b00b982d1ab2179842fc49863a984838c3017884f6c2d5b5c864f5e90bdb391f63849707d26897837d6fdf3ab90fc35","ssdeep":"","tlshash":"0d311ae331f5b4326caef413451214e4f76063b43e192981e71869dc649a64eb1c25fb","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.095609Z","times_seen":468,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/wow.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/wow.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:03 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:24:12 GMT\r\netag: \"846-652f1686e8a56\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q45bJUYok8LdMG4BqstNqYnQnL4n8kNjZMTeDxou67wgVKMqA8ktdc5A5nqgHrs3cQjVMY7kMYecxWp0Z32%2B6nsG8vUexNNTB6AL6qvtqLurjxL12YSpLRcS7lQITQs%2Fy%2B3hwgM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 2118\r\ncf-ray: a05ea359f8d2b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2118,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"c5bad4aebfcded58ae1a29d329b9b723","sha1":"18123be78947a2d2113e4dd030314f31fda3b92e","sha256":"ba1ca1f5946be5d7901bc3167808211a24036f1a0a56f7dafcc2aaca0c8d8ced","sha512":"115c2522c282a71347f22d1e5425011c39c2411574366c4555b10f714ecee35b6e966406367c071110a172d1066e29abbbb30a384cfda15f932a2636c5464286","ssdeep":"","tlshash":"6f411ac7fba80dae575e5f73a416841850b9c403da714798e017a8ba2e2de5482cf1c1","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.110132Z","times_seen":180,"resource_available":false,"data":null}},"time_used":1118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/203.jpg","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/203.jpg HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:23:49 GMT\r\netag: \"bf45-652f16704362a\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1OhARpvnYTKlHk5ktlxG7BRaPYRDRwi46xjH7fjmBwYMWJi26jDCU6i%2BH4lFmZkiTWrJuxyeUCmnaOlyEJduB%2FPl%2FDZncJx0YOKpdCFfYLBvizr3EmX1aNorbiiXVdWZDoynIrk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 48965\r\ncf-ray: a05ea359f8c7b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48965,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2015, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1504], progressive, precision 8, 150x150, components 3","md5":"c99aef9f700889d34266563695de4311","sha1":"86c0b06bbedb14fea123fb4c8071dfc5f4b7f166","sha256":"32444886364c971cff1c32a7f2b0a81ec06c739cc5a1780dc8c26bfd39d2a447","sha512":"a5aaa2981e602d7b66cf8ba3a1a69e17af47ce4db1a0e67ad4419c73acbcdfb527dc907e50717b762ec97aa523166f2adf84304e9b6bd4af821c8d326534fe14","ssdeep":"768:TQnTiDki7/QnTiDki670sBlygk1DNr4zqsb1qzAt6MP72XTbo6GLFyT:TyiDkQyiDkx70sBwD54zxSARPYuxw","tlshash":"d223d007931b9f62f8c491b600a5e71597322fc4daf371477a9eb194fb3a2a94e1d304","first_seen":"2023-05-17T23:28:51Z","last_seen":"2026-06-07T07:27:35.107572Z","times_seen":1030,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/204.jpg","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/204.jpg HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:03 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:23:49 GMT\r\netag: \"968f-652f16708ed39\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BImpQBPuSNdOdOYafLrU0Z82aI0n6HFZLjHeX5FGcGR6Mu5qFn1gU6Wfu89KPcvSpe3J1XbFsR%2BZ9OvsCqFBDV0sflaaDj2SQMfXYTizC396ecef%2BFhMsRDtyzMDHdQ8%2FgYTFm0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 38543\r\ncf-ray: a05ea359f8c9b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38543,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=642, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=640], progressive, precision 8, 150x150, components 3","md5":"070c06aeae08c0e340f3e213aeb3ea48","sha1":"ae401d17e518fc7baeac8bda84b5e8b3bd60fac0","sha256":"3e5737a7a9e0d9588443dd20d2c4cda5034ee79b4caf2d2d61daa8a811196d64","sha512":"94545253501abc44414d3bb009ebdc7d15d7bb4e579a51ee684064c67700d7f72f02885e8f4ed13f4f0b501f2fb5c9bf5c66a8e3e33d8c7e0e6360f340d6d9a5","ssdeep":"768:73s5+ffVG7o3s5+ffVR6j+Vuzt9CNRm+81e69I7Lm5KaLtZpWifoKEkbb2:IofIofSj+Vu5uY+8U69qLxaDpW3/kbq","tlshash":"8903d0151b52cc16f9d87278a8add7e21353ef405bc32b6dbccc1047b7747a62e1a642","first_seen":"2023-05-17T23:28:51Z","last_seen":"2026-06-07T07:27:35.064769Z","times_seen":1054,"resource_available":false,"data":null}},"time_used":1182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1133,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/like.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/like.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:23:59 GMT\r\netag: \"ccee-652f167a5e9b5\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JADCeWRj5KfUKbJOwr75mKykuQ4XomZJB9FbJSpnftLF%2Fd6jxOYFu70adHHjhQr6DRFfR8693sFpIHtfYcEUX3L6oU%2F49PH6K7oKEn9Y0jEM6pRuDIa%2BpbhOAoiSPP0A48YlFcw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 52462\r\ncf-ray: a05ea359f8cdb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 39, 8-bit/color RGBA, non-interlaced","md5":"e16b2ddd7a4cd9342c0510e7e284aee2","sha1":"08cc903f8e47d9186732b87171507a2336c69a0b","sha256":"3dc08e38fdf43aacbddfd66aa1296477ca8debc634f4d046b968bef1f1422ec0","sha512":"0ff428b7e0a76848596cac4064ca3ce36190fa63b5d185080a266bb67948bb8426d46ac2c85c188b8ec8bcfd993d73c7edefd38d9e7e9ad3e5b4eecbccb23563","ssdeep":"768:XFQitb0J7zeBCw3z3icNxBda8/D2lwW8y9WvHOJX3nneJdeRs:XFQiiJzeBDzXxL//DGWvHMHeJde2","tlshash":"c933f1249f87f986d418d23a54c672fda392859b8a718d013a2f845ccf49b6f5fcf046","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.096218Z","times_seen":507,"resource_available":false,"data":null}},"time_used":1133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1053,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 06:14:57 GMT","end":"Sat, 01 Aug 2026 07:14:54 GMT"},"fingerprint":{"sha1":"87:39:8B:D4:F5:C1:CE:D2:17:B0:DA:A6:93:21:38:E7:CA:4B:7E:2A","sha256":"22:95:0A:F1:20:E2:D1:60:17:3F:96:BF:26:3A:90:BA:38:84:38:04:30:52:7D:AE:EA:74:8D:58:1E:F7:C7:0B"}}},"request":{"raw":"GET /bootstrap/3.4.1/css/bootstrap.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:01 GMT\r\ncontent-type: text/css; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"7f89537eaf606bff49f5cc1a7c24dbca\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:00 GMT\r\ncdn-cachedat: 07/14/2025 00:12:50\r\ncdn-proxyver: 1.32\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 722\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: f5575797c613b367438b4f977e161b43\r\ncdn-cache: HIT\r\nage: 3741936\r\ncf-cache-status: HIT\r\ncf-ray: a05ea35a0833c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121457,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65369)","md5":"7f89537eaf606bff49f5cc1a7c24dbca","sha1":"b0972fdcce82fd583d4c2ccc3f2e3df7404a19d0","sha256":"6d92dfc1700fd38cd130ad818e23bc8aef697f815b2ea5face2b5dfad22f2e11","sha512":"0e8a7fbd6de23ad6b27ab95802a0a0915af6693af612bc304d83af445529ce5d95842309ca3405d10f538d45c8a3a261b8cff78b4bd512dd9effb4109a71d0ab","ssdeep":"768:rf7Gxw/Tc/hOWlJ+UtVIuiHlqAmQI4X8OAdXFxbv8KIf2BdU+JdOMx1iVvH1FS:sw/YGGIuiHlqAmO8l1bNXdOqT","tlshash":"0dc3c7a0f21031ea7333c55a71d0fd872219a153e6664eb7f22f25d88f846ca1673f1a","first_seen":"2023-03-07T12:03:40Z","last_seen":"2026-06-07T14:36:41.808095Z","times_seen":19995,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":10,"dns":3,"connect":1,"send":0,"wait":5,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/share-icon.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/share-icon.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:24:09 GMT\r\netag: \"204-652f168413c66\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xOTlF3i30lmxAci0kaTRiidIiIoTHeULBqNB21p4xs5drXiM8XBF8UXB3r5YGmIgEHbNkPocqYG%2FZM4seB596fMSa2iJrGy7pDVdrb9BbQvNIWtXn079uhP0ccMIenSc6%2BU5QrE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 516\r\ncf-ray: a05ea359e8c0b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":516,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"46d454ce3ae1db8d3819745a70c6f55f","sha1":"9f25c8ace56dc1e5aca6eadeacbc89c06766e112","sha256":"7fc6c7e7e66ea1ee6282b1544074db177fa015d77cf5bb1e4cc4b2d0880dcac1","sha512":"c024c320aaf69fb33a5614216162ebf2bd4346f567b6caf71bba0779ef36d65f84626ad9e1ffeb403affba3465a99c79edb2b05c2cc6231273e7344966200994","ssdeep":"","tlshash":"a5f00ee314461428cc8a0e6a4646a674f4f6d3ef0023ae066af5c03f902db864834f52","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.112111Z","times_seen":486,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/201.jpg","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/201.jpg HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:23:47 GMT\r\netag: \"c29c-652f166f08eca\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2FzlK15CF%2FohbisgfMXf5Yt%2FTFdRraHE4wWuNDME%2BhNsBxtQ2%2BMGf0C5FDG0s%2F2Dii6gwiUtpw9lBtPr8XfXyC1rr8lRV8vTXTy%2BR09Mu%2FLdpSFZ6ZBuYEuSMlsKS9bTXoHCaYM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-length: 49820\r\ncf-ray: a05ea359f8c4b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49820,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=960, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=960], progressive, precision 8, 150x150, components 3","md5":"3be37c6ff49e4f441f4af26f40c42317","sha1":"748f774957c6ddb5a02dec9447c7f040773e1de1","sha256":"d7be9e8a2a42c6296ec989ea3cdafbc1f145eb8169c3b40ee634996b9f2c7ec8","sha512":"bc6c4b98d0da8cbe459d20015d068564ef25fec092857c5453045b382f67d00743b58573ba4dc02c16d2581aa13acd29fbfe5b05790999e70e4549e510e76d29","ssdeep":"1536:+9j9viat9Ax4uLBjWMk48eePISOlWJALHwr:+9OrILPIS8RMr","tlshash":"7023e01563e2ee51f9d8a4b406c8dfdad7076224f793062d7e6d2f02b7b6bc08e08195","first_seen":"2023-05-17T23:28:51Z","last_seen":"2026-06-07T07:27:35.085226Z","times_seen":1055,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/heart.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/heart.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:03 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:23:57 GMT\r\netag: \"671-652f1677ed58e\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d6SG3Hse6WZouhGew%2Fj0vZyThH8l7l0nqBtsne68zdqNK7hdNAYpJS63kcwHd6DuEdIxlo8twpyeZfQVU9OaHzMIzH0XYSInflFtUnau6GnGCL46%2FpmHCnl3ydIpxtXnuyfRycc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 1649\r\ncf-ray: a05ea359f8ceb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"b87353dbd74a9855f4d9a58c9d59fc1e","sha1":"800fbb739f038354ae8403c44addfc7e0eb40b49","sha256":"7ca149b3cceff96e46271c81bc29cb4ecc52e44ee015e539a67dbdc55a41b90a","sha512":"fb120d16b1ec2ab2bd48798213940f919b55ec92efea4ab4cfa5167c9e4de26ca98b22264c45311bae63510897a9c422f5d212b43a10be9af5e7d10fa1cc5e13","ssdeep":"","tlshash":"5631d870e7a818bdc072537694b1505efff6ed67a74aa95009c05918417e20d037d296","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.068008Z","times_seen":507,"resource_available":false,"data":null}},"time_used":1121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/3.jpg","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/3.jpg HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:23:50 GMT\r\netag: \"1c1f-652f16715706d\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bP4yazU5B0omQmNpg6ouHnuTBlyg8KbUz7SPhTsYqDsXbJGKakIysKfAf9XalVkyyQ6HSnuqFaBruZb9jrpEvepiOWtwBL%2BEf7lwfCejGeiw63PBtsvYb612CjVDbfKb40f386w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 7199\r\ncf-ray: a05ea359f8d4b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7199,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 150x150, components 3","md5":"409790106ce89065bf26e80437f6bc48","sha1":"570698123d89dda93a154316e7eca719a033d384","sha256":"05d8fc331551376dac7fe828bd046883c5efd15c4f84bae4f73f0f41c2634ae1","sha512":"651b496944b04ac3e9ab58049f89abc7e5c9799e1bcbd6e4a9aad4e1e578c7e25c141c5f1632febc9770643238e3ca43bdc27e5918ce40b3dca0a5da35d96f19","ssdeep":"192:aDpPcJUnr0ubFRU/Sf2OthnfLirZ1eOV49:op6Uaqf2mfLsZ13VQ","tlshash":"74e1a0c55001f049fbe954a96d11acac0b8dd43c25bf1b3e3d4f9592b3ace690ca365d","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.111371Z","times_seen":505,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MB2WV0SZV7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:35 GMT","end":"Thu, 30 Jul 2026 15:51:34 GMT"},"fingerprint":{"sha1":"4F:F6:A0:5C:88:9C:38:C1:57:D2:C2:16:50:CD:79:E3:67:50:CC:B0","sha256":"93:D6:F4:89:DB:C5:7B:E8:C8:73:F7:36:40:1B:87:32:83:AA:3F:54:8B:26:97:45:83:DB:E6:BF:FD:F5:70:33"}}},"request":{"raw":"GET /gtag/js?id=G-MB2WV0SZV7 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nexpires: Wed, 03 Jun 2026 12:18:02 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 158181\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":478388,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"261df5f7ca4d624b08f95a2bcc153a2b","sha1":"341d0263521e97a6412ed9c4f6e7f567dfe2c13a","sha256":"750783e7cb3363813888437ffb37b3715c26fd16425781afd263f8d040c681bc","sha512":"30bc5f89c782a6ec761099d9e1c34fd7af12a59dae065f4d41622201c49f0ddaa4c526a7998d4fd74aedc25f854f64d010c0a9ceabf6fc57fef618fb779f8b65","ssdeep":"6144:cQk9D3rZk5hGQC2FbMtTVO1AXucZd/AmDylgEuPcJP:Lmk5hGQCFtTzEu0JP","tlshash":"85a4f9cdb3d674625296f478503f01cba57b28e2b44cc89ab189cce42e7469a4277f7c","first_seen":"2026-06-03T07:09:57.854962Z","last_seen":"2026-06-03T15:48:42.441712Z","times_seen":25,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":214,"dns":1,"connect":19,"send":0,"wait":38,"receive":46,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/video-icon.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/video-icon.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:01 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:24:12 GMT\r\netag: \"c2c-652f168651467\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2U36vdhmxNR7nIznEegNf2ll%2BBWreVvsjQrcttuW0TnVuxRVPt11yJXJ5kKuwJku1jLPgnwKlHgNP1XzWN9ZZGFBs%2B9p1zBZQ7SrpVNs5hUGgyAp%2FNJNB%2BL%2BnjGczlO9wJt3DRs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 3116\r\ncf-ray: a05ea359e8b1b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3116,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit/color RGB, non-interlaced","md5":"9e1add6daa61c9d09ab04ced8f030ba5","sha1":"600e24532871dfef0f22b54efd98e7c51e7577f2","sha256":"a11b8d77171d5bb18e0ac57a3c5f4ab6ffe101f9783aafbaa501210b14c2d403","sha512":"b1598ec614bcb5e561dbb1cea4239b93eb3bfdab9ee1d2ac284633da7ea7bfdb80178f7341acc6b1eb687f9011224796affe623fd4514ba4a6fd081df1531ac6","ssdeep":"","tlshash":"b851194ef8626d04e55dfe8429e913870b734791dae0a811adeec4a76c22879c6cd0d3","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.11577Z","times_seen":487,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/big.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/big.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:23:55 GMT\r\netag: \"23fe61-652f16765d30e\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sTOpAXmiaRu5r0RVKOpLgijW%2FTPtyJiEB9h5F2Am%2BvnqdesLYRfJLR%2BikuSnnOziwGuviPftOmaSP4Klt59JVUhMfACNqGbB62E09J9haRDwDnMA0zKDzc04vrdS7Vbfq4bfX24%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 2358881\r\ncf-ray: a05ea359e8bfb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2358881,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1402 x 1122, 8-bit/color RGB, non-interlaced","md5":"3ae20eea58a2d799e232ba15791c6356","sha1":"920d66ae4d946986522e10165d202daef4a5b845","sha256":"6605c517f06e0753752124f42972ce69650286875801eaa567253f6c8d84d4a3","sha512":"f32d360a083dae8c548d36eb1d91fd59921f3d092ccd707d0d87fc38e5c3cc6e6d393f35aea76e8a3b520e8e444eeeb63b623a7a54810564fe5e6d74e779d66d","ssdeep":"24576:YjnKd1kGY4pQF6pE8P9Oinw5IFzOwJRlNQeb9/+YjtEpzD:iyZY4pA6xznw5SDRlNQeJeD","tlshash":"f92533ca723366cbf83a577b1da305250c94f6372c5ec0dd2da170a5e300b9a6de94e6","first_seen":"2026-06-01T07:26:38.585332Z","last_seen":"2026-06-03T16:03:18.170069Z","times_seen":7,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":328,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/123.jpg","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/123.jpg HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:23:47 GMT\r\netag: \"547-652f166e47cdf\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bq1JOPN7qdghjwnJe1U2wFYiSeEFxvhIfiyQzh9L%2FxPam0cahR3Wg612g4DfQQWhYm%2FQXNci1JEegJWtiaKvyHS7wBh2EGI1haWvX56XMYy%2Bvt3Z%2FoWBAn5oaS7TNziWRu2RDU4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 1351\r\ncf-ray: a05ea359f8cbb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1351,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 39x38, components 3","md5":"d6a1857b7d8b21e8394c51135fb82b6a","sha1":"051e0166df5c4959bbfc6b30d1f2effa72f0e25c","sha256":"d60bfb9b53c0d055bf9fe275dba85e1bb7c4ec8ff3ff46fe17547b8be8b7583a","sha512":"eb9573bdf8eb10db0aa128600f0a24bcde86d5052af1b21693680dfa9151f1e93b4b80fe1e1703a6a23d3c8d0b8f09d2552f488b8dd59a0fda2e5e944152c8ea","ssdeep":"","tlshash":"cd21236113a05bc8fc574b7880a15fa3d7d6bf2374c16bbfc1c421055761bc0485894a","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.114395Z","times_seen":503,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/2.jpg","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/2.jpg HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:03 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:23:46 GMT\r\netag: \"1594-652f166e0f681\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r9lCOdBuSn5DuL0BnFZprr4y2sv3rRSYARNwIc0euQ3fSXAkJIkqNLqTIY6XkMUfWcu7%2Bdbmo%2BQB9vowQKnhbSroOOS5gFWYze%2BSnhVyCj7HHE0YSrx3BnQKB2SK%2BYHlEx%2Bx27Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-length: 5524\r\ncf-ray: a05ea359f8cfb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5524,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 150x150, components 3","md5":"8a95c89e3c525fcd599bc9ac7ef5e1e6","sha1":"08e042a6ae2c5a30316e974e771a11653e01313e","sha256":"7c94fc7847dfbd68562130a090fa999cb2987d63bbee66aae15debae24d1eb1b","sha512":"14479a27d559ce3677b380cade7f402e6ecc57c4036901d5ffb95ecdff37a19da4f350a7ca0c9d4e4f565ce9e2a6b626465871dec7781a0a9384de658e8cb6ca","ssdeep":"96:uF22Xxu6AYT8lMbzXqOYUUK1phKhVRnIGI02VJJtx/G9M1SvOhMys5:u8Ixu6ABybeOOK1rKhznu08JtRQM1dnE","tlshash":"66b18c77ab94f3129dd0993d0eeac3602a5a90d523a5c329b44d06201f912898ab869a","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.081444Z","times_seen":505,"resource_available":false,"data":null}},"time_used":1122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/marketplace-icon.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/marketplace-icon.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:24:01 GMT\r\netag: \"e68-652f167bf5d7e\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6hPXW%2BiNgG4lBR86I1vq9uuwhjSVxghjD7OCVBZpqq0%2FVHYG8jtFWTkvZpcjBahkUo0INdmlViW9kQeEu9fjJBLfW4CPnuxL4NM%2FtMNrAGapmhdfC67bPR%2BCeFLnfaDmtllBQkY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 3688\r\ncf-ray: a05ea359e8b4b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3688,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit/color RGB, non-interlaced","md5":"33aff6a03aef6476e7c18c338e0a66a9","sha1":"8335e0107d7adf7b83a6541b67372b649fadbcfb","sha256":"fd5c1bb02555fa806f962e79316ea41d5a8dd192e3ca6f3422ef1e8a236bac7e","sha512":"2cc9b1a1e255381a13f52530c1649078279b12134bc3adadb088999a26dd8df73a04ddbf1aa330ae028d1cbb5bfe12edda8f7a42d713b4ecdc4adf6cb472a688","ssdeep":"","tlshash":"83714a06ff22ad00231e768938e06057937b42644a82b4819cdecd13b9a64b9cfcd669","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.065314Z","times_seen":488,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/menu-icon.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/menu-icon.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:01 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:24:02 GMT\r\netag: \"81a-652f167d6e513\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VM7Y4zcq4eG36aPuut3TPo5cUo2JjrJe75CKeVBBapXG4AbLvds13lcMbI2NgoI5KKAS7lD3m1%2Bhw4N5sb8JjVMTUQG%2FcgHGBHj16i5fEoaDdM7adVTnCurJXDvqCmKO1NjaxGs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 2074\r\ncf-ray: a05ea359e8b2b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2074,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit/color RGB, non-interlaced","md5":"aa3d411dc73f9687e611ef130b8a84e0","sha1":"5f7b2704a4aa9b5419fcb66b39a15c0c91238a9c","sha256":"b6bf90366bcc2269fa20004613c408920e5f1370cad716e893928486ba699662","sha512":"037fef34a5fca1f56cfca2164492dee34315d35c3170ce55aafa8521e424a510c26f5354068471ab22b92b890ecb91ce32522282e41d4910227888f2585dd5a9","ssdeep":"","tlshash":"5341a50cfd116d50a64ffa4099ed63a74b774bc099c1a441ecc68c03a8201bdf99e7e3","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.10264Z","times_seen":488,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/likes.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/likes.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nserver: cloudflare\r\nx-powered-by: PHP/7.4.33\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MTpMyQbbg7YFSEz4G1a3b8ZnWq4hTJ4NbydLYPhdmTQ5HF9aak4rVh7n2xQsUjZBB7SswwN0pio59bwkNJF6SZhIH6gf2x4csWxDtQPP%2BOmKbG%2BAK3139UmPNEN5AXz93wLyn7c%3D\"}]}\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\nlast-modified: Wed, 03 Jun 2026 12:18:02 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a05ea359e8c2b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap:3.4.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"BootstrapCDN:3.4.1","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26607,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (322)","md5":"8eeb7703c949dc9b868a85fd8b921338","sha1":"c1ea4c416aba6c8fe8c175acf7c3d9c311596c0a","sha256":"c3d4cdc2bedaf866695045c9df367f3d09b7d08faf4003388c60c74d4ad0a69e","sha512":"b46dc7f88c7c30a111bafc70afd86dfef8dd493ad9d32c9710b5602ffed676583d030666ecde50442112c40745a821de8a5b642483a1ab5735ddde4b571f5f7c","ssdeep":"384:ZRYUZ01OW963aseL/8GsmGARmxr8faDVi0GzigigiOisieidiTBrhN0uM:ZRYUQdQ3ax/Pc50ju99fhvMJ0l","tlshash":"0bc2fc65d4fa4573069380e57e765f0e3ea1d607ca1b8a043afc4ad8afd6e87cd17208","first_seen":"2026-06-01T07:26:38.536833Z","last_seen":"2026-06-03T16:03:18.179649Z","times_seen":5,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/likes.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:02.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/likes.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nserver: cloudflare\r\nx-powered-by: PHP/7.4.33\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VrJVS0KBJaYneTQOaamFbw7EDmGxWBGqktFjmbPedkADLA%2Bil39uqj73XIQ59I%2Fa54FKU9ak8nR9%2BK4ZMwnJmpKy3A4DweERHl0GI9I4RMDQgGhCCYMLPjSGIwVChGfKXbasaMk%3D\"}]}\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\nage: 0\r\nlast-modified: Wed, 03 Jun 2026 12:18:02 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a05ea35d9930b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"BootstrapCDN:3.4.1","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:3.4.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":26607,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (322)","md5":"8eeb7703c949dc9b868a85fd8b921338","sha1":"c1ea4c416aba6c8fe8c175acf7c3d9c311596c0a","sha256":"c3d4cdc2bedaf866695045c9df367f3d09b7d08faf4003388c60c74d4ad0a69e","sha512":"b46dc7f88c7c30a111bafc70afd86dfef8dd493ad9d32c9710b5602ffed676583d030666ecde50442112c40745a821de8a5b642483a1ab5735ddde4b571f5f7c","ssdeep":"384:ZRYUZ01OW963aseL/8GsmGARmxr8faDVi0GzigigiOisieidiTBrhN0uM:ZRYUQdQ3ax/Pc50ju99fhvMJ0l","tlshash":"0bc2fc65d4fa4573069380e57e765f0e3ea1d607ca1b8a043afc4ad8afd6e87cd17208","first_seen":"2026-06-01T07:26:38.536833Z","last_seen":"2026-06-03T16:03:18.179649Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/3.4.1/js/bootstrap.min.js","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 06:14:57 GMT","end":"Sat, 01 Aug 2026 07:14:54 GMT"},"fingerprint":{"sha1":"87:39:8B:D4:F5:C1:CE:D2:17:B0:DA:A6:93:21:38:E7:CA:4B:7E:2A","sha256":"22:95:0A:F1:20:E2:D1:60:17:3F:96:BF:26:3A:90:BA:38:84:38:04:30:52:7D:AE:EA:74:8D:58:1E:F7:C7:0B"}}},"request":{"raw":"GET /bootstrap/3.4.1/js/bootstrap.min.js HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"2f34b630ffe30ba2ff2b91e3f3c322a1\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:00 GMT\r\ncdn-cachedat: 10/20/2024 14:55:09\r\ncdn-proxyver: 1.04\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1053\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 6a01e02d28ea32aeeaaa3d5d00d2e7dc\r\ncdn-cache: HIT\r\nserver: cloudflare\r\nage: 4321253\r\ncf-cache-status: HIT\r\ncf-ray: a05ea35a0840c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39680,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (39553)","md5":"2f34b630ffe30ba2ff2b91e3f3c322a1","sha1":"b16fd8226bd6bfb08e568f1b1d0a21d60247cefb","sha256":"9ee2fcff6709e4d0d24b09ca0fc56aade12b4961ed9c43fd13b03248bfb57afe","sha512":"a014e9acc78d10a0a7a9fbaa29deac6ef17398542d9574b77b40bf446155d210fa43384757e3837da41b025998ebfab4b9b6f094033f9c226392b800df068bce","ssdeep":"768:up/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:NorXfURXiUrmq5YW","tlshash":"1b03950ab22031a107efa1a5414b020e73366a7df94791ac78a9d9f22db4c49717bf7d","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-07T18:07:47.722949Z","times_seen":28790,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":6,"dns":6,"connect":1,"send":0,"wait":5,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/mobile-search.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/mobile-search.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:01 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:24:04 GMT\r\netag: \"eda-652f167efa913\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UHbOtwmCmwOhKCO%2FphLW1xJzEOwhUeJETg3qOe8aTL7EzBGmaFOFKe5JpcvikRe1zBLn0bFOnMdksAms2LBH548o%2FpN%2B99auXcRcPEA39nMpyZeGoJ2oMsP69Ja1cxF5U43YTeQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 3802\r\ncf-ray: a05ea359d8afb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3802,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 76 x 34, 8-bit/color RGBA, non-interlaced","md5":"1376334cb3f61b249ced9712f964b2c5","sha1":"b03c6bb5277717ad81ac92ea5754b2243cba6239","sha256":"3e6890b4804192d9c15e4f3eb6b7aaf44d91f460da3756db2cade13d31bae64a","sha512":"c193001a37b88eb0cf64682815b8b01c865c07c35e2b6e1306d62f4fb0649d3efdb2bb34c44aefe2112553ac7d209a3291c8d5e654c1d4b245e41500c9f4f62c","ssdeep":"","tlshash":"3f71184eed16de814a8d9a0869e6921b06370bc0ee503198f9c6c427de614fdcd8d6db","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.084675Z","times_seen":487,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/home-icon.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/home-icon.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:01 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:23:57 GMT\r\netag: \"d19-652f16782253b\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DRXB6zL4uqP8EZ2HATWxBoDybogi4usZvIxgBH9MBoGbSJkPPf9pzix2L66oi9tHFxO%2Bv40Zo5zVjMSoeSyzY6i4cfPQ4bfZARsCb1dcs2XrcgwcG1hwxee0DvDiDqbzSNBNFmI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 3353\r\ncf-ray: a05ea359d8b0b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3353,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit/color RGB, non-interlaced","md5":"4a30097838614d86f51ab2578655ea89","sha1":"bb07b332067d9ac90401b9124b929de861a782d5","sha256":"8f3cef3c2ec4fa3e297fab796be5bc7797e8ee01843bfd9f3c4da088845e028f","sha512":"7c84abe04f2717f937a05885054428190f3b7e4224df45ae26d375c2aad6503a3d02e807234af1c5ee8c63a46a3a0b224eb81e64c78b2efb54548f6f741bc3be","ssdeep":"","tlshash":"6f611989fe003d524716b989b8e54287663393c0c7c0b1516edbc49798707bac99dcf2","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.069715Z","times_seen":488,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/01.png","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/01.png HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:23:44 GMT\r\netag: \"f144-652f166c3aa52\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dCk38aTsj7H9QMEjWMfU15RUyXQ67um%2Bp%2F7hfyg49t%2F1uGsxnLhuT9em9AeogwKsRh25Cm0s9YSR7aQwYA62vQg%2BQCLxP4rC%2BT0%2B0JJrst3lCGlPba9lX2QJ4zycl1Qr8IbWDYA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 61764\r\ncf-ray: a05ea359f8cab517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61764,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 362 x 274, 8-bit/color RGBA, non-interlaced","md5":"40083b5fda16d1790ecd54f26d737ccb","sha1":"caa150cb8f25355e7d7e44da70a284cd99666a19","sha256":"c7fb9249cfd6b8cecf40b143698e8ed40dd99eb8fae8cab5679447266fe58b51","sha512":"37865ba5a622caf0bc4d1b061308b703c4cefb3dfebe31026ba636fe56ba7edcbebcdf0922d00494ae6fb41a686ab74b225307f9cbb5a84023349faffd60c129","ssdeep":"1536:HKuZ8zsTjVfzJ2UBr/Q/h2c20yVxtAnLFVQ:PIaptP4/ZTyVTUFO","tlshash":"8553026997895dece6744ba0310c98fc89f452381e872e45a1f1e1a4c5f2892733d7e3","first_seen":"2026-06-01T07:26:38.530691Z","last_seen":"2026-06-03T16:03:18.166835Z","times_seen":7,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/1.jpg","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/1.jpg HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:23:45 GMT\r\netag: \"1742-652f166d2b212\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=65aov2%2FH9fAnlO8cFk1oaARxK05xcsrfWgjVEcqZuniO6R5bGV2R56G7XygSBKG4AahBZtPfnYKVIETQyFhxD3lyI%2Fhatxw79knpFEUhIS7EUzo28uqmB5CNY11kfR%2Fmsa%2BktKU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-length: 5954\r\ncf-ray: a05ea359f8ccb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5954,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 150x150, components 3","md5":"733412975989c444e5b383684667e31f","sha1":"16fb71a75503d792d3955e00f8447ffc3fc9616e","sha256":"4fb27ba5161cff6f19847fbb708d9a4649779049ecfac3b4649983845f27515e","sha512":"2059e9ea8544dfda904bfa29f131c92640e8d4e053a199e2dedc6b010b51b836fc3d207288a95a3ada679075aa1e36e21f4f9159c7066770e514ccf29827dc6e","ssdeep":"96:soj9zDeQmzMv2v4cwFsfnOluZ6651vdJLlUokOw2pYMZlsGz8TYyHbS:sy9G5OE6CdJL2o/w2bzwm","tlshash":"7ac18d8bc9a22e93fe228930be53a71ae2de782675c34d40738c5f721fd97484629604","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.080499Z","times_seen":505,"resource_available":false,"data":null}},"time_used":1004,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1004,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/4.jpg","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/4.jpg HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:02 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:23:51 GMT\r\netag: \"1c59-652f167281dcb\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yQ5QT17UzAL6t7S1iO9Q9lnyOE7rRhB9ye6B1rSlnW8TCD5PNUHsan1Wibd7tcRim2%2B%2FB8Z2GfyuT11uQF1hhmc1fpjvU%2BQXZLKvefwVhaKU3axXf2gefXXq2iTlbMFhonvJEZY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 7257\r\ncf-ray: a05ea359f8d1b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7257,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 150x150, components 3","md5":"268f9c5bc7f4c7b1a46d80d4d5d4c915","sha1":"12b10d1b0c1de849ffb37ba3e0295800e767edd7","sha256":"970abc2154d53b06331e5833d88dfc6ca5eb29fc7c85d9e0c80063029c25eb63","sha512":"fe2120888812b20e46530110c8095c29caafcc469d69a979bc2ee30f11d84be0e41556494308d3b94cb9dcd190a7bd53ac9c9e6c72111cdd3c351fcdef4e07b4","ssdeep":"192:ieMi4zvUqVKQhjEuytrdCa40Nt7qLs3nuspf:h4rUP8B4540Nt7qIeU","tlshash":"5de18dc985e4ce1cf8e180356249e2cdf795a0e282465b5e39cd43449ba3968f2baa34","first_seen":"2023-06-05T00:03:39Z","last_seen":"2026-06-07T07:27:35.092041Z","times_seen":471,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/css/first-open.css","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/css/first-open.css HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:01 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:23:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qhtmiyeB69UfwvlldaOp2XZB6Uef96alTKAzCnycVjEpOknX%2FoPEgX%2BTCJbfb9deFxRNVuNua3M2Guh12kDy0uygzDD9938sBhhHqD9RtLYnU1EHMUd%2BFyIT3s6lMXfj8P%2BHWUg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\netag: W/\"2605-652f166755edd\"\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a05ea359c8abb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9733,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"834e9c7183a441c5e0b86a139a45e1e4","sha1":"23e0d1e7238a369ef43a64986578f7f43cd79d94","sha256":"76fb7813f182aa73a56d581a91a5841a580e4dadbab5d462db4e670552ae3e18","sha512":"df27f2c1cf24711b549f9bde7b1b04ada161425f4c8a8bd4493ad04fa7be9bba88416eafdb8b51424123684c12b083da55b7770bb8fc3f5c2049aa04784ea1f0","ssdeep":"192:NrO94X1cBvqpuwb/MBqm0jtJ4HiTzHawqOZSEjHOV/NibwlRBT:JUUjgp","tlshash":"dd1212acde4210077277d9986ff14746dba44003db0601b97ed922498ffa6b885b2fdc","first_seen":"2026-05-23T19:28:14.332636Z","last_seen":"2026-06-03T16:03:18.164846Z","times_seen":53,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"patterndomain.info/420-1524-290526/img/facebook-logo.svg","fqdn":"patterndomain.info","domain":"patterndomain.info","tld":"info"},"ip":{"addr":"104.21.67.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://patterndomain.info/420-1524-290526/email@example.com","date":"2026-06-03T12:18:01.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"patterndomain.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 10:58:18 GMT","end":"Sat, 25 Jul 2026 10:58:17 GMT"},"fingerprint":{"sha1":"B5:BE:CE:A8:70:01:68:6A:EC:80:1D:76:85:47:10:55:33:87:56:5E","sha256":"EF:D0:07:2E:9D:C8:C4:7D:1D:05:B8:99:4B:E9:07:8D:DC:AE:E7:0C:25:7E:FB:14:BD:33:DB:E2:D8:BF:A2:D9"}}},"request":{"raw":"GET /420-1524-290526/img/facebook-logo.svg HTTP/1.1\r\nHost: patterndomain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 12:18:01 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 09:23:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5%2Bapoln%2BKEnCyPpf6XxRWm%2FAvMUu3D4xQXIsR6H%2BNsK5af1R1A66AYwaTSWDHRW%2FKiR%2FTh9sCXsoVGvNlR%2Bd%2FMvDESxTGFzv%2B2UlvmFfVtTbkYslDkEnF0fGYgPj%2B%2Fn0RG%2BxadE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\netag: W/\"9cd-652f167702f77\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a05ea359d8aeb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2509,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"db2079885db2f1c147baf3b58310d1d6","sha1":"8e34048c78633fc141d2a56f4cc18b7d61115b36","sha256":"2a64a7397eb6ac6dbbccc991c278ed85b256830b0dd8ce65b18733a6f7521cfe","sha512":"609814eb66985bc30543aa0f3f93b5bde3095942c65599fd44f7a68e48d7f246bb4ea66d6a6e43ef96d95e1833888da13f00a96a820619c3b1bba7512402b684","ssdeep":"","tlshash":"4b514166f37729a15a888a2e0b60397437be059c7433836c5a0ff2b47807e91b474c62","first_seen":"2024-02-22T03:28:56Z","last_seen":"2026-06-07T07:27:35.110743Z","times_seen":170,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-03","alert":"Phishing Block","trigger":"patterndomain.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"patterndomain.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}