{"report_id":"3853df36-d41f-4176-8ba1-44a8783b20fa","version":6,"status":"done","tags":[],"date":"2026-03-02T18:29:43Z","url":{"schema":"https","addr":"blackstash.cm","fqdn":"blackstash.cm","domain":"blackstash.cm","tld":"cm"},"ip":{"addr":"104.21.82.148","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"blackstash.cm/","fqdn":"blackstash.cm","domain":"blackstash.cm","tld":"cm"},"title":"blackstash | blackstash.cc | black's Stash Login","dom":{"size":9307,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (305)","md5":"1fe6c46c5b6abb549a0555b804ec2ea0","sha1":"7c015f50af76e7e7ba1293ef39e8eeb6ffda06c9","sha256":"82a8e93d5e4cd0f0c0ef746d91d952f083c7ac5446dbf462fabb27b3e4ba924e","sha512":"d3c2c6ebf55bc8bfc366e66582886d20b1aa2fa976384f3d7fd6d6c00a9715446c157b57f8eb2c2d9536c33133364d3b7be468b22e875503ea29a29ca607cef4","ssdeep":"192:lSVYfEWrnF5nDTJZ7lxWhzZFymT+Vjt9oNTXeXlyXjUHTU0qL4:lSVYfP/aZFit+fm","tlshash":"92128516a9f20d634a6311b42afe8215bbf1c113c609ce14fdec26d48fa5d85ca73b6d","dom_hash":"domhash5d5b985ad47b1e72dac6487c0cc8c646","first_seen":"2026-03-02T18:30:03.035179Z","last_seen":"2026-03-02T18:30:03.035179Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"blackstash.cm","fqdn":"blackstash.cm","domain":"blackstash.cm","tld":"cm"},"ip":{"addr":"104.21.82.148","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-06T18:29:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"blackstash.cm","ip":{"addr":"104.21.82.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":22,"request_count":11,"received_data":541562,"sent_data":4902,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.2.24","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Django","description":"Django is a Python-based free and open-source web application framework.","website":"https://djangoproject.com","common_platform_enumeration":"cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*","icon":"Django.png","categories":["Web frameworks"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"blackstash.cm/static/js/jquery.js","fqdn":"blackstash.cm","domain":"blackstash.cm","tld":"cm"},"ip":{"addr":"104.21.82.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0208b96062ba59d07c4495115d2b42ce","sha1":"611b7f56ab2146e1277e9258f15c55d50034dcef","sha256":"6bd8c1051ca05f5061e65b7c1998d70f3c8e07e6d6bdef4488eeed44e52d8ff1","sha512":"e830b5784dc05a0d5b822b64a1a44cd65858f7c3f16cc21b860602195d74eda665cb3cef696096d67256daf0ee6109b4ea15eb5b402ce8e18a7086805569c727","ssdeep":"6144:4nFhNVls+TC1lFhTzeKpTcYmD2zK8U1Js3Px+WK+N7TFyygRWL/IaLgeNTIPfgy1:RjTcYmD4I4Px+WK+N7TFyjeTiPflAqqi","tlshash":"b654b3d9f78d112e423231aaac2e12cdb77cd171560458aefd4d597c24a083d83baf7a","size":292458,"data":"","first_seen":"2023-03-29T22:35:35Z","last_seen":"2026-08-10T12:43:21.017123Z","times_seen":2059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blackstash.cm/","fqdn":"blackstash.cm","domain":"blackstash.cm","tld":"cm"},"ip":{"addr":"104.21.82.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5dc1f5e16ccaa68d1d6a1fb9f4fa9d42","sha1":"dbec6f60d2d54801aa68873de9494e490085870c","sha256":"fd16d271cbc0579848d1263bed71e2ea291c9eca16a950eeaf10db47461bf1cc","sha512":"3da1d0d29b4c8aec0a2394960cdbbf4ffae6c8bf3d36dc6627eae9893f6326eb7a94b3f2e78643b368d0e5027c7b14eb45fe6b663ff6eabf34294f84479527c4","ssdeep":"","tlshash":"88019e967cc288fa0b9935bcb4eb40b4a8b20323954489807a1d71406f75e954b7dee9","size":761,"data":"","first_seen":"2026-03-02T18:30:03.074207Z","last_seen":"2026-03-02T18:30:03.074207Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blackstash.cm/","fqdn":"blackstash.cm","domain":"blackstash.cm","tld":"cm"},"ip":{"addr":"104.21.82.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"901a9831dbf7ad7e64c26ca7422355e8","sha1":"798a72fa65f78495de71aaada6e080b9f4175c56","sha256":"55cc2d3c94a9801d79a161d6d815d535c1ff70175577ebeb228dfdb8291a29c5","sha512":"c2457e408d167adc2c8399e43885e74ba224550fdf9c056c47d7624e322870c06f405323c1ce1c9ce9d9e52816128d7ade97a25fcf57683922793752f2ade5b6","ssdeep":"","tlshash":"be210b5d92a209914db320b409fec2132bf8841721059e28b90c65c0eff0deaad71e6e","size":1254,"data":"","first_seen":"2026-03-02T18:30:03.076815Z","last_seen":"2026-03-02T18:30:03.076815Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"blackstash.cm/","fqdn":"blackstash.cm","domain":"blackstash.cm","tld":"cm"},"ip":{"addr":"104.21.82.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T18:29:16.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blackstash.cm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 15:14:17 GMT","end":"Mon, 25 May 2026 16:11:53 GMT"},"fingerprint":{"sha1":"5B:82:0F:4F:8E:BA:19:0B:A5:45:2C:50:73:5A:40:E3:08:76:5A:10","sha256":"33:E0:3B:62:66:0D:A6:6C:F4:79:A4:A5:BC:D3:2B:3F:AD:22:99:BC:8C:AA:2C:4F:06:94:2C:4B:57:F8:02:F8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: blackstash.cm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 18:29:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.2.24\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2B0D6wgdwEFcWa6rANAR%2FSp30Gy6LccLcdnveDVYz8LOZC067XV3uF51ANu1N4nfq95rtUnqwTa%2BVwBJzYowd59E8TMN7xCWl7Xoidk%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d62774d6ef549cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.2.24","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Django","description":"Django is a Python-based free and open-source web application framework.","website":"https://djangoproject.com","common_platform_enumeration":"cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*","icon":"Django.png","categories":["Web frameworks"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9741,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"7420570a08201eefd331a7401671286c","sha1":"35b337b30439179551c2bbdef3e569a1df6a5c16","sha256":"9aa74d0870bb5d08ad4349abc764ef471be17d65b701d9b5ec3838b2a6cc7d5f","sha512":"ca1e8e2c689b2e49119da8cf2c5a392e6dffb243a8dcb552250780266af9dce8ff8c0967f2166896480288a5ea21078578aa5e3c47f67b2327d08773063b641c","ssdeep":"192:v6eNNZ+Um015o80Cap6cUoQgVFoBNErEyMEMV:vVZmu1UcrgwzV","tlshash":"7112511a69814d624a7353b4aef58619ffe24223c3064a14fdec27d21fb1c49ca23f6d","first_seen":"2026-03-02T18:30:03.038583Z","last_seen":"2026-03-02T18:30:03.038583Z","times_seen":1,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":88,"dns":60,"connect":8,"send":0,"wait":185,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blackstash.cm/static/colorscheme.css","fqdn":"blackstash.cm","domain":"blackstash.cm","tld":"cm"},"ip":{"addr":"104.21.82.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blackstash.cm/","date":"2026-03-02T18:29:17.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blackstash.cm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 15:14:17 GMT","end":"Mon, 25 May 2026 16:11:53 GMT"},"fingerprint":{"sha1":"5B:82:0F:4F:8E:BA:19:0B:A5:45:2C:50:73:5A:40:E3:08:76:5A:10","sha256":"33:E0:3B:62:66:0D:A6:6C:F4:79:A4:A5:BC:D3:2B:3F:AD:22:99:BC:8C:AA:2C:4F:06:94:2C:4B:57:F8:02:F8"}}},"request":{"raw":"GET /static/colorscheme.css HTTP/1.1\r\nHost: blackstash.cm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blackstash.cm/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 18:29:17 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RdnjKC%2B6cWo%2B4Nh3aT%2BuOjfamlwEHCzAFYyYLtCkOgZJZ%2BWL4r4WCnaag0rxJ1nJpcPLir%2B2LyzipzKxVeCSPyNDy0EXvw4pijO6atY%3D\"}]}\r\nlast-modified: Sat, 01 Jun 2024 07:10:34 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"665ac96a-113\"\r\ncf-ray: 9d62774f5dc6aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":275,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"948ceb71dbe78af34ad85b07a1be5920","sha1":"0676393f7326de235659b3f278a286fc48bee75a","sha256":"c7ee9e2c9adc4814e63f76d87b82e600e8500b2fddb35bd99838803d98a5b8eb","sha512":"08f0a3c6f9627cbbd6d88432d69049886c442c06a66618a25e49dde994038bfb1542b461e9c40b2f269c2e93ee0ec3e961cc550fced5b6b2dff756ec02f10191","ssdeep":"","tlshash":"0ad02b9dd7f728877263c8682335c26e12396483c81fcb2c379eb5519f065cc6473551","first_seen":"2026-03-02T18:28:09.16451Z","last_seen":"2026-03-02T18:30:59.526284Z","times_seen":5,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blackstash.cm/static/bootstrap.min.css","fqdn":"blackstash.cm","domain":"blackstash.cm","tld":"cm"},"ip":{"addr":"104.21.82.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blackstash.cm/","date":"2026-03-02T18:29:17.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blackstash.cm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 15:14:17 GMT","end":"Mon, 25 May 2026 16:11:53 GMT"},"fingerprint":{"sha1":"5B:82:0F:4F:8E:BA:19:0B:A5:45:2C:50:73:5A:40:E3:08:76:5A:10","sha256":"33:E0:3B:62:66:0D:A6:6C:F4:79:A4:A5:BC:D3:2B:3F:AD:22:99:BC:8C:AA:2C:4F:06:94:2C:4B:57:F8:02:F8"}}},"request":{"raw":"GET /static/bootstrap.min.css HTTP/1.1\r\nHost: blackstash.cm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blackstash.cm/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 18:29:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Nov 2024 00:45:46 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"6732a53a-30d71\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=keJxFSmA8XMnCpe1clp%2Bt7xgDtkoMpHHBSQudpYKnk6sQDoimkUUERM50amzfULL3WPrMjDnvFSzTWcsjir3lIq6auu9AvBgEO5EyzE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d62774f5dc7aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200049,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (609)","md5":"bfbd0ed0143856daa2de8865f8c704d6","sha1":"14cb36653399379aa380af8d446d7bd0b6a634cd","sha256":"b2b00902031ca132f43bf9ee3c201eecbd12037cfd9b24f22b1ee3eea63cbc7b","sha512":"b81a9114d9ccd7653d38e95c1619ae7bb4de00615e442e0d74fc3cc7d371ef356d25b91303d8bd169ca9e19f907102457b2f9d0c95b4ac335d757dd91c0b2ee3","ssdeep":"1536:/ShROG0CrzldsH0pf1EnUdes2hMuWUsVbpoxVZcIX6DG4jDs4GcR:MrzlccIX6DG4jDs4j","tlshash":"b8146155faf02518744b816c24d567f5777e8087c72eefbab9a22228cf4d2c18d72d88","first_seen":"2026-03-02T18:30:03.042774Z","last_seen":"2026-03-02T18:30:03.042774Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blackstash.cm/static/login/css/style.css","fqdn":"blackstash.cm","domain":"blackstash.cm","tld":"cm"},"ip":{"addr":"104.21.82.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blackstash.cm/","date":"2026-03-02T18:29:17.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blackstash.cm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 15:14:17 GMT","end":"Mon, 25 May 2026 16:11:53 GMT"},"fingerprint":{"sha1":"5B:82:0F:4F:8E:BA:19:0B:A5:45:2C:50:73:5A:40:E3:08:76:5A:10","sha256":"33:E0:3B:62:66:0D:A6:6C:F4:79:A4:A5:BC:D3:2B:3F:AD:22:99:BC:8C:AA:2C:4F:06:94:2C:4B:57:F8:02:F8"}}},"request":{"raw":"GET /static/login/css/style.css HTTP/1.1\r\nHost: blackstash.cm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blackstash.cm/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 18:29:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 Nov 2024 07:39:54 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"673457ca-e30\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F3cYM7j0ZP149hVPoDu%2F3zXzH38ozMWql8p0QN4%2BpOXt%2FnbcNlK6nvfIRJy2pYH7kzP5QH8bKYyU0zdnaJhcU2X%2B5cRA%2FZaKDLc78MA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d62774f5dc8aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3632,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"fc4fbc0c038483745c512868d5ed5286","sha1":"8c96129ff5ca6a62a50e0d1193e85058c968b02b","sha256":"b6291a05c1abfa4a873045e6c7634b3d2ea4c13b01e0c70d0ffb1e5889e6b521","sha512":"d2bc2f10f4e1e83cf318e777f55d1331c110ec9cb08c4ad5824e6713ab04227ff31ae99d68b23e3c4f361eb733640c243f4ec0e76a5cd22c23a9e864df5c00e8","ssdeep":"","tlshash":"aa718f65ea83110b22739f75ab92522cfb3614767f031bf97ad0b0e4ab842b55124fcc","first_seen":"2026-03-02T18:30:03.057243Z","last_seen":"2026-03-02T18:30:03.057243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blackstash.cm/img/Close.4d7fd690f64a.svg","fqdn":"blackstash.cm","domain":"blackstash.cm","tld":"cm"},"ip":{"addr":"104.21.82.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blackstash.cm/","date":"2026-03-02T18:29:17.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blackstash.cm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 15:14:17 GMT","end":"Mon, 25 May 2026 16:11:53 GMT"},"fingerprint":{"sha1":"5B:82:0F:4F:8E:BA:19:0B:A5:45:2C:50:73:5A:40:E3:08:76:5A:10","sha256":"33:E0:3B:62:66:0D:A6:6C:F4:79:A4:A5:BC:D3:2B:3F:AD:22:99:BC:8C:AA:2C:4F:06:94:2C:4B:57:F8:02:F8"}}},"request":{"raw":"GET /img/Close.4d7fd690f64a.svg HTTP/1.1\r\nHost: blackstash.cm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blackstash.cm/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 18:29:17 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=33S%2BCpVNGluz%2FgSAByOGkhKvCj55SsP853KMaBRH8ZyOxUDmsvKuATmo8IpQTWY2I7xU6qK8oMut%2FAkYWtBGd6dG7whFFIXnEzXda1g%3D\"}]}\r\nlast-modified: Wed, 13 Nov 2024 07:35:20 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"673456b8-17c\"\r\ncf-ray: 9d62774f5dc9aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":380,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4d7fd690f64a92b38f9bd1e01107bf13","sha1":"436e50b031a3e86da968d51fe508eeb17a26ba64","sha256":"572f5171e797aa493dd44dd06a4dddaca6c812694261907cf6f19dc31ac68fe3","sha512":"5d008c8e0161929bb9492621a8e9b50c2cd6eb9ac842f7d674d24ed39705d2ca71f2bc1413ec840857cd37c13809d6bc54f8db378ea7bc272b83b183ebbc3e02","ssdeep":"","tlshash":"42e09277dddc8d8abe4997a0c373d8437d9724ce49abc874c9831200230800a27cb058","first_seen":"2025-11-15T07:38:12.071515Z","last_seen":"2026-03-02T18:30:03.060014Z","times_seen":3,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blackstash.cm/static/login/img/login.svg","fqdn":"blackstash.cm","domain":"blackstash.cm","tld":"cm"},"ip":{"addr":"104.21.82.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blackstash.cm/","date":"2026-03-02T18:29:17.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blackstash.cm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 15:14:17 GMT","end":"Mon, 25 May 2026 16:11:53 GMT"},"fingerprint":{"sha1":"5B:82:0F:4F:8E:BA:19:0B:A5:45:2C:50:73:5A:40:E3:08:76:5A:10","sha256":"33:E0:3B:62:66:0D:A6:6C:F4:79:A4:A5:BC:D3:2B:3F:AD:22:99:BC:8C:AA:2C:4F:06:94:2C:4B:57:F8:02:F8"}}},"request":{"raw":"GET /static/login/img/login.svg HTTP/1.1\r\nHost: blackstash.cm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blackstash.cm/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 18:29:17 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GO9DJUf8Oca2UD9HwrUCXR5xf%2FXl%2Bii355bR3C43SLDYcG%2Fk9kzw4%2FtI6Zq%2BEIkWiysuXBm3MZk8CwmqXwjEFQtVf1nnRAS3Bs%2BAzlo%3D\"}]}\r\nlast-modified: Sat, 01 Jun 2024 07:10:34 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"665ac96a-562\"\r\ncf-ray: 9d62774f5dcaaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1378,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"036a4e24e8234ff4c88c0ec4cf5f9785","sha1":"9a5508a4d2dcbc52477fc4227063ffbea788d72f","sha256":"400155e90f68e3154847d8ee86feed02de570f8c3ec284d25ae2335632734d85","sha512":"92d0d612a7287ee0d0f1107d3e9582a0a491251d921d47c9a00fae4edcae089ac90fea90afbe2b59a8c144c4135bdd062787e4d3b31bed5d79719469ff58ebf9","ssdeep":"","tlshash":"3f2131be634ec95c463583e54d66a8b86c5b00ce8d5c732dc290d232352a2fc5ce0ece","first_seen":"2024-12-31T19:55:49.772343Z","last_seen":"2026-03-02T18:30:59.527001Z","times_seen":7,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blackstash.cm/static/login/img/key-icon.svg","fqdn":"blackstash.cm","domain":"blackstash.cm","tld":"cm"},"ip":{"addr":"104.21.82.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blackstash.cm/","date":"2026-03-02T18:29:17.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blackstash.cm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 15:14:17 GMT","end":"Mon, 25 May 2026 16:11:53 GMT"},"fingerprint":{"sha1":"5B:82:0F:4F:8E:BA:19:0B:A5:45:2C:50:73:5A:40:E3:08:76:5A:10","sha256":"33:E0:3B:62:66:0D:A6:6C:F4:79:A4:A5:BC:D3:2B:3F:AD:22:99:BC:8C:AA:2C:4F:06:94:2C:4B:57:F8:02:F8"}}},"request":{"raw":"GET /static/login/img/key-icon.svg HTTP/1.1\r\nHost: blackstash.cm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blackstash.cm/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 18:29:17 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q7YCO80%2BBPm84wnbghW2wbNWGhjBQFAM%2BobvEKVIKH6q%2FzxIF5vgFHBmI%2BWX0%2B2p8HztcwsLMIHQLxaxZkTnzvYF98Swmid6AU7Tp%2BY%3D\"}]}\r\nlast-modified: Sat, 01 Jun 2024 07:10:34 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"665ac96a-3a7\"\r\ncf-ray: 9d62774f5dcbaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":935,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"659d48f274d844e83a4ce8c57bfacb65","sha1":"19247a96f8cb3d3b5270f3b66f15a7518fd16cfc","sha256":"1a4aa45f46ffcd82230f7efae867a0856e4fdbb332930cd9799f7a8e1b550ba9","sha512":"0a6ea8da84c815b5c28d68b15c15d0a1399ac799600593669baea71eb81d70017addcf14126fd3312a81710c07f06e41feeed4d9e813c2b158072ad6c96b3229","ssdeep":"","tlshash":"a41110dd55acd14d861d46af9e08f9958187e2c18fcd5004d7186e18305a97fa8206c6","first_seen":"2024-12-31T19:55:49.77089Z","last_seen":"2026-03-02T18:30:59.52554Z","times_seen":7,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blackstash.cm/static/login/img/clock.svg","fqdn":"blackstash.cm","domain":"blackstash.cm","tld":"cm"},"ip":{"addr":"104.21.82.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blackstash.cm/","date":"2026-03-02T18:29:17.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blackstash.cm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 15:14:17 GMT","end":"Mon, 25 May 2026 16:11:53 GMT"},"fingerprint":{"sha1":"5B:82:0F:4F:8E:BA:19:0B:A5:45:2C:50:73:5A:40:E3:08:76:5A:10","sha256":"33:E0:3B:62:66:0D:A6:6C:F4:79:A4:A5:BC:D3:2B:3F:AD:22:99:BC:8C:AA:2C:4F:06:94:2C:4B:57:F8:02:F8"}}},"request":{"raw":"GET /static/login/img/clock.svg HTTP/1.1\r\nHost: blackstash.cm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blackstash.cm/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 18:29:17 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qsnEezoluErs%2BtCkQOMA%2BLonM0BmO%2BEDBLaxtZOifix6iPsfnp5pX%2FToYcRn2hd5Qq%2BqqImVHECtMu24GJPaMbWBCsm9bytvhyGLhKs%3D\"}]}\r\nlast-modified: Sat, 01 Jun 2024 07:10:34 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"665ac96a-1e7\"\r\ncf-ray: 9d62774f5dcdaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":487,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"58419d577581ddb4d32bf47abd7ff6f0","sha1":"64852d74da20ba84de4746a8bb17e561178d53fd","sha256":"571172d71e1d901298e27e3c125b95b8beac9e0eab3eae236719a8e49e007da0","sha512":"cb0526c1ba700e56ea69b42a69a4905808ebeb54ee8df7553126013061ac319405148afe49b196a7262766a10da5bd57a70ead1aa192f2b0e7f3d707bf617b1a","ssdeep":"","tlshash":"76f059a812a9c24d00a425f24f6cf29200cff3e6a28c6218f284db1471039ebe8202c9","first_seen":"2024-12-31T19:55:49.765447Z","last_seen":"2026-03-02T18:30:59.527748Z","times_seen":6,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blackstash.cm/static/js/jquery.js","fqdn":"blackstash.cm","domain":"blackstash.cm","tld":"cm"},"ip":{"addr":"104.21.82.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blackstash.cm/","date":"2026-03-02T18:29:17.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blackstash.cm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 15:14:17 GMT","end":"Mon, 25 May 2026 16:11:53 GMT"},"fingerprint":{"sha1":"5B:82:0F:4F:8E:BA:19:0B:A5:45:2C:50:73:5A:40:E3:08:76:5A:10","sha256":"33:E0:3B:62:66:0D:A6:6C:F4:79:A4:A5:BC:D3:2B:3F:AD:22:99:BC:8C:AA:2C:4F:06:94:2C:4B:57:F8:02:F8"}}},"request":{"raw":"GET /static/js/jquery.js HTTP/1.1\r\nHost: blackstash.cm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blackstash.cm/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 18:29:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 12 Nov 2024 01:00:40 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: \"6732a8b8-4766a\"\r\ncontent-encoding: gzip\r\nage: 140\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cEkUXjCeLEks%2Bs3dfgMTAteNT0v%2BxQqI4DoWxx0CHVHWX1nFdS8V1HI6pFsn9VkyUHA3iZ9XCzTXQA54T3FLN1rJEuFqgjSmU%2FSzwEQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d62774f6dcfaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":292458,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"0208b96062ba59d07c4495115d2b42ce","sha1":"611b7f56ab2146e1277e9258f15c55d50034dcef","sha256":"6bd8c1051ca05f5061e65b7c1998d70f3c8e07e6d6bdef4488eeed44e52d8ff1","sha512":"e830b5784dc05a0d5b822b64a1a44cd65858f7c3f16cc21b860602195d74eda665cb3cef696096d67256daf0ee6109b4ea15eb5b402ce8e18a7086805569c727","ssdeep":"6144:4nFhNVls+TC1lFhTzeKpTcYmD2zK8U1Js3Px+WK+N7TFyygRWL/IaLgeNTIPfgy1:RjTcYmD4I4Px+WK+N7TFyjeTiPflAqqi","tlshash":"b654b3d9f78d112e423231aaac2e12cdb77cd171560458aefd4d597c24a083d83baf7a","first_seen":"2023-03-29T22:35:35Z","last_seen":"2026-08-10T12:43:21.017123Z","times_seen":2059,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blackstash.cm/1.png","fqdn":"blackstash.cm","domain":"blackstash.cm","tld":"cm"},"ip":{"addr":"104.21.82.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blackstash.cm/","date":"2026-03-02T18:29:17.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blackstash.cm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 15:14:17 GMT","end":"Mon, 25 May 2026 16:11:53 GMT"},"fingerprint":{"sha1":"5B:82:0F:4F:8E:BA:19:0B:A5:45:2C:50:73:5A:40:E3:08:76:5A:10","sha256":"33:E0:3B:62:66:0D:A6:6C:F4:79:A4:A5:BC:D3:2B:3F:AD:22:99:BC:8C:AA:2C:4F:06:94:2C:4B:57:F8:02:F8"}}},"request":{"raw":"GET /1.png HTTP/1.1\r\nHost: blackstash.cm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blackstash.cm/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 18:29:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 12 Nov 2024 00:42:44 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: \"6732a484-2557\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PICgK8WO1bmT1VE8%2FW1f0aVMlZYEpE9qZLfa64DY4Y75BK9eafddo0IISksQHi%2F5G3KrJbV0oS0bF6mgqYwAaCpeKeUscqruWa2OBBU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d62774f6dceaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9559,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 152 x 50, 8-bit/color RGB, non-interlaced","md5":"f559f3504a8504ee575c58d7afb6fd02","sha1":"8f56b87fda4f625e33f992ec9b66fa59adabdacb","sha256":"013b1f7a27874104b772e1e168b42b783c799e359fb0f16a3557d9508849b9c9","sha512":"2cef2bf6b5e17f824a995be5f76a73b8d593154c2b90bb03d00fe5d8e0abcdad70c322707ef60515995b331c0d3ac7a57904c6ba1746c6f946f18fca0b7b1464","ssdeep":"192:U7Az9UaB0ke3rq3tHopDkdDRrl1yd98+pefpaKOBm0dzgrDS+5Ek:U7S9Ui3px9l1m98zMm0lg3n5Ek","tlshash":"7b12af9fcaaebeac275e1730d236980a7a2f0b0082dff13a50ac0f515555a9d05782e6","first_seen":"2026-03-02T18:30:03.068468Z","last_seen":"2026-03-02T18:30:03.068468Z","times_seen":1,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blackstash.cm/static/favicon/favicon.3f5c3b6cb964.ico","fqdn":"blackstash.cm","domain":"blackstash.cm","tld":"cm"},"ip":{"addr":"104.21.82.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blackstash.cm/","date":"2026-03-02T18:29:17.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blackstash.cm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 15:14:17 GMT","end":"Mon, 25 May 2026 16:11:53 GMT"},"fingerprint":{"sha1":"5B:82:0F:4F:8E:BA:19:0B:A5:45:2C:50:73:5A:40:E3:08:76:5A:10","sha256":"33:E0:3B:62:66:0D:A6:6C:F4:79:A4:A5:BC:D3:2B:3F:AD:22:99:BC:8C:AA:2C:4F:06:94:2C:4B:57:F8:02:F8"}}},"request":{"raw":"GET /static/favicon/favicon.3f5c3b6cb964.ico HTTP/1.1\r\nHost: blackstash.cm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blackstash.cm/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 18:29:17 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bE3RCRiV342gDvw7KCEbQIj7x0wCNqHwNV5GCP66s9ky4eoWnTBnsyYPfVbOi%2BookpXEnuUiSuGCbzZqXkqm%2Fn%2Fkx%2BNWgluUzrY%2FEMM%3D\"}]}\r\nlast-modified: Wed, 13 Nov 2024 09:58:34 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6734784a-3c2e\"\r\ncf-ray: 9d627750ee55aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"3f5c3b6cb964c780aa717dc228211539","sha1":"639c2347ada84503006b483681913ba63b3f6a63","sha256":"e83542750d38fe9a7025bc26223a410212d7dcc59cc4b5f8600bad8ff8ce99c2","sha512":"0c2375c2e8e7686fe29910b5cb3e2d4fee1aec2374a37eab85ce3445310a836ab27ba18505bc892f5fec9549e5989e00ed3cdd500060a98884e29e0c12a71912","ssdeep":"48:fUlDiXQir1SwzJ/M5ss5CmArUd2JCH6J0zJ3bHJF+jMJUzJzmAOaCJOtJ2Q5NzJu:fUaAyJ/M1hH3lbD+jrRm3Gj7i9","tlshash":"3562a689a3000aaeda3845b1ce4be63fa2745fcc5c9517018bfa2ca33c7977b54136d4","first_seen":"2026-03-02T18:29:15.136348Z","last_seen":"2026-03-02T18:30:59.529617Z","times_seen":3,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":185,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"blackstash.cm","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}