{"report_id":"33b91d1e-7207-449a-83a9-5c709aa85f0b","version":0,"status":"done","tags":[],"date":"2026-09-21T10:21:54Z","url":{"schema":"http","addr":"rekidofpsdiksfosdpado.com/","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"172.67.148.243","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"title":"WEF-Spain, 7 May 2024, Madrid, Spain | WEF","dom":{"size":60900,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22437)","md5":"3a4c0e6bd1f8a9ada98ded05f8d9ca82","sha1":"80ceb6e28dc21efb4cc80fe0f359c38ff3461f96","sha256":"6fc27215352439ed5e63016ddec498ee87d29d05cec777245d5e0cda2c15a852","sha512":"73cd314cc56d707140452650c70c97f513e3fdafab10ff71990d470116e0a9c1f29110ef669f2cf0c8773482a770a50b1a3e2f62f5b3517cc18cffa845fdb55c","ssdeep":"1536:A4+AS0rAROzMJyP8rptNFPZT9LKCmVBvle0hJu:AUR6TJDm3le9","tlshash":"86530a37ac45dc27636b5bdde0a6f31d9266910acb01cfe0b2f842f846e5eea055350e","dom_hash":"domhash17250931e6d51d121d2eb0bc94d22061","first_seen":"2026-09-21T10:10:48.41697Z","last_seen":"2026-09-21T10:22:16.688853Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rekidofpsdiksfosdpado.com/","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"172.67.148.243","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-26T10:21:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rekidofpsdiksfosdpado.com","ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-21","domain_rank":0,"first_seen":"2026-09-21T10:10:41.578365Z","last_seen":"2026-09-21T10:10:41.578365Z","alert_count":765,"request_count":153,"received_data":3916243,"sent_data":79275,"comment":"","tags":null,"fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WP-Optimize","description":"WP-Optimize is an all-in-one WordPress plugin that cleans your database, compresses your large images and caches your site.","website":"https://getwpo.com","common_platform_enumeration":"","icon":"WP-Optimize.png","categories":["WordPress plugins","Performance"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"prettyPhoto","description":"","website":"https://no-margin-for-errors.com/projects/prettyphoto-jquery-lightbox-clone/","common_platform_enumeration":"","icon":"prettyPhoto.png","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"FitVids.JS","description":"jQuery plugin for fluid width video embeds","website":"https://fitvidsjs.com/","common_platform_enumeration":"","icon":"FitVids.JS.png","categories":["Widgets","Video players"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:6.7","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Chosen","description":"Chosen is a jQuery plugin that makes long, unwieldy select boxes much more user-friendly.","website":"https://harvesthq.github.io/chosen/","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery Mobile","description":"jQuery Mobile is a HTML5-based user interface system designed to make responsive web sites and apps that are accessible on all smartphone, tablet and desktop devices.","website":"https://jquerymobile.com","common_platform_enumeration":"","icon":"jQuery Mobile.svg","categories":["Mobile frameworks"]},{"name":"Twitter","description":"Twitter is a 'microblogging' system that allows you to send and receive short posts called tweets.","website":"https://twitter.com","common_platform_enumeration":"","icon":"Twitter.svg","categories":["Widgets"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.0.6","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":2,"received_data":12529,"sent_data":1037,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":1,"received_data":19453,"sent_data":602,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.wef.org.in","ip":{"addr":"165.22.100.85","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"domain_registered":"2013-03-25","domain_rank":0,"first_seen":"2017-03-19T14:30:25Z","last_seen":"2026-09-21T10:10:42.495125Z","alert_count":0,"request_count":1,"received_data":23036,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/redirect_method.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3fd889cd0542613e1e4206fc2af57e5","sha1":"c10b7a6ca5ace6efa1e3964a23fc57ce9fd6d863","sha256":"00ad330516c31b55e31d4b92f348bb5096e3450f88a2e283c3b3813646e32168","sha512":"b681a7b389d627d1d4e29d5c445be9b65c677338af134d08a4fe00dbc90abd53171f5b130e658e54d352e1c8febae9d94ade97b4a2f3afe6faa4b6a7b6af84d1","ssdeep":"","tlshash":"f161dbdca78c55a834b4315c9d5fbbcd752d01be25089cebbe84d40918c6a2f683dd53","size":3388,"data":"","first_seen":"2023-03-07T13:13:28Z","last_seen":"2026-09-21T10:22:16.713524Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/bootstrap.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","size":37045,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-09-21T12:19:13.198368Z","times_seen":100435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery-migrate.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-21T12:48:03.524534Z","times_seen":973099,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/anything-popup.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"759a503ff7276fc10ac0d8fc20ad0c66","sha1":"9ccaaf08440cceabe35c678f1daacd35e35bed89","sha256":"3a77e72cde3ebc269607c252f036b34e218f5296c9ee3882f9803341e7641c6b","sha512":"bc635339896ad3d7bfb796370d734514c04a76b48611e7770ff0e2fd7f2d57c4277de4a746f86e00dd6f5c359d9ef2d2d5501030fedc5574e0ed2d99ead4852e","ssdeep":"96:39uJdhx2nDbwpwVcVRtGyFynGXTp+vcFjA+fOzNNWPxf:NsfODbwpwqVRtGyFyGjp+vEA+fO2f","tlshash":"c0e1caad21c56077a9be232cab669385fb36005326876424be1d4cc95fb0d922635ffc","size":7318,"data":"","first_seen":"2026-02-03T11:28:39.766968Z","last_seen":"2026-09-21T10:22:16.885513Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.mCustomScrollbar.concat.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0efc8c25969b270348069a176e93f8c","sha1":"39680ef85bdbec350f35e41de4bfca303f5dc34f","sha256":"db06dcfa0112b05cef7abd20fadc5baf632a316515f07cfd4fceb436c8a0cb1b","sha512":"badc4513199af532e60a091fd446013d87521f21eca367622f8735d78a956a6a1638dc4e38f9a330c7bf43a0bb71d4866c21fb1401af0218ccde02377536cfa6","ssdeep":"768:TyPff4tXluVT5CdUf3mF5EF+Wrq7rmGnbe4W:owucC3mF5EF+17rmh4W","tlshash":"7eb2b305761030fb57ef3b69e68f56046163b15a0b07949420b8beb46bf5e703b27e4d","size":25168,"data":"","first_seen":"2023-03-07T01:40:25Z","last_seen":"2026-09-21T10:22:16.82504Z","times_seen":1240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/rtbs.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77242b3a7695ab1ea0518441a9366b2c","sha1":"418171186c31d03dbf3183508a79b1f57149245e","sha256":"35e2e71f5813f085dcea3427d1a5bd85a7ffbe6303d5b010b8fc822a5ea9e136","sha512":"084002f9250bd5f10a18de600699fd9e126c8c100d5cc100d3c6619baaa88314f8375d1dbbb1a6544508ad884d050fc9178386de710f9af0058eb6fae021ac9a","ssdeep":"48:32JbXf35ts865Z657/sz657asok5stsRtszdMlBcxJf15aCcJ/jbVR1ts865Z65a:3G/sz0l275av/9hotcT5k","tlshash":"1b91f48ff05152f760f36dafa027928074472e629581cb62f42fd1320daba456736a3f","size":4552,"data":"","first_seen":"2023-03-07T12:26:52Z","last_seen":"2026-09-21T10:22:16.879091Z","times_seen":302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wef.org.in/wp-includes/js/wp-emoji-release.min.js?ver=6.7","fqdn":"www.wef.org.in","domain":"wef.org.in","tld":"org.in"},"ip":{"addr":"165.22.100.85","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-21T12:48:03.503508Z","times_seen":59420,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39a8679ed70005ee063ea62886141a2","sha1":"52b556cb7bdbe59b9b1ab9415ff905b561b8399e","sha256":"b33ed8fd08f8cf0138f219167d4bb5817f1b09c1d9ac7431e833899ecfff40f1","sha512":"c65e2fe579412ea8ef38d29185f47dec1f4fb871ec28767c104821f1c3368793c4ff577ed58971d27a9bbac97fee734093766954f7e9d2fc0ff1cb687a0ab977","ssdeep":"96:A1VdZYqhPnjpsx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBf2PfCHiUr3:AXdZYqNjpm4yPqSMbqaQGL2QfdDayCZa","tlshash":"3ca1ca9929fb50210233b1bd1bafa918b63895236208dd61bd8c9264af94437d7f1bc9","size":4693,"data":"","first_seen":"2026-05-25T14:46:35.360433Z","last_seen":"2026-09-21T12:48:07.289565Z","times_seen":101970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97163,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-21T12:20:55.957434Z","times_seen":87321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.prettyPhoto.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fefbb92c3393657377b4c257f1dc70ec","sha1":"84b0b39a54d4b53ba0182694ae8d549cabb2196e","sha256":"da9107f52837a603de76f8058122f2fc15d85a3070e5a1aee47fe326b85d7912","sha512":"c686d01dbbc54c2afe0aa14ef3a74df870c651bff16275148445ee6eea17561064f3a201688522af9d361ba430c4fa9aa39c1ed3b668e84f6cb1be79cd118c32","ssdeep":"384:dubzguBg2FJ5ejrjjrwjip5IBpSdbj8MDUUEhRLu0FgQIsBnRcpL0aZy/TkiY8lb:4guBfFJ5ejrjjrwjip5Q5hLsrZEfHlrf","tlshash":"d2a2b5286d20649f8393e365e4476b1cd2338a17fa02d9644278ac7519fcec6693efcd","size":21983,"data":"","first_seen":"2023-03-07T12:07:26Z","last_seen":"2026-09-21T10:22:16.805148Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/front.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bda176395669afda5d2eef04ae72d92","sha1":"36d5474a3e9a818071338cd87d2b1732f3da5212","sha256":"ee10c93285617472b61f12be6a0e1c481b2cd27b91db784f2cf28a8e7c5cd765","sha512":"d9149edd159e44fc667976dd57e05612c15e510e8c854ab87ec90620893bfd27bd7e138374b8c12a45c76b29f5bc1e21c1cc8f40ace348e3f3358b99442ff37a","ssdeep":"768:amrq510JJbt3nEBOlN9FrNhtgAomBJc7ERb7d:61jBZmncYRb7d","tlshash":"eb03c435bcb3112115bb709b6baf97093a33412b9107de003d6cb6c41fd5e14e79abaa","size":39771,"data":"","first_seen":"2023-03-07T17:59:17Z","last_seen":"2026-09-21T10:22:16.816266Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.mobile.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"793faade23b48baa5fcbe7f46f10a53e","sha1":"cfb996410eef2f416e524ec58875a11bdad59a38","sha256":"e911254049da21bd34b37115296feeaf66a55f447803f865b0c05988729341be","sha512":"c0a6311357d9a10941e28a44324b6bbbd0f37c4fc8db0ce320ae3c79929567f6d4219d65d0afa57b081f331a6c1137230115049333db1c19e48e0f3c30cb6abb","ssdeep":"768:+snRqF0p5XzSmxVpiMVhUgua7ldLPbfHzlwbJQUe:+sI6amxVcWLUQd","tlshash":"34b208ccf2817013a9e731b6e12f064ab1b718aed50f4040b069cce56d35a68662ffbd","size":25173,"data":"","first_seen":"2023-03-07T13:45:20Z","last_seen":"2026-09-21T10:22:16.8782Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/menu.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f3075d93e0044b4fe026a3e2d8f150b","sha1":"5fb8d0879005d51be0a0d882a59ac53604b7927a","sha256":"7363b30de914bce44ad7d07ea2ce9aee6ffb3e7e7d2a9a71f6e5594964a13a26","sha512":"19ccea38581a95988800e3df8cf5ee5352dfff05d0a28e92499ec229c625c88abf93576390f50a1597a59243bb562744b026742a224507d33651d7b2192050bc","ssdeep":"","tlshash":"ebf0f4adb3692cec80bb3154b67f13fc39b3051432487500672564f03b42106167ba29","size":598,"data":"","first_seen":"2026-05-17T18:32:42.026089Z","last_seen":"2026-09-21T10:22:16.769844Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/bootstrap.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"040b6de4246a53750c4c9759c448d0cc","sha1":"c1c7ad5b71ae39b1af449145e244e0466fab5fab","sha256":"66bb1812c11fac095c5875e15c8c050d543d9f85ac7803d5241d339444949da5","sha512":"a8b6e75c0564548e610f073e609f8d338812809bac328eb8c725ff5d3cfdc86845aab3f9a51dc19c5d94613fc16a0716e13d21d1f178e9ea488d574184de46cf","ssdeep":"768:LzBqzCkWDVx92Ti/A04qm60IhekfZjzqtw0PBVcDWp8s:2WD/icekKPToWis","tlshash":"df634f167bb420a18b5b70ba8cdf510c7238911b554bd4683cad97d06f50b38a2abffd","size":66915,"data":"","first_seen":"2026-05-17T18:32:41.97359Z","last_seen":"2026-09-21T10:22:16.889935Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/chosen.jquery.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f0361640d5597fb84f0b07deabe3d56","sha1":"d7b5fa9101e2edff3fa588ba35cfd4e3e47c8382","sha256":"7373ca9ed2c272959213699ab6c34d53f342a2d01d996ebc543743312911a6dc","sha512":"a5e9187a6ba493041acfd17ef6e7f6aa2a973a711cf6378812f1a9ac37667b4488d4b7d21ca1adf647f00a7663b78e576d445429a11d1ade5a1041afd149b3f6","ssdeep":"768:7VKQshTOPnJ6D5x1MdUDv6RNnhQZ9vvekXAPNFLmoL7WJORAIGf:7kkerDivnhQZ9uk8sARAIGf","tlshash":"4233ba48bbf7612182b370ad5f8f9084b335544b980ece4cbe6c96d19f9443865eaf74","size":52163,"data":"","first_seen":"2023-03-07T12:02:50Z","last_seen":"2026-09-21T10:22:16.926789Z","times_seen":368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/imagesloaded.pkgd.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2c1a80b99251b7b94726b41312fb160","sha1":"6d3e11174e22668e69df236e5c4542168f7cbfec","sha256":"96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44","sha512":"4b93d9f46c4964ed7ab53f6bdd6269fd269f9f7d5ebbcb96af382531a8434f876c9a0a96a27458f60ae4de3fb7b5fb8fafd58936c7e8a0e47b1a2ec72f95b68f","ssdeep":"96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"19b122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","size":5594,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-09-21T12:18:00.802745Z","times_seen":24938,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.wpbookletcarousel.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80cf09efa7e40ac29007198ed75a45ec","sha1":"9f54f3c5b2ab83c15b14411ac6b382e254675906","sha256":"66694324b4a4e0ea93f2abc2afb104b54e07afafa6c135472bba803404437f2c","sha512":"369aaafbca737d9428dbc43b011523b9194f5d841f118dc393d46807cd33e37b9bc17d0c97b198c96c3e4024de06bf97b779031d0213983fc5d3b963cf985744","ssdeep":"384:8x2xdfdtGpV7NP0fum48cum4G+NSJHvm44JENu6wSLZ:8x2xJq7J02mTDmINSJPmmNu6wSLZ","tlshash":"e262658d7341f19215de63b5043f630bf23bb9595409401cb9ba8adebda8e0a6177e3c","size":14630,"data":"","first_seen":"2023-03-10T05:27:45Z","last_seen":"2026-09-21T10:22:16.715132Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-21T12:48:30.388516Z","times_seen":437119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/analytics.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"575b5480531da4d14e7453e2016fe0bc","sha1":"e5c5f3134fe29e60b591c87ea85951f0aea36ee1","sha256":"de36e50194320a7d3ef1ace9bd34a875a8bd458b253c061979dd628e9bf49afd","sha512":"174e48f4fb2a7e7a0be1e16564f9ed2d0bbcc8b4af18cb89ad49cf42b1c3894c8f8e29ce673bc5d9bc8552f88d1d47294ee0e216402566a3f446f04aca24857a","ssdeep":"768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL","tlshash":"74330af9b7423466c3a271e4403f1007907aadd5f449d8e4b58ad6d46d38eab02fbf68","size":52916,"data":"","first_seen":"2023-06-16T11:16:31Z","last_seen":"2026-09-21T10:22:16.912012Z","times_seen":5601,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.min_1.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-21T12:48:03.551098Z","times_seen":1064591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/video-lightbox.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"692ca015a3c1d503059893eae7bb90df","sha1":"10307a90b0857877a029d49f31b7f2ff9f09ab80","sha256":"a144a2debb8f5767c73d17d18081ffb1a4d5e4006a846aed7f2ebcce13655aee","sha512":"f7b7cd675d54ef11aa8cf3f3afe473a95e69443cb177e1e9e6c82414a1fc07d258fa45f1205fbdeec001bb6927fdb9f7304a3eb151a8fe9341900c162ef2d2ee","ssdeep":"48:kMt0sydBYSA1+K19+KgCmtZbpQf/NAVWjSwtNoiHLTf:T0sWBYSe11mT+flAwn","tlshash":"11e1e034dc32c83f4cbb51c9ae2d8f599b91ca93c50b0e26f2fc25e64ba5e205c13949","size":6927,"data":"","first_seen":"2023-03-07T01:15:38Z","last_seen":"2026-09-21T10:22:16.732633Z","times_seen":2035,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/more-posts.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a8fe890999a85001ba5b803373ac17a","sha1":"9c0df2fb7c3af9b9b12a408097dbc72c477432f6","sha256":"7dea98ef020696eac4d6a8ef2b5ac6e72ec56f4eef0b1d9a06eb0ac6b073beec","sha512":"a59b88e09e40b033df8b7b453acdcb11d3ed96ea75a8831040346e12cf9e61278225e187a840ce99a9d5d733d5047dc606bc33adb4a23840065d6f4814208c25","ssdeep":"","tlshash":"6421cd4c24d463dc07f9213ea7bf1afc7e72892374009941aad8c6863b1fa41e459d9c","size":1429,"data":"","first_seen":"2025-12-03T02:14:59.631015Z","last_seen":"2026-09-21T10:22:16.85009Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/bootstrap.bundle.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"50703ebfc29f534ad6e432826f1c25e3","sha1":"f19941f9fd95e8a9bdf9db599bb3d8714d41465a","sha256":"4d371899aba195b1f0cba3a70de300fb5b327a322cfbe3a30d77af8456d8494e","sha512":"663c83d63c78a66e169b78f4f77148dba460cb3f2be34e4b2ef6106e6b44ab813a886f12e936f9a42080c71eabf8bee67743d508b97e0b38419af75e6f87ec2f","ssdeep":"768:u09+zQtNHVGCcWTb7zTuBV4KtkSsMtJQ5C/xd7vPn2JNtFiH5jsHaikKrjRM+PKv:ua+OOkSs2Q5CXnFOpc6RvFvVGGZC","tlshash":"6273d64a3244b47202afa167907f460fb33768daa50e811cb55da8ed2d7cd993267f3c","size":80650,"data":"","first_seen":"2023-03-07T12:02:49Z","last_seen":"2026-09-21T10:22:16.883476Z","times_seen":386,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.sumoselect.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08cb3d9ca6eca4b861277f83a25d9cf7","sha1":"e8200c7ae6e08334c7e6faf32dff1a1e3ea3c9e2","sha256":"53a2d5c7ab1d03ed1dfd764153fd1684258d90bb4c23c10ecc45782debbe5c5b","sha512":"465f754239e9091bedb2a42fca40fe717f1a8c7fc5a516087305349f3c83e7caf0474d54c4d7214042aefd5ed761ddd6f1c5fec0d0d25ae28c588c4a98aa4421","ssdeep":"768:w8ei+c55T5Lvh3TuXR3c3n2TWLddHK1HTTtook:w505Dh0KAk","tlshash":"dcc2521629f22176443b30be9fdba044f225811f8145e9a1bd7c52ac1f53a1493faefa","size":27551,"data":"","first_seen":"2023-03-07T12:08:33Z","last_seen":"2026-09-21T10:22:16.85708Z","times_seen":447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.fullscreen-0.4.1.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e81efd8a525146aedd80551365ba73a","sha1":"c9bda782f61cbc790df232b61039d0002bc39c3e","sha256":"27c24ac72434f3ba9fec45d4d4ded56c018e9b145490dbfc9a746cb50a68c74c","sha512":"6904696991afa97b72ff6c457f21118df931a63c54423b03c37f639d40528aab61e07e1a16f72be2c8ce018c2e20adbf309aa67d9dfe3f5de4e8c3d6987f5ea5","ssdeep":"96:oH9Sg+wJynnEmwpwVBAokOKOpel5LyobxwLEhcW4vmbXuHDgCIXOwTxaJ:oHxJynnxiHOsCAfcW4eMDlgxm","tlshash":"5ff1f0b9fb9a6441c163389ed93f51cfa1385026b354789f715c89fc2fa8a1c13a2d39","size":7714,"data":"","first_seen":"2023-03-07T13:45:20Z","last_seen":"2026-09-21T10:22:16.907318Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/core.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fbc22c79d40119dde9a5d16897002b9","sha1":"e9837519aca724457792e2d5ee98a97a0367cdf9","sha256":"7e84c9f8d71bc6eb2dac2fce59a6caea62da51ffa8cf56b41806f59386ab1322","sha512":"3118a198a3710c839c15d6c4b5dc9f9adcd637913af2e26f438b01c80b27281f4937e25aad2817855d8b3eb36207c61ae16d62b17e698799c5316e86f52ac6fc","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhBGX0CiS9rH/OrLrErJ29FkFvd:iS33Z5vK47kv","tlshash":"81a2d94eb246380586f7a2a5402f521fb132e25cb10588ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2024-07-16T20:15:04Z","last_seen":"2026-09-21T11:00:37.89662Z","times_seen":42696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9},{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery-migrate.min.js","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-21T10:21:18.315Z","timestamp":1789986078315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2BshcVo1WfUOBsZeqZqEbo62J3apBKetllLPHBV9Ua3g6%2FIZqDtcx8GYJd%2FochWAoe%2FT7u%2Bol7sVzKGnbmgvgUQq5l9%2FRoYe208rX65MbmlUHA81as%2BNxIBqprPpvUBwU9ODCF8YyvlgbFo6\"}]}\r\npriority: u=0,i\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 21 Sep 2026 10:21:18 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3e8579dc9215695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WP-Optimize","description":"WP-Optimize is an all-in-one WordPress plugin that cleans your database, compresses your large images and caches your site.","website":"https://getwpo.com","common_platform_enumeration":"","icon":"WP-Optimize.png","categories":["WordPress plugins","Performance"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"prettyPhoto","description":"","website":"https://no-margin-for-errors.com/projects/prettyphoto-jquery-lightbox-clone/","common_platform_enumeration":"","icon":"prettyPhoto.png","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"FitVids.JS","description":"jQuery plugin for fluid width video embeds","website":"https://fitvidsjs.com/","common_platform_enumeration":"","icon":"FitVids.JS.png","categories":["Widgets","Video players"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:6.7","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Chosen","description":"Chosen is a jQuery plugin that makes long, unwieldy select boxes much more user-friendly.","website":"https://harvesthq.github.io/chosen/","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery Mobile","description":"jQuery Mobile is a HTML5-based user interface system designed to make responsive web sites and apps that are accessible on all smartphone, tablet and desktop devices.","website":"https://jquerymobile.com","common_platform_enumeration":"","icon":"jQuery Mobile.svg","categories":["Mobile frameworks"]}],"data":{"size":61287,"size_decoded":16887,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22437)","md5":"28da90322d9add6037d69d36b367e440","sha1":"cf594be5a2b946847b796130126e29227412175b","sha256":"7edc3b2442dfe73c6bdee26ffe320d26c7ff134c25158e3f5b9c672c850cacca","sha512":"4b56e62c97fa8a612beaacc2f9e14a9cef453949cf66c48fe788d011ee71eefcf64554b5c58b2d2c86bc0a24914731c65e62e63def0180ed4f8a68f8b73b5088","ssdeep":"1536:v4+AS0rAROzMJyP8rptNFPZTJymmJBvle0hJh:vUR6TF9mrley","tlshash":"d2530a37ac45dc27626b5bdde0a6f31d9266910acb01cfe0b2f842f846e5eea055350e","first_seen":"2026-09-21T10:22:16.69174Z","last_seen":"2026-09-21T10:22:16.69174Z","times_seen":1,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":7,"connect":19,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/bootstrap.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.673Z","timestamp":1789986078673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/bootstrap.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2XekgZAK9z26ltcWZeTcS3koLKnS4t9d5eoJnGEsXpGt3TIQTRKaMxgOCLhW2%2B1QjRGinm1F1UlUZnmrhkuCK%2F3H9rutOuFWK7NZ822WBSLIeM1LBvyNvpBJsDLfEUuk9Bo2%2BcJ83zt%2F%2BqgN\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-90b5\"\r\nexpires: Mon, 28 Sep 2026 09:29:39 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262299\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e8579fd9495695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37045,"size_decoded":10640,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-09-21T12:19:13.198368Z","times_seen":100435,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/booklet_1.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.737Z","timestamp":1789986078737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/booklet_1.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4igpXP3qY%2FIrUICeRvPkbv%2FhiWcRc1fOGB925oZzMUyR1kG9bYJ8IPuFF9Znsumwkhxvl7efltMwiG2PnK4i96%2BEXTbjXTDluQiZpPWCrmLgEbJRrZQBD8JtNoX5ASX3nTfr1G4MBgbKFZuS\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-2b08\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a039725695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11016,"size_decoded":3083,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1025437151f56436b1913a4ef69f6de5","sha1":"b507e0d6dadc036a9ce91d278555b1383c17e62d","sha256":"344903ae2862ef4ce446145e14c3dc356c369a9f67777a10975a5bb33f1049d5","sha512":"ce46bfc8cdab6e1c7a48893fb045de85446e905cf4786a07554d533cb076e32e4eae01dd96b23ec2c3c88ebbed566c81a3890d4cccfaca87410c8b6fea4e1ef9","ssdeep":"192:2bmlv6LMz3KrQxXo6qw32xkrkymyEp1w7JBNGmKFr:FSAxGxkrkuEXYJXKFr","tlshash":"bb32cb5c8f03b49be236c7783b7d8f18dfa900539b1a120c36e562245fb285e48add9d","first_seen":"2026-05-17T18:32:41.9601Z","last_seen":"2026-09-21T10:22:16.696503Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/index.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.049Z","timestamp":1789986079049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/index.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BKLDB2VhEpT1lFCSu39x2CSt%2FU%2B2cNtzeo93GlMzXRvjNUTCBElDYETVAHFTiJGxypUZgtKYXluD6ECN6WHoz0Tj2pCaQF9iHbV2sAeGjAjEABVX1mYDapYj%2B5Kqt8IoM6vzmZzcLF1Ue0eB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a229b15695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7978,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"337f60c2ca1ab60a58032bb9b16ef160","sha1":"85a9ef54e227f174f8f471c07b985829f7c8d999","sha256":"19b5212a734a8dfa1acf92c338be8235976411620ebc9553be924bc015950a89","sha512":"f0942e18a13df3d658f21b6276592641848482d6ed9ca4bde192e66c21ea29ff6f3bb9a895b7776366140734b7e66fbbb6c3dcbf2764c98b0c243d6b842587c7","ssdeep":"192:Vj9jhjOVK/OaaUl8PzEzsL81B89s7vlCeNA:N//FiQAs7vlCeG","tlshash":"66e1c962f5f925bf10938272306ab7193de48013daa708e5b6edc1761f8df85ed03284","first_seen":"2026-09-21T10:22:16.698816Z","last_seen":"2026-09-21T10:22:16.698816Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/images/wef-1.png","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.804Z","timestamp":1789986079804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/images/wef-1.png HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VF%2F7aor7Yb4M86AClrCFulXSCm6dL78nNgESc6m5YxeJ4Oxe2je0yJxsEtUmnUI2e0uVZJQQd8ryPVqGkIHGuu9x%2FXmbzNNJL%2BNXaHh%2B%2FNCTjthCu48SgkpK%2FW2V%2B%2F7%2FPReAzqzdG3Ihspfz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3e857a6ea175695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7987,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"cf498a64ab1f9c99352f338b25b8b3d3","sha1":"8094f6957ed9703f3ae6bfeadf6a0658015462f9","sha256":"c4efbd762aad0c61e97525a97dd65753ddfa3a00a69d4d834edef01d30367c4d","sha512":"7ef19ba2dfa74276a897ec8f83ca86ae6ee10a7262ec6c15a562c08c3e8b083d27772ab22fbbd5917b4d2367f14b5aada08ac32d8444f7dbf889d2ec99dda514","ssdeep":"192:Vj9jhjOVK/OaaUl8PzMTzsL81B897S7vlCeNA:N//FIQAm7vlCeG","tlshash":"07e1b966f9f925bf11938272316abb193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.701817Z","last_seen":"2026-09-21T10:22:16.701817Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/styles.min_1.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.680Z","timestamp":1789986078680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/styles.min_1.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DopGt783yeGoaGxtD2b0zlgaGmHZXlYtDasx9mzt6%2BUL7nNsRW62FIyYNT2fPTpEUMRdXNytgnqTK15HpUVrGUpVO0JBkNInOazS0TVkhjG7RrRd3A8hso6ZKfHNtoXbvUe%2B3QbbOOOAxMza\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-cc4ef\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e8579fe94c5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":836847,"size_decoded":82612,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"64dd1a63936433813a6dc21083adad3d","sha1":"b3714c9f727575fa238180bbef885f51c1784974","sha256":"3d20bcc3bf771b29a77e0c3abbf5ad63501a72a94eb7a92f1a4524690417c0af","sha512":"a590e7582e587595acdb6f7ae32a619bf87853e65243bb70396723332ca1ed11ae08cb9776db0951770a6baa007f259f1195e95e07683f259601cb647b5ade67","ssdeep":"6144:62T/6XT262TyTJTtYfuO/Wl+2cvrLpzn9pkp9l2Kxy9fj9esmH7FW0fW8Emtm9ss:6kemPd6Kki2U","tlshash":"43054b64b5bd35f010924a6c3d4e12ee5ce3d273ebbac6d9b45ac00d979e0ac1f126d2","first_seen":"2026-05-17T18:32:42.046861Z","last_seen":"2026-09-21T10:22:16.704354Z","times_seen":3,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/flat-blue.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.715Z","timestamp":1789986078715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/flat-blue.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aOaFw%2FYzekITpB10HGFwZ%2BM779%2BEdDcmLRjZE9jLH%2BOk5pUIvp84y7oIoj6Z836Vf748bLeZ2xMQwI5BsYIyoXKTo6wvuCpukpnmyCcbk%2BRow0QPoG3GN6GvPQ2GXmu3ZZ4K1DdAVw3oX%2BMA\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-1ae5\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a019635695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6885,"size_decoded":2583,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"9037b7d71100ffd57db6159f82668205","sha1":"366cb1b68f5b0f3c74828a95cf4c9e3980262424","sha256":"3b33b269db2097b76645af0468495d7278f463ac2745dff292091d07e6bc92d9","sha512":"56de2ba6f6953eafc98f9f91dac0371326acd3d6cb5b9e9ffd4bf60654b5cea7b80d41526d97d56f6083e96b16739e9ca458b64ca50f91258af2e2692fdd3545","ssdeep":"96:A3UacQHZnT1sZXCnkGa+0eeQTTUYz8uVmHlz8J:pacQHZT1yXCnkGJ0WUYzpVYz8J","tlshash":"e6e14184e26639693627403d219b84546b7fa5f3c4187f3cfa7fc1984bc81499b27b8b","first_seen":"2025-12-03T02:14:59.651146Z","last_seen":"2026-09-21T10:22:16.705954Z","times_seen":5,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/esf-custom-fonts.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.722Z","timestamp":1789986078722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/esf-custom-fonts.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZWiKCeOfRzABR%2FZsFZvaOu8fecHXROtxdzsv%2BwPZvvwdFmB9IgH75VDGuNEo63HbQJ7OGydiwnzFdntO68x%2BD5yc6Oi4bDNwSBNinQXVlU315xLjn5MDnIDessnetUthbIsFsFpd7Igj7iD7\"}]}\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ec2f67-745\"\r\nage: 118981\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e857a029685695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1861,"size_decoded":1323,"mime_type":"text/css","magic":"ASCII text, with very long lines (1861), with no line terminators","md5":"a6939c0ec862fee8e8c8df87f5a7c474","sha1":"a1449f00229d7d3fc57260bef830d2157f370959","sha256":"f770c8b0ef3b24fcf3d3e99457b028587dac0419c5a6f8f4471afb7297aae873","sha512":"98e2a1084e7980a5a2060964ec336f2c784f666a7cfd9172ddcc33d8d92b5d61f4be0fc2fab40babc87d3aebb3fa230f304541b22d67837beebcb9463407c727","ssdeep":"","tlshash":"3d31a577c09f04dbb7b1cd029385322a9c46f133ded20c26f50f596d5ae56e662d0b2a","first_seen":"2026-05-17T18:32:42.053453Z","last_seen":"2026-09-21T10:22:16.706996Z","times_seen":3,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/index.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.888Z","timestamp":1789986079888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/index.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ckcvNI9JaLGi2rtK840JH2%2BOfK7adXNEQ5SlahiWS%2FWGem3ymqx7iGB4KmMEXKrO07F4aA%2F23yODpkCx3zu4F6GqSf%2FPwlzVXnWLnjb9ZXVwZbyR%2B7YzR0I4NkfnQzlVqAzx7S16uFx5TZmx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a76a225695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7982,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"24876acb7c71d95e182b5e412a54d53b","sha1":"f238bbc777cbef9c5a50dd8218617f8881189c3a","sha256":"fdce7c8ac000135f5654a5012baba6ee66e8b13ae970f0475afec419c3fce894","sha512":"1e306122b04b888fa5652fca31bd280a2170f4ca726fb323833a5b6a9d0793c5a6f6fa35e55d7acf4d909ed44ed7825ae5fa03b1149c40225e958023f918df9e","ssdeep":"192:Vj9jhjOVK/OaaUl8PzazsL81B89K7vlCeNA:N//FsQAK7vlCeG","tlshash":"83e1c962f5f925bf10978272306abb193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.708237Z","last_seen":"2026-09-21T10:22:16.708237Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/fonts/fontawesome-webfont_1.woff2","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.974Z","timestamp":1789986079974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/fonts/fontawesome-webfont_1.woff2 HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/lander/wef-privet/css/richwebicons.css\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:20 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OxZUhvnNWvOlWtOuo7mBAX1yJ5vsrSYLrcF0SSlqZ1EHGKvfVCXeESQ57rNWPCLbnijDJRciwGZ3Se0a%2FUnXL3RWjEzqhO53AZQheuMDVkOUj86j2fnU4tmhTJarrKphEazF30MXitqdWWdR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a7fa2a5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7974,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"a288984056f7a068f677d8703d949fb1","sha1":"5cae499b2d10131d941058ba2144485460874031","sha256":"a814be33d91e95a3d95b3bbc281f8bfcab238aa5d2628d4f1194440e0044a066","sha512":"5949835dbbe307aac8c4c1a0e0643b176f70e1d4b2598678d0e7a4861982ec52f9bf4336892c5767983de826147124e8f5382ab04400c556dcdc814daf945860","ssdeep":"192:Vj9jhjOVK/OaaUl8PzJzwL81B8997vlCeNA:N//FZQA97vlCeG","tlshash":"9fe1ca62f5f915bf10978172316ab7193de48013daa608e5b6edc1750f8df85ee03284","first_seen":"2026-09-21T10:22:16.710493Z","last_seen":"2026-09-21T10:22:16.710493Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/wp-video-lightbox.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.678Z","timestamp":1789986078678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/wp-video-lightbox.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4wNpkf%2FJ63NvfAsI0ThSViaa7OT0uy688fwAz3XEoFqjQb3Bcmdi99BPFEMaXRAHq2H%2BEM%2B6tCkrNGNQb%2BgQpIuFvnTQYB4AyVPEcsDCPQPLnm1%2FKSnuyvlhyistZejQweIZl%2F%2BTL2%2F9wZic\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a3e8579fd94b5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4561,"size_decoded":2612,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"f364ccff90a4d941062ff701b40d7eaa","sha1":"da30b0c41c9bc2503713d73e01fed6b97e40670b","sha256":"750818aa9d041d6147e978c3efc962ddac806e3f3ad1b602dc7dbf91c8eeb447","sha512":"a37e9624ca63e7af4bc0aeae635fd39262b0d3050ad953c7333929502c1c8afda283086444857753c5a90e9680f28fbf7301ec5ccaa78d16c1459c45232fce8e","ssdeep":"96:1j9jwIjYj5jDK/D5DMFWC89ZqXKHvpIkdl77RJlvaQxvbK:1j9jhjYj9K/VoWnuaHvFdl77vlCejK","tlshash":"7b917426bafd217e10a3816226fc63497ea0c553c6a705a076acc1391f9ff59fe171c4","first_seen":"2026-09-21T10:22:16.711873Z","last_seen":"2026-09-21T10:22:16.711873Z","times_seen":1,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/redirect_method.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.750Z","timestamp":1789986078750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/redirect_method.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3rmGYpkeZAo92xFRG2z1kgHgOiiJPNv%2Bk4WY%2BWpAbIpNQjHwt28kIJnPSFilztQf0omptJYfFfbZnk9P1CFJ1xjvZ31o%2BIIcPAUjMbH7sVD8bLYXZKZKr46LZl3NiIibeXMEJaSEkzM5Qqix\"}]}\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 09:29:39 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ec2f67-d3c\"\r\nage: 262299\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e857a0497a5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3388,"size_decoded":1891,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"b3fd889cd0542613e1e4206fc2af57e5","sha1":"c10b7a6ca5ace6efa1e3964a23fc57ce9fd6d863","sha256":"00ad330516c31b55e31d4b92f348bb5096e3450f88a2e283c3b3813646e32168","sha512":"b681a7b389d627d1d4e29d5c445be9b65c677338af134d08a4fe00dbc90abd53171f5b130e658e54d352e1c8febae9d94ade97b4a2f3afe6faa4b6a7b6af84d1","ssdeep":"","tlshash":"f161dbdca78c55a834b4315c9d5fbbcd752d01be25089cebbe84d40918c6a2f683dd53","first_seen":"2023-03-07T13:13:28Z","last_seen":"2026-09-21T10:22:16.713524Z","times_seen":49,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/Rich-Web-Video-Slider-Widget.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.707Z","timestamp":1789986078707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/Rich-Web-Video-Slider-Widget.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CgR6QlCa0xqb9XT7ETD7srs3yzhQ8Zw4DsLgMsCH8geh0fzUGl17CyZJiGdEaNsqJJwHrbLc0NulzdpeH5tAkC%2BmkbccD%2Fdg%2BgCD7FG6vdJXErOAT4S3kJ6diS2RRS%2B4lTd9Z%2B%2FPYhk9xvFj\"}]}\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ec2f67-892\"\r\nage: 118981\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e857a0095d5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2194,"size_decoded":1477,"mime_type":"text/css","magic":"ASCII text, with very long lines (327), with CRLF line terminators","md5":"eb60597d43f4e6bff9ca8fd2042ef301","sha1":"8ed03afe4d5266b25ba337a607606b6896ed425e","sha256":"203215902dd61622a3a51bd1d021151961fa182a642fe2bdf3bfeb4e7a5de5e7","sha512":"0c11f05fb62dfd693129fb7c53b27753b663decef791a5547df0987ee9eb5ec64ef6a33e1c604e5ba4c8991b684adb7a7a6722d5ed19752a005fbf8e3367c726","ssdeep":"","tlshash":"5c41fe56a7a171c05803c314dd0bca7cce3a1528d62722bcd4a29eb5d5de0560d26eed","first_seen":"2026-05-17T18:32:42.079305Z","last_seen":"2026-09-21T10:22:16.714443Z","times_seen":3,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.wpbookletcarousel.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.784Z","timestamp":1789986078784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.wpbookletcarousel.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AZ0hpMxkNMjcE1muubKaBlN%2FfPTsBOG%2BVPjVKi8TUPKYmgkE1%2BPBrXkukWO%2B38%2Bk7XIQDxe0AEAUPiYS5c6J%2BMt%2Bu8jvntk%2FjOD0Ef2lKCLXAiDS19hqaxYtl4Qv0rTcJWzTMcXvlBVVXqpZ\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-3926\"\r\nexpires: Mon, 28 Sep 2026 09:29:42 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262296\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a0898f5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14630,"size_decoded":5234,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12038)","md5":"80cf09efa7e40ac29007198ed75a45ec","sha1":"9f54f3c5b2ab83c15b14411ac6b382e254675906","sha256":"66694324b4a4e0ea93f2abc2afb104b54e07afafa6c135472bba803404437f2c","sha512":"369aaafbca737d9428dbc43b011523b9194f5d841f118dc393d46807cd33e37b9bc17d0c97b198c96c3e4024de06bf97b779031d0213983fc5d3b963cf985744","ssdeep":"384:8x2xdfdtGpV7NP0fum48cum4G+NSJHvm44JENu6wSLZ:8x2xJq7J02mTDmINSJPmmNu6wSLZ","tlshash":"e262658d7341f19215de63b5043f630bf23bb9595409401cb9ba8adebda8e0a6177e3c","first_seen":"2023-03-10T05:27:45Z","last_seen":"2026-09-21T10:22:16.715132Z","times_seen":72,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/frontend-min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.046Z","timestamp":1789986079046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/frontend-min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=joaIcXw3lOwvjzHWs3OX68%2FAzzcAkr0TXhqcsMI7dWR3iXasIYOucd2vzRiVnkRLJzgB3WBXJ7uiwGtZ5zIpEIJvWimH0q5%2B50%2BQxDT4zAcBmhefGIW9%2Bm8elLo8uzghsbkd1w4Cm4pelm5E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a229af5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7980,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"4abd96141d49167b82dd0ab9908578b7","sha1":"7793eb689978216cf9c6fde8c2e5b474e5b1c19a","sha256":"adb52d498adf8c5679b26e2bdb19500a5a0aced9fc90d1c3e07fb9a589f9a57f","sha512":"e4078c73b3ce596b8605da486d45939ab1d0dc41aff6d32c7e11ecb641491832e04198956e1a403c93bfd35d0160e696ca49f765caa49a82f8635b659f69b630","ssdeep":"192:Vj9jhjOVK/OaaUl8Pz+zsL81B89+7vlCeNA:N//FQQA+7vlCeG","tlshash":"b1e1c962f5f925bf10938272306abb193de48013daa708e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.71579Z","last_seen":"2026-09-21T10:22:16.71579Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/asl-wrapper.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:20.120Z","timestamp":1789986080120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/asl-wrapper.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 8\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:20 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FlJHDx5SVwDf%2FiiYTZtk5ywRPTmRmlCeyZ5UJ%2FX3ncVUaFCsxpRWRavmqBHxWW4xKm%2F%2Bwh%2B34jxko7gFHInAaOSNsgPNr7Cdht58Ruf2uRzBqYOgds7lD7Y%2FSzLG0UQkY3mUHRl5Glr%2FAkXF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a8da445695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7988,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"b6a1eab9d0135f9f240e9f1e0ecccaab","sha1":"34b578f9a601ef8f31e7ead716c01dabd2242271","sha256":"3e71016c0e03168af85a1046f8758cf475783241e0729f95846dd86029ddb2ad","sha512":"c0188c9de7d56395908b68e49e1b3136858a899cc0d8a8a0e4acde27d4e8521b1e41c06acb42494cb87fe58dae14b3a421d0bf2584f4d9ee795c8ae8afddf2cc","ssdeep":"192:Vj9jhjOVK/OaaUl8Pz3zwL81B8977vlCeNA:N//F/QA77vlCeG","tlshash":"21e1b863f5f925bf10938272316ab7193de48013daa608e5b6edc1760f8df85ee03284","first_seen":"2026-09-21T10:22:16.725835Z","last_seen":"2026-09-21T10:22:16.725835Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/responsive.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.713Z","timestamp":1789986078713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/responsive.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W5aGp7py3edw937ZKg88d3cCrak4xxif9AlF7dyq3jTMdHblkhIReUNaIYMSM80ylozwABYGiYdVbLqjqxWdONO%2FTYDt73pmcB2YXpF4KshGP1Pt2vCojks4jzUHAetBI5o98D4rEENeV37q\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-776a\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a019625695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30570,"size_decoded":5615,"mime_type":"text/css","magic":"ASCII text, with very long lines (30570), with no line terminators","md5":"dd8e878e3e2ca3598272d8f212b9d6b2","sha1":"1327f25c40ff04cdfce1b5fbe26b90b7102b1e3e","sha256":"63c0de47788a177ed2f3582b2ef3b355aaab7eefd2932b35bab8dcc92477a41b","sha512":"2403ba10dc40adbb87214f6a7a49e733326042378a940d6b5168c1e98013097eef1dc0ced97fb02db75d013ca3ad371f317044822154ff74f105384ef890ceb7","ssdeep":"384:DtFMpyYPgP7SDP9c4vLDVYYTIsKSBpvmFX:DMpyYIP7SDP99vLDVYGeX","tlshash":"88d2ff02cbc7359f7a0740192ef363d9a2784462e7199b797e6d72e8c38969180377e8","first_seen":"2026-05-17T18:32:42.148535Z","last_seen":"2026-09-21T10:22:16.729737Z","times_seen":3,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/theme-menu.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.716Z","timestamp":1789986078716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/theme-menu.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YBE8DX9qFbw6OwGLY7Wanff40SUvWTcaLw%2BftKDeJKfSbVpnfvbmcGP9v%2FmAujvV9X1tZpWaQj1kcEhdq3Vg5M0nCwXVqyL9eIoqIG6S88QRoEOcoGq7kdAEgdu7HxaA9dS0OBXgnbaCfzgV\"}]}\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ec2f67-af4\"\r\nage: 118981\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e857a019645695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2804,"size_decoded":1784,"mime_type":"text/css","magic":"ASCII text","md5":"2df3422731f532c39de8f7030dd21954","sha1":"ac71d41e3c73dfd25db4036d7b74f295b2501de1","sha256":"a96a7bb3deab0028b89e5f487333cdbc060a006d81b34cbb9fc9125fc429cc06","sha512":"9dc916790c939b5d8229ffa975f3a1c4e68ea8293904a720c72ae4eb5694d97803812ebc6f07db77a1350d73c1a5f30b4f32c181842449671bffae6f634ea078","ssdeep":"","tlshash":"c65120836eef7800b052c0659ad22ee6eb9f4117660edc3576a2725cdf880e505adf8c","first_seen":"2025-12-03T02:14:59.658068Z","last_seen":"2026-09-21T10:22:16.731396Z","times_seen":4,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/video-lightbox.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.746Z","timestamp":1789986078746,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/video-lightbox.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ptrLYgdUin6Yi%2Fjk1Va%2BphqCmCtI7b7bmJS28SBRMWTWevJiRc8zg%2BtKzrDgMXnUPVxxFCGLf4J5BBa47G04z8GcdlF9SIH9ETwZV2%2B2DrMKJ8GY33YxE5HuLLkfSfOb3It43oy7nm17RtNc\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-1b0f\"\r\nexpires: Mon, 28 Sep 2026 09:29:39 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262299\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a049775695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6927,"size_decoded":2222,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (461)","md5":"692ca015a3c1d503059893eae7bb90df","sha1":"10307a90b0857877a029d49f31b7f2ff9f09ab80","sha256":"a144a2debb8f5767c73d17d18081ffb1a4d5e4006a846aed7f2ebcce13655aee","sha512":"f7b7cd675d54ef11aa8cf3f3afe473a95e69443cb177e1e9e6c82414a1fc07d258fa45f1205fbdeec001bb6927fdb9f7304a3eb151a8fe9341900c162ef2d2ee","ssdeep":"48:kMt0sydBYSA1+K19+KgCmtZbpQf/NAVWjSwtNoiHLTf:T0sWBYSe11mT+flAwn","tlshash":"11e1e034dc32c83f4cbb51c9ae2d8f599b91ca93c50b0e26f2fc25e64ba5e205c13949","first_seen":"2023-03-07T01:15:38Z","last_seen":"2026-09-21T10:22:16.732633Z","times_seen":2035,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/wp-polyfill.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.048Z","timestamp":1789986079048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/wp-polyfill.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qzMNrxAzJXooA7tqGa0V8SDIe8Ei7kg2cbOI8lgHll75CF8yeBlsvmjbUlKtsninbJJVjawonV9Tx%2B%2BrO4czZvTi8QuOfuqH1VnKj%2F7vlW8HknE%2FAFLeEB3EvgBMS6Pmjmiwr%2FFmtK%2FZYcpl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3e857a229b05695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4561,"size_decoded":2607,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"1f1840dae596bc0efc3185096bbd575f","sha1":"4bc113963fe626795a4afd103ab028e63fc8f758","sha256":"c054c15f82b0ebca7480d7e615ad53f9523e680ec762f75c2d25f2343fd2c1a4","sha512":"c2f274e188d4ee86a2409b428ebded18e62e1c3b42c5c561aa5d10a0254a822dc7358a1e88a3371c8ec2d125e70eec8fa3649e2dfcec786ef9c12793ec641f21","ssdeep":"96:1j9jwIjYj5jDK/D5DMFWC89ZqXKHvpIkdl17RJlvaQxvbK:1j9jhjYj9K/VoWnuaHvFdl17vlCejK","tlshash":"02917326bafd217e10a3816225ec63497ea0c553c6a705a076acc1391f9ff59fe17184","first_seen":"2026-09-21T10:22:16.734047Z","last_seen":"2026-09-21T10:22:16.734047Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/images/all_logo.png","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.215Z","timestamp":1789986079215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/images/all_logo.png HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YqVCjcjeBVn%2FKcNvflGYchV6mtHaABm4G5RzkL5uZCuuS4A9pPAT%2F2J5xxg6tUsbLQy1b9hg9Ow6ytoFOu479hHPRUefKLfURZ52bQcZm7wUtg%2BmEUelwYrVGf6Aar3nvecVy5%2BTHx07QVuS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3e857a339d75695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7977,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"ea924dca3adff74012e7e5c29787ebab","sha1":"8860a237c8154258c706e2fa12e3d1cbda2f9f23","sha256":"6745f77c2160d9ad7940500dacfa40e43ccc11112d2956f52bcc1f1e13610bd4","sha512":"b04293f7674d0be05719648d44e45933d3ba84896d90b17bd2f626cc98c6057765c44f35d137eb562575075513dd726a33e944546e14429a02626cb4d3c8a865","ssdeep":"192:Vj9jhjOVK/OaaUl8Pz+zsL81B89+7vlCeNA:N//FwQA+7vlCeG","tlshash":"8fe1b866f9f925ff11938272316ab7193de48013daa608e5b6edc1760f8df85ee03244","first_seen":"2026-09-21T10:22:16.736228Z","last_seen":"2026-09-21T10:22:16.736228Z","times_seen":1,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.form.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.916Z","timestamp":1789986079916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.form.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Pn1I%2BbswwIjmsv326z%2Bt%2FLC%2FDHwd3tQrkUBLCe99TKA29L2j7bRNvg1ytiXso3Di8CKrN2TWt9hxl3WF9IR%2FRhH%2FHs8CWzwQN%2Bh7H%2F3ffFCKfQQ98fH2jx0HCmj5mMDMgbbW%2BY7rU4Lc8kt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a7ba265695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7990,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"b7e3522c811bb7a73b324cb8dca59115","sha1":"c79d42ef2b6f90667a5fc925bd068c1dda765a9f","sha256":"846a56e19894a76515e64179ffcd0912e7a69eaad8a9fd6051bfcd281befaffa","sha512":"56a96d185b6fcc7e0a52d819adb0474f9eef4b6964f4368ea38863f6ead07524ee3c8b006d0b18391f902f5fa7505b7c9461a4cf34de369f84ad57651fa1e59d","ssdeep":"192:Vj9jhjOVK/OaaUl8PzazsL81B89K7vlCeNA:N//FMQAK7vlCeG","tlshash":"a9e1c962f5f925bf10978272306ab7193de48013daa708e5b6edc1761f8df85ed07244","first_seen":"2026-09-21T10:22:16.738023Z","last_seen":"2026-09-21T10:22:16.738023Z","times_seen":1,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/fonts/fontawesome-webfont_1.woff","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.999Z","timestamp":1789986079999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/fonts/fontawesome-webfont_1.woff HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/lander/wef-privet/css/richwebicons.css\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 8\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:20 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZLMHqDpw0tnAEdO0GUTOTH5Pjdn%2Fwz%2BWnQTA8ZSpyWq%2Bqnqom8qo4cpT9XUGCwkI5J%2F%2B4PUFvULavV2crphHtcFH%2F5JNYFy%2F%2Bs%2FVR%2FIUsHEwK5aAniaa7QkxPFIVA%2Fax80g2jDEl9%2BnLuJ8m\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a81a2f5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7996,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"29b7e24c82566e492d80d7c238a8f5e9","sha1":"34a914a6ce3d28025bed070f6e88c5e5e695cc08","sha256":"6173099e19ab5c78f7f1ebaba209f0d84eb7f605c9c2a29443899f3883ce10fa","sha512":"080bb44fc25875b28e8e0b9e281fd4ad2b8dc7c4988d68ecf984bd3226d8afde6086a898968e53cde366214f1d08262f76ef813248a5968356cfd3d23bfdaf27","ssdeep":"192:Vj9jhjOVK/OaaUl8Pz0zwL81B89M7vlCeNA:N//FSQAM7vlCeG","tlshash":"52e1c863f5f925bf10978272316ab7193de48013daa608e5b6edc1760f8df85ee03284","first_seen":"2026-09-21T10:22:16.740114Z","last_seen":"2026-09-21T10:22:16.740114Z","times_seen":1,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/asl-core.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:20.076Z","timestamp":1789986080076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/asl-core.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 8\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:20 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oBLCsbhRoqH%2FKeSlLUzdhdkj0WP5cTcfVr5LoKVrqWhLAZ%2Fp3fvEh9Rq82diKdV7TuMDGisIzjnoSwCG6fOMo6KpZgQyUC2Efvr5r1oTgCjVCMu%2BtCNgeuvoGFTFFiK1PUA3gWgNObcMXkAz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a89a3e5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7978,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"773befd058cc3d241628763a31b0a20d","sha1":"179364962828e4ec7f79dd7b06363919b7c912fc","sha256":"6fccbb40c53813794b4dd785a41f0df05c5ae275dbd8b4581ba44aa752c2f735","sha512":"a2c47fd51cc6ad73ed5a186acbc3b25a30fda332b68f9cad6c82137bc863394508ac156163f9fb8958abc6d2df6683ea4ef648a7803a776a2bb0cc016a19f7e2","ssdeep":"192:Vj9jhjOVK/OaaUl8PzszwL81B89g7vlCeNA:N//FmQAg7vlCeG","tlshash":"bae1b867f5f925bf11938272316ab7193de48013daa608e5b6edc1760f8df85ee03284","first_seen":"2026-09-21T10:22:16.741939Z","last_seen":"2026-09-21T10:22:16.741939Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.668Z","timestamp":1789986078668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jMMijnmnbPaSHVF%2FZDZ96fHirg1jd1Y97p3LUxLg6W1zC0DvNGUqsGPyzvJ%2FXFwRYZCjk95BArq7lc435lG32%2BmH4IDvkQgZ4wQCCoX4byuoV9rVlZAtuJBGRxivgdKRs3gZK6SHbWJvXO2R\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-17b8b\"\r\nexpires: Mon, 28 Sep 2026 09:29:39 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262299\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e8579fc9475695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97163,"size_decoded":34598,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-21T12:20:55.957434Z","times_seen":87321,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/responsive_1.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.690Z","timestamp":1789986078690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/responsive_1.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VoUylR4cX25KzkvmpA0LCV8BW1qhoqZZ%2BS05n%2B7CmqHWGqN%2FVRPMHkZcsAT60Wn65GoBguILObx05R%2FP9pHU8VgOhbqd48%2FbquMYb9B2nSl9cZd3TJKFpMy4cKZknWzOnuWF9Uin2Lhorxlu\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-1fe6\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e8579fe9515695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8166,"size_decoded":2437,"mime_type":"text/css","magic":"ASCII text, with very long lines (8166), with no line terminators","md5":"a0eb9e0803f4bdb75bc1fe9f8df15002","sha1":"873df71433a063e995a0d80d3c9b7f91fa4beb72","sha256":"9848de8e2282a21e93dfcdc11d09cfcf8049397b6758054d3fe7d510e36c1f99","sha512":"00e7f9c3bd6249d391f1f2ce1e185a32fe3307259f8d7013a12037b34f317a610140240ef5e6b04d340b434baf9bc75a792632a415c7f4ee9d282977b2f3a4f4","ssdeep":"96:ukX3Uk6XmUcIwzuAPLNu8cT5y0fKi1tO8Ucr0MjizWFn8tsHvyszUuHyoy:ukX3i1UuAsTDrJjizWF8tsHl2","tlshash":"3af17c01cf4a523b96fe9399e69113d91f31752163cb42bbe4bc0aa9ca954807bb0dcd","first_seen":"2026-05-17T18:32:41.957988Z","last_seen":"2026-09-21T10:22:16.744609Z","times_seen":3,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/quicktags.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.789Z","timestamp":1789986078789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/quicktags.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3R0uYcIxTNIhLCsogiGBVr4S0pSTOYMcoj3CacJ%2B8FrH389U%2F9ZMAwrzk%2BssgGSr%2FQqsXVxKfKtb0DZYBN4psDNFLGu9KWbvAdoqSphvZUTEH7%2BkNIpElq4nZK59ZsRfrGwScfaskScCRSch\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3e857a099925695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7983,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"26bac848d89fe0f2203b973f25dd1b72","sha1":"20899e0c2d3073f14da54b3e897bd75549c58d9d","sha256":"d3a445cafe74f288e5730c44173f90bd44836cfc5f8f5b1adbe8c54652035a24","sha512":"b655e7b4378b01948946be800cb634d16cfa17081ae381bd0f848cd2b0124f2459f9aab477f43f5cf49226ccb6d08cfa4022b33f9e6092e9c63c7b68939e6365","ssdeep":"192:Vj9jhjOVK/OaaUl8PzDdztL81B89207vlCeNA:N//FGjQA207vlCeG","tlshash":"b8e1c962f5f925bf11938272306ab7193de48013daa608e5b6edc1760f8df85ed03245","first_seen":"2026-09-21T10:22:16.745384Z","last_seen":"2026-09-21T10:22:16.745384Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.wpbooklet-extended.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.684Z","timestamp":1789986079684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.wpbooklet-extended.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tD3oeuM8%2FiQpZGdMi7VKXjCpsMn0DjqOaJZf93NVTYkS7S517pp5%2FQXuUAB3XioAeEtnyABmMfdp41xXOAuZfJI1EuXXXKkeSPnXkgNOdU1QneC7TUun4FCI29oAMcEOePxkslMaAcJW5nCb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a62a075695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7976,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"724a21d9f57c2a2043eee374e58b3ced","sha1":"1275f896461579ddde0807f96fa8cfaff18f5773","sha256":"e5b928574ab101f287df67e95004607cb8a05cc2802b865a5e2ad9a18f10a45f","sha512":"e06b2b6669e10f2f61728d5aff7d2f49a8d23990b12fcfe242fcc644f8d2b9e48e749c42802aa415debf98526eb685acf05557246a39eef5306a8d1d5013d1ab","ssdeep":"192:Vj9jhjOVK/OaaUl8Pz4zsL81B89U7vlCeNA:N//FaQAU7vlCeG","tlshash":"f8e1c962f5f925bf10938272316abb193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.747431Z","last_seen":"2026-09-21T10:22:16.747431Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/images/all_logo.png","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.806Z","timestamp":1789986079806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/images/all_logo.png HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xa%2BeyttmwOVf%2Bk5d%2F9PY4oEgm03LJuaIO3Cz6p8Ihx31Gt215OwWQ32DWRYpC1n9irMiC07xJrDD7HZZISwxebQL3U31H1sdEmuYjh65wjbbjeMFvXBQO01ctMSQk9Ibn6iw6JlZ9dodS%2FIN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3e857a6ea185695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7977,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"39d84d17d73c50dc8d9254fac1a8e652","sha1":"63d71c73372b8a32bc304ccbf55aa603bdf63a6d","sha256":"7ac4f9bee8bca7443b5a9af8d3799632787fdffa1f67c7b40f1a3ba19c3d5ac9","sha512":"df64577386654ae2ce4b044d8a71fc55ca465d3aa97de6d804d0b0b75a39ffb623e180d5e841da8b929251ce2ff6f4d22ae8aa347e6a131442b3029adfb069bb","ssdeep":"192:Vj9jhjOVK/OaaUl8PzMszsL81B897x7vlCeNA:N//F9QA97vlCeG","tlshash":"9ee1b966f5f925bf11938272316abb193de48013daa708e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.749607Z","last_seen":"2026-09-21T10:22:16.749607Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/drawit-iframe.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.976Z","timestamp":1789986079976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/drawit-iframe.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:20 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TnwiMt92eYIAHBIMdednLf6wlOM%2FqQxwNyVu3E1A4j2V5eQPBWtRzI1LcP%2BKVDE1cp993sIBCXLDddx4VILQe7AgFsHvBUSTrFwxjctcglQj%2B26JaD6tsVo0dw%2Btn4dKOMS8jTggZLUmuxIW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a7fa2b5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7980,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"523cdc835e43d45d502f58d0932af34c","sha1":"84bf010654bf75f1fc241c74f4bacec3290d62f6","sha256":"08d86f3ce24713b1cef5ef2b8c951d3be8934e2b3727a97a3c48e7a68d4b17de","sha512":"df4b452e202c7268b3c449d67ab4d90463cbeff2ea54f728cbf4ac7f7d6f25a597c0aa1396ba55a96dae308d38b4265a93147182ac86ff8d37b4bbd3429e775e","ssdeep":"192:Vj9jhjOVK/OaaUl8PzazsL81B89q7vlCeNA:N//FMQAq7vlCeG","tlshash":"88e1c962f5f925bf10978272306abb193de48013daa608e5b6edc1760f8df85ee03244","first_seen":"2026-09-21T10:22:16.752552Z","last_seen":"2026-09-21T10:22:16.752552Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/asl-load.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:20.105Z","timestamp":1789986080105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/asl-load.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 8\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:20 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ectza1eIlvK%2BThXq20j5NzqFHKWDFmLIIAIFKLkRF8I9kCWq9RXC6nqth%2BLeh%2FhhdLxIcdKaZvxNnZ%2F6WYrKcJkK2vaOjXXkCiTCGonA%2FiE9Hh9X4N1e07o%2FE6phsxqI%2Bsd%2FGZ2SdWIoV97t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a8ca415695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7988,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"766a0b327fb67138eaf67edf0bcfb1c6","sha1":"ef6714fba3c116e2a8bbe974a04a0936d06566ba","sha256":"3cc45bbd0b4a7b1180d29615d6d6a7967066fa3704cc000e17b90a0878f9dd3f","sha512":"5c10e56ff9427e1f4aae11d83331a264cf0531fd4c9672eda7ab39d8007c93d79009a9322a7ed3ea952cf380ca00f3de16306ec31bf8401388fe638cbde5c991","ssdeep":"192:Vj9jhjOVK/OaaUl8PzjzwL81B89P7vlCeNA:N//FTQAP7vlCeG","tlshash":"dee1b967f5f915bf11938272316ab7193de48013daa608e5b6edc1750f8df85ee03284","first_seen":"2026-09-21T10:22:16.756732Z","last_seen":"2026-09-21T10:22:16.756732Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/carousel.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.718Z","timestamp":1789986078718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/carousel.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OLAeSMnuaGAPlaZoNNgVprn6Y9XlA%2FQJXL2%2BeF04D2JSzuEdCJhP8v4%2BhCvze%2FEfw9ntjggl1iWROnzHCBBLOTtkly5u4p3addpsRe%2BPrhxyetSBB%2FHri3C81SfIlaNIZl2t6uKq%2FICPWdd4\"}]}\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ec2f67-af5\"\r\nage: 118981\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e857a019655695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2805,"size_decoded":1863,"mime_type":"text/css","magic":"ASCII text","md5":"df9ce112c2665849c8b8db587665db39","sha1":"e54f24292b83f70e48024cdebf0806c43a3d1be9","sha256":"3c31c72613879a5103165e7c706fd9b5c7582ed8419944eebbc13a5c8386c3b5","sha512":"63255d4f32c82a39bcbdd40ffebfe8f83bbb743efe09f4f14c3ee326e62083158eb555a8404d7908cc517a7510cff07a0bf379e87704108bbe3eaad3767d33f7","ssdeep":"","tlshash":"e85111907fb13524105ee0faa4ae2651fb9d1422839fcc96ace3224cef815d0057fb8d","first_seen":"2025-01-06T12:23:14.686344Z","last_seen":"2026-09-21T10:22:16.759871Z","times_seen":10,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/ytprefs.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.634Z","timestamp":1789986079634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/ytprefs.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P7sBv0xpX1oHru1f%2BKynGgCUxYXOzdh0apJOlo7duEmgVGksvkMEK5Zn2vcVzWWwT2WUxNidpGt8KA3%2FctLl8YDb%2BTjZvpIXvhfSGIB4lxfZyEDi2GvAG6ZSqnl6%2FKdmM5jRQqBqMymzsnGU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a5d9ff5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7980,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"ff1eca6d885ab560168bc3a23b9a8f9e","sha1":"e6a3c7be32130918e5783668f0fdc2ea0d61e4a6","sha256":"89305233254bcc83dc3c7a60e290998975844a487b58d8c67694b12101ec2379","sha512":"733690dd4ed85d85489957340c50516f19025dfd4b8e37bca1fe671d24fc28449e82df311ec3012183f6c77d6c13e0ba125cd19b94c92c990552609e8f384b54","ssdeep":"192:Vj9jhjOVK/OaaUl8PzmzsL81B89C7vlCeNA:N//FUQAC7vlCeG","tlshash":"54e1c962f5f925bf10938272306abb193de48013daa608e5b6edc1761f8df85ed03244","first_seen":"2026-09-21T10:22:16.761247Z","last_seen":"2026-09-21T10:22:16.761247Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.wpbooklet.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.651Z","timestamp":1789986079651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.wpbooklet.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uMWA0jg%2FzEBOnkbiCsMLgQti2mEUn8sntQEX8BzUl2zrpl%2BG8skiGrQAuttfILZMQ6fvieSaWD9xnQUaOgfBkTg%2F1MoJj%2FUBhfufC5ad2dJyluMEEUdx74I%2F0ARhdIfpIDL8oqItcnKPu4Um\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a5fa005695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7982,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"ec33e148af9b7d6b8c3e90551bd9e1c1","sha1":"50b753be37d39d0cce1c5fbc009aef81b2601ab9","sha256":"6e5dd94abcbf8a52a38c17bbf681f7301c3ed9587a7bb2af207dbcdb33087e59","sha512":"82bc6cebd591dfec8c4f9a1586ae9a39758c6c95dc36d219d60adad1f7e3d10176b23438cc0e61b36e7e15d24e666524163ad99479c449b3ed36e5065f9d338b","ssdeep":"192:Vj9jhjOVK/OaaUl8PzkzsL81B89I7vlCeNA:N//FuQAI7vlCeG","tlshash":"a1e1b966f5f925bf11938272316ab7193de48013daa608e5b6edc1760f8df85ed03284","first_seen":"2026-09-21T10:22:16.763545Z","last_seen":"2026-09-21T10:22:16.763545Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/lightbox.min.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.710Z","timestamp":1789986078710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/lightbox.min.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xrh4GHrpNcYT2mzYhYrz4v3fDZsFKC1zmocuYoi%2Bm%2FuBd1Z2WnuO93Q%2B6R%2F6R%2B6yfCQcDMj2tZHDbK0FfSgU9QA449UKyc2IMpZs9yODp62nV%2FzP6fu0dcsG7TZwAgWMMtUI1irUsmAEa6mq\"}]}\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ec2f67-c32\"\r\nage: 118981\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e857a0095f5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3122,"size_decoded":2010,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"80251b91915f3218bbf35847b6e002a2","sha1":"5a813cec3ca9f30515fed1824ebb6bb7adc6b892","sha256":"8c5a830761bd162757e536d88f58a24fda8192eca98dfb1c9f41e28108cddc69","sha512":"571341c9fd2275060c3c56c3f77eea375939feda2b899e4aa6d082c9101ff975f585e9f54ca7fca4cecb6b4eba191ea906c19a68f62ed37aa142c9a5da90556d","ssdeep":"","tlshash":"755174208763654da123f0d5fabb97b68ea84001b5874bd5fbf879b1d285d4831372ca","first_seen":"2026-05-17T18:32:42.031852Z","last_seen":"2026-09-21T10:22:16.765981Z","times_seen":3,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/scripts.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.766Z","timestamp":1789986078766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/scripts.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1yYWsOE0zvyp3KTikdyPkiQKxgLBwpV6auF%2FNNaJfETChCfKAFYN7AxwvSkftIuYBwn3IruDtxLNxiIaU6I3%2F7ghhFBXzSUlrq%2BZGPmaVDq2qK09HJo8vpGt6OFnlS1h4pjf7wiVWSXf2YHq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3e857a069835695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7979,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"37965c789d98470b2c6fdec43ba841df","sha1":"766c46c17bd5c14ecd4178a86a64e3b07ec80920","sha256":"ef7626098a8471d91a3b3ae0123965a147430d37ffe7125645c1a055ca91be23","sha512":"2d74a7aadfaa4aaa777ee3cb6018c08e548f778f6346fd8fd02be7fc429bec6954ebcfb92dd7e3150a40ed183b0dead80c8183b51b4df3b6ae5d9370e55e42d8","ssdeep":"192:Vj9jhjOVK/OaaUl8PzD+ztL81B892r7vlCeNA:N//FGmQA2r7vlCeG","tlshash":"e7e1b966f5f925bf11938272317ab7193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.766967Z","last_seen":"2026-09-21T10:22:16.766967Z","times_seen":1,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/menu.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.772Z","timestamp":1789986078772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/menu.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qmDo1kwuDw5ktFzPMqcqRQTzzecKz5CruT4wllmqjTZVdoqWctTGlbM%2Fzrng8NOoECTNNXWmsZSvoe7de8pQvnd47i%2Fo6yji6RQJOw8fFyY7O%2B5408vXII5XEub33xwvT%2FEWegJQsTev0EOF\"}]}\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 09:29:39 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ec2f67-256\"\r\nage: 262299\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e857a079865695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":1028,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (598), with no line terminators","md5":"9f3075d93e0044b4fe026a3e2d8f150b","sha1":"5fb8d0879005d51be0a0d882a59ac53604b7927a","sha256":"7363b30de914bce44ad7d07ea2ce9aee6ffb3e7e7d2a9a71f6e5594964a13a26","sha512":"19ccea38581a95988800e3df8cf5ee5352dfff05d0a28e92499ec229c625c88abf93576390f50a1597a59243bb562744b026742a224507d33651d7b2192050bc","ssdeep":"","tlshash":"ebf0f4adb3692cec80bb3154b67f13fc39b3051432487500672564f03b42106167ba29","first_seen":"2026-05-17T18:32:42.026089Z","last_seen":"2026-09-21T10:22:16.769844Z","times_seen":3,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/ytprefs.min.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.458Z","timestamp":1789986079458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/ytprefs.min.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lGxrU%2F9WNhuCoAKPl5sJHdHBR%2FEcnYPWqupasom5iuAMMwIKDsOe8qnibJpnIS2hPD1SrDrUTau8lcGQCoFU75kVdJttvmtHAFzUl6frk7BFeJEKSXXxEGjSG2ytU%2BSq82odi2zA5%2BMZjcXc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3e857a4b9ed5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7980,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"9003656e828bfe948f48c8c23b06c1c2","sha1":"95e423239c5ecc092e1b6b81a45b86de325492eb","sha256":"791da8bd99a7405988f40c261e4111e86ff975dba7bbd37e6d0246e3a40336bb","sha512":"39a81ca62404131a9fe8d96419c8c4758c3a3d882b911afae316afb010ec49dee5dbf305fe15ba9c53d2ffd01ebefeb9f7345aae8c9e926ef45f68b24745fd09","ssdeep":"192:Vj9jhjOVK/OaaUl8PzizsL81B8967vlCeNA:N//F8QA67vlCeG","tlshash":"fae1b867f5f925bf11938272306ab7193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.772243Z","last_seen":"2026-09-21T10:22:16.772243Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/Rich-Web-Video-Slider-Widget.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.590Z","timestamp":1789986079590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/Rich-Web-Video-Slider-Widget.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2B5yeuwRN0met8M0jXkodQorUq3PezqP7VEoll5WXHkldsLvvYL2cl%2Fy%2F%2F6kKEsvxd31wUGZc4UEpTttSjp5F9RCtA8KG%2BKsuAMd8Nt1rrUXk6ePE%2FnU72KSFrJxUn9wzWDcxeeSWZvZ3pYA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a589fc5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7984,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"7b20139fd1a3ff5e6cbdda6cf244ceff","sha1":"7a4cf519ef008da4d62afff41259dbdaa181433b","sha256":"e66297c36909af78342fc5a830e876d782c8a77a2fd26a0738628a148dabb2ea","sha512":"04e952cd6cc90b129ab68f03bf8a0f3f7a2d766eeb3c5da973e3014444be7c2937f81b23cc71dbede6fd730c5ffc7da22277223d487b56dde41ab7eec8639b3c","ssdeep":"192:Vj9jhjOVK/OaaUl8PzLzsL81B8977vlCeNA:N//F/QA77vlCeG","tlshash":"89e1b966f5f925bf11938272317ab71a3de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.77573Z","last_seen":"2026-09-21T10:22:16.77573Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/frontend-min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.802Z","timestamp":1789986079802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/frontend-min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ePSE9eNHtta9AG3dIMaKQbpR%2Ffmw7dc6VHM28gKS0ov3lRiPQlMn%2F8DaPbSGhtEdR9teD%2Fj9DynqM9X0%2BDMSmiOeZp7M7ndeZQEP4YRP9DmdAZf8LG7eDfTMaO%2BKtf6J24pfiV2kKKCOv8Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a6ea155695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7982,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"9e69f144a414499f84adcba4a92a9d74","sha1":"944352dbe1e2801ad0715674b27dc8ab0db812c9","sha256":"88984a726f559661fce9ab789a614df7b9a05c32679d8bdd7e08e8587648b71d","sha512":"9b7e8dba625835d4155692327447bf8b3deddd111962f3f0766402837599706babee2f21bfa29d5dc3180c87b083a02cabc56a047f16c7b2162b0a05c12bc289","ssdeep":"192:Vj9jhjOVK/OaaUl8PzMlzsL81B897c7vlCeNA:N//FGQAQ7vlCeG","tlshash":"6ee1b966f5f925bf11938272316abb193de48013daa608e5b6edc1760f8df85ee03244","first_seen":"2026-09-21T10:22:16.778808Z","last_seen":"2026-09-21T10:22:16.778808Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/tmm_style.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.734Z","timestamp":1789986078734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/tmm_style.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kd%2F2oHkEAlKjDeMuOeY4XkmrxwYRGGLk3o0%2Fkx4wqrYV0upf4I8MzBGb9ya1BxMn6q7O%2Bj1ZPFo0cp7tQ11v3ugHI3DKRIUawC50RLPg%2BbTNUh%2FaLuSx3xaNA8rA%2Bxal9p4HGywjOWxrvQPf\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-17a8\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a039705695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6056,"size_decoded":2254,"mime_type":"text/css","magic":"ASCII text","md5":"9d2873866087f1d6565b8e597d91f791","sha1":"5c2da45632374bf79218785ada4514d873607fbe","sha256":"f97a3b0d9436d6566a3d3bc8fa74f32b8e9b1176ccd0cfca1eb8740cc79ca183","sha512":"3c802d59845f4949f6538ea159f7285ae82621789adb38956093a073e4b8681ba0ace91be22d0623d822d415a2f02ff4a00cd2b4640b009cbe8b53e5fe877c48","ssdeep":"96:qU+MHIU+tEwIaLXKoaku5OIPCkbdk1y8dWNOKnyoGWRk:fMuoakHkbdAKk","tlshash":"04c1000389112348d5261004afcf6d993e9d4b32176fddfbd8a4e4a6ca89eebf477504","first_seen":"2023-04-05T15:22:44Z","last_seen":"2026-09-21T10:22:16.781212Z","times_seen":44,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/fitvids.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.075Z","timestamp":1789986079075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/fitvids.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AKczPD8KIz8BGkhBm5Zd35C%2B1l4hjOx55K6azP77%2FQ99YE8CpA8B010P4wczB9uVRVTYxy9hzB4UIErO9knr0YQpK9jEe7zlSRoekQ0zDoSPrbRO187uVYCgt%2FPFtZezjKrwROy482J%2FnhEN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a259c75695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7980,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"2ae897a58ab1c925137f99ddec08ded4","sha1":"07a2af7fc8ffe02ae2021e62fa28f6d22036c121","sha256":"69fe556e7ee1d4d49b7b0d4c7c40a15cbddae4700d167d4b6338d0301e9c0321","sha512":"50c1cca0874d594382100b2df67782cfe03996ffc847122e8f84f3ee78c3f04597ac18471ef1a8e4a0c731b15ee88730ce57ef7944f39a4d2baaf76d17b19f39","ssdeep":"192:Vj9jhjOVK/OaaUl8PzYzsL81B89U7vlCeNA:N//FaQAU7vlCeG","tlshash":"b5e1b966f5f925bf11938272316ab7193de48013daa708e5b6edc1760f8df85ee03284","first_seen":"2026-09-21T10:22:16.782428Z","last_seen":"2026-09-21T10:22:16.782428Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/images/spain-madrid-scaled.jpg","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.801Z","timestamp":1789986079801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/images/spain-madrid-scaled.jpg HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OjLahdFvkmtpK2Ap9v5vLOMPp%2FvUVv8PEqi1j3GeVRMhLIfEHWaOalJIJAOrl11qho7VfTftTRCXGVyMd3pqXLQCCqKVG%2Fkp%2BvCliN8x78CCCGFvN%2BVW2JdG1pyIbltb7bheJ%2FnMAkHX9YTv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3e857a6ea145695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7979,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"4d0ee43c8c4e53e18070428da87094a4","sha1":"b2fd4fa5b55f63a5ef1eccfe457f8031fa7eef53","sha256":"a6e698028c98b2a116d973adb3075ca0da924d823ed2621b514be309cd17eb10","sha512":"97d339fa3bc951829d2c04b1e5c61ad003732ae54276a446892df57e91942538696f5f5a0a16783c35552a29baa5737a5120e94c8948715bb13ee37fc02cda6b","ssdeep":"192:Vj9jhjOVK/OaaUl8PzMIzsL81B897l7vlCeNA:N//FZQA57vlCeG","tlshash":"20e1c962f5f925bf10938272306abb193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.784949Z","last_seen":"2026-09-21T10:22:16.784949Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/wp-lightbox-2.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:20.026Z","timestamp":1789986080026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/wp-lightbox-2.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:20 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ZgXzhjVbOrHXZw4Puk2a5b4NyhkN8p60dOZFe3%2BjvC9SgfzURvtHw1oO6iYhvmmlBfeYj2SOHRQSzFY0I%2FOyM8miZ4qhWHLgZ%2Fj%2FFUAyUOm2tKc8Dtsp9F0G%2BhXpOuSYtRSwrLVCsl0VHCP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3e857a84a315695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4561,"size_decoded":2604,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"93b4470817a3daeb65612bb6767f8c43","sha1":"5c4e18c5200e85da9213f88710040d1d5bd0c092","sha256":"93d14acdd83c4194791ac4c28aa92b31062550e0b051934d2030730cc96ff659","sha512":"b10835cc55d2eb1359aa2cfd56759755b34a12f4fcaeb62a8794546282ad31d73c511dd0cb4d32983df72295e82ac80d34f05ba26c1eb86335446606e8e78870","ssdeep":"96:1j9jwIjYj5jDK/D5DMFWC89ZqXKHvpIkdlX7RJlvaQxvbK:1j9jhjYj9K/VoWnuaHvFdlX7vlCejK","tlshash":"b9917326bafd217e10a3816226fc63497ea0c553c6a705a076acc2391f9ff59fe171c4","first_seen":"2026-09-21T10:22:16.786768Z","last_seen":"2026-09-21T10:22:16.786768Z","times_seen":1,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/mtli-str-replace.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:20.133Z","timestamp":1789986080133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/mtli-str-replace.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 8\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:20 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zy9%2Bo1q4hynHS3xZwhwMm4nCrn9zDUjD8IRbTNhYi17C60ROYld7jS2%2BG1hfsSoHkqVSWy2c9HdaQgLO3RpTfOndIhnKtcnncuFkGUck9DE8QFrWjdhu%2FDXh7csWPzlbJzXt4PRyxPOpty8X\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a8fa485695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7978,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"92d9d0b6d7f559a9f1d8f6ab1c9e6ae9","sha1":"734e411c068ad82194298a9e37b027b0a7661af1","sha256":"5abfb0b1b2be6d227140cf811cacedee818b47e71640874e5be5fa56fc33de0d","sha512":"8ce9f8e233b116d2ee2915c631e29f5912f39c5741ab5831b4eb612c1247bdf014e47b157aa08596c27ce90828755ff0b95564f1c84a5bff2662fbdd9b8c1149","ssdeep":"192:Vj9jhjOVK/OaaUl8PzVzwL81B8997vlCeNA:N//F5QA97vlCeG","tlshash":"75e1b867f9f925bf11938272316ab7193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.789106Z","last_seen":"2026-09-21T10:22:16.789106Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/draggable.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.071Z","timestamp":1789986079071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/draggable.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3JB7Kpc2kDeXoJZv36Ll9KtxZFgWZBw4qWy6yTEr4KgYV%2FJ8Swu9rrC5ADK1SXSR0dnPtYPiK%2FYehTzu%2BToKJBoexC4tYMBv%2BVSEWmcja9CEUl4AryCCGa2MPeHFQH%2BL6v%2FxmeGVMOa2FqLC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a259c55695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7984,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"fb07785d018295c21eaf21670c59d280","sha1":"e0d0e9900ac400fe7e552198e02e65d71915b671","sha256":"54a7e91ff0c9ef0a35f3baffebe99e83728d3a5473d67dfa509b231b43bcba31","sha512":"4655b6dd8a519eb8c0b05fb3d317d6bae6ac9dd3c62e34a1d6c28454507bf414dc3a47446815ae191c089f67016e2b6c85c3ef35a6930fd61264572da6bf7a56","ssdeep":"192:Vj9jhjOVK/OaaUl8PzGzsL81B89K7vlCeNA:N//FsQAK7vlCeG","tlshash":"16e1b966f5f925bf11938272316ab7193de48013daa708e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.791838Z","last_seen":"2026-09-21T10:22:16.791838Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/images/ja.jpg","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.799Z","timestamp":1789986079799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/images/ja.jpg HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OPRWJSYtYzwUDApKyjjt48h%2FPgSn5ShjE73tDQq3ati%2FWSX%2BCxfCmeGldXWnheZawIXTQ0hB07GH6DkawMfdKVCwqv3BLGwIoC9LcN%2Feyx9BRjUuu3FrxZxw7SbDBm%2BXWpxBQrBHyYNB2%2BbK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3e857a6da135695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7981,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"d945598937ea140755375a1b1683f213","sha1":"248deba35c1efbf6ae77be6a5aaf80d3990b4df8","sha256":"63cdc69494833afeda3e308c68ecb536a1062fb843c537d8f224e8c34ba52835","sha512":"7c37091af48b47ea14d8ff638b32e2bd703a10922979ab3df879256edf20101be9409281ecc6356870b9c8c43348d555cbb92fc32974a97647e54e77a72e3a19","ssdeep":"192:Vj9jhjOVK/OaaUl8PzlzsL81B89F7vlCeNA:N//F1QAF7vlCeG","tlshash":"52e1b966f5f925bf11938272317abb193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.794057Z","last_seen":"2026-09-21T10:22:16.794057Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/pdfg.front.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.990Z","timestamp":1789986079990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/pdfg.front.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 8\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:20 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YFrDvvDUw3efftWIZy0T9BxlhMJRmc70RWvYSZ8yUNPPZelWdYO4wJBOurmvyhBQOpwssnfaI0oA974g2t8sDWQiMt50tY3b25FicfCc4tGoFBDv%2FBzs4s9qKVqSHFJ1wDkekhZOSfW4BPrR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a80a2d5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7974,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"7ca3804dbe5c8ee0ea441f3edb64f08c","sha1":"d747088e819c73b440ffd4acd9db40dd3f7cb2ff","sha256":"fd72d66814fcd1bc62943ecbde1c8c13f330765f9b4b6a61ee8d6e082b081a9e","sha512":"167f1e598719d0c205e5c53e2bcb6653cc7bb61e4e2fe0a5d4efa5b2a5ffdaf802c60f5dd95bba39b2402256230a750a541819382cbc304b3e630f1e79a0dc43","ssdeep":"192:Vj9jhjOVK/OaaUl8PzNzwL81B89N7vlCeNA:N//FpQAN7vlCeG","tlshash":"22e1ca63f5f915bf10978172316ab7193de48013daa608e5b6edc1750f8df85ee03244","first_seen":"2026-09-21T10:22:16.796078Z","last_seen":"2026-09-21T10:22:16.796078Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/asl-prereq.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:20.063Z","timestamp":1789986080063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/asl-prereq.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 8\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:20 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YrP1GeCT3so6pNOYV%2FEUpz6ODI%2FwyO8apN96eSvxeqShoFg%2BQB3Bf5iu%2B%2BFmcANrFjbGHjEPnK2Kvo4Vp8k9AGtXfZ7W7N%2FuNMQM2cfgH0NpivIBRvPurCkkQYyZkPFqroODFgiXJ4um%2FZqM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a88a3d5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7986,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"75a644a95d50079398d73b6b1ca7f9af","sha1":"5ad187b2a5a738a23822e026051248bd32e2c101","sha256":"880186ac1cce6a62c67bdf1d603f1babbd1b4c1ec0d10dccd95814c85057019f","sha512":"ff0c63f0f3a3083fe1170c4702eedecafeb4e5a9050d82e7925b34dd3747e798327327cd492bcea6102ad2bc0d5d66d4560e4e086288253c84bd7091838add55","ssdeep":"192:Vj9jhjOVK/OaaUl8PzWzwL81B89W7vlCeNA:N//FsQAW7vlCeG","tlshash":"b6e1b867f5f925bf10938272316ab7193de48013daa608e5b6edc1760f8df85ee03284","first_seen":"2026-09-21T10:22:16.798393Z","last_seen":"2026-09-21T10:22:16.798393Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/draggable.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:20.245Z","timestamp":1789986080245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/draggable.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 8\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:20 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yedG6VQYzBeB9WzIjU4p%2BtlAIaHRc8XMtYCLlaI20ir7jcyhq95wv9EJGa7kyeqkIppFtWEbcmUyFp%2F9Xmtb6i0wtDxEPoyHVVb96RIM6yIVrEairWVBGZ9YPVS%2BledekD9KzDhapmwww3nq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a9aa525695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7978,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"b949dc47ed9d3d4d28b5eec07ac469b9","sha1":"e595239e6375583b3b7aa73e539b3a99eb619c41","sha256":"a770745631a18c4c72ba7ce2e572a978f96572fcf8f6e9ae6175a6d1b070f52e","sha512":"ccb1c11eab1067eb519ce08e9721e063e2a9cf4733644936d40ed86f3b2df784d0e105a277001da03fbd830db179174ccf7c49053ea4b4559269495c061c46f2","ssdeep":"192:Vj9jhjOVK/OaaUl8PzIzwL81B89Y7vlCeNA:N//FeQAY7vlCeG","tlshash":"18e1c962f5f925bf10978272316ab7193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.800642Z","last_seen":"2026-09-21T10:22:16.800642Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/bne-testimonials.min.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.685Z","timestamp":1789986078685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/bne-testimonials.min.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pctWira8wagS5%2Bj87Gub2UX%2Fp3KyEnPlnwxmfaimp%2BjSuOyMnIYXhYJST0%2Bdc12EaBZI%2FUvlRAKI9WaemEdlvdau7VayxXXNgCjT0o68oWtajxUdmMd2hbv51SWgMMgmuuEG94%2BQylXF3Ycg\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-2a91\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e8579fe94e5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10897,"size_decoded":3166,"mime_type":"text/css","magic":"ASCII text, with very long lines (10704)","md5":"5b2750ea2f71d98bf22bdc8852009a16","sha1":"7519886b18f29b059cf9d8eba975c2f3cb32317d","sha256":"bd02a33b1a8fe9adbdf88c45373057a1b9cabac149092ff9c57a71f5cc0525b3","sha512":"c6a47f1e4d3754da4e100b430c9a2f7e19997f6000ddcca573867bdc765dfd28004976655bb2664098c8ddb772fcdece1631dc2643c0ba12f71806a5ad4c0781","ssdeep":"192:sFCNAz+ig74X4Nzb5Y5n3c3TXe3jH30ZzdzbPcufrTgTT9jgYGRsj8u0RJRWXCfq:SiZqMcQo4gH9P/dibZ42AXdg13cSIJ","tlshash":"2b22fe31a456203e749e913dbd25d9ccd3aae932eb154fb9d194f6b2ca810f12c336c9","first_seen":"2023-04-12T04:29:48Z","last_seen":"2026-09-21T10:22:16.80284Z","times_seen":91,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/jquery.fancybox.min.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.730Z","timestamp":1789986078730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/jquery.fancybox.min.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PSAT0wmDvzvdbYF05hLyrc9qZvwIDNuHgR2HZQrKYPuW3pR4ujsxxu1AqOkaqBXeBWIUi1fO%2FRuDAArqHCCBdY28RuSDh6bEMbJF6K1P4Grrx%2BgsjzJfeBWZg2seMWtbjkfloBu1SoHW3QdZ\"}]}\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ec2f67-fda\"\r\nage: 118981\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e857a0296d5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4058,"size_decoded":1968,"mime_type":"text/css","magic":"ASCII text, with very long lines (4058), with no line terminators","md5":"bc588054d45f910494ceba6455ac77f2","sha1":"59c47f34f56e8a5ff2434ff6e339a5b4e0badebd","sha256":"f34bb7d9c8f2db0e78e5d7b226bc169182f8c22e7cd1a3e7b5767519b709c1bc","sha512":"afbd4e146cab7a3edf07ff32030368478f7f846b9ef22edab098846f7744d5587de56db2443e1c9a22743406908a1f51369ec83392f1e751151dd3d1cb0c74c2","ssdeep":"","tlshash":"3381ed231185309eb037ee52e7af9adce131544ae6a34affa60cfc21c3ca7c154a65c4","first_seen":"2023-04-07T10:52:59Z","last_seen":"2026-09-21T10:22:16.804114Z","times_seen":1124,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.prettyPhoto.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.745Z","timestamp":1789986078745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.prettyPhoto.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MiGyqUeH0FMKmcT21oEms%2FmLZ8gxEPZ1a2uFNLmZHRx7ElcZsSjX7D8SATfLK%2BUh4v1HTYZEOb7ZEKVa9o95m8TMgLaQCyUr2Wzo9nZsQVud29AJx30DL0j8Jx9xMLvYuovNtGzhVlfmaGIB\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-55df\"\r\nexpires: Mon, 28 Sep 2026 09:29:39 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262299\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a049765695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Twitter","description":"Twitter is a 'microblogging' system that allows you to send and receive short posts called tweets.","website":"https://twitter.com","common_platform_enumeration":"","icon":"Twitter.svg","categories":["Widgets"]}],"data":{"size":21983,"size_decoded":6732,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (21694), with CRLF line terminators","md5":"fefbb92c3393657377b4c257f1dc70ec","sha1":"84b0b39a54d4b53ba0182694ae8d549cabb2196e","sha256":"da9107f52837a603de76f8058122f2fc15d85a3070e5a1aee47fe326b85d7912","sha512":"c686d01dbbc54c2afe0aa14ef3a74df870c651bff16275148445ee6eea17561064f3a201688522af9d361ba430c4fa9aa39c1ed3b668e84f6cb1be79cd118c32","ssdeep":"384:dubzguBg2FJ5ejrjjrwjip5IBpSdbj8MDUUEhRLu0FgQIsBnRcpL0aZy/TkiY8lb:4guBfFJ5ejrjjrwjip5Q5hLsrZEfHlrf","tlshash":"d2a2b5286d20649f8393e365e4476b1cd2338a17fa02d9644278ac7519fcec6693efcd","first_seen":"2023-03-07T12:07:26Z","last_seen":"2026-09-21T10:22:16.805148Z","times_seen":93,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/core.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.768Z","timestamp":1789986078768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/core.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2BPoOuXFA33QQayuJgaihEwWallbex2YmY8TNedwBkOXn1cFInmMwQTG7mupJK9QMPUBJwnBJ7GbxWKOaNaQ1Vv6QTUklZSv4tpSeJr%2FUvliJKXO8Dws7kLWIy699LRn4Pkzw68qJCFbY2hY\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-53d8\"\r\nexpires: Mon, 28 Sep 2026 09:29:39 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262299\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a069845695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21464,"size_decoded":7908,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"8fbc22c79d40119dde9a5d16897002b9","sha1":"e9837519aca724457792e2d5ee98a97a0367cdf9","sha256":"7e84c9f8d71bc6eb2dac2fce59a6caea62da51ffa8cf56b41806f59386ab1322","sha512":"3118a198a3710c839c15d6c4b5dc9f9adcd637913af2e26f438b01c80b27281f4937e25aad2817855d8b3eb36207c61ae16d62b17e698799c5316e86f52ac6fc","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhBGX0CiS9rH/OrLrErJ29FkFvd:iS33Z5vK47kv","tlshash":"81a2d94eb246380586f7a2a5402f521fb132e25cb10588ddf468d8da3c7eea95173f79","first_seen":"2024-07-16T20:15:04Z","last_seen":"2026-09-21T11:00:37.89662Z","times_seen":42696,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/esf-insta-public.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.779Z","timestamp":1789986078779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/esf-insta-public.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8eHMc%2FDZqpOwC0LPtZqGRlJ%2FXWlUHIHv9P%2FEcrQ1xYC%2FOQPT4gQk74OPQBK66MWfItHA7kpfooUjF1luIg%2BZnH3%2BsKjeVcVE5p%2Fd3Tusvsg7eYGkoBoNHLQimprIT35itrPp6cKBn4nWkHms\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3e857a0798b5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7987,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"7c0810e00c51f756ae705e4732cee97a","sha1":"6f1a83e9ea357cf165e398833768c967c0175a14","sha256":"0933ab73642eb95b8c65846f21943a74bf20e6207e3d8385ffd167ae155bb612","sha512":"4aa2a8b8ca8cbca9f128a18983c0d8b61e972e6ceaea3dd8bd14823ba54db01ef4a739aca291e927f581052f9a58a9bea0052f5b66bdf39a1738d3565c0a84b1","ssdeep":"192:Vj9jhjOVK/OaaUl8PzDMztL81B892R7vlCeNA:N//FGgQA2R7vlCeG","tlshash":"60e1b966f9f925bf11938272316ab7193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.807209Z","last_seen":"2026-09-21T10:22:16.807209Z","times_seen":1,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/asl-load.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.061Z","timestamp":1789986079061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/asl-load.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bgsXr1t1yZbmE0A1R6jgqOPq7Z1CHxdZwOX2NW3XgQ6%2FSAIVZ1kOu1baktD%2BFGEGSsK2CT7AYfU8IUliHq%2FnK9gtflYr0ixuFvnner53ohCFzYNV6itqDuor4ben66uoysIiXAj80JLZm4Dj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a249bd5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7978,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"78301a554f32f70ee2af407f1c736bdb","sha1":"2d17ba59892b37056c6a69d347eb2274b5a08c24","sha256":"85fc29aae813e396bd54249b1a10edf27d9a875888d0ecdd6a4c8695f1ac23b6","sha512":"c4147725d95e7154a952e03132641894f93e0c127b27a1c011e5e847712c919b2332aa3668b6e4c815c60d73413aef33f0b910e1a56996d6ba41b1e17ea76fde","ssdeep":"192:Vj9jhjOVK/OaaUl8Pz/zsL81B89n7vlCeNA:N//FrQAn7vlCeG","tlshash":"51e1b867f5f925bf10938272306ab7193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.809897Z","last_seen":"2026-09-21T10:22:16.809897Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/images/wef-1.png","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.214Z","timestamp":1789986079214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/images/wef-1.png HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hV2YVHRzLPsV3BaMHmXK6gMusnMJ36LdHmPelr129fW4Q8NDAw%2FgS2Bnj6lEmrROf8YoxTIHOz1ahx0xUyC0j381f0lwqg5kb%2BvAoyLoOOp6QJweIt1NUFPuq%2FfY24hlJi0tEFM3%2FwFZib0i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3e857a339d65695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7977,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"942699d4a032945436d6fdc99b3e071e","sha1":"4543a1cd2a259e49004d6802dae4119b6c1c7be1","sha256":"4904abd45f636f4eb689d140bb19f7e746fff4854d511a423a02e9290ca90cd2","sha512":"952c81e86784c4d8c8dfaf387647ad6434e5c67fa4a31eaee9a21e87b31db5370da833ebd2818660a2809a9f29d8110372bdb1bb054c830a1751ce663e3bfbdf","ssdeep":"192:Vj9jhjOVK/OaaUl8Pz7zsL81B89v7vlCeNA:N//FDQAv7vlCeG","tlshash":"f3e1c962f5f925ff10938272306ab7193de48013daa608e5b6edc1760f8df85ee07244","first_seen":"2026-09-21T10:22:16.812118Z","last_seen":"2026-09-21T10:22:16.812118Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/admin-ajax.php","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.450Z","timestamp":1789986079450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/admin-ajax.php HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MKKW5KEFVIF4pa1Wz0x5%2FleACFZXp%2Be8m3vExb%2FyUMeSgamZZuV60qnmtfx0rMR6egdJYkycvU8HWYh8gyxF9ppA%2FlyIYDwGBi6ejm%2BIAUGy2fZ1PdBzKaqfsHcbKiS3NdgUsgjIoA5iMWA3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3e857a4a9ea5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7982,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"16e524cea3f9f0ab727956a8515550ed","sha1":"8f0b33cd84bd90074b949e9f90db8853477437a6","sha256":"a433e1dfcdeee593459832c78eb66d53c0f5e64485e680fa1f314f020db8d66c","sha512":"8965bf67b85f7ac5ec2cd26f80b0f99d8bd4b180a68a4512933ea443b0eb44b382e104cb34a75d23c6fff2c2d6bb8241fb964bbfacb97de205d2153520c588ab","ssdeep":"192:Vj9jhjOVK/OaaUl8PzqzsL81B89y7vlCeNA:N//FkQAy7vlCeG","tlshash":"d9e1b966f9f925bf11938272316ab7193de48013daa708e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.81434Z","last_seen":"2026-09-21T10:22:16.81434Z","times_seen":1,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/front.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.753Z","timestamp":1789986078753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/front.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V7D%2FUG28kU8B%2BYRIDasqL7p1x4iE5RYHjnFi0JBaE6maLntDjh1tuAS8aPZrPEL%2BCalWxEOkjuEnRSxSeKCeM46p8wdX1dpGbjgJOXW9FLHW6seCu3agVumOHN1eT%2FuXnb4NFzUvuPbIEcJ6\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-9b5b\"\r\nexpires: Mon, 28 Sep 2026 09:29:39 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262299\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a0597c5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39771,"size_decoded":11413,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4123)","md5":"6bda176395669afda5d2eef04ae72d92","sha1":"36d5474a3e9a818071338cd87d2b1732f3da5212","sha256":"ee10c93285617472b61f12be6a0e1c481b2cd27b91db784f2cf28a8e7c5cd765","sha512":"d9149edd159e44fc667976dd57e05612c15e510e8c854ab87ec90620893bfd27bd7e138374b8c12a45c76b29f5bc1e21c1cc8f40ace348e3f3358b99442ff37a","ssdeep":"768:amrq510JJbt3nEBOlN9FrNhtgAomBJc7ERb7d:61jBZmncYRb7d","tlshash":"eb03c435bcb3112115bb709b6baf97093a33412b9107de003d6cb6c41fd5e14e79abaa","first_seen":"2023-03-07T17:59:17Z","last_seen":"2026-09-21T10:22:16.816266Z","times_seen":23,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/images/wef.png","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.797Z","timestamp":1789986079797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/images/wef.png HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iHLZrwlbkxj0mwiIPbxN1alD0V4nBoSGgWAa489mtPOQdtKaGW1LMlj%2FkPpBIcTLEAQvXfeUb3MMcFKpGjZikOhx%2FCgblOIiHykuhvSka%2By0U1GOGM7H5l15Il1OZm0P3SEljxd%2FC30weKUs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3e857a6da125695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7977,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"9fa08a21ee8883b775a8e5d28f79545d","sha1":"9c54b17da272065274c4c172e452653393c9eb74","sha256":"35dc8eca5e0b197c8ff9831be1c59b5a8caa3be377511c01a8217b17e422f417","sha512":"845a98960df3a6e12508fbea873faa889cde94070eb16e360fca7a7718859a2ec1be0f36b49fe9090104a40122ebacf54e2808d0940764fda7237b5764659331","ssdeep":"192:Vj9jhjOVK/OaaUl8PzIzsL81B8987vlCeNA:N//FyQA87vlCeG","tlshash":"b8e1b966f5f925bf11938272316abb193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.818024Z","last_seen":"2026-09-21T10:22:16.818024Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/wp-polyfill.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.842Z","timestamp":1789986079842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/wp-polyfill.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F2C3kroLv%2FYdmwAtykvrnEswA%2BDUcwOedwSMSFEdkCh%2BEaYi1p2ErM9u77%2Fx9BRGisCJaRRet0G3xNs%2FuwTqUwuNjuoiyASDnfIzXMDfsq9wL8hu3q5awsRfbFBBneti0HYp8HMPQEEiD786\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3e857a72a1e5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4561,"size_decoded":2605,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"b284558b998d749f6d71fba7558dea79","sha1":"4afa7550329f34dead35f952b44ce4b503410228","sha256":"edcd4bacd82c81c6a5b191fc3d6a3cebbf90f43b34256b5de7d9bbae83337599","sha512":"de7798991a06a884d696c2fd13afb093067830b1be55d89a82ed45664a133be77c0d409889eb80812fb35a5b7c9712cc69fe454784b6e54297e308a9726707b7","ssdeep":"96:1j9jwIjYj5jDK/D5DMFWC89ZqXKHvpIkdl87RJlvaQxvbK:1j9jhjYj9K/VoWnuaHvFdl87vlCejK","tlshash":"12918426bafd217e10a3816225fc63487ea0c553c6a705a072acc2381f9ff59fe171c0","first_seen":"2026-09-21T10:22:16.820076Z","last_seen":"2026-09-21T10:22:16.820076Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/mouse.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:20.231Z","timestamp":1789986080231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/mouse.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 8\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:20 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wmYWJigzsp3gKCYOiRn4epqUzh55nDkg4wBgDIgjhwEBTZVpfB3OE3yVUii64cGJc2MmEzRr6xwwadeQPxW%2FF2stj7c7UVm13I6YqL3NKUVvWByNGQUxxclnW0GtYOEf1WNc%2BOu2kfKt2Jwu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a99a515695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7976,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"7b5e40423a7e553ff765c69baa0c680c","sha1":"7fc3d3388b355a5d370fa522838b4df40b27a244","sha256":"b668cc88cb23aaf18f8d40de02b6475f1d03d286b2aef9571c4de62e694f68d5","sha512":"be91461ac8861207731256594fa73373fede43799fce99ca0d882f8727945d677a7bcb9e4151a39850e75abedf2a0a724d6f7a0696397ead62122d9a3fb6088d","ssdeep":"192:Vj9jhjOVK/OaaUl8Pz7zwL81B89H7vlCeNA:N//FrQAH7vlCeG","tlshash":"b6e1c862f5f925bf10938272316ab7193de48013daa608e5b6edc1760f8df85ee03285","first_seen":"2026-09-21T10:22:16.82261Z","last_seen":"2026-09-21T10:22:16.82261Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/custom.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.731Z","timestamp":1789986078731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/custom.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pNiIJqXbnEdYY2Bz7ye16gJwSql7NKdnTCANm3tru303L5X1VnrN9UHU06TUYSObdpRxiwskMHvdBIutJVN%2BQ2XU%2Fqo%2FjDDXevSrssTrb0FTBW4gAfV1tD8MZCH3idCuv01snlqlNHhQfuBj\"}]}\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ec2f67-46\"\r\nage: 118981\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e857a0396e5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70,"size_decoded":844,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b73f5fe3e4b303ba9409f86f72eabbe9","sha1":"9bf9f236ce1593c716612bf5cd0c8df8486d5ee4","sha256":"8c17c4fdc7128e04fedb74dee4099135bfc060fe1278bf7de02f0155a38d5419","sha512":"c4f381dc419ea46d4ee1b7cc32e8833a77e0075f254320c6e6e6c7b1b1da397ef479b2792834aeeb6de266090123a44fc40e704e3de7ced00e38b67187d2ff9a","ssdeep":"","tlshash":"48a022ba02b83e2882b3e22200c2f8830302b028c0300803b3c00e000003c300c00882","first_seen":"2026-05-17T18:32:42.037842Z","last_seen":"2026-09-21T10:22:16.824307Z","times_seen":3,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.mCustomScrollbar.concat.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.762Z","timestamp":1789986078762,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.mCustomScrollbar.concat.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2Fu%2FWHKHF47vOQCC2pfCPobvDAgEwbfzHW6smf1VW%2BJL6dMkEtG21xI7vuWC9qrEaF4xwFae6ztJbsqPZipAk601O96ZZ8y2o434uZ3D6WSPXGoEJIRKCy7Wz3vX6qxURRCL0XxBzdyuypaJ\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-6250\"\r\nexpires: Mon, 28 Sep 2026 09:29:39 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262299\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a069815695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.0.6","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":25168,"size_decoded":6945,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24110)","md5":"c0efc8c25969b270348069a176e93f8c","sha1":"39680ef85bdbec350f35e41de4bfca303f5dc34f","sha256":"db06dcfa0112b05cef7abd20fadc5baf632a316515f07cfd4fceb436c8a0cb1b","sha512":"badc4513199af532e60a091fd446013d87521f21eca367622f8735d78a956a6a1638dc4e38f9a330c7bf43a0bb71d4866c21fb1401af0218ccde02377536cfa6","ssdeep":"768:TyPff4tXluVT5CdUf3mF5EF+Wrq7rmGnbe4W:owucC3mF5EF+17rmh4W","tlshash":"7eb2b305761030fb57ef3b69e68f56046163b15a0b07949420b8beb46bf5e703b27e4d","first_seen":"2023-03-07T01:40:25Z","last_seen":"2026-09-21T10:22:16.82504Z","times_seen":1240,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/asl-core.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.058Z","timestamp":1789986079058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/asl-core.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ocMGM6wtPJEAc7IoRIbazCrm17qjZOcmcosZ454slbnmmH5GYJMN6oAJWD12emVdwBKDtXuK8vh61B8lkbGmE5AYNriSfe2lUWqY5mvGoDm6fkei4AX3VMJrkWUFNgGNZYk0nhIyMoupauSr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a239ba5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7972,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"d279547a626d10861e81c404d1d02572","sha1":"e976d187093230c53d2439431d35424cc1f7b76a","sha256":"83f3b04ce9d219ea9ac85954841a43b515fc4465e64f7119c4fc6ce7897e3c1d","sha512":"b9e56a762b8b2ef7d5f0cd2aef3ac830f7164b6657a5eff8693701a18019626e3ce3e864795eaf696e4e0db414a72a3bf5e98855bbf35b75c68c19d65c9e1f3a","ssdeep":"192:Vj9jhjOVK/OaaUl8PzrzsL81B89L7vlCeNA:N//FvQAL7vlCeG","tlshash":"afe1b966f5f925bf11938272316abb193de48013daa708e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.825786Z","last_seen":"2026-09-21T10:22:16.825786Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/mtli-str-replace.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.064Z","timestamp":1789986079064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/mtli-str-replace.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ieYQWpr%2FO6PdD6GZxfl4uoOFyXi%2FK3vdVpB%2BRfhyaRjKyKdZLftIfcDAH01uWvKwYTamfsyu31HV9i1R7RDFIf%2FvfAmYY7nfc0%2BqkqkJsEx6NpfQ5bz0%2F2Sh4CG9B992sUBaQQv32fxSt7E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a249be5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7984,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"5399cc212bbc1a4f91d8e75a6d9108b6","sha1":"e26e8caa7f620e333a59c489874d8fcfc964caa7","sha256":"1fc8a39e04abefc54ce8c1a169f7333d679063df741c54fce17ffad04cd42575","sha512":"ccbb1e124e2b081f27a21a17d9305d959ff6d1ae50fb55bd1e0979a76cd1e6b36bedfdc3bcf397c698a3e738b978e8f370433590db64cda57b5bdb35c1bb51a1","ssdeep":"192:Vj9jhjOVK/OaaUl8PzCzsL81B89W7vlCeNA:N//FYQAW7vlCeG","tlshash":"a2e1c962f5f925bf10938272306ab7193de48013daa708e5b6edc1761f8df85ed03244","first_seen":"2026-09-21T10:22:16.82726Z","last_seen":"2026-09-21T10:22:16.82726Z","times_seen":1,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.mousewheel.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.068Z","timestamp":1789986079068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.mousewheel.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EGpblipiQM8AGUrMfg8CGtdw1dzxpng4fXqwIeeHEUFKlchzE3CRBlZw3%2F71SBOWhQe1cdzCnBvFW9bfib8RY3n6azAQDk%2Bv0aFBZBt2MUIf0DBDCrN%2BENrff58xLC%2BrXIs2QTJJFUjQDv1Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a249c15695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7980,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"6f51104b183c890519d15981c0f34cc9","sha1":"148065071bf8a39d3a4e63d56e4fdcbe95c2c8c7","sha256":"add691d8cd4e19502acff0158f2573e67f0e96240724481fc7f87f8ec4167d4a","sha512":"93a26bddcd4e29c54ebc0a4737ceb7489f38c1f53b221677ee5bff848efc02fd2f910b1232191d033f1875daf304398bfbcd486c5d24986fcdefc71b234c4995","ssdeep":"192:Vj9jhjOVK/OaaUl8PzxzsL81B8917vlCeNA:N//FlQA17vlCeG","tlshash":"e0e1b867f5f925bf11938272316ab7193de48013daa608e5b6edc1760f8df85ed03284","first_seen":"2026-09-21T10:22:16.828583Z","last_seen":"2026-09-21T10:22:16.828583Z","times_seen":1,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/fonts/fontawesome-webfont.woff2","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.834Z","timestamp":1789986079834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/fonts/fontawesome-webfont.woff2 HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/lander/wef-privet/css/font-awesome.min.css\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QpymemFpPP3rdwnOEmh%2Bbi%2BAGQI9RDbRtHoqhSg%2Fr8cSmwh1uGbhqjQr2Xc%2Fz62kZPKSFfEUnUx1A10zug7CCiVgUppQbFIo%2FeK4JvfdTmm8rRdqBHcW4%2Fo7pHOJ0rb6jZI2uZxIwXxCPHRa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a71a1b5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7984,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"8e6175ddfc47bfec4059a2c77ba69b35","sha1":"b73b8ff18712978bddc7e9c6da71c4df48456fb9","sha256":"cd44664cee62d9bd0c7b3a4563e17ce73116a004e0a288f62a4822d9f9d6af3d","sha512":"a9de7a2633d9f69a619edde445503d1acd7cd1d2e55d2b7a4288184b319c94f123f57fe7a8b120b89687467a0f13b19adc6e67529befbea654546f7dfed33979","ssdeep":"192:Vj9jhjOVK/OaaUl8PzKbzsL81B89ba7vlCeNA:N//FrMQAba7vlCeG","tlshash":"e9e1c962f5f925bf10938272306abb193de48013daa608e5b6edc1760f8df85ed07244","first_seen":"2026-09-21T10:22:16.830198Z","last_seen":"2026-09-21T10:22:16.830198Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.easing.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:20.166Z","timestamp":1789986080166,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.easing.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 8\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:20 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xBquIO%2BpTVDMRd5z4eo5aclM67TUHc%2F%2FxEbdtOIHX3ApBnsyOSYR3RZ%2BIHLnK%2FjD1XG4FEndPRuMyVbnADVm67j%2B31CjbOs5vDaVOfvyCdMZCFnZZIkOeJl0H3kuTiAWq7k8IByGFik3%2BU5q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a92a4e5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7986,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"2c201b43ccd5216e65c943c54a0a08f1","sha1":"5b207b6d22cf576e65905ca1b0573aa1a2e300d8","sha256":"3a0422c7fc66f824adb747d63e362a26e772ceba37fb15b2ed852df367fc2408","sha512":"77e9696e1a8a6c589d60a7775f2f52e91499529cbe9389305a8f21bb9dd243144a9b74279844de6633f2fed7d60a7da0d17a9067d08722568b50b14693b9c716","ssdeep":"192:Vj9jhjOVK/OaaUl8PzhzwL81B89Z7vlCeNA:N//FFQAZ7vlCeG","tlshash":"9fe1c962f5f925bf10938272316ab7193de48013daa708e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.83179Z","last_seen":"2026-09-21T10:22:16.83179Z","times_seen":1,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/style.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.671Z","timestamp":1789986078671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/style.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cksd9Ho7Sf1aP6cptIyoGrapv46dgfQymY9QtDOeg3VDCExwbC4pFr4htuo%2BbPElNyR9DtQ8IT1tk9MWHa1qA%2FN%2B6QVEDQp7ROacemjaK5oTarT3xyXIVevjNlJM2kNM2PBpaTH%2BWPljYdWn\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-2268c\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e8579fd9485695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140940,"size_decoded":27479,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c6b7e743815260b4aac099a0776d0290","sha1":"6fa5902c18ff9d8e5716fa646bc0a06ad71d15c9","sha256":"f9848f64ada38259d23c41f1e0788f19440e5141eaf4c56d6e81d45bad94872a","sha512":"0d43091248c0376dfea89489505a312d9e21d90e73d0a5cd8eb2cb75cfdeeda0740ee7b41f474fd9f9001449ea6a15a2b80fd1a534a0252d2e17dee202c8a05b","ssdeep":"1536:zm3bvlou2jjEDTx+G9n9w1ebaXfqkKHNHkh1v48Fhd9X:klp2nMgAn9w9Trd9X","tlshash":"c4d3a630f94520c9f363c23671c1fa8ef9349552da210b7af97a713c87d919a1277b1a","first_seen":"2026-05-17T18:32:42.014895Z","last_seen":"2026-09-21T10:22:16.833261Z","times_seen":3,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/images/ja.jpg","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.211Z","timestamp":1789986079211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/images/ja.jpg HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=agG2q9sadHPo%2B7GnIzUrNR939PdhgUTHrbYWKoslTyurwqj%2FxJ%2FIjHsCjYA4D%2Bwv02I3%2Bz1yqyY5L%2FCU3rEWyvEsn1oEDWQAmbUynjzlIsGV24s%2BSqZ0PLjJNeszpAvY3x2QEPkpof%2B76K8M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3e857a339d45695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7985,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"7dd80ce9e8c9f5a1e8cb4ad8123480d3","sha1":"26a5a50c8bcaefd7d3ae29424065438c1562895f","sha256":"a39c977be7027ba00995dc6ed89ac5898572e8c26a35fe86c3eb32514398b47f","sha512":"959167144440a2fafa6ad369514df0aa2547727ee8ca6adbcfc16db2cf2f797b9e6ee1fee213d2343060f94d710b38cd8d2b52d68fb8b611fd352b1970de91ef","ssdeep":"192:Vj9jhjOVK/OaaUl8PztzsL81B89R7vlCeNA:N//FBQAR7vlCeG","tlshash":"12e1c962f5f925ff10938272306ab7193de48013daa608e5b6edc1760f8df85ee03244","first_seen":"2026-09-21T10:22:16.833941Z","last_seen":"2026-09-21T10:22:16.833941Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/scripts.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.567Z","timestamp":1789986079567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/scripts.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=22j3u0Y3iNaaMZ%2FysYbxvYj1nmu1KEyLbdaZLjC2Dk7n9G30Nr2j%2FmB7EB0pfWUtm9iumYywrdy88eGrOQ%2BvcZzbKJUXZA94Vj8KsCQ%2FdsC9KdyHtKT2f%2FsCdglvt2xLQvl61QuURT2PZYZV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a569f95695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7982,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"de9d881d10bb5bbcc11a93c80cfa2d64","sha1":"bb8014983a06b0da4424683abd2c36e3372ed7d4","sha256":"68de4be8b94283cdecc472d9d8acda77455cde2ee7f23ca0349cd9ab5719b704","sha512":"1eed5da5f754a2c3dea93105687fb8c39ea804f2c92fb0807dedc1bd0239c8b413cb3dad1847d7fd2e469deb0266150c060ddf41ec897784e7d9de9c9f27914d","ssdeep":"192:Vj9jhjOVK/OaaUl8PzTzsL81B8937vlCeNA:N//F7QA37vlCeG","tlshash":"40e1b966f5f925bf11938272317ab7193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.835342Z","last_seen":"2026-09-21T10:22:16.835342Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.wpbooklet-image-popup.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.666Z","timestamp":1789986079666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.wpbooklet-image-popup.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UHdKxO%2FZSJh8%2Bj%2F0ulgjD8MEv4VNveHA4YFZ0jaQ5lM4PiIUQRXhi5vVWICzoe1WodM7GJQen89wBOQd23zd71nh4Sw9%2BTuNTaBcJEYNp86mE0clvIUsTqdlBl6oMfz1SAbPTxICX0NluUYR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a60a035695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7980,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"3a73e4ba8a0837d2397edc6377c4fb13","sha1":"64e02eede33a79bf741907daea7867bc96a266d1","sha256":"f773b1b555d4588d8f01d68308638e493bb6c6b7f90db167f75a0b91b4d464b4","sha512":"33b4aeb179322d043625c8d72af4e09f9ad9abdb462edb1cda2c5b04dc3ff1885ad9cbe687a2e08e5257a61a908ae760b7ed7e42af9a899dab70e10abd879904","ssdeep":"192:Vj9jhjOVK/OaaUl8PzKzsL81B8967vlCeNA:N//F8QA67vlCeG","tlshash":"cbe1c962f5f925bf10938272307ab7193de48013daa608e5b6edc1761f8df85ed03244","first_seen":"2026-09-21T10:22:16.836737Z","last_seen":"2026-09-21T10:22:16.836737Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/bootstrap.min.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.697Z","timestamp":1789986078697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/bootstrap.min.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ifWm4aW66ZQ1yyA5txrcBpIcJ79uwn3F3fy%2FccSwCQ18oRZF0RHXA2wOVrlxI0trEMx%2BVfnDI4UhRvw%2FH0ewJaOgf7Ak7XNsX%2Fqs1L2MZ2BcKjaX39Efm9oBPE%2F3v3eX2ZlGPR97I4ABh0WV\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-e1e0\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e8579ff9555695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57824,"size_decoded":10648,"mime_type":"text/css","magic":"ASCII text, with very long lines (57500)","md5":"698f9a16431d56c749ed21eb12579971","sha1":"ac9a266f0ce8bba7fcc93cf17e07b1e8ba9800b0","sha256":"e53f793a5b8ac48587ffa08d392fddc565ccecc537528b94eb4c73eecad02e60","sha512":"9b2b5a4af1575aca27873ad2ec390942cbcdb0d4df2953fa0a11091324c7fcf0e59a046bcb7a34de1e60f368aee1fca60bd057ec4317194560694fe1386d7e8c","ssdeep":"384:laKpy/JwDKlpqjyympE6Q+63SMXgpwJzOZnq38nWRRh:rpy/JxMymRzJqdqjrh","tlshash":"b3431166f5532169602fcd196d80bbea173f416fddd22bbaa433ee7486453c70b22908","first_seen":"2023-04-17T10:59:28Z","last_seen":"2026-09-21T10:22:16.83826Z","times_seen":82,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.fancybox.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.065Z","timestamp":1789986079065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.fancybox.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OBDY0UWFeVWpJSUI42sZ18FutYuJSqNya6nrhn5Te%2B9wBvP%2BpklKqJGc5WX3w2sCbLkilBYvZeZ0jNtwkTYIg5dx8vNMWDR3RFaQphFgH28iiG2OUp0HP3zfP8wWRgqGRPEa4MFg6nHDyw8Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a249bf5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7976,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"f254d22bdd12fde111cb7d938a0f8905","sha1":"8800d14f18ab8dfa773eca93d044caba560e085c","sha256":"16ab1e5147a6392b406c0f78d29ddf2dcb5b58c81bf845c482a7450e06ff4d8f","sha512":"cadac091e21375ab8c972e86b33593e08bf598411bdb2a9b19c12ded39d2629aabd9bd54428a9726f3769e0a9e224d26adb37096f4d489334ab1fbacbb72dcfe","ssdeep":"192:Vj9jhjOVK/OaaUl8PzxzsL81B89p7vlCeNA:N//FpQAp7vlCeG","tlshash":"e8e1b866f5f925bf11938272316abb193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.839478Z","last_seen":"2026-09-21T10:22:16.839478Z","times_seen":1,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/effect.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:20.266Z","timestamp":1789986080266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/effect.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 8\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:20 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yLi4xwC5NEFdosI5oxbxd%2BY91pj1CUt7%2FvImDTiPQDuZJzx8UI3kk9Ee8CErR2aww1ijISsRVtRNQnE2DIuQdm4yAtEvUTuJmo1sWjYYx57y0Vo5XN9U22agVT8%2BSJimxtgi5EOW0lD9%2BWCd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a9ca555695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7980,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"1ff60c983bd31d56d9c9621ddbe5cc35","sha1":"de62f93897f6614c5d0ac114a5078bdcfc7e646f","sha256":"f82a8dfbc7c289795ba553bba4cd87f87bb07d9354b1f7ee4c34452cd426931b","sha512":"2ae886e7ff3cb73d624175dd4a3d56ee2580846173779ebf41c9fea3c6895010f29b0ef3bcc4fb544cb7b4b5601278b83631dfdc1dba7f3e310f765a94af1bef","ssdeep":"192:Vj9jhjOVK/OaaUl8PzFzwL81B89d7vlCeNA:N//FZQAd7vlCeG","tlshash":"2de1ba66f5f915bf11938172316ab7193de48013daa608e5b6edc1750f8df85ee03244","first_seen":"2026-09-21T10:22:16.84121Z","last_seen":"2026-09-21T10:22:16.84121Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/style.basic.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.719Z","timestamp":1789986078719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/style.basic.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tz%2Fy6l1VYmf0DlFmwh1RtBNgIwVOr68sRjQA%2BZ9o52d58sRFxnwVOZoS7g2mCf1w9A%2FoaTts0SvIoyCubc3vR8yHmPIVpt1CK54ga2FEx5Z0EbVL0eteIP7Ich7x0S6g53fit1jfS2fcGLbo\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-5d91\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a019665695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23953,"size_decoded":4710,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"dfd41524b6248de298a86a7125f93e78","sha1":"4445d4b49249ad48964994acd0421843c9b49edc","sha256":"2d7af35b7be5f569339957a842b7ebf4041f6b9dff0e6ae917858f034cef7ff0","sha512":"cc8d816bd4a60e9e3189a0e37b57ad790d655de2607c3bd441e1d9f04aedc0c5a2f56bcc790907ab43f987cc52bbfff2ebe7fd982551c2509afc025e2cc6b453","ssdeep":"192:yusSlsOksOcwsOc3ragZlY4ZSwPh0TtUsnFkwVLwVD9IBmJfk8W4+3sdQk5FOsVL:30U0Bifk87JfogJ4NIDGHMqZUFZZr","tlshash":"e8b2303dda901145437b877a57e30b2afaa800632a02147cfad97f118fb96f545f0e8d","first_seen":"2023-05-19T11:16:03Z","last_seen":"2026-09-21T10:22:16.843039Z","times_seen":29,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/style.php","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.728Z","timestamp":1789986078728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/style.php HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ojLJWbyPevvt%2FO1DvJla2Htih0SQD%2By%2BkWXjLrBsG%2BsLzvlNsIMeiQ3RPMWBvAjU3JM%2B7HYvoxFs6QJuf03Gstdp0PhK%2BQQFZ3nsFIiNLBaY%2BprT78p3C84%2FnYJMYP3aRMBS1gXZoVtCAkvg\"}]}\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3e857a0296c5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":765,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"70996e97ad5020c2f52c41cd824964fa","sha1":"b79b24223133f9c5439619e47adc0cae651c09e0","sha256":"c7eb61780e38a2f1bd03971451b342aa674ffe93c9c55ea56e169854d1cf1e73","sha512":"50ccbb403cd3f66ca8a1d3be3be63299602c543bf8da95532ddb4b5ed9ce4a1cc4db6c10798a1701317b1628b37c89014072b3bb42b24d79673ede0a3243c936","ssdeep":"","tlshash":"f4c04c56756f240caa53168106c73b40d595c2764c4a49505b424697b0c6567c4c7364","first_seen":"2025-10-26T14:14:37.516488Z","last_seen":"2026-09-21T10:22:16.843739Z","times_seen":12209,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/qt-btn.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.751Z","timestamp":1789986079751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/qt-btn.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BC7Ok69c0bSIp6tTK8kEe4oRGqy6be%2BPZq8tNUNgjXeOHWD4xkuu7CC9HNro29aMp1iQ5Jti%2Fz59mKZt9jDlfUsqPLCGwSEE01HQjnMRwtocrxihPDJauGS9XKvBLqfUXi3mHpSZv0NTJ3%2Bt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a69a0d5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7978,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"99b8b85854054cddefcb670befdc6014","sha1":"2d55964ecf3e3f6bcd1047069ba5500a9833dad0","sha256":"2aa5ba45f42acf8a1a9206cb10de2c22fe1475da18170999e4d4858b4186ca10","sha512":"45f1d5296c6479df281c48a8ebc34e4fbbdd983fd722401e498c83dcaa71d260d1fdc8196f1b862a1868273b3e85c2f22f862fdf500f157f322500209db71e0a","ssdeep":"192:Vj9jhjOVK/OaaUl8PzKzsL81B89O7vlCeNA:N//FAQAO7vlCeG","tlshash":"bee1c967f5f925bf10938272316ab7193de48013daa608e5b6edc1760f8df85ed03245","first_seen":"2026-09-21T10:22:16.84455Z","last_seen":"2026-09-21T10:22:16.84455Z","times_seen":1,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/asl-results-vertical.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:20.091Z","timestamp":1789986080091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/asl-results-vertical.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 8\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:20 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LAgDhDt7H3FUP5Qn99mXqqmF86c5ISd4RG1UeyXvSX2tEhBtkO%2FQRPVNWWqMl2yG28W%2Fn%2FVUUaYvdxYBkjtdn1A0muqkXNKhoT5wr2PrQPmNBGgLdiTHIDm5r4yT9%2BjZ4kMkUU3VGNcL8%2FWu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a8ba3f5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7982,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"883757b96dd046072a13ebf588d765f2","sha1":"94eeb220048b9886cf9f3f857122672d2c47d362","sha256":"a24e07de1e50c70caa9d23db90efd653896ea6b59745a91d4b02f54dfc6958c9","sha512":"95dc64ba9fd10bce9efd4d77e1a7b8e2b7e6dd2aeec270821acec2c8f71e4b2c37cb94288b83fb78146cb9dc07383fd5f2126d7e937f5ed88064480fada08a3e","ssdeep":"192:Vj9jhjOVK/OaaUl8PzSzwL81B897y7vlCeNA:N//FkQAu7vlCeG","tlshash":"e6e1b867f5f925bf11938272316ab7193de48013daa608e5b6edc1760f8df85ee03284","first_seen":"2026-09-21T10:22:16.845968Z","last_seen":"2026-09-21T10:22:16.845968Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/favicon.ico","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:20.327Z","timestamp":1789986080327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/favicon.ico HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 8\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:20 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2PjvJqDg1cYSUrEF2QjQ1oSOBPd%2Fh1apdnSaeSRjLy4lcRRAj0KWuDMTfWXtGiqsNXRPk3iG61zyvXWDlmsffZ3LfaBUvRPD7tfFvS%2FOCaoZ86qmkI1TbQ%2FKuxncidwkhjczpOAApNSuazSb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: a3e857aa2a5e5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7978,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"238b0d8e9249aff970a8e83989300f56","sha1":"6f0bdaad751e127766ba1c3d17484f1f6e528e72","sha256":"5d4b51e95791b2632646dd955a9fe7e7a7d58b9c03c63d9926d4b6d1d422842e","sha512":"81a7d42584fd891d145f36e06a7ec23c37eda1edc5f25fc17d87f15e1aa7609d3bf7d2a5796bce1dee43fdec18a6dd1895da62d26b4afda7cdd0ee8f1f0a9fe4","ssdeep":"192:Vj9jhjOVK/OaaUl8PzmzwL81B89O7vlCeNA:N//FEQAO7vlCeG","tlshash":"35e1b966f5f925bf11938272316ab7193de48013daa708e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.847226Z","last_seen":"2026-09-21T10:22:16.847226Z","times_seen":1,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/bootstrap.min_1.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.712Z","timestamp":1789986078712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/bootstrap.min_1.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TLzzlXjsA5QYRXbCnBvZZdBpg6ZxQtacP7Gj%2FJoOo73hJwQvjtKxn3MA2%2F64fpk%2BqpCCh3rklEIfiMKfD97UvU9OaEdJJzKJGPhh%2BsiY6Rrpf8fOGKF%2BZgz4ZAi9FkPCWwkipzxXY1x42g%2Fu\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-1d1fe\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a019615695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119294,"size_decoded":20184,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (3543)","md5":"e0f3e8fd2979533341d277ba3116dc1b","sha1":"95999550a81c86e7524bd146c995934fdf9e85cd","sha256":"136ef194bcb7ca709606a4a3dbb6c9c52848513b9fe45dc504ad69399b2d08d0","sha512":"f4b19883404ad42c246c881fe5e84fecb809bac1d565d40583784b578112c22f3ce0b4db808283582d9c31abcbe1d7550ca11dbc0d058c300814037dd2e70318","ssdeep":"1536:PaAsXAUCm+BLnnqPH/sD4q63jjxCmyiPAwEpN5hxb:P9h4q63jjxCmyiPkjhxb","tlshash":"a6c3c761f19031957233c12f71d1fe9b2b2da152e5168e7af24b39a8cf8d2c90662f17","first_seen":"2026-05-17T18:32:41.914407Z","last_seen":"2026-09-21T10:22:16.848574Z","times_seen":3,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/esf-insta-frontend.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.723Z","timestamp":1789986078723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/esf-insta-frontend.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OR4fba4puaZpIFzYdZvxuJMNEWTXAG7dPAtE4mDoS3vkTsYnvU7ZfQ6TfBSJ%2BRGPRE%2F%2FfVIKJiAYpAI7fDMtHO4Aq11zY5aX4r%2F54HkWxcP2%2B4ENT3DMDWrmnwVrXbYKL9zpOixeqIASAYEj\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-a79af\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a029695695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":686511,"size_decoded":35305,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2698437ff71d9fc1286833ba458b39ab","sha1":"b04c4ad863cea05903e58081ab32ba58d056a0de","sha256":"fe6a6658877e74ceeb994acf41e90a91ce9ec376d2f1992cc545b255fda573bc","sha512":"cc7e1562caf880b6a8c67d1cc25db3ba1b86d9483bdd1bd94fac36059cfa2a495fd4f29eb7a40b8420eb8790546e53f9ba5d81a3750921d063a1d625567d42e1","ssdeep":"768:R+J839rUfIBHCJ9CxxyI1rSaQADHu3FLlVy/G2hP9NW2rbUNSGQsD5uSFRc0U+AA:R0PxfWbJCW1J2jyzs5BwO","tlshash":"64e4ebaab36ae2557d06158de0cb601bdaeae123ffc140fad5da840fd79f2c26057113","first_seen":"2024-03-28T12:43:30Z","last_seen":"2026-09-21T10:22:16.849221Z","times_seen":18,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/more-posts.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.775Z","timestamp":1789986078775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/more-posts.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IMTnA%2Fsw8LEpJsuZnxCqLfnV4F7t4A4CxDYIs%2B72VnQZZ8jRpKmuT17qDvOP8XRCz%2FInGg8bxA8ngsNR%2Fw0HDHI%2ByhokANU%2FJqY%2BusaZy4lLniLMU9PA%2B1GUqigl9hTN7s4Y9SDwgb6k5JGs\"}]}\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 09:29:39 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ec2f67-595\"\r\nage: 262299\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e857a079895695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1429,"size_decoded":1433,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"8a8fe890999a85001ba5b803373ac17a","sha1":"9c0df2fb7c3af9b9b12a408097dbc72c477432f6","sha256":"7dea98ef020696eac4d6a8ef2b5ac6e72ec56f4eef0b1d9a06eb0ac6b073beec","sha512":"a59b88e09e40b033df8b7b453acdcb11d3ed96ea75a8831040346e12cf9e61278225e187a840ce99a9d5d733d5047dc606bc33adb4a23840065d6f4814208c25","ssdeep":"","tlshash":"6421cd4c24d463dc07f9213ea7bf1afc7e72892374009941aad8c6863b1fa41e459d9c","first_seen":"2025-12-03T02:14:59.631015Z","last_seen":"2026-09-21T10:22:16.85009Z","times_seen":6,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.wpbooklet-image-popup.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.785Z","timestamp":1789986078785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.wpbooklet-image-popup.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OfIoZDXrx2YDh76eP0%2FJXG58SGGUcy7FE2wrZKL1xs6wHax8g65nR3nEUg1yqkkDfOg6bIpHNQ73iU5Y6Wdo2yTGyk%2Bm5Xqo%2F9a9fIJyH44Zy1LhIfPOEZKcq5fwvbsL9WcahAW1k%2FKsvA52\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3e857a089905695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7981,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"48c13974487123a5b124f00543660256","sha1":"8aa7cb34c805f192ae020f5a87176a78e9de0e2b","sha256":"30bc8df0e5aae0a0fd5ab071edada385ea9ae702925af27d6eedfb8760bd04a0","sha512":"31ceff5ac542b87a7064abcefb698ac4f6a9e33fe2fa512c90ffbd793e3215da452b18185189be8aa55a362104ed27acf16127c7ceaee008dee8f88115d2ba98","ssdeep":"192:Vj9jhjOVK/OaaUl8PzDQztL81B892t7vlCeNA:N//FGcQA2t7vlCeG","tlshash":"07e1c966f5f925bf11938272306ab7193de48013daa608e5b6edc1760f8df85ed03245","first_seen":"2026-09-21T10:22:16.851169Z","last_seen":"2026-09-21T10:22:16.851169Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.045Z","timestamp":1789986079045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Wed, 23 Sep 2026 10:21:19 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QuY%2B5F%2F6ESKqDVvRTyv4SRr3WmrB2IxeFUHv2ZqzDr1TNGt6qLELMuBzjGMcFWe3qwREGjgFGH%2FKfIvzc2tc4oeOTpU9nLSuCKOO5kLuqe4P%2BvWqWsS%2F5Gz%2BZszYC2Nc%2BbRVN8tFvzW5Hk9n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nserver: cloudflare\r\ncf-ray: a3e857a229ae5695-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1308,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-21T12:48:30.388516Z","times_seen":437119,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/fonts/fontawesome-webfont.woff","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.857Z","timestamp":1789986079857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/fonts/fontawesome-webfont.woff HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/lander/wef-privet/css/font-awesome.min.css\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4h0eKBQ4zSUcEaS5BPcaaD010trAHDPCpTtSHNhwyUidfH79DqF8yUwlQO2w7q2hnxo%2BmTxwtS7ECWPv8lhCNLQdxyp002dHiu0EFOyrgW6DX998WKGmUVRk0yzWXGvnoqv4%2FJkUeAU8VvAv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a73a205695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7976,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"a521b42fc78d1bb54b07219bd098be2b","sha1":"9a824bd303658c5eaa6023e400e0a8345d463483","sha256":"ae86a79d3406aab41f141a55784d41a8f2a07cafd13fd87fbad2d440c514b25e","sha512":"1b4bc0e7db4e103d57aaeeb2eb7c24147b10f0b62bb34dee658f644c694f02c935c3730e81c01fe9e80908bc1c9eef85497a49cf805d803c7445c99b9bd62475","ssdeep":"192:Vj9jhjOVK/OaaUl8PzTzsL81B89D7vlCeNA:N//F3QAD7vlCeG","tlshash":"84e1c962f5f925bf11978272306ab7193de48013daa608e5b6edc1760f8df85ed03245","first_seen":"2026-09-21T10:22:16.85301Z","last_seen":"2026-09-21T10:22:16.85301Z","times_seen":1,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/style.min.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.683Z","timestamp":1789986078683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/style.min.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=todAM3ThHFMi%2Fm1PV7FktAym8UkvXbYi%2FVlS0%2BrzPiEu1OGfkTQDF6ZGM9%2FfTAMWg%2BRfAuLjNqrkrVEM0ns07fq7ZIzt0MEou1TO4LSJivVYafQYCrR76Uo6ZLqTs9bCi5G9PivmLb7pj2S4\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-1c012\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e8579fe94d5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114706,"size_decoded":15972,"mime_type":"text/css","magic":"ASCII text, with very long lines (59458)","md5":"8c9f31823282e4e056eb0aa7fac262a9","sha1":"dc3b1a37381e079fda8db59c1a9469852cd18b80","sha256":"3bb38d0f302677ff4104564454f60f495133579d6e6dfb722b3de850df596502","sha512":"39f239c875550bf9a31254eed1f0358ea3c6309d9fcbf6005d8852843eaf60bc20b8626d169f810a6c71b7dcdb769b8512314b89ba1fdeea2cb3089be9d21ae0","ssdeep":"3072:HaeJuf7Qg5MG7H+qehvP0x2pUk44Q03Pm:Qf7Qg5MG7H+qehvP0x2pUk4T0O","tlshash":"2fb3625417b4dcf935ffa73a5e4ee258a103aa41c68a67e7e066d190618ca490cf3f0f","first_seen":"2024-11-13T05:08:51.610493Z","last_seen":"2026-09-21T13:05:55.957236Z","times_seen":34721,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/fonts.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.702Z","timestamp":1789986078702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/fonts.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fvrf4bF1Sh%2BgE%2FEUl%2BILUkCOStOzyGYqY%2BKMP%2FXU3hfL8NfU%2BGXKJnGdlexhUxs40cESRatZeBz90e%2BewRepKkCDy3%2By%2BxnMePxJcKieuhQZl3G5O7JLObDski%2FtgU92HmvQuIcywj6JwZ%2B7\"}]}\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ec2f67-fa9\"\r\nage: 118981\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e857a009595695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4009,"size_decoded":1692,"mime_type":"text/css","magic":"ASCII text","md5":"eaa96b9bad05920f483c9c1be08b483f","sha1":"e93739deb1de6395a91385892cc94682c7e79f5c","sha256":"e07b451e6a7571f0fc5291dd74ba50161e028b40a25bca3c0d34baeaefb00725","sha512":"2e58d157c5c9df198b5154eb8957785f1820f7e0596a5503626156c36e6e6ac28a66669ee70a8e27eee0d3649244c0f49e933bb3370517fe1906b2c929dbba7b","ssdeep":"","tlshash":"df813ae6a4fd18a14358e4c173422224bb2d9328de966c19d37778dcb7e2615e3863fc","first_seen":"2026-05-17T18:32:42.03554Z","last_seen":"2026-09-21T10:22:16.855092Z","times_seen":3,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/sumoselect.min.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.703Z","timestamp":1789986078703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/sumoselect.min.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qj5aau%2FHIfyHaVvBAV5z%2B28tBZqQlXLZt1TRKbOjVfN0KWnlnoThRY7Jam07DdPyObBEI58jAxw9d92oB9DREZDn4btdagj0PNO5dEIh4yUrjbPsgb9%2BV2ZNjhaPL5Zw%2FANpzj1L18RHNYfP\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-1adb\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a0095a5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6875,"size_decoded":2668,"mime_type":"text/css","magic":"ASCII text, with very long lines (6875), with no line terminators","md5":"2a40179237118346a5b8dc0998e54625","sha1":"85a90dbea1e4b7736884e3582f21b1351ed59bec","sha256":"164870fd7248cfe360a8b2df4e266940dfd5738e8da6bf9ae3a7dc42bb55fa48","sha512":"397acfa0e0549b38ab9002fca1c5f0c0ccb4bbb3a555ed2d2f4ba7683f17cbf7a4434f560969f29ba4ee50e38e31b65db6900a55ff400c4883738ecc44a0102a","ssdeep":"96:TuqUcXqUSwnEnDkgMUcc2HvHeinKuk+gffz7K5lToISRdayn86fqWQ5XgQD:aOiVq2kk+Oz7K5lT96dayJqFXX","tlshash":"6fe12f205fe0273a547fc2afb8e07bce50b56f2dac21124eaa9871acc7c745a555313a","first_seen":"2023-04-05T15:22:44Z","last_seen":"2026-09-21T10:22:16.856261Z","times_seen":366,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.sumoselect.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.757Z","timestamp":1789986078757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.sumoselect.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aEfpkr1cVY2aqnRd2iT3xqlUkb5aw1odO4PmCQ%2FrFAXuGCNZjsQmXS5GDVkdmEJf5YWZf56fZQjBo1KXTsn5x%2FC6Zhxoj668rNNZwO%2Fg%2BJKt1CFDIL3UBABwMRsant9gz1nyypB8XyMEBTAO\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-6b9f\"\r\nexpires: Mon, 28 Sep 2026 09:29:39 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262299\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a0597e5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27551,"size_decoded":8226,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"08cb3d9ca6eca4b861277f83a25d9cf7","sha1":"e8200c7ae6e08334c7e6faf32dff1a1e3ea3c9e2","sha256":"53a2d5c7ab1d03ed1dfd764153fd1684258d90bb4c23c10ecc45782debbe5c5b","sha512":"465f754239e9091bedb2a42fca40fe717f1a8c7fc5a516087305349f3c83e7caf0474d54c4d7214042aefd5ed761ddd6f1c5fec0d0d25ae28c588c4a98aa4421","ssdeep":"768:w8ei+c55T5Lvh3TuXR3c3n2TWLddHK1HTTtook:w505Dh0KAk","tlshash":"dcc2521629f22176443b30be9fdba044f225811f8145e9a1bd7c52ac1f53a1493faefa","first_seen":"2023-03-07T12:08:33Z","last_seen":"2026-09-21T10:22:16.85708Z","times_seen":447,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/qppr_frontend_script.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.054Z","timestamp":1789986079054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/qppr_frontend_script.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vl3iWQ4l5p95SCnk9a1DuT7HQXEdRReH1uB5NyFXDPr835S13yLcH7ldFz5K9BwErtnGN6B41zsIfHDf9dYb9AaBcCdlZGcs1Fd1keOhLjUGUHYEJaMqn6fQyF%2BpPPc1MiRzq0Ub8K08EHQd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a239b55695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7974,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"525e2c7e8a15cf04e50dd1328f6a7cce","sha1":"8b2e82bb435bf27ea0264be8ec14a3c25db579c2","sha256":"11ee56b48260ee02b6315631fccca1ac3166396e8d8adc62837bddf0cd5f4431","sha512":"75ab1cfbd8481cbd4b10ec1aeaa44f781aa628e14a45f68dddb7cc5edfdbf580742b303d6f78bb9941a20ac903cd02a31b74d1798a6fd83a0c55a69fcf0a6fb9","ssdeep":"192:Vj9jhjOVK/OaaUl8PzXzsL81B89P7vlCeNA:N//FjQAP7vlCeG","tlshash":"3fe1b966f5f925bf11938272316ab7193de48013daa708e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.857925Z","last_seen":"2026-09-21T10:22:16.857925Z","times_seen":1,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/qppr_frontend_script.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:20.005Z","timestamp":1789986080005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/qppr_frontend_script.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 8\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:20 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5MhzzAKW0WS%2FBrd0J%2FFXmqUeXS%2F4Xj5Lp8OAd3l3axacuvK%2BmeNXEOrPOJaYW7kICLLbHs00jrWU8HahXNuAhlQRsPYpFx6cG513GTUoUykULQRvECenxRqCLGsIOndW1O4OXpzd0wf0HKaS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a82a305695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7980,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"3d6200fece6a7710d5264eb660497d17","sha1":"6f3468da1a238122e635c3c9c020a5435eb2e3de","sha256":"f8b6823547146b2f128e24a18e34f2d1ec12b5a7a1e7693d92071c1f6e753f96","sha512":"4cfa1a11ea340193575d8525b44f45637fbc734157b0319d9e85008bf6feb9f30901c2d8da5e043708bdac5ecf15addcf10158b93f84eccfed36891861f52179","ssdeep":"192:Vj9jhjOVK/OaaUl8PzozwL81B89k7vlCeNA:N//FKQAk7vlCeG","tlshash":"ade1b867f5f925bf11938272316ab7193de48013daa608e5b6edc1760f8df85ee03284","first_seen":"2026-09-21T10:22:16.859232Z","last_seen":"2026-09-21T10:22:16.859232Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/styles.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.692Z","timestamp":1789986078692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/styles.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1dR%2B%2FbKEaHmURYXyG3SQSeh43Ef4CafTkfsmQzH9h2BC8f%2BwOKRr8Qu6hJHbrih82UQ72opaPVd8P9eQUh9cgQAt5Sg3FwtuqA8YOia5hdR7ipWa8GIGMzGYEDOLB1uP1T%2Fi5%2BqyKuxzWKF0\"}]}\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ec2f67-a50\"\r\nage: 118981\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e8579ff9525695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2640,"size_decoded":1760,"mime_type":"text/css","magic":"ASCII text","md5":"76e12144b6be9bc0a17dd880c5566156","sha1":"c57db768b452aea923a2b083162e9e6ffb98d2f8","sha256":"070edfef42e0980783d0acf8fa9ca6a9833b994eca13ffaa94e9a2deb47c92cf","sha512":"090a8ef4b25ebde53333749f44ba1318753ac3594d1c9d891c0b66664813f60584ed126c15d30478ff8a1e8dd30b0338ff3132331e5aa9d140213c23bec67454","ssdeep":"","tlshash":"ee51127066002c414bbf92d77eaddb4576ae3880cd1faf97b0c21a3c57785851263e5e","first_seen":"2023-04-05T04:30:10Z","last_seen":"2026-09-21T10:22:16.860744Z","times_seen":4429,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/all.min.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.695Z","timestamp":1789986078695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/all.min.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PV%2Bum%2B9M7b9HFxPAdbAH56amGqZABy29X0gSHB1DYDConMW9Da3fZp4xD4aoWyr3lm5UbHuSOH7sdDbv13ogzPcUWY57CwahxpKYqL1evRiOH8LsLG4dynnSy5HiXqWyvxbKCfCilaZM1PYq\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-dfbf\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e8579ff9545695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57279,"size_decoded":13225,"mime_type":"text/css","magic":"ASCII text, with very long lines (57093)","md5":"9a52692ddd1fd9cf9ec82697151de6b7","sha1":"ca49b578dd17b85b8329cf46a5477341aa4a02db","sha256":"51fa5a02e39e5e8a4cbdc31950367b60c895b6f5e4626c8544c73cd767a107a6","sha512":"380cddbc1c067c5ee252a58965397a34386af43a06580e7eab725bd9da6afa9ebaf2a1cfb5714de286c4ce51f29692def610f9eb7876cae31190b1cf34b0c853","ssdeep":"768:xEC319PizNq4/xeo8UHJPkQBR/oMQyYJrXA5CthZQzG:xEkPUE4/IuHRBBWfdAstAS","tlshash":"8a430cb8e54c01c9a732c44fbf82b2bc61b6f73de5914d95f00e591c2ad26a811c5fba","first_seen":"2025-06-06T22:46:59.823593Z","last_seen":"2026-09-21T10:22:16.861421Z","times_seen":8,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/style-curvy-blue.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.721Z","timestamp":1789986078721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/style-curvy-blue.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hjv7DBLyk2sIqnqW5uV050HPLkM6KTUdd8tM%2BRKMa%2B0Kah7nQIv18lDOdUc8RrPV3n6YoG%2B3zyGhzdOMjjvHQ2fmGSvycJiaZxlPrQ7QDgV8JSmGRY9RBD0v7V3jFpRg3K98PKp6m7U5sYVK\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-18f3\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a019675695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6387,"size_decoded":2005,"mime_type":"text/css","magic":"ASCII text, with very long lines (6387), with no line terminators","md5":"7eb0201892c985c454d230f15f46ffcc","sha1":"5c447fc9b3809b5bf2abd87c47d40663f786f3d7","sha256":"2f43834f6edfa66b7a0fdc9d6e2178047a399d6e5e5caec34af8212a65973a9a","sha512":"a80be0a6d1e535153d32328074d490d60cdd0a9d0e7b6ecba307a42e3a698811950fb23f80192cddcf59c527e81274969c539b139e35e4316893d0dab1e7509c","ssdeep":"192:QM1jgjbjGjRUmTmFmZmi6F/RmPmdmBmiFF4gooBkES4fhqcF8TUW:OoBTOyi","tlshash":"07d1cf34e563201eb21688673507ab5f30b98666e5034a3dceab29f4ef474dad277341","first_seen":"2023-04-07T03:39:31Z","last_seen":"2026-09-21T10:22:16.862088Z","times_seen":76,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/Rich-Web-Video-Slider-Widget.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.770Z","timestamp":1789986078770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/Rich-Web-Video-Slider-Widget.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7D%2BTh24HxBSVpFAWjMj3fZ%2BCkvk%2BBix4a4YWUz67enGdojmFwOrtPbRAwSL4KKyuwILs8XNfwIh5ayTr2dgx0hKSUKiy9fmPpCeyC%2FabT%2F3WcKkzZc%2FasAh%2BpBCFEgLRcKERUQJkYHn78Nuc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3e857a069855695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7987,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"5a3d3c685a2f8eceac4b6fc03a1435d0","sha1":"f1c7a3c6d506ac14f2b03acc4d404d0770f59431","sha256":"9c9570f03118c7ed5d08b9bc7349b35b113122f560289aec82ea45a2880cf510","sha512":"b5e3c0a98ad892cba1c31ec7ad3cb7a8dddd1a079dcb2c356928b1176fda8a236f8eb23664bfa6f6429c1ea45f1fa2d80eec2c17ceb1c00a5cbc0fc2be553658","ssdeep":"192:Vj9jhjOVK/OaaUl8PzD8ztL81B892B7vlCeNA:N//FGwQA2B7vlCeG","tlshash":"a8e1b966f5f925bf11938272316ab7193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.863081Z","last_seen":"2026-09-21T10:22:16.863081Z","times_seen":1,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/ytprefs.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.782Z","timestamp":1789986078782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/ytprefs.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eI4yhnWjxJMvUBrPxdYkw%2BJyVZ2217IxJMG57oZMqoImyRx83gy3djmbCwi1tyY71zwF8oaeJLAc%2F5SrcIZhwMWnn285nHPe8ftUdLKLogZCB%2FtgOHRLh4cExDGEiFUbyhTemqw9BWRssEon\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3e857a0898d5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7979,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"708b0622d2aa975d4095690e87ad5cca","sha1":"f590b03e1930fae5848ca4ccde92d677d708f933","sha256":"06d59604c797e4e90463849c1f124e872bf89ed392d673cf3aa6c0989e820590","sha512":"4df1059165c5e35c3e24ad54244cf3560cb578d5ff8bbc2cb0ae09b3e89d20a5a1d74b89db7410fbf7124f5c3bcf6d5fd3b95edd10549387aa524a20225b506a","ssdeep":"192:Vj9jhjOVK/OaaUl8PzDDztL81B892C7vlCeNA:N//FGFQA2C7vlCeG","tlshash":"c5e1b866f5f925bb10938272316ab7193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.864269Z","last_seen":"2026-09-21T10:22:16.864269Z","times_seen":1,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.easing.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.066Z","timestamp":1789986079066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.easing.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9PzVhYfG7vBhq3dAvJ7gaaIl2S7Ij%2FjRNwtPgqyNUABkro0LV5vkA%2BJMK%2FO1YOJmhaE4SVGxZYSFANXWjjqZH8vFFeXKQzQgOHM40z%2BRAiEST3zW70bU9HYlZGaMog1PQ2DDQrIxZbiafMYQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a249c05695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7980,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"dc0b3a30deba0ca5ad41151707699919","sha1":"623c8e91ad44f4e5fb4380294a81195920e99e95","sha256":"942a49113a4ff6022be2e7b64a4447a54ddb96d046f5f52b4492795741ff22ce","sha512":"6c5944eaa99e5974fd888c067e2035418fae75a98b58211b524d314b843650005851d5de659c2c436f90c69ad71560c679ac50a780a0d1fe33143ab85ec0c563","ssdeep":"192:Vj9jhjOVK/OaaUl8PzEzsL81B89s7vlCeNA:N//FiQAs7vlCeG","tlshash":"1ee1b966f5f925bf11938272316ab7193de48013daa708e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.865582Z","last_seen":"2026-09-21T10:22:16.865582Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/front.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.698Z","timestamp":1789986078698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/front.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fuWmYrVORGbsFx9eZs0FQXG6Fx4eaZxW3HwtRgndAOBhhzKhe1bxz1ocsAsF3FdhURaPG6HlB8v5iwgjs%2BaHLJWereJvxWdEFENQGGfLJXlQFMLnkrC%2FV9JFdpivtno3lDhH8dC8ncJqkXl6\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-10349\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e8579ff9565695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66377,"size_decoded":12597,"mime_type":"text/css","magic":"ASCII text, with very long lines (482)","md5":"692931dae51d02ad4288e841d313a3b9","sha1":"59f5e195949ce75fc13f51992c76696685203852","sha256":"701686c379e27f6ee56c1459e76e8199c4d8a6937be2ae5b2364ffa55f7ee954","sha512":"29d471afa0c55c0a312fae95d2c6896ee957e2767aecd6ab3f38a1b5aeaf3b0781484fc9a6409fc8c537b0378150b1018a4d2ec8954b04d700df5b28cc4361a3","ssdeep":"768:ay/fYGIKGzNc5PzF9nEwrlG/FOwNIU4flC0csFRfcFQ1GzlmRiJQ:ay/fYGIh6o/o5RcsDfcNzci6","tlshash":"47533f05b5a31c92f427ca181e6a6fd2773d140b8d849f393b74f9784f8939b8721a4e","first_seen":"2023-04-18T09:38:37Z","last_seen":"2026-09-21T10:22:16.867327Z","times_seen":53,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/richwebicons.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.709Z","timestamp":1789986078709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/richwebicons.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mVC3ZR144dBiACwwEmlTZW2kmfvmohQQGhvaZTa2wxxqqFzUmz5WN5TEtT2hnwnHN6yhpLPvhl9%2FyQMlBXs4pKrQShjNP0BFLzs1LbOzp8QOrXod1btf0PdE%2FU%2FXlmYRlSOmRDHgoR5%2F3rr4\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-963a\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a0095e5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38458,"size_decoded":7718,"mime_type":"text/css","magic":"ASCII text, with very long lines (350), with CRLF line terminators","md5":"bc6dd2d47ff3e95128ac6c5b928a97b6","sha1":"de438e93a28ca2acb832d3155f8fadeebd3c94ce","sha256":"910a93eb430c15df8f96424612b618bf4cdcb7005a5210dd303e867f16dbb426","sha512":"6686819220ddffeffd8747b85119a30af328a437835333ddf21998ba98e011f6c2f0ac80fa701f908c5fe01a9e7159d47632f5f850ceaedc7b0bd1b116029e1e","ssdeep":"768:BiOB3+JKCzHFpeKG12YzsLztwlrxi2I+cZGF2NOqtTwPsvK8LTuDh8XBv2vHxJQz:BiOB3kKCzlpeK0Z0twlFi2IjAF6Oqt8W","tlshash":"7c030af69d4d82904321e281eb6fe2847b8db4ac89425c5cd906389d93c369b83d73fd","first_seen":"2026-05-17T18:32:42.016849Z","last_seen":"2026-09-21T10:22:16.867989Z","times_seen":3,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/font-awesome.min.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.711Z","timestamp":1789986078711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/font-awesome.min.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6q1k%2B4XSPProHBcoO1COw8KOFJVNvvQZMzyLb1nf5jU0r%2F4bGB%2BbYshiw%2BQUdX%2Fg4pKMDZTCQOaASM1e44gSjAthYfjCCP9sdjl4tovOB8hViH36t6d09eUsZm6CQq3fJLhYX6SJVkUELju\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-6b24\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a019605695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27428,"size_decoded":7037,"mime_type":"text/css","magic":"ASCII text, with very long lines (27265)","md5":"906bc7effea07d2028803a9940820f9d","sha1":"e7d11ca368322532b6abb14e8ffba8008b0fe5d0","sha256":"3bce4bee45f4e80b28b5ca29fe1fdc86f9728e9d21c7c92f202acb25395556c3","sha512":"886f677903e439ca9c2440ce0b4f28dbb3b92b60d4b763f400aae5ca0b797c9a96a0e6f4e68fe386b77eea4473da1023df92cdcbcc73a00d12b3ee71041acbfe","ssdeep":"384:oi5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/8c:Llr+Klk3YlKfwYUf8l8yQ/T","tlshash":"95c230f8e54c01d66731c48bff81b36862baf73dd5814d99f01f690c29d22a522c5bba","first_seen":"2024-03-24T06:48:13Z","last_seen":"2026-09-21T10:22:16.868542Z","times_seen":149,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/index_1.html","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.501Z","timestamp":1789986079501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/index_1.html HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=20toePFfU0Dr%2Fy3SNK5qwd2KEHp5pDvSkN0w7P%2Fa5KRdipXyIwq147A59kAUTcvB8qsnvJIVkaS4qCrt93EE089r1AALyU0GyONWXZ9L3%2BDdorL0LSD5sQvyo66%2FeTfTIFB9oKVchVlzcsQX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a509f05695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7980,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"a64330e836645796423f686f4d5ecd34","sha1":"378ff85a29f6d18f077864a9adc0253d07258366","sha256":"75ebfd184a729e97f5717c2e1d7c574377b4896fd00346c4260c46130aab0154","sha512":"94c6a5459ef5f8823e8c7d98c594e084e5b7d29cef8a8bb7a80d6295bb2e9f64db6ebd9182a95549bb45e9c152db74600f1e28d128656e7e1c992affc2efbde3","ssdeep":"192:Vj9jhjOVK/OaaUl8Pz4zsL81B8987vlCeNA:N//FSQA87vlCeG","tlshash":"34e1b966f5f925bf11938272316ab7193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.869022Z","last_seen":"2026-09-21T10:22:16.869022Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/styles.min.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.706Z","timestamp":1789986078706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/styles.min.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kWPpeOiAXhzFKJjo9MSD4lluzvahJDrrogDIkKNCSAYxLGxweX8V5JZO96sc70LK5rXgmo%2FqQ9VdrN8Sv26q%2FektbzUF0W%2BEDAhBy6UKtACVlXqN%2Bloif7vC75tyQPhwXGhMPbs5UxVNnDkq\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-ab87\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a0095c5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43911,"size_decoded":7658,"mime_type":"text/css","magic":"ASCII text, with very long lines (43911), with no line terminators","md5":"b826f4641ab172380d3f89d633f251e7","sha1":"7fb38fdf3b44314e30d8447ef4465731cd206ffc","sha256":"b7b2ccd27cb828593dbc57f72824cdbe17e0d4c45aeb765c3f0d0380dd354f76","sha512":"6a11de614dbc166d833f9eb8f1235b4c1c01405032d9e181d4a437510c75cd93509f4650facfda48d46cae500996e5b838da83cb6315a9d6223249dadbc12f3b","ssdeep":"384:JDq4LMa0zwIaiAtcnckcrhcDrdyOKnbxmV3BWPsgnp:JDqciTA+cdraD8OKnbxG3BWPsgnp","tlshash":"6713fe315b80d134f01b912e6aa5eb9c273dc243e6231e6db762f764c3ca5c33525a9e","first_seen":"2023-12-04T09:40:22Z","last_seen":"2026-09-21T10:22:16.870316Z","times_seen":15,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.wpbooklet-extended.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.788Z","timestamp":1789986078788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.wpbooklet-extended.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=flKE1GM%2FVw%2FTyDSomtR1zEXfSCnqnjuG6q0nP7Dti3JjJRqp%2BVWzU1erQbnYNSr7MaP12eF%2FSKcNULOJrp%2FfNkYCV5KWmgGwtmp6vPWVCLs1j%2FIQqG4nGTw%2FkOxcpDAxTA%2FTjZsM738cH6og\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3e857a089915695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7989,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"7c13981dcff958b0777fa9294cbbd6a2","sha1":"945c9d27c6f51bfbb58cf5300fd5f16bbebfea7c","sha256":"fa6b3b28d7c3c889878e3a5778e086f96852e500d5013bfa09f032d91738d9c7","sha512":"ebd1853b9d57df86d52713ca7a75ff3794d7da96525df8ba5eb98dd28680488e6f7c1cafdce913d954c0997561ed66c61dd6534732827d6037cae39ac3b6c06a","ssdeep":"192:Vj9jhjOVK/OaaUl8PzDNztL81B892k7vlCeNA:N//FGzQA2k7vlCeG","tlshash":"cee1c966f5f925bf11938272306ab71a3de48013daa608e5b6edc1760f8df85ed03285","first_seen":"2026-09-21T10:22:16.870994Z","last_seen":"2026-09-21T10:22:16.870994Z","times_seen":1,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/style.php","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.457Z","timestamp":1789986079457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/style.php HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1RdVfBSL%2Fg2rA8cWUXgSUCPze8PKjubZnIAw9knQpAetPF1bWlgDLQM3IUZM4rJZ%2BXS5wRKiz%2Bkm8IAOatzH7HP5EVe6wuUbuYKlYbqe1nR2sXDAt%2FFYwyviq1kk7MLd96CyyRdV0P8g7KIa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3e857a4b9ec5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7980,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"75817b9d4b3a88227b9c426968c487f5","sha1":"f4912993b0a89fade6228b2459af7ffcff9d479f","sha256":"ee30b05a0f719386112f7003a0dcd5a954079a9e1b325c9f152ed4e759a879a0","sha512":"52be75577410b7dd198f99ac8134e76d6a494d4b84bc2161d0a6ae513e8899b3c28bd0d9016ae8f188174d485c4563aa9b10395fabbd2b444b016d6905def635","ssdeep":"192:Vj9jhjOVK/OaaUl8PzVzsL81B89B7vlCeNA:N//FRQAB7vlCeG","tlshash":"86e1b866f5f925bf11938272316ab7193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.872233Z","last_seen":"2026-09-21T10:22:16.872233Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/admin-ajax.php","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.724Z","timestamp":1789986078724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/admin-ajax.php HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WKuwcqjSl1rYMUeGlRx%2Fm7KN6uOX1bIxLDKfVFHTd9v0ztUHgs%2FaMXU6VCkoKnnDNuPgRYo21S9eSyTR3Y3LAORDnU3wVmu8swX67RGHX4B%2FN9FPa5Z2lOa2A8PPuUYTdhSBS1kGfcWGDLKX\"}]}\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3e857a0296a5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14728,"size_decoded":1683,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (684)","md5":"6412d7c45bfc306e2c9882e4bfa371d0","sha1":"b8ec7f5cb495b5fa4bf9b25b3c36a44388b4ee71","sha256":"b9620ff4c210a4dbf2d1ab2677c4c3577662fb58e948ba6e962082b3339705bb","sha512":"f772e8c0041539844221e2feee2176ddee029dcbdb8cfb64b802132f7bea5dd17250c0bace5f172c6df2c60495f777b73ac10abf1febddb6f509275cd98a0406","ssdeep":"96:wuMHIfEzfETg23M8r2nv2TKnHnYhmrGGcMqjcMqeR1cpcvcZcTcncGccGxYGljcs:LELECFHRuBeEfE6JfVOBM","tlshash":"f3626a4cf708e9143c4a022ec9c7a006dc55e523fbe266f5e6c0850efbdf586aa5361b","first_seen":"2026-05-17T18:32:42.063805Z","last_seen":"2026-09-21T10:22:16.873752Z","times_seen":3,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.wpbooklet.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.783Z","timestamp":1789986078783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.wpbooklet.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ma7x3PwoLrQRqMq9l8jVke4rdodrfPELk%2B7mCZb8BmT2A%2FLNE8fTdhpjI2QrYOZaL2Rsg6chTBqxkU5kx%2BfsYjfHZonj%2FWyz4kxL1DIFswFToRdDUTv5PZKTcX5ZV%2FE2m5WEDEN%2FKGiNUuat\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3e857a0898e5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7985,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"93287afd3ab65a50f8943561946ad2dc","sha1":"c64bd34d7c2b5278865628147cd94de6f4d76cb2","sha256":"e0519cfb7b2fae408014e90141ddaea06a3c4f117e34154e6b344fe3ef7ec701","sha512":"0bb81fbb28d2b4e78009f14ddd93f7a3c654b0b390d21bb8349a36c36443afa63bce29bd546f9153b823ae631ead8ce4f486b05ea4eda39aa5c0541a05127275","ssdeep":"192:Vj9jhjOVK/OaaUl8PzDmztL81B892z7vlCeNA:N//FG+QA2z7vlCeG","tlshash":"37e1b966f5f925ff11938272316ab7193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.874384Z","last_seen":"2026-09-21T10:22:16.874384Z","times_seen":1,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.039Z","timestamp":1789986079039,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Open+Sans\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 21 Sep 2026 10:21:19 GMT\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6193,"size_decoded":2263,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"7e0a00a3f6ab7ec04a66dfa361b7e9cc","sha1":"99de190ea3c393de80111d132e58abc20f988664","sha256":"64c18f81af81ab6b2ebc8598ed900f7023e0e8788bedd348ab41a92d76f80655","sha512":"6ed19e94e0438c18bf2c2ced27f712d94ecc74391b5239d12e2f300bee21cd9879377577e3cb86f385fafb469e93351e671af17d8bfd3e2231c0202909406a90","ssdeep":"96:ZOEba9JOEbaWDFZ8OEbajkOEbaFYOEbahOEbaNy+aZjzBrWOEbazubqGIFuV4UOM:a9KkjzFXCNqJCbqGIwV4jRlYx","tlshash":"9bd11f9000175050ab471ce627cebf34ee1fa2616040d07aabfd478aeddbda5637931d","first_seen":"2025-09-17T04:21:06.438819Z","last_seen":"2026-09-21T12:02:23.178192Z","times_seen":13261,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":4,"connect":15,"send":0,"wait":32,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/images/wef.png","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.210Z","timestamp":1789986079210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/images/wef.png HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mmtdeSibHFArGCwBwxG14AV64uVNwuxxeYBOXNBeJFlLg0RLgsKwRJl3HYorIUaqPllmIRd4EG1TL5pae0PMUiYCLfGYZGs7ohOu%2FVuDvBsiwIGOb6bTMYye%2BOvYa2wpt2Yuh5mUQiGSmG4l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3e857a329d35695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7973,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"891c60b5479b54f8608b8d60f50f1d63","sha1":"9623f4d2ff5ef74922e6782a41a434e3230d18d3","sha256":"978fdc103e49b40ad5d2ebdf188f258d66cd50026cd1b44c0f1df04c687b4c48","sha512":"9115bdc30240203f5a8591a4dbaa307b3920a88f4ff81bfd4e7c2023c431d0e901fab57318d0360dd1069bc5447284cb44fa7f51edf0fd88eaf8735a880090a6","ssdeep":"192:Vj9jhjOVK/OaaUl8PzNzsL81B89t7vlCeNA:N//FtQAt7vlCeG","tlshash":"07e1b966f5f925bf11938272317ab7193de48013daa608e5b6edc1760f8df85ee03244","first_seen":"2026-09-21T10:22:16.876442Z","last_seen":"2026-09-21T10:22:16.876442Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/frontend.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.688Z","timestamp":1789986078688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/frontend.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bhP9LQwOIuPojJhgJUBwkraEKXLPNWPfowwguoOZv7OUIL3w9Pss8aQRzIC6mE9J92%2F2ofesEwNEmnWz5wOmJHLUZYxF87dzZ6%2FWr3CQCNxIADoW8VzTONxQl7yOclDX3KVlgX%2BAXF7ilbTA\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-9b4b\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e8579fe9505695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39755,"size_decoded":7076,"mime_type":"text/css","magic":"ASCII text, with very long lines (39755), with no line terminators","md5":"9e8760835e62b8da26fe75ccc479817f","sha1":"92cd4e1a2e3b16923b525eda41b3c9b54211688c","sha256":"0f0c6a79845359c78d4aa4fe1120cf2d3b5b16f6b5090d5172108f07dc5abfc5","sha512":"b15bab8a86becf7227a81273f1553f641c0683e8ddcc3f38c13e8be1384ce71c4226f23936266f6bd0f40f5b9f704f70aea718bf03c21a2d66d8aaac05b4b3e6","ssdeep":"384:BCRSfYefJ0YkeJCrG88fcvk7dI4/rPryAf3N:BuefJ0YkeJCrG88fRxPrrN","tlshash":"5603ed10cd44823776f6cbe976d06bc61771a232c0c7577ab8fc6975c6658213a32ace","first_seen":"2026-05-17T18:32:42.103872Z","last_seen":"2026-09-21T10:22:16.8774Z","times_seen":3,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.mobile.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.760Z","timestamp":1789986078760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.mobile.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQsLiLuy4CFpXsLbEmxbgWBiERhAqbVJjK84WPNd7AdUacFMkL8tubXWvBn3Rz3EJWpv3CBFH3Bi4Rt5TMc1ld9ju0tKTiOOo02TwEvwIvVhpq46fMUSoZpcEUrfFTFxx%2FAxXHMgaBOhXOUa\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-6255\"\r\nexpires: Mon, 28 Sep 2026 09:29:39 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262299\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a0597f5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25173,"size_decoded":9961,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25075)","md5":"793faade23b48baa5fcbe7f46f10a53e","sha1":"cfb996410eef2f416e524ec58875a11bdad59a38","sha256":"e911254049da21bd34b37115296feeaf66a55f447803f865b0c05988729341be","sha512":"c0a6311357d9a10941e28a44324b6bbbd0f37c4fc8db0ce320ae3c79929567f6d4219d65d0afa57b081f331a6c1137230115049333db1c19e48e0f3c30cb6abb","ssdeep":"768:+snRqF0p5XzSmxVpiMVhUgua7ldLPbfHzlwbJQUe:+sI6amxVcWLUQd","tlshash":"34b208ccf2817013a9e731b6e12f064ab1b718aed50f4040b069cce56d35a68662ffbd","first_seen":"2023-03-07T13:45:20Z","last_seen":"2026-09-21T10:22:16.8782Z","times_seen":96,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/rtbs.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.780Z","timestamp":1789986078780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/rtbs.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MAHGeGu7Tm0BfOzrnYgVYbHq6s1xc5IhUgFcnhF4l9adIm3q906xI7TD7WcNQD9x9RHzMg1%2BjRc0jFcZOewmt0Mfa4%2FcKvvhIv5pFO44o4XvBX8eFdky4WykN68XtqWl8%2BSdXxt8qlog3Kaz\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-11c8\"\r\nexpires: Mon, 28 Sep 2026 09:29:42 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262296\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a0798c5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4552,"size_decoded":1673,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1572), with CRLF line terminators","md5":"77242b3a7695ab1ea0518441a9366b2c","sha1":"418171186c31d03dbf3183508a79b1f57149245e","sha256":"35e2e71f5813f085dcea3427d1a5bd85a7ffbe6303d5b010b8fc822a5ea9e136","sha512":"084002f9250bd5f10a18de600699fd9e126c8c100d5cc100d3c6619baaa88314f8375d1dbbb1a6544508ad884d050fc9178386de710f9af0058eb6fae021ac9a","ssdeep":"48:32JbXf35ts865Z657/sz657asok5stsRtszdMlBcxJf15aCcJ/jbVR1ts865Z65a:3G/sz0l275av/9hotcT5k","tlshash":"1b91f48ff05152f760f36dafa027928074472e629581cb62f42fd1320daba456736a3f","first_seen":"2023-03-07T12:26:52Z","last_seen":"2026-09-21T10:22:16.879091Z","times_seen":302,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.form.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.050Z","timestamp":1789986079050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.form.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7J9tQ0S8IZZ11tDxUiyKrhk8vGMmwskaYHhVpjBygcpAp0iK1VFaNneVHRh8oPC6Ymx9p7r9%2F3sJhT74z5Q8AUf8SwdlxOL%2By%2F6xtqvds3GJtuR2Xk3cARhGUwxH%2BKp3S%2BRtqPE3zvNX56Gt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a229b25695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7982,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"a4c04203df9e48b0dec6387bc4297f7f","sha1":"4eb109a54d91a11a8945c86000155a709f186f02","sha256":"f21c2c831e44cf9830b6b844be2f80246aee1b75085d762d7cc24e4baebd48d8","sha512":"a3b7c5d20d1a058eaf91f80417482126865e7b39aa7dd4fe96db6eb3c52bc880498d8fbb83fd7e6e70d0f2fffe2a438f7839c201b505b2a51e5424a1fb17bca5","ssdeep":"192:Vj9jhjOVK/OaaUl8Pz/zsL81B89T7vlCeNA:N//FnQAT7vlCeG","tlshash":"0be1b866f5f925bf11938272316ab7193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.879575Z","last_seen":"2026-09-21T10:22:16.879575Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/wp-lightbox-2.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.056Z","timestamp":1789986079056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/wp-lightbox-2.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W8He5%2Fx%2BXflNWpKEREaAZOXRihgtzds65bkJuXQX6p%2FUBIsudRXm5OFOM2LV234HSwNJz%2Fitk1WMiYlG%2Fl0iUKSsC4CWw54zGXmih%2B%2F2Bz2rTrm1K2Ago7DPYLbHIZTHQf5qIjBmV5wiwO3H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3e857a239b85695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4561,"size_decoded":2608,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"ad980246a1f45a67db98b1833a4fa1ce","sha1":"a57b4458e20e3ff4786478e2cd4c04b65fe869d1","sha256":"406cd67edabce5becd27964212798b47a0f32b763f9b1884ecd6413dc49ac2b6","sha512":"b4317029574b5143b1f61b1a4e42fabb8093057b1a89ab12c31da084e4fe5dbd3da6c2006d696701a9bce0fa7465261d016bfa12ca65cb47386e4a4bff527fe0","ssdeep":"96:1j9jwIjYj5jDK/D5DMFWC89ZqXKHvpIkdlS7RJlvaQxvbK:1j9jhjYj9K/VoWnuaHvFdlS7vlCejK","tlshash":"e8917326bafd217e10a3816226fc63497ea0c553c6a705a076acc2391f9ff59fe171c4","first_seen":"2026-09-21T10:22:16.880798Z","last_seen":"2026-09-21T10:22:16.880798Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/wp-video-lightbox.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.448Z","timestamp":1789986079448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/wp-video-lightbox.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HvdnYsjm7%2BinPn0NkRgBY8KEeqdJZpXFUVqDnLS5yOMUxagHP5lpXrz%2BboQrrG5cXeZ%2BKroFh2k1EqkBYJqrHs4cUShHWkThnarHvuFhFO4eVQxNeAACBUet98uqvlmxdPHf7CvAR7VGZ6iE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a3e857a4a9e95695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4561,"size_decoded":2601,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"0aa53813e49bd3579a797b0be8cdde8a","sha1":"6b64331b20d4de1f11e76788cbcdd0c1d0cece9b","sha256":"2e971753099b01146fc20634f638e3637354b63e46e7bc3832c67025d5a41117","sha512":"67bc400616eb1de84abf92e082ce9b4443a9086c43e7858b37b7e72f9c62d27a10ffd252b64b4758f4ba6f570af4a6eafb3ece2e6edc1b38d5be04b2d3d75d73","ssdeep":"96:1j9jwIjYj5jDK/D5DMFWC89ZqXKHvpIkdl67RJlvaQxvbK:1j9jhjYj9K/VoWnuaHvFdl67vlCejK","tlshash":"99917326bafd217e10a3816225fca3497eb0c553c6a705a076acc1391f9ff59fe17184","first_seen":"2026-09-21T10:22:16.881968Z","last_seen":"2026-09-21T10:22:16.881968Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/bootstrap.bundle.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.752Z","timestamp":1789986078752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=evRgHSUgYXrtd5aKFlr87QmfvAW7fPG3M74YerSkRpIBTDaf14aI24J7g8yJ3Xzs1uFiDK1tdLQZK2DI5LkdB0tuzGMyF5SGOhRzRVrYYy0DFQ70%2Fi4ar6G%2Fk3UvSdDXnH7qbm32CUdbD2Vb\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-13b0a\"\r\nexpires: Mon, 28 Sep 2026 09:29:39 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262299\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a0597b5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80650,"size_decoded":23536,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65297)","md5":"50703ebfc29f534ad6e432826f1c25e3","sha1":"f19941f9fd95e8a9bdf9db599bb3d8714d41465a","sha256":"4d371899aba195b1f0cba3a70de300fb5b327a322cfbe3a30d77af8456d8494e","sha512":"663c83d63c78a66e169b78f4f77148dba460cb3f2be34e4b2ef6106e6b44ab813a886f12e936f9a42080c71eabf8bee67743d508b97e0b38419af75e6f87ec2f","ssdeep":"768:u09+zQtNHVGCcWTb7zTuBV4KtkSsMtJQ5C/xd7vPn2JNtFiH5jsHaikKrjRM+PKv:ua+OOkSs2Q5CXnFOpc6RvFvVGGZC","tlshash":"6273d64a3244b47202afa167907f460fb33768daa50e811cb55da8ed2d7cd993267f3c","first_seen":"2023-03-07T12:02:49Z","last_seen":"2026-09-21T10:22:16.883476Z","times_seen":386,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/jquery.mCustomScrollbar.min.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.704Z","timestamp":1789986078704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/jquery.mCustomScrollbar.min.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hm5AEyC2TkyoMMbedDhCxliNrjuGNXS6CjrPrn2WPhn6IDLB6cB2ohCjTiVydaLew3U4770sM3k5xJ1WQuUSU8wsZkN920odIz9mSD7E42SrLc5iVVQil1Lvhe2QN9gx%2FbiuVL0pdmgqLXZy\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-292a\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a0095b5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10538,"size_decoded":2015,"mime_type":"text/css","magic":"ASCII text, with very long lines (10538), with no line terminators","md5":"3c489a5838974a895d92eb97d5ede466","sha1":"da6606f86b9a7a7311c85d3e28a4a2725af6d337","sha256":"9d51f16d1f006e9e72942b8a8f92384d5262e22f5cbf6bd0eb5a18cd84420064","sha512":"67fe3b8ba1bfa38f1d102c166cea2702d64ff26556458fa28edf72187f26ca7591a0379d873f80cfc5a973d235732f1420b80da5cd02625b063611392ec1a886","ssdeep":"192:C2I6ayAx+ZT3PiW/iPMlNo5PXz4g27A4gJS/hce2tQHpGK1MnQ:Cgb88","tlshash":"7f2259952d4236eff29f842977927bda63f8374b9252543cf0c128b4ab8cb769436403","first_seen":"2023-04-05T15:22:44Z","last_seen":"2026-09-21T10:22:16.884177Z","times_seen":366,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.min_1.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.742Z","timestamp":1789986078742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.min_1.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aavr2yOE1Tmxwn1egtXW5FDb5AIpzjxkxF0tdKjFwfF57FSLpmRvN07Ftr%2BRXlRlzZLC9RmbqDWwLSrNPeAjMPl5KyylA4N3mo55XCYOli7mo12DvfvHn4VWI7Mk1E1Nxy%2BZaG1aKCCU5Pa%2F\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-15601\"\r\nexpires: Mon, 28 Sep 2026 09:29:39 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262299\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a049745695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":31224,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-21T12:48:03.551098Z","times_seen":1064591,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/anything-popup.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.749Z","timestamp":1789986078749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/anything-popup.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4qqWwH4eYeE7%2Bk6pbaKzxSuBFZmASvXaXRhkRd13ml6keNF2tBhpOFB5FKwupnqEcczsZLv0iuX0fBnm0%2BYiuFsKpV38FhaAHauq1I%2FRnaJ8kjTUx6%2FOEklAgMiQY8OABnDFGYfL5JOcJlpt\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-1c96\"\r\nexpires: Mon, 28 Sep 2026 09:29:39 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262299\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a049795695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7318,"size_decoded":2667,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"759a503ff7276fc10ac0d8fc20ad0c66","sha1":"9ccaaf08440cceabe35c678f1daacd35e35bed89","sha256":"3a77e72cde3ebc269607c252f036b34e218f5296c9ee3882f9803341e7641c6b","sha512":"bc635339896ad3d7bfb796370d734514c04a76b48611e7770ff0e2fd7f2d57c4277de4a746f86e00dd6f5c359d9ef2d2d5501030fedc5574e0ed2d99ead4852e","ssdeep":"96:39uJdhx2nDbwpwVcVRtGyFynGXTp+vcFjA+fOzNNWPxf:NsfODbwpwqVRtGyFyGjp+vEA+fO2f","tlshash":"c0e1caad21c56077a9be232cab669385fb36005326876424be1d4cc95fb0d922635ffc","first_seen":"2026-02-03T11:28:39.766968Z","last_seen":"2026-09-21T10:22:16.885513Z","times_seen":5,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/asl-results-vertical.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.060Z","timestamp":1789986079060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/asl-results-vertical.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8grPMRWG2rtDDIj9GNLRWy0sgiiEwCSItss9zl1ivghV3Wflm6USpXxt8vp4SwSVaYpos3gT1v1AiT3H83u0In3jz1KQFim1YjmGwru%2BMh1Hz01cJ8dgWNWZPcRmvrKuYc0pfU5%2B2E1l%2Bcvh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a239bb5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7978,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"04ea9f1fe7fb28368539c5c347e7833b","sha1":"0d6d29273299e9627cbc38aabb90f2492f1cb7fc","sha256":"25ca4d17babcfa86f7b5b9d238d94084f66656176de9a5935b102ba1f905b6f3","sha512":"9da8d56c183faaf0c4d393d29ade3eb26dbc75d3986898076d8ce0b4fa4b16994c862266bcf5a31d653aed320ba7ecf4261aa00a21f5ecc40ac595d2dbdbe33d","ssdeep":"192:Vj9jhjOVK/OaaUl8PzgzsL81B89k7vlCeNA:N//FqQAk7vlCeG","tlshash":"35e1b966f5f925bf11938272316ab7193de48013daa708e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.886209Z","last_seen":"2026-09-21T10:22:16.886209Z","times_seen":1,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/prettyPhoto.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.675Z","timestamp":1789986078675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/prettyPhoto.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l6%2BfDEwmZWXgQ43kM4BD%2BldoZFyMNCuvyk%2FDDiffqVS8lVztput2zZpT5VjJWfU6oKbQtI21uycaIIibU9c0Szv93HLkERWBL8bOh5e4CGGnqJ4D12WsA8c4g9kn2ztPo2OMYVwubSn4oFm8\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-456d\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e8579fd94a5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17773,"size_decoded":3485,"mime_type":"text/css","magic":"ASCII text, with very long lines (402)","md5":"6ebfa58c603af9b393b1c771f278b0b5","sha1":"1bd96c4c78a027f7770a25ff0cb86d3e0d9a60a7","sha256":"4296ed9881153f4f329e17b1ca4cb38b4d67996e30140394304ab45d3715d40d","sha512":"85a6cbd7d41f850de9110945a961930c780312d698873345db6b7f8b9d6a6457f59d9bacc3ada3bf18b36e58f386687659824c60d9b60fd633c04537f7aea4fd","ssdeep":"384:97ylLjg2O2nDD4h6aS2JW+Tw1yG3BvHP/aF5qBfcREPMHvBQiTSIq+KauSORjD4y:97ylLjgpQQSIq+KauSOt","tlshash":"a482042864dabdcfa23bc134d09bea5ad50dc01bdb81af7da2fc887e70d93185535285","first_seen":"2026-05-17T18:32:42.158211Z","last_seen":"2026-09-21T10:22:16.887697Z","times_seen":3,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/index_1.html","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.748Z","timestamp":1789986078748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/index_1.html HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G7EZy1uzCzAMZJ0ppWi%2B4I2ksDcaCZKUwQA2Oq2ZjmS6xEZ9rgy1CbRPB7UrEWkPGkdLt0BUKzPADCS47cxt0yWsbVmAhUJ%2FJJWAYUv%2Fx4KxsOR7CNdpzX0iXTE9iPtb2C0Do1WLaZVQa3R1\"}]}\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3e857a049785695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T12:48:33.167431Z","times_seen":18583610,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/drawit.min.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.699Z","timestamp":1789986078699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/drawit.min.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lq92qh3R73CIt1kZsvbhUJxlrb%2BoKlF%2BUQjM4yCDiXCCxk9iJQgevTCeLgOuA%2Bq%2FifytH%2FFFabILjibz841NnEajhW2TvwDyZBgANt0wxR18NoS%2Fbnlua5%2B2xF4hdYFP1Oj2RRhNzo0d%2Febl\"}]}\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ec2f67-4fa\"\r\nage: 118981\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e8579ff9575695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1274,"size_decoded":1351,"mime_type":"text/css","magic":"ASCII text, with very long lines (1274), with no line terminators","md5":"9c7604e080bc5f10493ac569ff88006f","sha1":"d1f5e96722b527de5e3fe466d6900d781c459f9b","sha256":"e555cadf3f5b681cd5cf224601fa4e2b5a082c27bee14f6b83ae72bc64917b02","sha512":"5c1abca75945a2c5d750e7bb1198c27938fcba97423a408e159181a1b944bd0fd4133e70327ad3ebce4bebad04fa43899a94db75b0b53e953068013bbe0ddf69","ssdeep":"","tlshash":"432120339a01615cb81bc233e5b88ac811b08891b2131e6e8727bd62d6bb0f7d521b3c","first_seen":"2026-05-17T18:32:41.936288Z","last_seen":"2026-09-21T10:22:16.889246Z","times_seen":3,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/bootstrap.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.773Z","timestamp":1789986078773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/bootstrap.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qTWzFpvJUYeWK3%2Bn0EozT7w3hw2DOzBR7KaX9Db0pgF%2Bu6ptC89gWSvZ5CQDVf%2FeGM0ISafvv7CoNNv2ZyBiLGd9UepRseLKw%2BE2C%2F%2FS%2BYR3qFYD716IfBujRZp3hayn63bZKBKEywgnrtxs\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-10563\"\r\nexpires: Mon, 28 Sep 2026 09:29:39 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262299\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a079875695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66915,"size_decoded":14521,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"040b6de4246a53750c4c9759c448d0cc","sha1":"c1c7ad5b71ae39b1af449145e244e0466fab5fab","sha256":"66bb1812c11fac095c5875e15c8c050d543d9f85ac7803d5241d339444949da5","sha512":"a8b6e75c0564548e610f073e609f8d338812809bac328eb8c725ff5d3cfdc86845aab3f9a51dc19c5d94613fc16a0716e13d21d1f178e9ea488d574184de46cf","ssdeep":"768:LzBqzCkWDVx92Ti/A04qm60IhekfZjzqtw0PBVcDWp8s:2WD/icekKPToWis","tlshash":"df634f167bb420a18b5b70ba8cdf510c7238911b554bd4683cad97d06f50b38a2abffd","first_seen":"2026-05-17T18:32:41.97359Z","last_seen":"2026-09-21T10:22:16.889935Z","times_seen":3,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/qt-btn.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.037Z","timestamp":1789986079037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/qt-btn.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SwxFlwWwis9wGYC8XvC85QViLSlYeZ5JLAZFUa0KAo5hljxLmXUk3Uy3JpPDc7Qf3N8FIfV5w2nMp7KseshMj2T04VuttCVHySOiW70VbRmlyeKAl%2FFa4lrnl05i5%2BAFwKbdgz7OnIxPneph\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3e857a219ac5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7976,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"5eaf354354451d086333bdbc9f063a8d","sha1":"7eba785d8d6f43aa26af182790713fdee185ed4e","sha256":"f903daaec3263ebc8414a0d575ec4172039bfc9f896ff675ef068918b562febe","sha512":"e8c1f6f6ffc891301df602804833827366878fe31f8aec75c60eb5f60ffe5131477fceb7c84e6cb51059e140ebdd3dc96e25343946669305a0b8993f36d9c95e","ssdeep":"192:Vj9jhjOVK/OaaUl8PzizsL81B89y7vlCeNA:N//FEQAy7vlCeG","tlshash":"36e1b866f5f925bf11938272316ab7193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.89062Z","last_seen":"2026-09-21T10:22:16.89062Z","times_seen":1,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/wp-emoji-release.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.793Z","timestamp":1789986079793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/wp-emoji-release.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RPck3xu8KgTG5yhGQ0xbMaampKs6LsUI%2FBWVG3Cy5nwoCKa1hTN92XvHxyTPnSWoBhxaHpwcAwwdQoacQWbh7loBuhggfCRXmVAG%2FXZddK0uwywMhiMsj06GQeNmPwbUQ3M1t40E6SsuXxgF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3e857a6da115695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4561,"size_decoded":2597,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"e37046e84d23fd53798e8b9faa559cea","sha1":"ebeafca2380cdb7d8cde8eb4bd3655b392a7696c","sha256":"0a40e03fb912e9d15f3f80ed9f024cd50306e5c0e540fe9356ed2850612cc5c3","sha512":"b5be56e900d2d69e62542e98d22032f244719178698263437d5e42183c06e25c6e356ca451b0c9bcc85d2e52cb2a400cf352bdbb8451ebffedbe43613ce831ff","ssdeep":"96:1j9jwIjYj5jDK/D5DMFWC89ZqXKHvpIkdlj7RJlvaQxvbK:1j9jhjYj9K/VoWnuaHvFdlj7vlCejK","tlshash":"ef917326bafd217e10a3816225ec63497ea0c553c6a705a076acc1391f9ff59fe171c4","first_seen":"2026-09-21T10:22:16.89277Z","last_seen":"2026-09-21T10:22:16.89277Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/fonts/fontawesome-webfont_1.ttf","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:20.043Z","timestamp":1789986080043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/fonts/fontawesome-webfont_1.ttf HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/lander/wef-privet/css/richwebicons.css\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 8\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:20 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SeT8hAomENnfx0kZ%2BEI8v6obTY3ISgG0nLobtdGbC0oo5khqatjePQGd3FqdHQhVFNX5HXBTwUDCSWqbeoqdIkCiZnZ1WMo6UYXIM8ys8xesr7WhTqc4ul%2F1hVIJVd1L57ZLnsQCar17Sh0O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a86a375695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7976,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"3afd94f4a966e8de19157719acc390d6","sha1":"ddf19a6fa2a8fb6d01b2f0d3331c3bafa100c8d3","sha256":"801315081cefcf79ee06f51abcdf7910726b7afa6a4e04afed8da970f6fc96b3","sha512":"ada0b51ccbad84eb85162612a1a8b0f3615a0648b1558066fbe3cbc45861765975c3cd36e4e362e90843110461b5870999f61533dfd4053c9690438785fb2987","ssdeep":"192:Vj9jhjOVK/OaaUl8PzrzwL81B89D7vlCeNA:N//FHQAD7vlCeG","tlshash":"10e1c963f5f925bf10978272316abb193de48013daa608e5b6edc1760f8ef85ed03244","first_seen":"2026-09-21T10:22:16.895088Z","last_seen":"2026-09-21T10:22:16.895088Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.fancybox.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:20.148Z","timestamp":1789986080148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.fancybox.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 8\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:20 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gRej%2FyjKmhS%2F2TaukLFszy7WJM4gW5y3gz8A0Qk0E%2Fpdjttza1LgQBX0Qp9%2Be54%2FJ7sbWZ67WaHPxgbsBPVWtjE9cR99QDVROAjoJUxjt9eouHwPx5pMkSTqxIMI3FhARXacUv32I6QJAzY4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a90a4a5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7982,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"075cb04fd4338cfe284351a6ccdf6069","sha1":"af4a186fe9e7e223c2332bf13cf79338a6f4b04a","sha256":"d8ff04efb20e20b9f7dddf045c180d921a73304d8e322996c56729c3c38cb9b2","sha512":"27f6af71aae72aebca5f674afdad892f132b8251668983666cd34ddd5947be337af9e980ed354fe39a09702ceaed19fe7841aa8d14dbc9ae4aba8ccfe550af50","ssdeep":"192:Vj9jhjOVK/OaaUl8PzHzwL81B89D7vlCeNA:N//FnQAD7vlCeG","tlshash":"dee1b866f5f925bf1193c272316ab71a3de48013daa608e5b6edc1760f8df85ed03284","first_seen":"2026-09-21T10:22:16.89728Z","last_seen":"2026-09-21T10:22:16.89728Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/pdfg-front.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.701Z","timestamp":1789986078701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/pdfg-front.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1p7V%2FMoXa1EJDg7lCWu55LHZTIywHtneHfNkxDTLN8Y75y%2FMe8clm7a14KYwRq0FzsxYIVoDFLCsHgXUknG7tkZVDK%2BB1tFKJzLUCCI6NNxl16B%2FheDI6kwipHMyIcWout08P8wV9YkT5kUL\"}]}\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ec2f67-ff\"\r\nage: 118981\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e8579ff9585695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255,"size_decoded":970,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"89b81aa464343b129cf605ed7a80a64c","sha1":"b9fa98dda2bb3e06e2197b9fd3cd2de4e4c6f3f9","sha256":"329540fdd249983b7f6fb1220b8912c8d57a5b8de968498e25117d077ba6d71b","sha512":"189813becc32766985a8a8797566075e2b5c4111954064be3569909d903f0aa6116ae08e851e7c2e206247f0b43d0abaf858d099ac60f44c2771563ca8f63c14","ssdeep":"","tlshash":"d3d09708c2a4324be526850ceb891a00cb96a44352e3321d7c884c68ef7d22cca8278a","first_seen":"2025-11-22T23:41:45.064459Z","last_seen":"2026-09-21T10:22:16.899737Z","times_seen":11,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/rtbs_style.min.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.733Z","timestamp":1789986078733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/rtbs_style.min.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5NiLVZsXsQeMwirfZEs%2Fgc%2F0D84qyuDLAnr9hcwpC7bC2%2BDjL%2FInCJuXiiwDD6oXlbF0QIrJq%2F1tR%2F1jK75MBP7PsHZ50dMikbwEoYMtJ4MHNjkSY6Y38rvV3F9OZSLNi1%2Bv%2BNVBymVKLlRw\"}]}\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ec2f67-6b8\"\r\nage: 118981\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e857a0396f5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1720,"size_decoded":1470,"mime_type":"text/css","magic":"ASCII text, with very long lines (1652)","md5":"119765e15a0255e2d04125616889c169","sha1":"fbe37c37d2e346cf9a84796cf3b7017fab56ef30","sha256":"cabc7cdd1bea6ddc1c1ccfc978ec72171e71b558aaa534ccd399d5a8a856fd64","sha512":"977cb1fdd418c653367d207209c2b142970c2cfab868d44fb7e3415e0b6f39a9858d9c56b8b6973dffe05506b2530579fcdabde8c6c1d753deea4e287694af32","ssdeep":"","tlshash":"5e31dfc19980614d6333cd84e561f2aa79274222eda2cfd9fc22f273c5de1c841e4d1d","first_seen":"2026-05-17T18:32:42.04058Z","last_seen":"2026-09-21T10:22:16.900708Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery-migrate.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.743Z","timestamp":1789986078743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery-migrate.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EuHt2v0F0e%2BDJ50FAzrPinbwDPgJpxshxo0KKuh9bqs6GghXEpSugqdL4eborMcRa9FmtE9vIf73tOx5ieMmhGxLhQ4XSsJZbDu6yyYgdK9xFMRkcbl%2Fz8IBH1%2FVHOw4LOMN9WGtWR13r9qb\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-3509\"\r\nexpires: Mon, 28 Sep 2026 09:29:39 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262299\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a049755695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":5676,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-21T12:48:03.524534Z","times_seen":973099,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Rubik:400,500","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.041Z","timestamp":1789986079041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Rubik:400,500 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 21 Sep 2026 10:21:19 GMT\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4988,"size_decoded":1457,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"72ffc86b95c4cec3ea2709fa5ff80260","sha1":"8fef3cb928f340cd9332bcf9c5c075dee2579b29","sha256":"8d1e498512961679c895b146feeaac26b99bc0f7f777133cd727ef2365b7d69c","sha512":"5d8611621eb954e24a8687b30e1016b60b99c266c01ccee207e9bc30d77f04ffab6ea475416d2ac0398d45db1ec80b57d0ce23e1ec34ed83d356315823851bfa","ssdeep":"96:dQOLKA0Zl8DCK9cHoQOLGHwQOL/FZSQOLxQOLEJc+uJQOLGNUQOgKA0Zl8DCK9cQ:DhCl+sGAvAEuhClxs5rEAvp","tlshash":"e9a1bbe1981e94447f472cc263ce2d37de0e6255308485299afd1f9aacbbc2233617ce","first_seen":"2025-09-14T09:48:14.89956Z","last_seen":"2026-09-21T10:22:16.902486Z","times_seen":232,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":36,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/pdfg.front.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.053Z","timestamp":1789986079053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/pdfg.front.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nKF%2FiIp4HEcNym0m2UPjozMbSvYbo9j7I8UFBt2t50Dj%2BqqUXEQeqE07Nbh22kuPo5kj7p%2FKEzgiJ0EfL9Wxm6%2BFD%2B%2FavcnpVmwOjWxvCSseYZ2JJ41CUffXwpoRkub4p7tQEP%2BlVNXid8FR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a239b45695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7986,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"6add2482c361c5b04a7266f1780b0965","sha1":"ff1011cdd9c49a37c43eb00739640a19b9f17a65","sha256":"754b2f4ba5f216f108d71349577817be8bb6267e2ae568f81d793a8d10359304","sha512":"a576db12a2dcd420ef1558871e948238245acff333c8e1478a76b5372a17dca1ee0432388d5e1372fbb5427390514b6f9e197369bbd5c0f1b584c524f545a79b","ssdeep":"192:Vj9jhjOVK/OaaUl8Pz6zsL81B89e7vlCeNA:N//FQQAe7vlCeG","tlshash":"3be1c962f5f925bf10938272306ab7193de48013daa708e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.903619Z","last_seen":"2026-09-21T10:22:16.903619Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/images/spain-madrid-scaled.jpg","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.213Z","timestamp":1789986079213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/images/spain-madrid-scaled.jpg HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kNcSWi2zGPfL8Y9LmdUFGuP6aIhKfDUxtq0SZmBBlT7L5xbguGHIF%2Fw%2F%2BU19pbgOpECxvbY%2BhlC9BjCKLPx0hjjzVgAQZQ8QMSWHYg3uujI7jK42Qyvr7nLkbkcpVulor3cgjdonbFJhmALi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3e857a339d55695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7977,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"93762c649e833eaf1f396aa06851bda1","sha1":"67675fd5cab9063037a1835791473643ac20f397","sha256":"3ee13e67dc3976b357a5de7a8a77d6a28c3d81df0a0117d4c985bf49764ba2e0","sha512":"f03c1af91d8127c5e1cf61fa51497b10dc1b7e03b6f5ecc08b9aee623f3a03ede27eb52c5dc872c868e5768b7d648c00a6f8cbf18b46c61d7a3900756c9ba773","ssdeep":"192:Vj9jhjOVK/OaaUl8PzwzsL81B89o7vlCeNA:N//FuQAo7vlCeG","tlshash":"c5e1b966f5f925ff11938272316ab7193de48013daa608e5b6edc1760f8df85ee03244","first_seen":"2026-09-21T10:22:16.905292Z","last_seen":"2026-09-21T10:22:16.905292Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.fullscreen-0.4.1.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.765Z","timestamp":1789986078765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.fullscreen-0.4.1.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VDhMnk1sHJCledc6ICKXKcbg%2BEH9unLaD%2FJueVtpa4pdvXOmbYBETWUFahcNOy2%2Bhhqx6Kh%2FM04rCJpWc6kyEiiKQzb6bdtPv6HrD6Lh28Uvh0w6qLMBJdbnBDa0p0cNqoh0RfGDX33Pmeu3\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-1e22\"\r\nexpires: Mon, 28 Sep 2026 09:29:39 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262299\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a069825695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7714,"size_decoded":3266,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"2e81efd8a525146aedd80551365ba73a","sha1":"c9bda782f61cbc790df232b61039d0002bc39c3e","sha256":"27c24ac72434f3ba9fec45d4d4ded56c018e9b145490dbfc9a746cb50a68c74c","sha512":"6904696991afa97b72ff6c457f21118df931a63c54423b03c37f639d40528aab61e07e1a16f72be2c8ce018c2e20adbf309aa67d9dfe3f5de4e8c3d6987f5ea5","ssdeep":"96:oH9Sg+wJynnEmwpwVBAokOKOpel5LyobxwLEhcW4vmbXuHDgCIXOwTxaJ:oHxJynnxiHOsCAfcW4eMDlgxm","tlshash":"5ff1f0b9fb9a6441c163389ed93f51cfa1385026b354789f715c89fc2fa8a1c13a2d39","first_seen":"2023-03-07T13:45:20Z","last_seen":"2026-09-21T10:22:16.907318Z","times_seen":26,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/quicktags.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.704Z","timestamp":1789986079704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/quicktags.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6WhZXSuO0mA9zbe036DSUaZCkeCzvp4yYfcTI%2BI4FfAKV4pobXCGlqsQxJDmWgDeVQx0Z4SaSRYo2%2FfDcMW15k%2FFvMiBawpf0j%2F7vhppNhkU9H%2Fgf4ekSunAvjLIeXXugeb8tF4cq%2FjoNscT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a64a085695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7984,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"9fe343b4fe3bcf8e56889836fc478acd","sha1":"b77829b3154ed27311165385e9021aaa877b30ad","sha256":"a7c4fa815b726a828f09d0a956d35ecbc8e977c8490ed4c9aa553329c849312e","sha512":"4c1e7033d13a78205d8c96dfaccf9d77c8c0001b2462b9d27c468220a930e4397a46f5c00be1ddce720971ee1b2f56e871fa9bd9f59b4129c604477f89442286","ssdeep":"192:Vj9jhjOVK/OaaUl8Pz9zsL81B89R7vlCeNA:N//FBQAR7vlCeG","tlshash":"9ae1c962f5f925bf11938272306ab7193de48013daa608e5b6edc1760f8df85ee03244","first_seen":"2026-09-21T10:22:16.908236Z","last_seen":"2026-09-21T10:22:16.908236Z","times_seen":1,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/fonts/fontawesome-webfont.ttf","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.915Z","timestamp":1789986079915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/fonts/fontawesome-webfont.ttf HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/lander/wef-privet/css/font-awesome.min.css\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NJoM5fQVZLfv3N%2FZb0aRYU2pcNXomm25xeMNy3NmWC%2BbZD%2FEg7EYkXxWneW%2FSwE70qaAGfpd%2Fu4BBFWsY76xemMpM0V%2Bik%2BxORAX8PPKZZCb96oDt0tgFdqjtjyi19Mb2yp9VMAOleSl5We%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a7ba275695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7988,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"0d7013719272be7cbb3278050f3f3094","sha1":"a41f977c5bf9ec53895406263b9c1c6a6a30bd11","sha256":"75ee10607d762ccbbbbfc44baa8054e0bde8647e232ee5f493565b8276c90854","sha512":"808966edd703dcbc0a116f28f262af6645b2fcfd965fc37d3cb4733f5b207aba50e92ad491547da5980bae18db9cda021b570459c07c92dd99fbe4c435ef0a4b","ssdeep":"192:Vj9jhjOVK/OaaUl8Pz3zsL81B8977vlCeNA:N//F/QA77vlCeG","tlshash":"79e1c962f5f925bf10978272306ab7193de48013daa708e5b6edc1761f8df85ed03244","first_seen":"2026-09-21T10:22:16.910398Z","last_seen":"2026-09-21T10:22:16.910398Z","times_seen":1,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/analytics.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.666Z","timestamp":1789986078666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/analytics.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L0MzSHSU7FoL5HEY7EjgbFSaJp6yTCXEf0Dqxxp80%2BUgyqiCdj28zW6X24XVd67rT%2BxogTsnbFspIJgCI8bT92vAQZSG7jZTAk4RbTJxNEfoVciJnibhh4uGCHVnnnKhsN55QPEg30ojK7pJ\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ec2f67-ceb4\"\r\nexpires: Mon, 28 Sep 2026 09:29:39 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262299\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e8579fc9465695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52916,"size_decoded":21830,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2343)","md5":"575b5480531da4d14e7453e2016fe0bc","sha1":"e5c5f3134fe29e60b591c87ea85951f0aea36ee1","sha256":"de36e50194320a7d3ef1ace9bd34a875a8bd458b253c061979dd628e9bf49afd","sha512":"174e48f4fb2a7e7a0be1e16564f9ed2d0bbcc8b4af18cb89ad49cf42b1c3894c8f8e29ce673bc5d9bc8552f88d1d47294ee0e216402566a3f446f04aca24857a","ssdeep":"768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL","tlshash":"74330af9b7423466c3a271e4403f1007907aadd5f449d8e4b58ad6d46d38eab02fbf68","first_seen":"2023-06-16T11:16:31Z","last_seen":"2026-09-21T10:22:16.912012Z","times_seen":5601,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/ytprefs.min.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.736Z","timestamp":1789986078736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/ytprefs.min.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F2opzKYJ7%2BR5gdtyXKh1l3bOANUWs80Yu5uQ%2BbfKvPvIJEJy3%2B3wfWWV1uydKYpyvcUYn5q0Qju0ym4WoOEDdxQcLwebUa%2BnXYRhvriA0UrxOJiRZw0lu9yzkTTHMQZGfXMDTUMIVdhLJXVK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3e857a039715695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7981,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"738f5cf2cdce7733fd067f487ea7b3a2","sha1":"c5a5c38fe2bd9635ac11923cf391d74482f85f7d","sha256":"498fdaf628dffea5344d21c71f742c82b67b44978b086aabce0bc39a9fcb9e56","sha512":"11869a4651b77bb5c81a093f5dd620450b1a8a21a6931d4a30fe538b97771736509d5d4d3215d7b99fe4f8fe627477a1385aef84bd7afbe404ee82259edb697c","ssdeep":"192:Vj9jhjOVK/OaaUl8PzDWztL81B892j7vlCeNA:N//FGOQA2j7vlCeG","tlshash":"3ae1c962f5f925ff10978272306ab7193de48013daa608e5b6edc1760f8df85ed03284","first_seen":"2026-09-21T10:22:16.913044Z","last_seen":"2026-09-21T10:22:16.913044Z","times_seen":1,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/wp-emoji-release.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.042Z","timestamp":1789986079042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/wp-emoji-release.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GkcHDFMOyK7HxFDjbL%2FTzPi7fg4ZGr2t7i5yY%2BCLDimYelMrhN1SUbXqZC0RMUVbywjubF29fVR%2BzXm2XBckqHArJUICWH1kLYd1KbJzDaosqFzXKrumeNwgdjmunh9btveE%2FWwtWHgj%2BoJV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3e857a229ad5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4561,"size_decoded":2604,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"feebbf3cc8a10d72fef84019c9249556","sha1":"5b79f9faed91f3245020f3120e1bb76f1b2d90dc","sha256":"99f27cf7cf94e4d53b50e758aff514c48a40f46133a967fae82a1275823c37fc","sha512":"dceed7fa5d8f9be2e3034dc899e23b701a104deb39844163c242711fa93b9fb90c16113fe6d1eaec789415e69268840e9b5e01ab65a636911c1d5ed5ad1e240c","ssdeep":"96:1j9jwIjYj5jDK/D5DMFWC89ZqXKHvpIkdlo7RJlvaQxvbK:1j9jhjYj9K/VoWnuaHvFdlo7vlCejK","tlshash":"10917326bafd217e10a3816225ec63497ea0c553c6a705a076acc1391f9ff59fe17184","first_seen":"2026-09-21T10:22:16.915022Z","last_seen":"2026-09-21T10:22:16.915022Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/drawit-iframe.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.052Z","timestamp":1789986079052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/drawit-iframe.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lv9rUGbckRXaJmEDagkIB5edPpYuPHg0i5BpwFVKz%2FhDrrtzbu2b99iP%2F%2Bnif5hf0k5%2BNbVo349CXmlKjpFgM8BeaxQsXQYeBkKw4zlPt3DMPCWRLlflG6Hx18c%2F7pWa7GWSX0lKCvark0RT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a239b35695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7982,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"05a9978820042e9b9829adc703eb7202","sha1":"fe19415fcab25ed99979249b02af1b37f9513949","sha256":"edc97bdc7a4d7b31b0e4bbcc23133584870a1a11299e92dfc97b40dc2151fe31","sha512":"f2463a8147ac5a05f9c9009df0ee8e53d8e4f9e4020179d4fca4da5a8c405cb193458fb197fe40204a706b153a74dc289b2bcfdb1c9c3c28540abdc89578ef32","ssdeep":"192:Vj9jhjOVK/OaaUl8PzNzsL81B8997vlCeNA:N//FdQA97vlCeG","tlshash":"96e1b866f5f925bf11938272316ab7193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.91705Z","last_seen":"2026-09-21T10:22:16.91705Z","times_seen":1,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/mouse.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.069Z","timestamp":1789986079069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/mouse.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pod9u9fC0ORgf11SST%2Bg%2F6Ycl07%2BhktlHHjzH8od1ZXH5TKYj%2BJw8ljBRaTCsQUEDQ7uz9lx1Lfb%2FUdBw6ByRsh%2FREm4%2BAXrp6EeHldrOvR5lcNwZOyZDGrYykK9ZqQnF4ICFcdEe63IBsmh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a249c45695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7986,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"bb99ebe97edfbfd31217933c0bd47092","sha1":"215638af8cb1ed15bf072d59f2d9a32906072b73","sha256":"41e0f6b436dabfbd59180fb69eb67564e8084c85154b479f52566cb5ce2eaa79","sha512":"fed4617232c9a74e613ee2282dd48a5f12bd1db4e6c82b8c3907d1ca8d1805d0044e4bd221160aa0d2e021be0c5c70196ee1f03a624d13501f92a1eaea543dea","ssdeep":"192:Vj9jhjOVK/OaaUl8PzYzsL81B89g7vlCeNA:N//FWQAg7vlCeG","tlshash":"cae1c962f5f925bf10938272306ab7193de48013daa708e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.918987Z","last_seen":"2026-09-21T10:22:16.918987Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/esf-insta-public.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.616Z","timestamp":1789986079616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/esf-insta-public.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Smk7c4UEIzvfksABtj2MNO68bRIoc0K7W512t1Pzz4uQYzui57Y%2F7oYa6TDjI1t%2BIgU195jfNOZIr97K5gzD5jIMFRLSewNt9WgXjP23EjgpUtgPhZcAww6hAZPZ0L9Tf8cd8TVRnFZHFLvb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a5b9fe5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7976,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"ff9602f2e8eb121ada17669f41087536","sha1":"721245351bb7fdabf127d88b7d3fe2818baa9bb3","sha256":"1031a5edba179d71ad75937549ffb947c6267b30955710208d56ff56ba50912e","sha512":"a8844ed96d28f77af4eccf019074f82bca394cc798b39a5a37c09299659048cb6b3953e61d0f342ccdb5131e29a31182c183d991e1ebe483842d9db6a49ecbcf","ssdeep":"192:Vj9jhjOVK/OaaUl8PzTzsL81B89v7vlCeNA:N//FDQAv7vlCeG","tlshash":"1ee1b966f5f925bf11938272316ab7193de4c013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.920592Z","last_seen":"2026-09-21T10:22:16.920592Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.mousewheel.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:20.214Z","timestamp":1789986080214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.mousewheel.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 8\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:20 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lKhoartYbxQyfDc7hC1IgF5%2FNeD2YXRe3fPotzucxlVABrjnMX0mHxTHel68AgSKP47urELmoZ0l%2FT%2BX0EczaUbpprMNY72Z3TK6ZItVF%2BzYmdfi492%2BNIfwhdUUjjv%2FVMfxbslSeLjaMG10\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a97a505695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7984,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"d6798ffa1fe65158ea6583a4803a5716","sha1":"171d38b845946429ba33c373292598f11677db3d","sha256":"9521f90207d68104532e64beb85ab9dde14be3f32b5b3a1a2757c05730a67ea4","sha512":"06883685b151e959af3cbe24cf63d7baf1dcde630fae7a7d381cbaeacc0210a982c5e5b5b9f2b9ad01354f88e1c4858cd4a51e3cb56192d9a1805822ae1f5ed0","ssdeep":"192:Vj9jhjOVK/OaaUl8PzYzwL81B89k7vlCeNA:N//FKQAk7vlCeG","tlshash":"d7e1b866f5f925bf11938272316ab7193de48013daa608e5b6edc1760f8df85ee03284","first_seen":"2026-09-21T10:22:16.922211Z","last_seen":"2026-09-21T10:22:16.922211Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/fitvids.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:20.289Z","timestamp":1789986080289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/fitvids.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nCookie: _ga=GA1.2.1802550631.1789986080; _gid=GA1.2.428269287.1789986080; _gat=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 8\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:20 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E6JZ4N6KKMzsGfMgigyrF3knzwqE9mQrAnMMddrRvpva7Nk0ByObuE8%2BCt5W4k%2FOTi%2BdZdNu5CaarHaPIO6%2BVsdoXCPVGQXMSx1TcmcAOzJqYzFkw%2FK%2FacwFyjBf9T8vVN3tWoizgRu1CpDt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a9ea5c5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7984,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"c622bc6f32491314e401c7c08c5416c3","sha1":"b64cb145784f1ba7f4fd94e51a868716752ab6b5","sha256":"3e244316f7072f5c31268340c9465d46970d65b796f99241387be64b22c40de5","sha512":"7af82622c38939195dc53f99eccfdb35d243f632ba92a7a15a8488b692bc4f1639a2ddf2f979bbdd8b0cc90ae9053fca3534b5d2f23093adfd2d876dab0b74fa","ssdeep":"192:Vj9jhjOVK/OaaUl8PzJzwL81B89N7vlCeNA:N//FJQAN7vlCeG","tlshash":"6de1b866f5f925bf11938272317ab7193de48013daa608e5b6edc1760f8df85ee03284","first_seen":"2026-09-21T10:22:16.923581Z","last_seen":"2026-09-21T10:22:16.923581Z","times_seen":1,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/frontend_1.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.693Z","timestamp":1789986078693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/frontend_1.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qIksDxb5nnCCHqj09%2B8o4aPLTVl9ATONKDbhvsxddIlIReQ7x4m7oe4x07Bmyh0FL5w%2FKCW%2F7w5pMkJ0YgLuJ0SCuR1AT5LQn66Z4C8bypoGKw52dC9VC9ot0PwpLhpT6sv0AD6tQLt1HbRi\"}]}\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ec2f67-52a\"\r\nage: 118981\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e8579ff9535695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1322,"size_decoded":1288,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7049cf9bdcc5242ce46f6539cc41dbe9","sha1":"600ef1391becce9aeaa7dad342e13b9525db1017","sha256":"97c412b211f07d9857ef2c3fa6ed665ea40addfdecaaa377b170e2105c731aba","sha512":"c9f46728e891fc5ee08d82791448f1c896b7e1ad07548bc318552009787cd8979efa33ce8f9a2e26a498bf39618063ce0c97f843f0cdfb26160c77d7d5e486a4","ssdeep":"","tlshash":"2221bbbce302b8048a5ee621a7f949a7aad9d492de09547174a4c14de72e4bc3503e3f","first_seen":"2023-04-13T05:34:21Z","last_seen":"2026-09-21T10:22:16.925287Z","times_seen":68,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/default.min.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.727Z","timestamp":1789986078727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/default.min.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KTPNjoib6OFA8d7jXzDw98FgzqNnSErrgpjrdDMF5CYKeHgbt00qgToeyMonJJ%2B0MAhmvZJ2dRV7wFR5AwfwTIh96bB7O9dQuR%2F0yYFXoEptC0REm%2BmAur1dbNMjOpQ%2B77qlxzH31OFq%2BrGX\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-13ed\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a0296b5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5101,"size_decoded":3044,"mime_type":"text/css","magic":"ASCII text, with very long lines (5101), with no line terminators","md5":"47d06777968daf61306dd304cde88c83","sha1":"bc2ad3a2ab9546b227ae9ba4c70fe2b949f2f0d6","sha256":"6677f49a6e1124954fa6474f069cc9f88e986819bce1b72f9ae05f9abf97cb17","sha512":"8cd872bc7d935ab9fe06ac74d323778eb0b123c62e6ff41ca9cd94b1dee370c76baa9fd6ff56c50a94e67b9bf13fb1eacfd6b73d988ebde38da2e75fc9c88975","ssdeep":"96:G5aOb5pxD2FuQTh5A0yVqU26qGa1NjyOi0zjtoZpr1wWTsUkSzQ54T3w5p3X8ESn:+nD6uQO21sZHr1JI7HDY","tlshash":"3ab1a67067993268635fe5777941a72c34302033d022debed484d7924b8ec4a2bd7e35","first_seen":"2025-11-24T06:01:44.078991Z","last_seen":"2026-09-21T10:22:16.926004Z","times_seen":4,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/chosen.jquery.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.755Z","timestamp":1789986078755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/chosen.jquery.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PBKwSdvqtYIQhfMQw%2Fkf%2FxNjhv7kVk3Dv%2FBDo9L6J9IFXVpPWlx4aYhuNuXnkhbe3o309Gvr0tvEMwqLCMk5vMIm4NhuKcMWAfYQp2HrAF4Kp4kMKPFTUYIlsz38aaiUvixODZTkYyfGLxzN\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-cbc3\"\r\nexpires: Mon, 28 Sep 2026 09:29:39 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262299\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a0597d5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52163,"size_decoded":9431,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"4f0361640d5597fb84f0b07deabe3d56","sha1":"d7b5fa9101e2edff3fa588ba35cfd4e3e47c8382","sha256":"7373ca9ed2c272959213699ab6c34d53f342a2d01d996ebc543743312911a6dc","sha512":"a5e9187a6ba493041acfd17ef6e7f6aa2a973a711cf6378812f1a9ac37667b4488d4b7d21ca1adf647f00a7663b78e576d445429a11d1ade5a1041afd149b3f6","ssdeep":"768:7VKQshTOPnJ6D5x1MdUDv6RNnhQZ9vvekXAPNFLmoL7WJORAIGf:7kkerDivnhQZ9uk8sARAIGf","tlshash":"4233ba48bbf7612182b370ad5f8f9084b335544b980ece4cbe6c96d19f9443865eaf74","first_seen":"2023-03-07T12:02:50Z","last_seen":"2026-09-21T10:22:16.926789Z","times_seen":368,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/asl-prereq.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.057Z","timestamp":1789986079057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/asl-prereq.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ga1av2ao2Aj66eoAn0vs9yf6a4Gr2HxiKHKc8gSrXpncwxpCRzhZc0HIWId4nVs8jTHVzIS6PaYsIwnooc7vv3I1qhyxqxLuh1T308ZisYjsZJJyukDMI8fVVUpKloc%2Fs5vdYFJQWjRu63w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a239b95695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7974,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"88ee156f451a81b9ef53ce78277cfcbc","sha1":"becef6c5de8e7ae6d51728fb7a52d057715880c1","sha256":"cdec6ebb798dd34ed1e9d2def2c97e4f63045803a71d1e4d78f3ab2e0a37ece8","sha512":"3ec4a1dc663f4806a77c674b2592ea9f9956674ff90b294a9f23a3f3192a54ecaaaf33610a6bc5b91f54e6f5702976e0124ce53546d44f3b0c517c6c82feeea6","ssdeep":"192:Vj9jhjOVK/OaaUl8PzDzsL81B89D7vlCeNA:N//F3QAD7vlCeG","tlshash":"25e1b867f5f925bf11938272316ab7193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.92741Z","last_seen":"2026-09-21T10:22:16.92741Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/asl-wrapper.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.062Z","timestamp":1789986079062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/asl-wrapper.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hKq1smr5kmY5oJ%2FmKwJa83QosR%2BL16f1m%2BNkOFMJ21%2BaQD3clJTMQ%2BJv2eRUR7SN%2BxfmmQa5q8FqYlolowMuV6HhGbdGZg%2BheEKR9WbYqlDq6Yl%2F5hzRuzYLr8U64kFyOJoDzy3H356ZTqhb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a249bc5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7988,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"20b5b8bd4d4c7cff2ce9a6828afb68c0","sha1":"c04d5e744a3ce1bb9b753da218eaa583f5bfb665","sha256":"316bf81368a33d2d396ab355f53c4b03609eb3fce87843bfb65241637b36f4d9","sha512":"f0b23d38ee0473604f296a90486091162b2e104c5dfb2e81f93f0324c387b5c446ae8c27d3198b1ff602fe95c0c9f8db95cf4b8bb22c63d3e5e807319c9aa5e0","ssdeep":"192:Vj9jhjOVK/OaaUl8PzYzsL81B89M7vlCeNA:N//FiQAM7vlCeG","tlshash":"62e1b866f5f925bf11938272316ab7193de48013daa608e5b6edc1760f8df85ed03244","first_seen":"2026-09-21T10:22:16.929029Z","last_seen":"2026-09-21T10:22:16.929029Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/jquery.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.380Z","timestamp":1789986079380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/jquery.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QIjsvRWx%2F08GIpoB%2FWnmexdogwocmUhOFV260E4UtjBiqDKfNPkKV9l3hjJsdDxcNlg6Sof3ULeodkeFR8t8JUV5InX5y1PmF%2BGoTskgjVJ8N95jqeh1NDCOzh%2B1qiVGJ2apngvbUJHI0hVw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a439e75695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7980,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"f0492d1dc928d6d7e6279943a913e75c","sha1":"5abe524bfb2b6b135325371c9dc12bc0120885fd","sha256":"a32d40a5c0e788777c06452582412401095e8c5369334deff093de57c7cc75ee","sha512":"2576a0bc3fb954cb30e467178b562e8ae352dd90c757db0cd36d9c65b4a79e737f3b379e4dd7999cfe02994eef18c65981ecc59242b0e59faec47d75b90d6067","ssdeep":"192:Vj9jhjOVK/OaaUl8PzOzsL81B89i7vlCeNA:N//F0QAi7vlCeG","tlshash":"9ae1b966f5f925bf11938272316ab7193de48013daa708e5b6edc1760f8df85ee03244","first_seen":"2026-09-21T10:22:16.930163Z","last_seen":"2026-09-21T10:22:16.930163Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.837Z","timestamp":1789986079837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rekidofpsdiksfosdpado.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18640\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 10:06:34 GMT\r\nexpires: Sat, 18 Sep 2027 10:06:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 260085\r\nlast-modified: Mon, 15 Sep 2025 16:29:38 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18640,"size_decoded":19453,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18640, version 1.0","md5":"289ab8c3689e58c84c061039efc15d3a","sha1":"9432c99c4915ea17dea97eec0bbd0f2fa6ff0943","sha256":"0e44026ad31376af1b56593cd4acb4f353f8e8789c51759e18f64578e4ef296a","sha512":"4c0ea3fe4daefcd63f7337e7a8e86d169c0f4ce3543b12a69f9980a5bb598987521138454ad4df4474a1edb0fef0c38cfd2de312cb355c9c2665ea3445586787","ssdeep":"384:UubNl0SziXg7u9lPk6A/BViMAf2zAeyrmYAUXKb+cu5E0GW6o6:dbj0S2XjRk6A+MAf2UeGIUEbM4WZ6","tlshash":"9182d1454a3d7753f235a6425daef8cac2b5d42d56978c103be2541a3dff28e33109d8","first_seen":"2025-09-17T00:02:10.421759Z","last_seen":"2026-09-21T12:51:50.568226Z","times_seen":46721,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":17,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wef.org.in/wp-includes/js/wp-emoji-release.min.js?ver=6.7","fqdn":"www.wef.org.in","domain":"wef.org.in","tld":"org.in"},"ip":{"addr":"165.22.100.85","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:20.329Z","timestamp":1789986080329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wef.org.in","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 09:51:41 GMT","end":"Tue, 15 Dec 2026 09:51:40 GMT"},"fingerprint":{"sha1":"C8:EE:F8:28:52:BF:9F:D9:F8:6F:0E:A1:BA:77:3F:5A:3C:91:BE:90","sha256":"AA:F5:16:D1:9F:7B:AA:ED:CA:B5:AE:C9:28:65:3A:F8:86:56:7F:1F:96:D5:DF:9A:78:97:A9:DD:C5:46:11:AC"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.7 HTTP/1.1\r\nHost: www.wef.org.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 10:21:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 09 Jul 2026 19:11:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4ff266-58e0\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22752,"size_decoded":6259,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-21T12:48:03.503508Z","times_seen":59420,"resource_available":true,"data":null}},"time_used":1478,"timings":{"blocked":0,"dns":76,"connect":351,"send":0,"wait":350,"receive":0,"ssl":701},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/css/booklet.css","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.740Z","timestamp":1789986078740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/css/booklet.css HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9d8CDp85zcwR1H6%2FcQjyxSQv2k%2ByQQ7yIYcsJ4Hpav3YdZZV5mEkAOywe3IXeJwcRWPi1bBQIKb3Z25yk1DtZEodpEgfmr3rBYR9wcJYrd1VlIpI4VXb%2FusxrTYT4HlwPidms97ktMLAS7Wi\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-2b4c\"\r\nexpires: Wed, 30 Sep 2026 01:18:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 118981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a039735695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11084,"size_decoded":3076,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b02403455c8af5db9416335391035d70","sha1":"d1a878c2515595ab87ce82e0652afe986981e134","sha256":"c2fa1f6b4f83633b5d17ce9286fd940e0464619aefbf5958d22ab6ab5f6eaaa4","sha512":"075f044e9bd29d94070f1bb3f1efd728463da474bf40833b808d5bd610fe03708e6cff95e3ea8436ad82ea9fdeacefcb4a4ad8bfdfdc6af58db39f063fd70aee","ssdeep":"192:41FXZm7U4IjrGZXSVKhXg6qS32RkLk6tmEEn1q7JBLGsK5Fr:4nXK4rglGRkLk69E1eJ/K5Fr","tlshash":"1432a8188f03aadba63ac7723b79c714df9510539b0a030837d5a2245fb1ca658afd9c","first_seen":"2026-05-17T18:32:41.97992Z","last_seen":"2026-09-21T10:22:16.932925Z","times_seen":3,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/imagesloaded.pkgd.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:18.777Z","timestamp":1789986078777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/imagesloaded.pkgd.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 10:21:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 18:24:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aBb1vpAdcOdm1TEwvOkVLPH2PmSL67YiodD5E7RXNxi3H%2FOe%2BIZ1Dr%2B6Acw8Oc7NbkEMeifBV06BuIxP72yASC2LCJ3SMNe1HlTUjKSzndjypYrZx5cGF%2FZrKzre3f0vpa6GmE9iAvJt0C2j\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec2f67-15da\"\r\nexpires: Mon, 28 Sep 2026 09:29:42 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262296\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e857a0798a5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5594,"size_decoded":2616,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5477)","md5":"e2c1a80b99251b7b94726b41312fb160","sha1":"6d3e11174e22668e69df236e5c4542168f7cbfec","sha256":"96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44","sha512":"4b93d9f46c4964ed7ab53f6bdd6269fd269f9f7d5ebbcb96af382531a8434f876c9a0a96a27458f60ae4de3fb7b5fb8fafd58936c7e8a0e47b1a2ec72f95b68f","ssdeep":"96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"19b122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-09-21T12:18:00.802745Z","times_seen":24938,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekidofpsdiksfosdpado.com/lander/wef-privet/js/effect.min.js","fqdn":"rekidofpsdiksfosdpado.com","domain":"rekidofpsdiksfosdpado.com","tld":"com"},"ip":{"addr":"104.21.49.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekidofpsdiksfosdpado.com/","date":"2026-09-21T10:21:19.073Z","timestamp":1789986079073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekidofpsdiksfosdpado.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 08:52:59 GMT","end":"Thu, 17 Dec 2026 09:52:56 GMT"},"fingerprint":{"sha1":"CF:D3:8E:0E:37:7E:D7:A9:6F:5C:2F:A5:CF:C0:2C:29:9C:7D:0F:CD","sha256":"C8:DA:E9:2C:8B:66:46:C8:48:7A:15:2D:DB:76:06:52:ED:4F:43:E0:7D:9B:5D:DA:A1:CC:45:A1:A1:CF:45:25"}}},"request":{"raw":"GET /lander/wef-privet/js/effect.min.js HTTP/1.1\r\nHost: rekidofpsdiksfosdpado.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekidofpsdiksfosdpado.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 21 Sep 2026 10:21:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rDyUpqsMNMBIE1xy2fXwo8c0N3ofUvqSkhFVGS9QPpDyJZFGgSqRds4PoVgHVZ%2FIu9fEKx94fVYyxP0uVzuO%2BpPK1ug5XcvbHEqJsuZ7ReNCeOIAM55y%2B4h0V62UCVYUkmCcD94kIwJpfFZw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3e857a259c65695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7214,"size_decoded":7978,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"f2bc045a72860966e9b1f61d4c8823ee","sha1":"362980370812ef13636124b767815d20b35d9c53","sha256":"3f0fef737f4c9b64cfaa12f30c6b309417a94ef7b1cf36dbfb0ff83d49266450","sha512":"e8cb19ab07414e7f899488101d46dc193c48e3a21889e486f0fd775b13f181153b22fe09521a592238e0de24912f327a502a598bdc14319dac8bfdd35e94f92a","ssdeep":"192:Vj9jhjOVK/OaaUl8Pz1zsL81B89d7vlCeNA:N//F9QAd7vlCeG","tlshash":"cae1c962f5f925bf10938272306ab7193de48013daa708e5b6edc1760f8df85ed07245","first_seen":"2026-09-21T10:22:16.934251Z","last_seen":"2026-09-21T10:22:16.934251Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"rekidofpsdiksfosdpado.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"rekidofpsdiksfosdpado.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}