{"report_id":"3162e53c-7199-4d85-af15-98caf6bba15e","version":0,"status":"done","tags":[],"date":"2026-09-29T04:50:16Z","url":{"schema":"http","addr":"dsafaerg.top/","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"104.21.0.180","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dsafaerg.top/#/","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"title":"test20","dom":{"size":6598,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2491)","md5":"57a4785109149becc9955bc5428e046f","sha1":"42201a93f97a28d21d044ebc609edaa300e8d390","sha256":"5002d426b9fd44afd9bb3e539bb84cfad9d71c7f90f646c686a31bd815354b63","sha512":"4efb6d0abb805245529f8b75fcedfb979d8e439f5c10524c8c70682e63a6e28ce4b4261fb384077aa90f3054982c50111cc15ba903aa32104f8efd38beebce13","ssdeep":"96:er8/eIxpBuj7yqETj/aa/HbY2mUsGKAiowG4VXL4LmnYL0OzMMO2AU6uJ2:eIm7y6f2nfD3b1YzUY","tlshash":"88d141662880640b0277c4e5e9e5be4977a1e30ac11a9cd176cd51e94ff3eb2d8c7278","dom_hash":"domhashaffa75c0c73623130b827ab5afb1cbca","first_seen":"2026-09-29T04:48:26.070225Z","last_seen":"2026-09-29T04:50:32.624315Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dsafaerg.top/","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"104.21.0.180","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-03T04:50:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"h5-api.dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dsafaerg.top","ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-27","domain_rank":0,"first_seen":"2026-09-29T04:48:20.843811Z","last_seen":"2026-09-29T04:48:33.657724Z","alert_count":15,"request_count":15,"received_data":2570571,"sent_data":7078,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"h5-api.dsafaerg.top","ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":7,"request_count":7,"received_data":82209,"sent_data":3567,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dsafaerg.top/assets/index-C9s9I57k.js","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e428aa62a010e698fe5abccb177cf9c","sha1":"9de602453a2d077436dec762acbc551d2b85bbde","sha256":"79da5cd3f9fc2f601edcdd7814ea44e2a7857601632ac2eb76a9149f3b0f771d","sha512":"2054b5ab26393c1d40c4f90c78c2abaf48c5cb80e5e4d337dea5df516ff1b10b60c85d47029f5e015e33d36de59f88d3f0a536283af627743032c67779d73dc4","ssdeep":"1536:qBZRW8yJz2sZZPBAHlyRuPDeQH25sZQ//SU5DKoIx+pczE9edAvY:qA87lygPabiQt5DVM4c6edAw","tlshash":"66d30a41f1168979ebf60454a89e1800715c2fdbd00488e7b1fdae269bf7cb97399b2c","size":130836,"data":"","first_seen":"2026-09-29T04:48:26.098453Z","last_seen":"2026-09-29T04:50:32.659173Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/assets/en-DaLaSvPA.js","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"cfec4140d25b59a4467cfb4b43e1b26d","sha1":"07c0c24b980c35267dc6a84c842b771528d36f03","sha256":"b870cb595db64897475406dec2bb1915b13a81eb534314b225b9a1e75b08a288","sha512":"160ab135c784ca7340e416f6e7ac69ca086a9cd11ba2f6fae0fefa9ba9cab6a25f0a992fc3754c8b3630440802897604f79b05205e9b762f2104a77203c9a2b3","ssdeep":"192:ZWomY9lsqfRl3syebzUwLzUeUnHczV1g9aEf6yLlx379AAS14vXwL:ZVQqfr3syebz5zUeMHlkEf6QrI14vAL","tlshash":"4732344ed35700d61ea337663aae3b6984f802d24516c84f48fc5f1c13fb9ee7a62265","size":11044,"data":"","first_seen":"2026-09-29T04:48:26.101971Z","last_seen":"2026-09-29T04:50:32.648713Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/#/","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"35e0563db9526e0c5fb582a10302458c","sha1":"a1f9f0f5d0b5c690795b05928ad7ca0c103b9777","sha256":"65edd78a29d50b17ea83883ed1d346bb8e350b5cc13e7bb107b7507199fa8eef","sha512":"c7c38f574d0cda3932f3e34d78956e744ea361286aba39e79003d524f9f19ab05603900fe145662c11a0c04a43898bf00b76ab2f8a3783d319092bf55b430d3f","ssdeep":"","tlshash":"51c08cc4b0c32d002602645050af24e49024802770481b029c94ec492e220b08233ea8","size":141,"data":"","first_seen":"2023-05-05T08:00:34Z","last_seen":"2026-10-13T16:48:42.084411Z","times_seen":740,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/#/","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a83b08e17f61e1dddfc69fb7761f5640","sha1":"89fc73f2f65ce565b8c9561086edbe9f0867edff","sha256":"639d5da1cf88e2e4447bbb9acc77eb71220c55976ee46f95290e182c82d92570","sha512":"84c2f7ee62ef97e50773f0215dcbc28528a81f2cd8189dfcb8d8de29c795d5e688e6da2ab2b346a7b22696a3810e1c094ae5b43499613bee165c0985033cd7da","ssdeep":"","tlshash":"27c08ccca0c32d002607aa1068af38f4a034846b704c1f038eb8ec6d3e734f49233e98","size":159,"data":"","first_seen":"2023-08-10T22:05:17Z","last_seen":"2026-10-05T01:14:24.200383Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0742b04614f84c55060d18124e1a49bf","sha1":"6098f3c8320a9a9795d659406e809c5447018e87","sha256":"b1187c5cae1c3847c7df5907f2314e05efdd6198af8a556d088daa2a11445e22","sha512":"8730ce98591d309da95b4914f0c51f9d8760118fd70c2d3d59d008931ba86d63904bfad53b1c0c59606fa206f95a41e6809286a342dc7947201094b0d0baf0d5","ssdeep":"","tlshash":"ff11abfe195a60296303404f976b7801642650a9000a185173cc9b9dbb9abadd0cbb8c","size":1034,"data":"","first_seen":"2026-09-29T04:48:26.112031Z","last_seen":"2026-09-29T04:50:32.661198Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/#/","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bbdcff399fdea9a5e6ba7b76e99cd25c","sha1":"9598c321977767c3375f0c256e29a2aa8ad93f75","sha256":"7759b1a1f9531da032ecee7bc448de9f497aa3d73fb2f5b7adda8e085f395752","sha512":"56d90dee46144b3a2b2b9b2bb807a812210213514507ecaf1d000a57164c9a2f9bde6dc066a144da213d921984629679a174a5cc0ad15217286e9cc295d03cfe","ssdeep":"","tlshash":"8cc08cc8a0c22d101602a45020af26e4a034882b70481b128c94d8482e220b08233e98","size":139,"data":"","first_seen":"2023-04-15T19:29:39Z","last_seen":"2026-10-14T08:11:00.498485Z","times_seen":1931,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/#/","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1236c9810e95a0b8ffdda40e2d5cf9b4","sha1":"db9ac403ccdd6bfdbb9f0ba5ad05e315ed6a9de4","sha256":"bd2b7705edc061b76a66f131d905a9af7cbfb841e6d5feeacaecd9cbaacb9f78","sha512":"087614145325a6fc03aff4e1fca2b6bc75298fcdb837949a71a7bd6e0ec591035da8e64368d53a2ca41c789fde27f2fc3b2ee2b02c9bd6ca2c4649db7b8b6258","ssdeep":"","tlshash":"d3c08cc5b0c32e103602645450af25e49024802770489f128c94ec497ea20b58233eac","size":147,"data":"","first_seen":"2025-09-02T04:34:57.951053Z","last_seen":"2026-09-29T04:50:32.670223Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/#/","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c02358736a22e5adca5f967ff9ba4140","sha1":"f05e5fed165d26ee449d2a81658d9b9d3450a5da","sha256":"d4b8a7fe2872d268e91d95a82aa0a7e83a6cb886724b5cf0de3dabf1db25dfd4","sha512":"4c3987dc617eb6e7be29da200146825e72c1ad1fc565b332eab449c85df5978a4502757929e817bb8aef298fb8331e392a0ddbdd2f3f183e0ab396f159f5bf12","ssdeep":"","tlshash":"6ac08cc4e0d23d102602655550af24e49028442674482b42ad96d8482e630b09237e98","size":145,"data":"","first_seen":"2026-09-29T04:48:26.108789Z","last_seen":"2026-09-29T04:50:32.671079Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/#/","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b47449239864f13c3420093a40ab219a","sha1":"c631c46debc6db39a04224f2c49d7b0b1bb79457","sha256":"fe1b886a06fe549c5af0ee70614f2f918769b647acd28038dff33f7260d2e02c","sha512":"07665b477bd05424487edd7614b637976ca58503cb3678404c3efb35b2c1edd69f48b36514ae56587cfff4cf94a8033fba1bf5f813d83445cf769e1db64ff01e","ssdeep":"","tlshash":"c7c08cc4b0ca2e101a42641020bf38e49024402674881b02cc94d8882e620f48233e9c","size":143,"data":"","first_seen":"2023-04-12T10:08:15Z","last_seen":"2026-10-13T16:30:12.516534Z","times_seen":1328,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/#/","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9c4db5777435c5cf26f8647815c08d4b","sha1":"b0675cc33ef08e216299ff4a265f55291f9e81bc","sha256":"d064f4e75c0a1cbecfe8fd6ec84642786b596b50ea7ecf32c7ad9053bed42e96","sha512":"6b6b6f476966db9d6111da7768b2249250b120427060a294028fad0662bed66f60412e09ec9d9ab88feb679e644598f2b6571da635dae225fab16afd6cfd9839","ssdeep":"","tlshash":"97c08ccce0c2ae022b4268556cbf26f8d024c02b70482b07ded8dc883e630f49233ed8","size":160,"data":"","first_seen":"2026-02-24T16:02:50.166498Z","last_seen":"2026-09-29T04:50:32.673776Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/#/","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f599e9d34124cf270c40986ecf3c46a","sha1":"51696c67053f851a18192636202a887495c8c638","sha256":"561ca9b799055beb5c1072342f6ef07e3cd921bc2330d33e5df245b5efca39e4","sha512":"e6fa7c6a454de076e8331f63696f3b19db1fbc2a8c4e05d8c72861917225d640ea851d073c0c24ceb98eac63f09dd9140eff96a1e2246e8906c75dca83e3411c","ssdeep":"","tlshash":"bcc08cc4a0c22d101e02645014af28e4a0344027b0885b1a9c94dc492e220b0a23be98","size":144,"data":"","first_seen":"2023-05-05T08:00:34Z","last_seen":"2026-10-13T16:30:12.470682Z","times_seen":798,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/ac-chat.js?2.0.1789545482917","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd7691f620fb4e6f190e75b7c361260a","sha1":"b22512d5ad36767066f9070f3bebdc6fd08aa6ed","sha256":"2059f1b2a41a7d1c5b9e166eddb15ce83b6741539dfa4a11c59d4fc8c6306e31","sha512":"4ecad0b2f363f5983e063ea806508683e0c834f03449d94b57a5201eb10ae29b5e3930837bab219389e3b4be6708ff118e9606adf201cf4343bddf1b1430b654","ssdeep":"","tlshash":"a0418aab43294614c17a13b2ad4b5198f632a02fae46003879fc60d4afb6a7550b1ffd","size":2389,"data":"","first_seen":"2024-12-02T22:13:11.386289Z","last_seen":"2026-09-29T04:50:32.65652Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/assets/vendor-S6nT1lvf.js","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"402a5bc4dbf1d3f3eac7d5522d22edc0","sha1":"f550616c94a6e8bb19c72c135d22bf068460a827","sha256":"2a804906c9f4203c8ed66689fbe57fb1193efeb78ae8b474a34fcf89bfef5cac","sha512":"ad621ef089ba292e28ffd7c152698de6c1358b7fbd3ac4f7eebad49d57d3351e3a5185244fdf9ad665ac1686e34b68f73a98c7fec4e18eb9f9735dfb6554c096","ssdeep":"12288:8jySS2N1N+A3R0TjGk9WNrJL3eZmTQubaRVSft:8jySS2N1Ntpk9YJLOwTJbaRVSl","tlshash":"aea417d57692f02253b725e6007b000af33d1e19780d84d4f169e8ea3d7a95ea2b7f2d","size":469526,"data":"","first_seen":"2026-09-29T04:48:26.088274Z","last_seen":"2026-09-29T04:50:32.638561Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/#/","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a2a94ff311734983a49206e6863c01a7","sha1":"24fb4ee8c93b3e8f2a85e639403cd7e808a6cb8c","sha256":"41c502d8d00f5b1a907ba900d95fca1e0c80f2f2f9bea88aeb703fc1b9aec0aa","sha512":"c6ec458213d9e3792d8283c34d5f0b13f7c6c87f45ac3ad6e490ebc36cdafa071950c135ca35018bc800247345821752f8d3086d24ea00d2971db137e5c99a5c","ssdeep":"","tlshash":"62c08cc5a0c26d102642685410af35e49024802a70489b92cc94dc882e630b49233ebc","size":145,"data":"","first_seen":"2026-02-24T15:43:51.403217Z","last_seen":"2026-09-29T04:50:32.675224Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/#/","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"89e0b591b44ad067ab06fe5b7dd680e8","sha1":"a027d8d09a656ab7167929b8467332822682f54d","sha256":"61f5007598cd7129d05e9fcdb59918ab682beea956ed2ca9ff2e8fa3e1a4ecf5","sha512":"301d49f1c2497473402c85ef2360e948df9708811e6c489118e8066ef1327d222504a974943a711a70507d2a138744fa5805aec1f5a96aad95cb129ddfc85354","ssdeep":"","tlshash":"8bc08cc4b0c6bd001602649114af34e8d0248426748c2f02ada8d9482e625b48233e98","size":150,"data":"","first_seen":"2026-09-29T04:48:26.124718Z","last_seen":"2026-09-29T04:50:32.676613Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/#/","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"76811db4a3d5546de19bc46f245652b4","sha1":"065ddba5bf95b5d1f278bb4a908a53fc4f0a41b2","sha256":"237e40d42319f90c108ee79382b7200ea26929d92fe7799cf0bd33efc343ebfa","sha512":"f7d218cf377027fbcbadd061e0a97768fe6955ff69385e531406117b74cd36e368441724eabbcca6f4424131d73e6f50baf10591dde8509fefd6f7cfa727dcf6","ssdeep":"","tlshash":"efc08cc8a0c22d002602a61020af39e4b038802b70485b128da4de483e630f58233e9c","size":147,"data":"","first_seen":"2023-10-29T04:01:47Z","last_seen":"2026-10-05T18:09:38.251766Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dsafaerg.top/platform/test20/logo_144.png?2.0.1789545482917","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dsafaerg.top/","date":"2026-09-29T04:49:37.855Z","timestamp":1790657377855,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsafaerg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 16:32:25 GMT","end":"Thu, 19 Nov 2026 17:30:04 GMT"},"fingerprint":{"sha1":"43:9D:65:50:DC:93:6E:8E:00:AF:3F:8B:59:9C:9C:36:81:A2:62:CC","sha256":"AD:D3:E0:33:A4:23:84:60:05:5B:D2:69:D3:59:64:0C:04:01:88:83:59:23:3B:70:04:92:96:BC:EA:DA:99:28"}}},"request":{"raw":"GET /platform/test20/logo_144.png?2.0.1789545482917 HTTP/1.1\r\nHost: dsafaerg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:49:37 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cD%2B5NvtdduQadJfI0%2BRPX9j9x4wY869Z2nlzHJEXBvBFpAG6pIMUv%2FyYUIv2lsvlpDwm1vPpYTifhJTY5Moie%2BKAqRe%2BbkB77Ug8lAO6Y2xNjdz0CSnkGvPRpr3Z42c%3D\"}]}\r\npriority: u=6,i=?0\r\nage: 125\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4285cc39ec35695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":710,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-10-14T09:39:48.635336Z","times_seen":339086,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/resource/images/light/logo1.png?2.0.1789545482917","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dsafaerg.top/","date":"2026-09-29T04:49:38.806Z","timestamp":1790657378806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsafaerg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 16:32:25 GMT","end":"Thu, 19 Nov 2026 17:30:04 GMT"},"fingerprint":{"sha1":"43:9D:65:50:DC:93:6E:8E:00:AF:3F:8B:59:9C:9C:36:81:A2:62:CC","sha256":"AD:D3:E0:33:A4:23:84:60:05:5B:D2:69:D3:59:64:0C:04:01:88:83:59:23:3B:70:04:92:96:BC:EA:DA:99:28"}}},"request":{"raw":"GET /resource/images/light/logo1.png?2.0.1789545482917 HTTP/1.1\r\nHost: dsafaerg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:49:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 16 Sep 2026 15:56:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaabc40-36e0\"\r\nexpires: Thu, 29 Oct 2026 04:47:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 124\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LCIQT8mqAL%2BFbmmUazeCDRQw2LBqfWX7VUyUkrBYeCuc4y3abwjH%2Bo6wTgZX7QmzDQxe0JhfIMaq9T%2F%2B3z7ww9L2BGxReVaj1bZ8JTTqcAhHf6bjkXazvbCRUB1D4Fc%3D\"}]}\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4285cc98f155695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14048,"size_decoded":14863,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e32a2dbf7e2a1832da266696ddd4dbf4","sha1":"c0d09f75a1991314c3d4db3fe12eceb68f311eda","sha256":"0991f8d6d76ac83de5647061f5f942971df0041b2936753b06efd35042bd4825","sha512":"8431a27cbf3f4cbbea8eb807b840a018cb76e1e16c8415d6336c5dd87d05e152dd0f7fd559f348fd42d26f18b9ce50006a78ecd6f5fe0495e03f933ad3391945","ssdeep":"384:vdMeHawcZCrjGAsg9BXiRYKowcIRAW9CIIKewMS:v0CeAHB39Yemea","tlshash":"5f52e190787f1317e2664cec87c11e76587486883c73ec26a30aa13527686edff192db","first_seen":"2026-09-29T04:48:26.089969Z","last_seen":"2026-09-29T04:50:32.629288Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/assets/index-CdF2ggcc.css","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dsafaerg.top/","date":"2026-09-29T04:49:37.601Z","timestamp":1790657377601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsafaerg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 16:32:25 GMT","end":"Thu, 19 Nov 2026 17:30:04 GMT"},"fingerprint":{"sha1":"43:9D:65:50:DC:93:6E:8E:00:AF:3F:8B:59:9C:9C:36:81:A2:62:CC","sha256":"AD:D3:E0:33:A4:23:84:60:05:5B:D2:69:D3:59:64:0C:04:01:88:83:59:23:3B:70:04:92:96:BC:EA:DA:99:28"}}},"request":{"raw":"GET /assets/index-CdF2ggcc.css HTTP/1.1\r\nHost: dsafaerg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:49:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 16 Sep 2026 15:58:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaabc8a-5855e\"\r\nexpires: Tue, 29 Sep 2026 16:47:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 127\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sMHqlX5PspDYZsT7VtncVd0hg0cmldgHkVY1aobv3bJGAL6rVN9RVw3YZehb0%2BcPQ65HUxZUH3PEhW5dwBnH4nNd6cQ3wDB4GiVMTGqBxJmrXhBVvkRxipxfNSp9tHU%3D\"}]}\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4285cc20eac5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":361822,"size_decoded":75910,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"2933ce8bff092840e7a9c28698792fc0","sha1":"e43f115b61c75407a79591ad52027ec4c6e76537","sha256":"4194f897158c92b7653f60328b797ed5b55970575b36ddcb75346356f742867b","sha512":"f4e2047d5d68ddf6656d19d55da841594b3e2fbcbadcd7ad24f4a910ec9f6924cc65368b85981adf65bc3cd0ce2a8556375f41036c87fa44e5602952f8ade9c7","ssdeep":"6144:n+/xsa/FlBWkZ8w71ZACkFDS3vyf58rBeV05TMw09Cg:+/1zBjZ8w71ZACkFDS3vyf58rBeV05To","tlshash":"6a74e969a590117c6f279671a7ce5adcf23cea61dc428de5f202640a4fc3bfa2353217","first_seen":"2026-09-29T04:48:26.096685Z","last_seen":"2026-09-29T04:50:32.630379Z","times_seen":2,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.dsafaerg.top/api/common/getLanguage","fqdn":"h5-api.dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dsafaerg.top/","date":"2026-09-29T04:49:37.747Z","timestamp":1790657377747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsafaerg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 16:32:25 GMT","end":"Thu, 19 Nov 2026 17:30:04 GMT"},"fingerprint":{"sha1":"43:9D:65:50:DC:93:6E:8E:00:AF:3F:8B:59:9C:9C:36:81:A2:62:CC","sha256":"AD:D3:E0:33:A4:23:84:60:05:5B:D2:69:D3:59:64:0C:04:01:88:83:59:23:3B:70:04:92:96:BC:EA:DA:99:28"}}},"request":{"raw":"GET /api/common/getLanguage HTTP/1.1\r\nHost: h5-api.dsafaerg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://dsafaerg.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:49:38 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dsafaerg.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KsUubdhMThBEF5eczWoR4B9pdbbIf80cSl%2BpKEMJndiJxrYnsUansQ%2BmBi%2FgDGBhkZQohcCIpreILix%2BRncdU49JPgHBGvJoSI8aFBqzBE%2BCTJ3z%2FgURe4a36p1%2F7zzhl7fnk42I\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4285cc30add5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5026,"size_decoded":1972,"mime_type":"application/json","magic":"JSON text data","md5":"2a27b0024b98ed11096af3dc0bfd3bb2","sha1":"6f9416d17a40c6d3abdff4650f0755c1690e3e4f","sha256":"3e63616fb05456f501b142779514c54e0841eb154d8bd238bd65fdd9b39c8ef6","sha512":"6ee19a3cc8c551abf5b9fd0208088b064136a57e182e4e19a9415aab7df76acb88c7a235bac9e459e6dbb3c3b9385a28925c2b82195e70e2280c492d51def89f","ssdeep":"96:LnqLHf9cWTNZWrxqNEWhPUeWtAo1dsrUNQKkg5oATG2JMMYdo:LqzF9B0lq7hsDr17NPBqA62JMNa","tlshash":"e3a17c023a68dcfb196f5cd390bebc046fdd522f80a0ec14996a9f6c9ed4876285e14d","first_seen":"2026-08-30T21:35:29.563582Z","last_seen":"2026-09-29T04:50:32.631416Z","times_seen":3,"resource_available":true,"data":null}},"time_used":984,"timings":{"blocked":-1,"dns":4,"connect":14,"send":0,"wait":966,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"h5-api.dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/resource/images/light/i18n.png?2.0.1789545482917","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dsafaerg.top/","date":"2026-09-29T04:49:38.807Z","timestamp":1790657378807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsafaerg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 16:32:25 GMT","end":"Thu, 19 Nov 2026 17:30:04 GMT"},"fingerprint":{"sha1":"43:9D:65:50:DC:93:6E:8E:00:AF:3F:8B:59:9C:9C:36:81:A2:62:CC","sha256":"AD:D3:E0:33:A4:23:84:60:05:5B:D2:69:D3:59:64:0C:04:01:88:83:59:23:3B:70:04:92:96:BC:EA:DA:99:28"}}},"request":{"raw":"GET /resource/images/light/i18n.png?2.0.1789545482917 HTTP/1.1\r\nHost: dsafaerg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:49:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Dec 2025 15:36:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6936f09a-5e9\"\r\nexpires: Thu, 29 Oct 2026 04:47:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 124\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=grnct%2BQ07AhEvpXNxvE9uenT4J0IePsPB0gDdU289lUlBTkeMLSCx4aWHBq3uYHu5gxFvycxOgGbv0SSH36%2FK0Gxxvq8qVsqU1aPr6REjRFhBUxroHFCLl4M%2FQUKer4%3D\"}]}\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4285cc98f165695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1513,"size_decoded":2325,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"ec6dd4166418138a34a42373314afdda","sha1":"11880b5bc36ca94dec8b5ef8687ece8934d00c2d","sha256":"cd2cfbf6459814744bb3d7bfa51b8ac4a322a813253ded30de2022014a5731fc","sha512":"1eab14c2b2cd1bb0e641564887d288caaf5afc307e7451659a34066ae455c3960529e11d8621e5223e5aa32ed104f0085e2ed5b7ea49eabcb447940cd0a4077e","ssdeep":"","tlshash":"df31f986cf266c75f765a47d0a93808ae07d9537a71b63b80f00b52e3d4073b2d492a3","first_seen":"2026-09-29T04:48:26.091943Z","last_seen":"2026-09-29T04:50:32.632853Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.dsafaerg.top/api/common/getAllSetting","fqdn":"h5-api.dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dsafaerg.top/","date":"2026-09-29T04:49:38.812Z","timestamp":1790657378812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsafaerg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 16:32:25 GMT","end":"Thu, 19 Nov 2026 17:30:04 GMT"},"fingerprint":{"sha1":"43:9D:65:50:DC:93:6E:8E:00:AF:3F:8B:59:9C:9C:36:81:A2:62:CC","sha256":"AD:D3:E0:33:A4:23:84:60:05:5B:D2:69:D3:59:64:0C:04:01:88:83:59:23:3B:70:04:92:96:BC:EA:DA:99:28"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.dsafaerg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://dsafaerg.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:49:39 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dsafaerg.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Z0libTkjMgrGnLVtM6RunDen0vsreGSKTHb7hyq8IlpL0W71lziBr3AmYsxAaGczoN9B1g9R6%2BrbqPximmzrimXlydcundylve620kLstiQXEODtxymaasdF0kh149S4XMJurBg\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4285ccbbb345696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62287,"size_decoded":23424,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d1c3437680d3f5de7357242dbfa0ca31","sha1":"4a1a866e5b600b69f70c476b0a48b0fa527b4090","sha256":"ea893b5a50aa8a425bb03b44f289a57a55b161e973b9677036e88ad57ffefcc0","sha512":"52abd101ea2089179a1a7f3b2553e620fa76fa9a702ca3c84ebbcf1968be36929b4ce28417bdfb863f129d0df62e79513ea67e14e62183d30156e33dbb37f93f","ssdeep":"1536:h4NmRhh8BUN2Bhs9LT6fvk0l9PWD9D7D+lYeSE:h97D9Q9+x7DwAE","tlshash":"fd53d5e5e1c5b543c08285dda7b28ee3a158b4db6707cd5fa8a2cdd4c0c48a8813f59f","first_seen":"2026-09-29T04:50:32.633881Z","last_seen":"2026-09-29T04:50:32.633881Z","times_seen":1,"resource_available":true,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"h5-api.dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.dsafaerg.top/api/common/getLanguage","fqdn":"h5-api.dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dsafaerg.top/","date":"2026-09-29T04:49:38.813Z","timestamp":1790657378813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsafaerg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 16:32:25 GMT","end":"Thu, 19 Nov 2026 17:30:04 GMT"},"fingerprint":{"sha1":"43:9D:65:50:DC:93:6E:8E:00:AF:3F:8B:59:9C:9C:36:81:A2:62:CC","sha256":"AD:D3:E0:33:A4:23:84:60:05:5B:D2:69:D3:59:64:0C:04:01:88:83:59:23:3B:70:04:92:96:BC:EA:DA:99:28"}}},"request":{"raw":"GET /api/common/getLanguage HTTP/1.1\r\nHost: h5-api.dsafaerg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dsafaerg.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:49:39 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dsafaerg.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zC5f1Eow8QA2iAZ5cbB2WW8OTNcQm4b4JM2zrLclKxSapgdhwrXWgm3EQKy4OARM7Syuw7%2B2yBOGwRqKTzl6N3%2FazkBL6%2BdQhFXHCnfGxixuYy7aj9XSvea7T6%2BaEG2%2B2lEoNgWb\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4285ccbbb355696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5026,"size_decoded":1968,"mime_type":"application/json","magic":"JSON text data","md5":"2a27b0024b98ed11096af3dc0bfd3bb2","sha1":"6f9416d17a40c6d3abdff4650f0755c1690e3e4f","sha256":"3e63616fb05456f501b142779514c54e0841eb154d8bd238bd65fdd9b39c8ef6","sha512":"6ee19a3cc8c551abf5b9fd0208088b064136a57e182e4e19a9415aab7df76acb88c7a235bac9e459e6dbb3c3b9385a28925c2b82195e70e2280c492d51def89f","ssdeep":"96:LnqLHf9cWTNZWrxqNEWhPUeWtAo1dsrUNQKkg5oATG2JMMYdo:LqzF9B0lq7hsDr17NPBqA62JMNa","tlshash":"e3a17c023a68dcfb196f5cd390bebc046fdd522f80a0ec14996a9f6c9ed4876285e14d","first_seen":"2026-08-30T21:35:29.563582Z","last_seen":"2026-09-29T04:50:32.631416Z","times_seen":3,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"h5-api.dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.dsafaerg.top/api/common/getLanguage","fqdn":"h5-api.dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dsafaerg.top/","date":"2026-09-29T04:49:38.815Z","timestamp":1790657378815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsafaerg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 16:32:25 GMT","end":"Thu, 19 Nov 2026 17:30:04 GMT"},"fingerprint":{"sha1":"43:9D:65:50:DC:93:6E:8E:00:AF:3F:8B:59:9C:9C:36:81:A2:62:CC","sha256":"AD:D3:E0:33:A4:23:84:60:05:5B:D2:69:D3:59:64:0C:04:01:88:83:59:23:3B:70:04:92:96:BC:EA:DA:99:28"}}},"request":{"raw":"OPTIONS /api/common/getLanguage HTTP/1.1\r\nHost: h5-api.dsafaerg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://dsafaerg.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:49:39 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dsafaerg.top\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AMDCxNXDnNesCsKTvlSaHaRgHMkFB4OoG5TI0A61dny%2FXZtxYHmXntwJ1E1tjBgOIJzhJmP1qzLVlhOPtDCT%2BdBJvuNVP2Oh3ekd2Tgpfd9AjYpy8wutUVM43nzp8mCXPKctEXiw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a4285cc99b205696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":890,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T09:42:46.355375Z","times_seen":19095059,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"h5-api.dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/assets/login-bg-BvNgsgK1.png","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dsafaerg.top/","date":"2026-09-29T04:49:38.816Z","timestamp":1790657378816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsafaerg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 16:32:25 GMT","end":"Thu, 19 Nov 2026 17:30:04 GMT"},"fingerprint":{"sha1":"43:9D:65:50:DC:93:6E:8E:00:AF:3F:8B:59:9C:9C:36:81:A2:62:CC","sha256":"AD:D3:E0:33:A4:23:84:60:05:5B:D2:69:D3:59:64:0C:04:01:88:83:59:23:3B:70:04:92:96:BC:EA:DA:99:28"}}},"request":{"raw":"GET /assets/login-bg-BvNgsgK1.png HTTP/1.1\r\nHost: dsafaerg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dsafaerg.top/assets/index-CdF2ggcc.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:49:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 16 Sep 2026 15:58:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaabc8a-62a30\"\r\nexpires: Thu, 29 Oct 2026 04:47:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 124\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uL5g1PdVy4mJWCOQ0scbRQgL3PHh4udoyRcGvQBrYqSSFTkgFHhdQcv8Ab5TLpqnywc5XNaefKUHwlv7kSGtSEwjMf4w31h2yQYo6wWZBpHXnKEtKaOxMe28U%2Bdx1ug%3D\"}]}\r\ncf-cache-status: HIT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4285cc99f1a5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":404016,"size_decoded":400105,"mime_type":"image/png","magic":"PNG image data, 1170 x 2532, 8-bit/color RGBA, non-interlaced","md5":"0b40b380ce01114cb958227ff59cdac3","sha1":"ebac9168d8be1d0f5ab08c305e49ac7211e2d841","sha256":"1742ac682da1d6c41cfecc5a7651964d3a43a395dbf4f61a6d9930df33411768","sha512":"40cfc2a52c1bca28a08630e0ee699877ba9d9cb09ed203384dc16038c310c795d0e63b35c21963b199e37253961360d614002c379cfe21e3f5614348049b82f5","ssdeep":"12288:Tem+xekxK9JO/ZwU9xI4260OGkdn/TRsw2WEOisj:Tem+xjxts6lGkpTnIJsj","tlshash":"5084236698ba8070ed47de4937172ed1deed6eba6e371fc20703cd2a28588e51f44709","first_seen":"2026-09-29T04:48:26.076192Z","last_seen":"2026-09-29T04:50:32.636648Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/assets/vendor-S6nT1lvf.js","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dsafaerg.top/","date":"2026-09-29T04:49:37.596Z","timestamp":1790657377596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsafaerg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 16:32:25 GMT","end":"Thu, 19 Nov 2026 17:30:04 GMT"},"fingerprint":{"sha1":"43:9D:65:50:DC:93:6E:8E:00:AF:3F:8B:59:9C:9C:36:81:A2:62:CC","sha256":"AD:D3:E0:33:A4:23:84:60:05:5B:D2:69:D3:59:64:0C:04:01:88:83:59:23:3B:70:04:92:96:BC:EA:DA:99:28"}}},"request":{"raw":"GET /assets/vendor-S6nT1lvf.js HTTP/1.1\r\nHost: dsafaerg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:49:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 16 Sep 2026 15:58:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaabc8a-72a16\"\r\nexpires: Tue, 29 Sep 2026 16:47:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 127\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BYyDTynSKf4xjeeu9p677ofb6YbyVuxSm6VtNcjYzXVPJWQCV5kNcJUWr0MZG6YYgef81iSENlDZU1rMH7NlRdnQOj1gMgcFnt7phWvUYGJCU8%2Bvg5GI4S4MSqEDRxc%3D\"}]}\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4285cc1feaa5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":469526,"size_decoded":164272,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26569)","md5":"402a5bc4dbf1d3f3eac7d5522d22edc0","sha1":"f550616c94a6e8bb19c72c135d22bf068460a827","sha256":"2a804906c9f4203c8ed66689fbe57fb1193efeb78ae8b474a34fcf89bfef5cac","sha512":"ad621ef089ba292e28ffd7c152698de6c1358b7fbd3ac4f7eebad49d57d3351e3a5185244fdf9ad665ac1686e34b68f73a98c7fec4e18eb9f9735dfb6554c096","ssdeep":"12288:8jySS2N1N+A3R0TjGk9WNrJL3eZmTQubaRVSft:8jySS2N1Ntpk9YJLOwTJbaRVSl","tlshash":"aea417d57692f02253b725e6007b000af33d1e19780d84d4f169e8ea3d7a95ea2b7f2d","first_seen":"2026-09-29T04:48:26.088274Z","last_seen":"2026-09-29T04:50:32.638561Z","times_seen":2,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/assets/vendor-Cjd2ZnVe.css","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dsafaerg.top/","date":"2026-09-29T04:49:37.597Z","timestamp":1790657377597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsafaerg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 16:32:25 GMT","end":"Thu, 19 Nov 2026 17:30:04 GMT"},"fingerprint":{"sha1":"43:9D:65:50:DC:93:6E:8E:00:AF:3F:8B:59:9C:9C:36:81:A2:62:CC","sha256":"AD:D3:E0:33:A4:23:84:60:05:5B:D2:69:D3:59:64:0C:04:01:88:83:59:23:3B:70:04:92:96:BC:EA:DA:99:28"}}},"request":{"raw":"GET /assets/vendor-Cjd2ZnVe.css HTTP/1.1\r\nHost: dsafaerg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:49:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 16 Sep 2026 15:58:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaabc8a-1b312\"\r\nexpires: Tue, 29 Sep 2026 16:47:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 127\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WB5eui5YvHkpiqqYRVgvV3LavDSM6sQDMS2MumXUZZ0mKxYHWRmTdJEgd7dmG089UBXuHJ84M7YEvVQx9XfxCSwJ4zep7CWr4NIO9ENbNlxaHjOXDGVX7ZOSZUSFA8g%3D\"}]}\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4285cc1feab5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111378,"size_decoded":41160,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"413e0b23eb7ad2ac2ff74e8540a7659e","sha1":"005f19631e8c294f7fcdcedaf13078337aaa965d","sha256":"2862036bc5ced33d1bcc01ba55c9eab2debb599775d30a81a8f5dd16ecc9bd68","sha512":"f367cd36082fe38f08fda5fd26a48ddd767a55bc455301d0982789f3563462133d7aee55b6b87de8a6f1a041125d0ca900d93eb6bbf75f205f33b5595a131935","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8DZ+k:BnNIClDsIxuVS8F9","tlshash":"81b3d5a5a6c091fc7f2af2659b8766d8f13cf661cd01daa5f105511c0fcbbf50223a2a","first_seen":"2026-09-29T04:48:26.100278Z","last_seen":"2026-09-29T04:50:32.639484Z","times_seen":2,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/resource/fonts/Arial.ttf","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dsafaerg.top/","date":"2026-09-29T04:49:37.686Z","timestamp":1790657377686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsafaerg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 16:32:25 GMT","end":"Thu, 19 Nov 2026 17:30:04 GMT"},"fingerprint":{"sha1":"43:9D:65:50:DC:93:6E:8E:00:AF:3F:8B:59:9C:9C:36:81:A2:62:CC","sha256":"AD:D3:E0:33:A4:23:84:60:05:5B:D2:69:D3:59:64:0C:04:01:88:83:59:23:3B:70:04:92:96:BC:EA:DA:99:28"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: dsafaerg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dsafaerg.top/assets/index-CdF2ggcc.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:49:37 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 08 Dec 2025 15:36:56 GMT\r\netag: \"6936f098-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 125\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Obfr5Z7SBRLDwi34f8BaFwiAW8dk63ceT8cKY%2F3qHvmbFLduCKyJxqHLOtZNboP2rdEt%2BuKACc2w543UISve91EEZDAeWyWSJrFy9hjSdAb%2FEy2iyArjHWcvK%2Fl9ySc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a4285cc28eb75695-OSL\r\ncontent-length: 1047012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":1047774,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-10-13T16:02:47.483534Z","times_seen":8406,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/platform/test20/logo_57.png?2.0.1789545482917","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dsafaerg.top/","date":"2026-09-29T04:49:37.856Z","timestamp":1790657377856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsafaerg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 16:32:25 GMT","end":"Thu, 19 Nov 2026 17:30:04 GMT"},"fingerprint":{"sha1":"43:9D:65:50:DC:93:6E:8E:00:AF:3F:8B:59:9C:9C:36:81:A2:62:CC","sha256":"AD:D3:E0:33:A4:23:84:60:05:5B:D2:69:D3:59:64:0C:04:01:88:83:59:23:3B:70:04:92:96:BC:EA:DA:99:28"}}},"request":{"raw":"GET /platform/test20/logo_57.png?2.0.1789545482917 HTTP/1.1\r\nHost: dsafaerg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:49:37 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1MN0aGhKbWm6lqBa06A86lRDr71V9YPFBVKCwDmWHE5vCOwJw3HkD28nY%2FeHmWEAnm%2BNWeTwQWIoADpy21i0L%2BtBqSW534b7c7y7vVyTxBqdjrAdp8W8O4KLrFgFlGs%3D\"}]}\r\npriority: u=6,i=?0\r\nage: 125\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4285cc39ec45695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":706,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-10-14T09:39:48.635336Z","times_seen":339086,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/assets/en-DaLaSvPA.js","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dsafaerg.top/","date":"2026-09-29T04:49:38.742Z","timestamp":1790657378742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsafaerg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 16:32:25 GMT","end":"Thu, 19 Nov 2026 17:30:04 GMT"},"fingerprint":{"sha1":"43:9D:65:50:DC:93:6E:8E:00:AF:3F:8B:59:9C:9C:36:81:A2:62:CC","sha256":"AD:D3:E0:33:A4:23:84:60:05:5B:D2:69:D3:59:64:0C:04:01:88:83:59:23:3B:70:04:92:96:BC:EA:DA:99:28"}}},"request":{"raw":"GET /assets/en-DaLaSvPA.js HTTP/1.1\r\nHost: dsafaerg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:49:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 16 Sep 2026 15:58:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaabc8a-2b24\"\r\nexpires: Tue, 29 Sep 2026 16:47:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 125\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XyRl9q%2F0S5lqPRZZY8JKSf7cvA22tiUDEB43YuD6b3dncsN%2Bz7hQWUDRzL24IXdgXVgNwzhGfAZEg6wk%2FbHf2FtgmHVxYc8Eb987IXaNzsNQaGtv01fLEuURNmtpDKE%3D\"}]}\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4285cc92f0f5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11044,"size_decoded":4461,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (11043)","md5":"cfec4140d25b59a4467cfb4b43e1b26d","sha1":"07c0c24b980c35267dc6a84c842b771528d36f03","sha256":"b870cb595db64897475406dec2bb1915b13a81eb534314b225b9a1e75b08a288","sha512":"160ab135c784ca7340e416f6e7ac69ca086a9cd11ba2f6fae0fefa9ba9cab6a25f0a992fc3754c8b3630440802897604f79b05205e9b762f2104a77203c9a2b3","ssdeep":"192:ZWomY9lsqfRl3syebzUwLzUeUnHczV1g9aEf6yLlx379AAS14vXwL:ZVQqfr3syebz5zUeMHlkEf6QrI14vAL","tlshash":"4732344ed35700d61ea337663aae3b6984f802d24516c84f48fc5f1c13fb9ee7a62265","first_seen":"2026-09-29T04:48:26.101971Z","last_seen":"2026-09-29T04:50:32.648713Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/resource/images/light/eye-c.png?2.0.1789545482917","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dsafaerg.top/","date":"2026-09-29T04:49:38.809Z","timestamp":1790657378809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsafaerg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 16:32:25 GMT","end":"Thu, 19 Nov 2026 17:30:04 GMT"},"fingerprint":{"sha1":"43:9D:65:50:DC:93:6E:8E:00:AF:3F:8B:59:9C:9C:36:81:A2:62:CC","sha256":"AD:D3:E0:33:A4:23:84:60:05:5B:D2:69:D3:59:64:0C:04:01:88:83:59:23:3B:70:04:92:96:BC:EA:DA:99:28"}}},"request":{"raw":"GET /resource/images/light/eye-c.png?2.0.1789545482917 HTTP/1.1\r\nHost: dsafaerg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:49:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 08 Dec 2025 15:36:58 GMT\r\netag: \"6936f09a-345\"\r\nexpires: Thu, 29 Oct 2026 04:47:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 124\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rd%2Fp%2BKiNfnLdorBAwdyCzbkC6y0OlPADZKrxZ8joI5WRTYP9gAKRSU4rhlkEMfNoVKXpFWuuy7gFPbWs72VbT2Lw7G2qe0VrsWHTAzGIG387VpzMKvwZXgDyCgKbp5U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a4285cc98f175695-OSL\r\ncontent-length: 837\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":837,"size_decoded":1613,"mime_type":"image/png","magic":"PNG image data, 36 x 32, 8-bit/color RGBA, non-interlaced","md5":"270598cb4519db836240a2d4419ba98b","sha1":"7ce306f0a4375e15ae523bc111ac3934c54a82bf","sha256":"2ec3ce1a9389c8084d9ae7ab0f99f48dd1f3f030ee4b02bbd23ec2b181caf7e3","sha512":"f428189720c6304a1814b08ecb7e28534cde4218327e2d7643850af64433f9661c95b02f535909ac5405ea85b9011c843c76ae170c45e24097d721b76e11964a","ssdeep":"","tlshash":"d50186d366243d3cf6422e77473e28586b6e3047a28c16722afc513b51d78e44a532d8","first_seen":"2025-07-17T05:13:59.734282Z","last_seen":"2026-09-29T04:50:32.652928Z","times_seen":10,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.dsafaerg.top/api/common/getAllSetting","fqdn":"h5-api.dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dsafaerg.top/","date":"2026-09-29T04:49:38.814Z","timestamp":1790657378814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsafaerg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 16:32:25 GMT","end":"Thu, 19 Nov 2026 17:30:04 GMT"},"fingerprint":{"sha1":"43:9D:65:50:DC:93:6E:8E:00:AF:3F:8B:59:9C:9C:36:81:A2:62:CC","sha256":"AD:D3:E0:33:A4:23:84:60:05:5B:D2:69:D3:59:64:0C:04:01:88:83:59:23:3B:70:04:92:96:BC:EA:DA:99:28"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.dsafaerg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://dsafaerg.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:49:39 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dsafaerg.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JMp1U1MHpd7Arf9vKVYGURxv%2Fd%2FiGkPPH7DHBUTl5DsCNhU%2FDJOQENZzSazajd2SHthupPop74I1y7dBQys47az7j7WGKDkDa%2FqLqWdFknArsBmXTluYXiBCTpWfabf6ej0IH2fe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a4285cc99b1f5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":909,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T09:42:46.355375Z","times_seen":19095059,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"h5-api.dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-29T04:49:36.245Z","timestamp":1790657376245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsafaerg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 16:32:25 GMT","end":"Thu, 19 Nov 2026 17:30:04 GMT"},"fingerprint":{"sha1":"43:9D:65:50:DC:93:6E:8E:00:AF:3F:8B:59:9C:9C:36:81:A2:62:CC","sha256":"AD:D3:E0:33:A4:23:84:60:05:5B:D2:69:D3:59:64:0C:04:01:88:83:59:23:3B:70:04:92:96:BC:EA:DA:99:28"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dsafaerg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 04:49:37 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Sep 2026 15:58:02 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JwgT%2FpfDLfL9tWWOtAvR4M1SeCX3pl8TLoi11FzuNlU%2FP9eprVT%2BdInzFfRA5qRjMG8DI6wpm13W4u%2Bp%2BTfG9FPFaTEvZ8Rlkx4iq%2FK2tT8SAd11LUNPTQqlAxt4cvg%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a4285cb9ad50b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4033,"size_decoded":2071,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2032), with CRLF, CR, LF line terminators","md5":"20f46680b938f3c01f59eaa73eebb63c","sha1":"b0a8bd460de9418e577e0f594594bd3c7e618dff","sha256":"7ef74ac1821f7a9ffe5689057490ea452cabf42aa009422a75d4db9677446947","sha512":"91084b0a0f7e7e07457738214562810daa845df7fb8a713ba4098fdc741c70e2f70b4ca3c09361ddd650b1af55904491351bb795f92a9c659561973e3a822c50","ssdeep":"","tlshash":"f4811fe71892a8192372423adfd7f418db209557812a4c10b48d51ee8ff2fd6c4d777a","first_seen":"2026-09-29T04:48:26.095153Z","last_seen":"2026-09-29T04:50:32.655629Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1127,"timings":{"blocked":0,"dns":6,"connect":3,"send":0,"wait":1105,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/ac-chat.js?2.0.1789545482917","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dsafaerg.top/","date":"2026-09-29T04:49:37.603Z","timestamp":1790657377603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsafaerg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 16:32:25 GMT","end":"Thu, 19 Nov 2026 17:30:04 GMT"},"fingerprint":{"sha1":"43:9D:65:50:DC:93:6E:8E:00:AF:3F:8B:59:9C:9C:36:81:A2:62:CC","sha256":"AD:D3:E0:33:A4:23:84:60:05:5B:D2:69:D3:59:64:0C:04:01:88:83:59:23:3B:70:04:92:96:BC:EA:DA:99:28"}}},"request":{"raw":"GET /ac-chat.js?2.0.1789545482917 HTTP/1.1\r\nHost: dsafaerg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:49:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 08 Dec 2025 15:36:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6936f098-955\"\r\nexpires: Tue, 29 Sep 2026 16:47:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 127\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SObKMgl%2BjLaIdAiQX0TEmQ3IL4l6iz3ZzrmiV%2F8wLyYgc%2FhwlkjU5aXh2FDHd%2FTlVp%2BWnClQltaEw3ADW9i3et%2FYvqN9VDZr8G8o0cXnGevkWpoJzIBDRAMEAMftPgY%3D\"}]}\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4285cc20ead5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2389,"size_decoded":1667,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"cd7691f620fb4e6f190e75b7c361260a","sha1":"b22512d5ad36767066f9070f3bebdc6fd08aa6ed","sha256":"2059f1b2a41a7d1c5b9e166eddb15ce83b6741539dfa4a11c59d4fc8c6306e31","sha512":"4ecad0b2f363f5983e063ea806508683e0c834f03449d94b57a5201eb10ae29b5e3930837bab219389e3b4be6708ff118e9606adf201cf4343bddf1b1430b654","ssdeep":"","tlshash":"a0418aab43294614c17a13b2ad4b5198f632a02fae46003879fc60d4afb6a7550b1ffd","first_seen":"2024-12-02T22:13:11.386289Z","last_seen":"2026-09-29T04:50:32.65652Z","times_seen":6,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/resource/svg/light/Arcticons-black_meta.svg?2.0.1789545482917","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dsafaerg.top/","date":"2026-09-29T04:49:38.810Z","timestamp":1790657378810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsafaerg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 16:32:25 GMT","end":"Thu, 19 Nov 2026 17:30:04 GMT"},"fingerprint":{"sha1":"43:9D:65:50:DC:93:6E:8E:00:AF:3F:8B:59:9C:9C:36:81:A2:62:CC","sha256":"AD:D3:E0:33:A4:23:84:60:05:5B:D2:69:D3:59:64:0C:04:01:88:83:59:23:3B:70:04:92:96:BC:EA:DA:99:28"}}},"request":{"raw":"GET /resource/svg/light/Arcticons-black_meta.svg?2.0.1789545482917 HTTP/1.1\r\nHost: dsafaerg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:49:38 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FYnUrJ9mqGaTC3HiNNn3PQUXvkgqgesxur35teOlDMEGoP520FtsGdliOt8%2BObxy2%2F26ou04ICTCal6L17F1iApZv1Js1bY%2F6aXzWJo82evsQwNBXpz8fYRXQoEPlIg%3D\"}]}\r\nlast-modified: Wed, 16 Sep 2026 15:56:50 GMT\r\npriority: u=5,i\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\netag: W/\"6aaabc42-242\"\r\nage: 124\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4285cc99f185695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":578,"size_decoded":1053,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"98bce101d433717d924309e0d3861ed7","sha1":"c8ebfbf57822d3bbe938d1b9de2ad09a0f555c3f","sha256":"777b6da9b3cef8273385e4c16a5f22fd050743c9b19f82c2ba7e8c7b90eecfc2","sha512":"619d60eda8c82d027745ac48f85966678a5e45b28a59e85698995358a78b3aaa554def000d2fac8a46a287e06f2245171b5c954a899aa479da3b751c817fce4d","ssdeep":"","tlshash":"4ff0e1e85595883eba6315a0bb3c7010f1d7f1a299e326b0e4d60f712b33cd79226035","first_seen":"2026-09-29T04:48:26.073249Z","last_seen":"2026-09-29T04:50:32.657165Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.dsafaerg.top/api/bussiness/user/easyGenerateCode?codeType=LOGIN","fqdn":"h5-api.dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dsafaerg.top/","date":"2026-09-29T04:49:39.726Z","timestamp":1790657379726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsafaerg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 16:32:25 GMT","end":"Thu, 19 Nov 2026 17:30:04 GMT"},"fingerprint":{"sha1":"43:9D:65:50:DC:93:6E:8E:00:AF:3F:8B:59:9C:9C:36:81:A2:62:CC","sha256":"AD:D3:E0:33:A4:23:84:60:05:5B:D2:69:D3:59:64:0C:04:01:88:83:59:23:3B:70:04:92:96:BC:EA:DA:99:28"}}},"request":{"raw":"GET /api/bussiness/user/easyGenerateCode?codeType=LOGIN HTTP/1.1\r\nHost: h5-api.dsafaerg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://dsafaerg.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:49:40 GMT\r\ncontent-type: image/gif\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dsafaerg.top\r\naccess-control-allow-credentials: true\r\npragma: No-cache\r\ncache-control: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nset-cookie: JSESSIONID=65BE632980C33B10D83E5C6FC66900BF; Path=/; HttpOnly\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z6iKpbMD69iknQZ%2Bv4AJ9nKTUCHcPcQ3SDlR0gewcDdzZC1YtLvvBNXxRBAwaVOUEDCh4RhpUEEMry9IKlHgEoQptT9fIYSTz6F0kkM9M2Bojyu86K1vc9fDWu%2FdDM1k6PAij2f3\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4285ccf4b725696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"JSESSIONID","value":"65BE632980C33B10D83E5C6FC66900BF","quoted":false,"path":"/","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"JSESSIONID=65BE632980C33B10D83E5C6FC66900BF; Path=/; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3621,"size_decoded":4643,"mime_type":"image/gif","magic":"PNG image data, 130 x 48, 8-bit/color RGB, non-interlaced","md5":"76bd30670a2db01ae0f6e08332afa4b0","sha1":"6057dcf3808685b4e53dfaffe7e0a46b936cf1b4","sha256":"ae7ad03bfe37a87b9cc3c3b2a4d57bbb100030ba593d953f4962f974749f9d5a","sha512":"188129481a38f09e0eca56ca49b783aaad3b25867d3e1876cd7d3a1bc0064e5ccf575e959a94b05f50f12ce7c5d2dc6247662483d5c7c29a33570dd5d69a8ba0","ssdeep":"","tlshash":"7b719dc74fbb9198e74f603fe288cf927cb010c2841db70be065aa415407e745648fe1","first_seen":"2026-09-29T04:50:32.657957Z","last_seen":"2026-09-29T04:50:32.657957Z","times_seen":1,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"h5-api.dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.dsafaerg.top/api/common/getLanguage","fqdn":"h5-api.dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dsafaerg.top/","date":"2026-09-29T04:49:39.727Z","timestamp":1790657379727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsafaerg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 16:32:25 GMT","end":"Thu, 19 Nov 2026 17:30:04 GMT"},"fingerprint":{"sha1":"43:9D:65:50:DC:93:6E:8E:00:AF:3F:8B:59:9C:9C:36:81:A2:62:CC","sha256":"AD:D3:E0:33:A4:23:84:60:05:5B:D2:69:D3:59:64:0C:04:01:88:83:59:23:3B:70:04:92:96:BC:EA:DA:99:28"}}},"request":{"raw":"OPTIONS /api/common/getLanguage HTTP/1.1\r\nHost: h5-api.dsafaerg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://dsafaerg.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:49:40 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dsafaerg.top\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OIEcIEQYBwaizrc68Y%2BSXEreuErJCPvZrkP6idGp2GfgSUHy%2FDCRDNZjoRvwnKkcwwwtbpUPy7bryocjouATKZv5UQdg5Nda%2B2iM9OIUo2uWkYco%2F6xO2TubOVBi3IcdQ9lhk6k0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a4285ccf4b735696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":894,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T09:42:46.355375Z","times_seen":19095059,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"h5-api.dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsafaerg.top/assets/index-C9s9I57k.js","fqdn":"dsafaerg.top","domain":"dsafaerg.top","tld":"top"},"ip":{"addr":"172.67.128.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dsafaerg.top/","date":"2026-09-29T04:49:37.594Z","timestamp":1790657377594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsafaerg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 16:32:25 GMT","end":"Thu, 19 Nov 2026 17:30:04 GMT"},"fingerprint":{"sha1":"43:9D:65:50:DC:93:6E:8E:00:AF:3F:8B:59:9C:9C:36:81:A2:62:CC","sha256":"AD:D3:E0:33:A4:23:84:60:05:5B:D2:69:D3:59:64:0C:04:01:88:83:59:23:3B:70:04:92:96:BC:EA:DA:99:28"}}},"request":{"raw":"GET /assets/index-C9s9I57k.js HTTP/1.1\r\nHost: dsafaerg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:49:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 16 Sep 2026 15:58:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaabc8a-1ff14\"\r\nexpires: Tue, 29 Sep 2026 16:47:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 127\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9lI4%2BPMmirGaA9%2BBB1cY2HNv9DE8%2FT2jPG2Gpl5brDjyTC4Zcf%2FjRbaPWEupZslLKNRyPAbIZXBEaoRozkNEulgPPDdFMQVPQKuaH4L4qy2NQ8nJLVBwO00bHDn89i0%3D\"}]}\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4285cc1fea95695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":130836,"size_decoded":36852,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65356)","md5":"2e428aa62a010e698fe5abccb177cf9c","sha1":"9de602453a2d077436dec762acbc551d2b85bbde","sha256":"79da5cd3f9fc2f601edcdd7814ea44e2a7857601632ac2eb76a9149f3b0f771d","sha512":"2054b5ab26393c1d40c4f90c78c2abaf48c5cb80e5e4d337dea5df516ff1b10b60c85d47029f5e015e33d36de59f88d3f0a536283af627743032c67779d73dc4","ssdeep":"1536:qBZRW8yJz2sZZPBAHlyRuPDeQH25sZQ//SU5DKoIx+pczE9edAvY:qA87lygPabiQt5DVM4c6edAw","tlshash":"66d30a41f1168979ebf60454a89e1800715c2fdbd00488e7b1fdae269bf7cb97399b2c","first_seen":"2026-09-29T04:48:26.098453Z","last_seen":"2026-09-29T04:50:32.659173Z","times_seen":2,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dsafaerg.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}