{"report_id":"330a313a-cace-469f-86c9-c5f577e1945a","version":0,"status":"done","tags":[],"date":"2026-07-28T17:30:11Z","url":{"schema":"https","addr":"darkmatter-url.cyou/","fqdn":"darkmatter-url.cyou","domain":"darkmatter-url.cyou","tld":"cyou"},"ip":{"addr":"172.67.141.182","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"darkmatter-url.cyou/","fqdn":"darkmatter-url.cyou","domain":"darkmatter-url.cyou","tld":"cyou"},"title":"DarkMatter Market | Official Onion Links \u0026 Verified Mirrors 2026","dom":{"size":37377,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (361)","md5":"3283dbcd37e9031d44e9cac74b7b2af6","sha1":"39130417932c48cfba9de2574c5f377f7a2f3b47","sha256":"a4facae994603a0599569cbfe86fd676b12eb8787a7030f2fa72d0974bebe640","sha512":"5a763ad13f49acaf0b76a355bb093b7397440dff37fb4d90efb5f8207b768903954ec167a41537b780ccdfafd3fdb0be6292dc7538ce9e75c4ca9943641f6d21","ssdeep":"768:daFG1lO7exieug34rnop7ke8F7gByDez225BMdR/:EIgg0Dx","tlshash":"fbf2a51533f105b701f786b2b6b1bf6aafa4870bd61bd91db2ac03950fc7c929913294","dom_hash":"domhash8234ed66774155ac7e0ef3835f94036e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"darkmatter-url.cyou/","fqdn":"darkmatter-url.cyou","domain":"darkmatter-url.cyou","tld":"cyou"},"ip":{"addr":"172.67.141.182","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-01T17:30:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"darkmatter-url.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"darkmatter-url.cyou","ip":{"addr":"104.21.33.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-25","domain_rank":0,"first_seen":"2026-07-28T17:30:11.785884Z","last_seen":"2026-07-28T17:30:11.785884Z","alert_count":9,"request_count":9,"received_data":728737,"sent_data":4690,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"darkmatter-url.cyou/","fqdn":"darkmatter-url.cyou","domain":"darkmatter-url.cyou","tld":"cyou"},"ip":{"addr":"104.21.33.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ec9d28f9098edc8b5153627f8d39811","sha1":"7dbf66330bc833b027a8f4596df4eab2adb91237","sha256":"14ef69e41d4405c514c777bb332cf9d4f5d62a1aa3114a26b925fe2ddcd479cd","sha512":"cd1e8b286627f55cfe4f68c87c5b81cdfecad3f18afd2a7095377c5f1d66aebb007eba943d548c5e52611acf52008802eec1102dd0d5660df419053305defacb","ssdeep":"","tlshash":"1a41ec0e75b20a398eff5da733a7d7dc392000879994c51a3a1d8b080f27e91b8b74c9","size":2380,"data":"","first_seen":"2026-07-28T17:30:15.093242Z","last_seen":"2026-07-28T17:30:53.411614Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"darkmatter-url.cyou/style-index.css","fqdn":"darkmatter-url.cyou","domain":"darkmatter-url.cyou","tld":"cyou"},"ip":{"addr":"104.21.33.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://darkmatter-url.cyou/","date":"2026-07-28T17:29:44.941Z","timestamp":1785259784941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkmatter-url.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 09:40:02 GMT","end":"Fri, 23 Oct 2026 10:38:44 GMT"},"fingerprint":{"sha1":"A0:AE:FC:2D:6B:37:51:29:B5:8B:C3:32:14:1B:14:5C:B8:97:C8:B9","sha256":"92:9A:58:95:0F:18:65:66:82:04:91:FC:1F:B4:C9:F3:65:DF:99:BF:80:9F:F7:3B:FD:D8:C9:DE:04:28:D5:98"}}},"request":{"raw":"GET /style-index.css HTTP/1.1\r\nHost: darkmatter-url.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://darkmatter-url.cyou/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:29:45 GMT\r\ncontent-type: text/css\r\netag: W/\"6a649162-4117\"\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 25 Jul 2026 10:35:14 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QFTvUoaXNfKjz%2FzsevjhBHTGCB0R3EOXzMVhnqBA0vMrZ9Nhxu9y1dZjnMSkMKqpCV5hYFQaO4WsyhxonYKiogY%2F8mW4PDBbfFgJ7TWqjoKfEzME3ODMQXS94axfFkNvYqa2rbTP\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2259b97ef72b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16663,"size_decoded":5245,"mime_type":"text/css","magic":"ASCII text, with very long lines (16663), with no line terminators","md5":"137ca4cea8f6674951755532f6efe028","sha1":"869bb243a4d1173a2ff6f628522315776fdb72c1","sha256":"d3386ee2053b31d05c9aa2cda490a54d4a365e622cf934f3930d8844f617ce76","sha512":"d3d2ffe8dd3b79586da4300a05647fb24e6b1c633c10f43d0746809be1851cb871b099a2b4728bfe491b726973bc58d655e7581561d8c7509cfb60faee38660f","ssdeep":"192:Y7JXYS7JXYHGw2CQNsfwsfXtqE/4TgxYLKGdgcLiQrTE2U:GHnwYgtqmNbGdnrT6","tlshash":"6872b71ea750102b7d2785f7d5d5ba5cb027f1c1ef36a6eaa9430200afe12f71c97604","first_seen":"2026-07-28T17:30:15.084004Z","last_seen":"2026-07-28T17:30:53.408972Z","times_seen":3,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"darkmatter-url.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkmatter-url.cyou/img/darkmatter-url-cyou_screenshot_1.png","fqdn":"darkmatter-url.cyou","domain":"darkmatter-url.cyou","tld":"cyou"},"ip":{"addr":"104.21.33.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkmatter-url.cyou/","date":"2026-07-28T17:29:44.951Z","timestamp":1785259784951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkmatter-url.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 09:40:02 GMT","end":"Fri, 23 Oct 2026 10:38:44 GMT"},"fingerprint":{"sha1":"A0:AE:FC:2D:6B:37:51:29:B5:8B:C3:32:14:1B:14:5C:B8:97:C8:B9","sha256":"92:9A:58:95:0F:18:65:66:82:04:91:FC:1F:B4:C9:F3:65:DF:99:BF:80:9F:F7:3B:FD:D8:C9:DE:04:28:D5:98"}}},"request":{"raw":"GET /img/darkmatter-url-cyou_screenshot_1.png HTTP/1.1\r\nHost: darkmatter-url.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://darkmatter-url.cyou/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:29:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sun, 26 Jul 2026 02:30:43 GMT\r\netag: \"6a657153-13d70\"\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jHSWSApAJkLiUJA6pLh3sV1juH4T2J2TylibudTcCwtoxfFB5XTKE1ygV4echmuSillfsT444Z2tRMd%2BHiP0j61c3R4AfseZMO6E72HK%2F%2FR%2BCIyqMGZc6EnCMhN%2BCmQIyIfS21MV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2259b97ff76b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 81264\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81264,"size_decoded":82144,"mime_type":"image/png","magic":"PNG image data, 1498 x 768, 8-bit/color RGBA, non-interlaced","md5":"6f34f6911ac036a20318bded33c4a326","sha1":"f766a4f7b52ee9fbd9142f983ed9b0ec8fe521d8","sha256":"9b46240cbec8824ca708ad8f55157246eb16694aa6decb03d77121e44940ebb8","sha512":"4fdec04a7e9b8b5653b6b9dca4cdb79e1a9983c8c2c5f8c2cf82b137295e44b4ccd374e867bd878223e1765b3d74a7c22689b7811557419b8bc11526e6bbf638","ssdeep":"1536:Aobxxp8dsmhRzp7PtfUaDncO7ZvnWGoILs/qVuubTwcCEfideLROXf:AemdPtf3T5nWPM5VuMTwcCWaP","tlshash":"4483f1a9c237dce4cf5d05368add79242ef0550a40a41dbe67b2b27cfbce28be406654","first_seen":"2026-07-28T17:30:15.085441Z","last_seen":"2026-07-28T17:30:53.410724Z","times_seen":3,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"darkmatter-url.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkmatter-url.cyou/img/darkmatter-url-cyou_screenshot_2.png","fqdn":"darkmatter-url.cyou","domain":"darkmatter-url.cyou","tld":"cyou"},"ip":{"addr":"104.21.33.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkmatter-url.cyou/","date":"2026-07-28T17:29:44.952Z","timestamp":1785259784952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkmatter-url.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 09:40:02 GMT","end":"Fri, 23 Oct 2026 10:38:44 GMT"},"fingerprint":{"sha1":"A0:AE:FC:2D:6B:37:51:29:B5:8B:C3:32:14:1B:14:5C:B8:97:C8:B9","sha256":"92:9A:58:95:0F:18:65:66:82:04:91:FC:1F:B4:C9:F3:65:DF:99:BF:80:9F:F7:3B:FD:D8:C9:DE:04:28:D5:98"}}},"request":{"raw":"GET /img/darkmatter-url-cyou_screenshot_2.png HTTP/1.1\r\nHost: darkmatter-url.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://darkmatter-url.cyou/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:29:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sun, 26 Jul 2026 02:30:45 GMT\r\netag: \"6a657155-24b9a\"\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nM1cZnHxjVrBeSR6Z1S3ScWPZ4dih7vk0TjBzt2HNjpZAb3q3dU%2FB2EY0nvPzemgVgz9%2FEsEIwqfp8yZ3MxHqxfLNR8cksV%2B0iGAQQ5PyrN6RlkdwoIzzMIeT6FCZzZC%2Bw1dayIu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2259b97ff77b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 150426\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150426,"size_decoded":151305,"mime_type":"image/png","magic":"PNG image data, 1800 x 900, 8-bit/color RGBA, non-interlaced","md5":"3fdfcdc17376e4d92b77a82d4ffc9e2f","sha1":"54ed2506e6fc3e583ecd11d75fc78d62797fb8ea","sha256":"8d2f04d163321a15231abbcaa8414b9db96deef11c991c45b24618a4a91b47d4","sha512":"16e4e994af8be5b975f9c5561f5e41784c80506f2f627caf602fc1eeeb1112b7a76eeb9b400ff67df355331dcdda9eb4bbd7aa7f3090fa1c1b272706919c63db","ssdeep":"3072:LQN3idzIeQZlAj/tHJt01Bb1RnPS86dGurMqy2Gbz+Q1x7/LFcsyT5hn5Fz3:0N3idzAZlAj/tL01Bb1RPSjqqyLd/isY","tlshash":"90e302f3da83e12bcc2f8091658f5a9fda6c0a099796f5b06af2251de42d35c84c5734","first_seen":"2026-07-28T17:30:15.086763Z","last_seen":"2026-07-28T17:30:53.402667Z","times_seen":3,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"darkmatter-url.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkmatter-url.cyou/apple-touch-icon.png","fqdn":"darkmatter-url.cyou","domain":"darkmatter-url.cyou","tld":"cyou"},"ip":{"addr":"104.21.33.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkmatter-url.cyou/","date":"2026-07-28T17:29:45.177Z","timestamp":1785259785177,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkmatter-url.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 09:40:02 GMT","end":"Fri, 23 Oct 2026 10:38:44 GMT"},"fingerprint":{"sha1":"A0:AE:FC:2D:6B:37:51:29:B5:8B:C3:32:14:1B:14:5C:B8:97:C8:B9","sha256":"92:9A:58:95:0F:18:65:66:82:04:91:FC:1F:B4:C9:F3:65:DF:99:BF:80:9F:F7:3B:FD:D8:C9:DE:04:28:D5:98"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: darkmatter-url.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://darkmatter-url.cyou/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:29:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 18 Jun 2026 02:54:49 GMT\r\netag: \"6a335df9-a307\"\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2Bxt5rPsClqqcwk3CNjlPUm2w%2F4oEbII1o17jWtSeBl3sf6adOjNyfpev8ArkV5qhjDOuPQMPx4S%2F8TmW5j%2Bp8ybpOY2xxAmpW5H%2BTmqL7vzx%2FxVnceHXB0TZr9wzTJcOiVuCCcw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2259b995f8eb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 41735\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41735,"size_decoded":42619,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"354a830c1ddd832c62435db2398c1ac5","sha1":"565cb4ac44a45cf24568ceb0256bbb203c5b98cc","sha256":"abf63a91affde96c5fb3ac45447df192bb336223bd92ae18539f85b8d437f8b7","sha512":"1eda9043075cb621aff46ac98cbfa24feefd4efae10bf2bd5732641a39ba304f0c7ac2a84ea7fa2d5e69674571b59097ca971d2aefa0caa0dee0a168f0f3a452","ssdeep":"768:wXCoaR7EuhX3WXN54uM+RvXHbzs11604SE77r0zOH7FvfC0LOh3:0aRfXG506P7ziI04iz4Z3C0Sx","tlshash":"ea1302163498c8be8422ef6ac5530b060830f7f1dd06699e1cc6af7e96f4427f585bad","first_seen":"2026-02-18T14:09:15.074234Z","last_seen":"2026-07-28T19:29:53.421566Z","times_seen":21,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"darkmatter-url.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkmatter-url.cyou/","fqdn":"darkmatter-url.cyou","domain":"darkmatter-url.cyou","tld":"cyou"},"ip":{"addr":"104.21.33.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-28T17:29:41.380Z","timestamp":1785259781380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkmatter-url.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 09:40:02 GMT","end":"Fri, 23 Oct 2026 10:38:44 GMT"},"fingerprint":{"sha1":"A0:AE:FC:2D:6B:37:51:29:B5:8B:C3:32:14:1B:14:5C:B8:97:C8:B9","sha256":"92:9A:58:95:0F:18:65:66:82:04:91:FC:1F:B4:C9:F3:65:DF:99:BF:80:9F:F7:3B:FD:D8:C9:DE:04:28:D5:98"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: darkmatter-url.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 17:29:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 25 Jul 2026 13:31:12 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=900, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7eWJB%2BAt8a5%2B8dOYED7tgDWBUvaHLR8ZHnaVozD0DifnmiGuozhtSi2vjR%2B4ExicS5K%2FVn8lQrCitDjNqZXf59a8fGuhLR7KJRikg2mWWu%2FDtGuk8SwzVTFxsFfJUBva287lgWmM\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2259b959b1056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37409,"size_decoded":8852,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (361)","md5":"82921c43e00d0ab28293033cbe47c02b","sha1":"46141b60997c12bfe1fcb68a7efd2d8a4bec22b3","sha256":"608f442f5f84f09b21ec3469fe3e61f93acded2a96b462e32636e93d80488ab0","sha512":"5e5987f3ab2e17e88dcba7935b583be1c88fa207cb3b2186aa987ebdb6d7d42dc3f5f0f6838a11a88ec9ff386ada818a3bbe3c1bbb21405149aa8f02f08d9323","ssdeep":"768:l5FG1lOoexieug34rnop7ke8F7gByDez225BMdRq:fIPg0Dw","tlshash":"61f2b51533f105b701f786b2b6b1bf6aafa0830bd62bd91db2ac43950fc7c919913294","first_seen":"2026-07-28T17:30:15.08908Z","last_seen":"2026-07-28T17:30:53.40148Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3357,"timings":{"blocked":-1,"dns":70,"connect":2,"send":0,"wait":167,"receive":0,"ssl":3118},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"darkmatter-url.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkmatter-url.cyou/logo.png","fqdn":"darkmatter-url.cyou","domain":"darkmatter-url.cyou","tld":"cyou"},"ip":{"addr":"104.21.33.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkmatter-url.cyou/","date":"2026-07-28T17:29:44.949Z","timestamp":1785259784949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkmatter-url.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 09:40:02 GMT","end":"Fri, 23 Oct 2026 10:38:44 GMT"},"fingerprint":{"sha1":"A0:AE:FC:2D:6B:37:51:29:B5:8B:C3:32:14:1B:14:5C:B8:97:C8:B9","sha256":"92:9A:58:95:0F:18:65:66:82:04:91:FC:1F:B4:C9:F3:65:DF:99:BF:80:9F:F7:3B:FD:D8:C9:DE:04:28:D5:98"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: darkmatter-url.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://darkmatter-url.cyou/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:29:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Thu, 18 Jun 2026 02:54:50 GMT\r\netag: \"6a335dfa-3d96\"\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6qZmV1wr9a3CN%2B7wpTwl9lxDcMtmhQopZD3h0715QmMCqHFqTZk8IIQHTg53j8kWSWvW0Xu5bNqWI3ksPPOKF32Paxbzkw1g3sh2zWR5aknY%2F5JPSOIJGGU%2FEhMXS9KVwDJM3WAT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2259b97ff75b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15766\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15766,"size_decoded":16641,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"d52881cbde41f2d9bd9e03845cdb82f1","sha1":"8055f9dc1d4ac10a7dbf92bc0637e50ccc402200","sha256":"2ce7c581a83d2adeb62f60e1cba92110e975067bbccba9904cb9a25cad4f21d4","sha512":"e7c6ced97db4208085449c0c370e527327febdd0d632191c6af48346f04c53bfc9b30b4392f7ef406f52f28d49edd6afd6cd2da1166cb3aefedc9e86d0a045f1","ssdeep":"384:Uc3hWJsZSpklzwJyd3Eqr23PwHHUoOhbC:UMhWKQwwQd0QGPC8tC","tlshash":"db62cf0bb5f817490a321f2e1d2795fe2602632c033a3e651a87763dc5ed9f25e442af","first_seen":"2026-02-18T14:09:15.068669Z","last_seen":"2026-07-28T19:29:53.419024Z","times_seen":30,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"darkmatter-url.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkmatter-url.cyou/img/darkmatter-url-cyou_screenshot_3.png","fqdn":"darkmatter-url.cyou","domain":"darkmatter-url.cyou","tld":"cyou"},"ip":{"addr":"104.21.33.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkmatter-url.cyou/","date":"2026-07-28T17:29:44.953Z","timestamp":1785259784953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkmatter-url.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 09:40:02 GMT","end":"Fri, 23 Oct 2026 10:38:44 GMT"},"fingerprint":{"sha1":"A0:AE:FC:2D:6B:37:51:29:B5:8B:C3:32:14:1B:14:5C:B8:97:C8:B9","sha256":"92:9A:58:95:0F:18:65:66:82:04:91:FC:1F:B4:C9:F3:65:DF:99:BF:80:9F:F7:3B:FD:D8:C9:DE:04:28:D5:98"}}},"request":{"raw":"GET /img/darkmatter-url-cyou_screenshot_3.png HTTP/1.1\r\nHost: darkmatter-url.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://darkmatter-url.cyou/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:29:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sun, 26 Jul 2026 02:30:44 GMT\r\netag: \"6a657154-2483f\"\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wBcoE3zI7mizRzNd5LybNXH1fjResAh5AvfZvIdHqXf6UW4Ilj25GRhwTP57vkAo7REx7ZMXGW2y2DH%2B1gEshJxPXE5v5Gjn5v3HjF4G3c2s0EQnvTCPBo8jUJJwCTa7ZMEQsMta\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2259b97ff78b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 149567\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149567,"size_decoded":150440,"mime_type":"image/png","magic":"PNG image data, 1800 x 900, 8-bit/color RGBA, non-interlaced","md5":"8bd715a87c525802ad5201129fa5b17e","sha1":"3ea3b67e97670b03c3c3e1cd0cbe8b3fe02492cf","sha256":"09e94a7d7611e1e35655aec4bd34bf02a187e38e738fa5402c1989a94d015601","sha512":"cc56e53883ab974aa08f460fc13c830d47289e4c4371ccf2b9c7b3298e5149f220a70bf388d61daa28d839778b24f1da2e7344b8062268aebc624b8fe1c76111","ssdeep":"3072:myWU3RW204RQrvnrVckHmU/T9+EO2WOGeFANht4DD4:qUhWgRqfrVHmokn2WDeFAqf4","tlshash":"68e302061f0bc8d9deef58c8bf4eb5fc9d9964bc274514bacbf8009ce187e688499046","first_seen":"2026-07-28T17:30:15.090673Z","last_seen":"2026-07-28T17:30:53.404463Z","times_seen":3,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"darkmatter-url.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkmatter-url.cyou/img/darkmatter-url-cyou_screenshot_4.png","fqdn":"darkmatter-url.cyou","domain":"darkmatter-url.cyou","tld":"cyou"},"ip":{"addr":"104.21.33.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkmatter-url.cyou/","date":"2026-07-28T17:29:44.955Z","timestamp":1785259784955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkmatter-url.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 09:40:02 GMT","end":"Fri, 23 Oct 2026 10:38:44 GMT"},"fingerprint":{"sha1":"A0:AE:FC:2D:6B:37:51:29:B5:8B:C3:32:14:1B:14:5C:B8:97:C8:B9","sha256":"92:9A:58:95:0F:18:65:66:82:04:91:FC:1F:B4:C9:F3:65:DF:99:BF:80:9F:F7:3B:FD:D8:C9:DE:04:28:D5:98"}}},"request":{"raw":"GET /img/darkmatter-url-cyou_screenshot_4.png HTTP/1.1\r\nHost: darkmatter-url.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://darkmatter-url.cyou/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:29:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sun, 26 Jul 2026 02:30:43 GMT\r\netag: \"6a657153-29eee\"\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SGX36kd9Bxig5mKleTzINdZJ3i6iZcBXp%2FBm7tggrY7z6CJpvjE%2BUwpCaKN7fTxUekAd3YlmHSoaVa659wGhsEnUwU7pESMfZFPBkcBgHjrK7qyfXd0us0qzudTuH5nQbtPVGhuP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2259b97ff79b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 171758\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":171758,"size_decoded":172633,"mime_type":"image/png","magic":"PNG image data, 1824 x 912, 8-bit/color RGBA, non-interlaced","md5":"5bc77a2af9d2392a313ff16869c62de8","sha1":"e250d3601baaa07d8d659405d8bc4706e0550044","sha256":"1919a4047671c053d4c164acea6f772bbd806fa576ad510601c05c325854299a","sha512":"2cd6b6e0da5133d7cad02dd0ad6141c2779173edc7159009c7f8631356d9f0bda90fc356c6fca1b9e9711474db1e212a5b4f347b9719889bf261f5eff7773729","ssdeep":"3072:Xs/Yvb8uic7/95ytpSZnyNkuEjBkCFEJtyQk17FGW1A8OC4UWeE4E2t3c1KevDU:cgb8O7ZnyNkuEnEJtyF1YJR8E4E2Kgeo","tlshash":"c7f301da58b3cd142c0fa53330caefa78887155312f66b34d2b7905dd076f2929d8ac6","first_seen":"2026-07-28T17:30:15.091718Z","last_seen":"2026-07-28T17:30:53.405707Z","times_seen":3,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"darkmatter-url.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkmatter-url.cyou/favicon.svg","fqdn":"darkmatter-url.cyou","domain":"darkmatter-url.cyou","tld":"cyou"},"ip":{"addr":"104.21.33.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkmatter-url.cyou/","date":"2026-07-28T17:29:45.179Z","timestamp":1785259785179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkmatter-url.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 09:40:02 GMT","end":"Fri, 23 Oct 2026 10:38:44 GMT"},"fingerprint":{"sha1":"A0:AE:FC:2D:6B:37:51:29:B5:8B:C3:32:14:1B:14:5C:B8:97:C8:B9","sha256":"92:9A:58:95:0F:18:65:66:82:04:91:FC:1F:B4:C9:F3:65:DF:99:BF:80:9F:F7:3B:FD:D8:C9:DE:04:28:D5:98"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: darkmatter-url.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://darkmatter-url.cyou/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:29:45 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a335dfa-dbc8\"\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 18 Jun 2026 02:54:50 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zDIRwbbFB1nONSkPWonf6vbEHmZ0mVwkAs3aakIaVxtalkZjhc2mQ8xGTHhTD3ExHYlC2oBL9JbPtibJFi4ft%2Bvksgc0%2FwrBQuaZYA5W7soqRJqso01UkDtHgM7U%2BPVu3rXhRa9%2B\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2259b995f8fb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56264,"size_decoded":43211,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"590778db976e371b12f512d4ca0baaba","sha1":"22f1b640eff3a379ddd2b0fcf971a0d0b4e41997","sha256":"34dddc168ddc8d06e0bd87fff814f043a74682f9775fb95adae08ed0b1ee30e1","sha512":"f3a9cca293302481d7a099029978ecfbcad4884ea1c4e8f66f902d7cf003cc09493a88646b68489e6754a05715b74e373859b006f9e306d00ac386e41f678e56","ssdeep":"1536:qrBCoeIIagNWHUdv5Lrgy5NorXoW4hI31ns0N:1IIa2KWvROrbyMnp","tlshash":"f2430277590cb83973bda9cefae9fe01d9717093447545e79861b1e8e51c080e0aa0fe","first_seen":"2026-02-18T14:09:15.075346Z","last_seen":"2026-07-28T19:29:53.414354Z","times_seen":30,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"darkmatter-url.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}