{"report_id":"38abb51c-6570-4aab-8bd8-49441cc96584","version":0,"status":"done","tags":[],"date":"2026-08-25T21:12:26Z","url":{"schema":"http","addr":"idleminer.pro/","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"idleminer.pro/","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"title":"IdleMiner RPG — Mine Your Fortune","dom":{"size":47840,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8786)","md5":"5df765408626a732f6560c7dd8efd6bd","sha1":"5ae2a39123f723bff4fbef2411018be839f0ed8a","sha256":"5c95c539ecf120fb5117ddd6ee86604d63abdf16ead8868a06f77a8d721d1d7a","sha512":"dbc15f79b490f949d39e05904e9ad1e0f9a4000a85ddef075780e607071d721a1f4c019a7815bedd992498a9d7caa0ed5ddbbc2807c2dbaea1af6b471977d4aa","ssdeep":"768:DTcIIF5QOXhj/MXrhS4fbGaH4m7h0Ou9BPl0g0LX4lNu2jOgwv07zGZe668Y4SRM:3cIIF5QOXhj/MXrA4fbGaH4m7h0Ou9Bu","tlshash":"202395b041fa15b752a7a1c179a25b0b3ee1ea03ea4b020036fe0ee05fdbfa5dd17445","dom_hash":"domhashc9a907c1f0d947179968fa33ab8fbf9a","first_seen":"2026-08-25T21:12:27.70535Z","last_seen":"2026-08-25T21:12:27.70535Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"idleminer.pro/","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T21:12:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"idleminer.pro","ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-25T21:01:43.267668Z","last_seen":"2026-08-25T21:01:43.267668Z","alert_count":42,"request_count":21,"received_data":345913,"sent_data":9366,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":6,"received_data":196782,"sent_data":3326,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":1,"received_data":13273,"sent_data":583,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"idleminer.pro/js/auth.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f0991cdc40553c62a92dcb80c8eb8a0","sha1":"4c642cd3fea1afe92caa41a61d211def7bb56c6a","sha256":"0e5498209c2cafc7a3a4c2cb4e07c36d39b2d1cd463db6d3e33f10816f176304","sha512":"934bea35728614de5619a2799bbba47606ef10d1544c88d538c60d096e2d6066644770f58adc1ef5bc2b747da4b491454ff68149ccc06a3ca84faf45d64996f0","ssdeep":"192:vNX9kEyAqxYBnzraKQpCLkC6YnqvLXiPLABgNcQ/Mem1sN+WyOGA8yT7qBUc7hf/:vl50CyY0BAmvV8Jhs","tlshash":"bc32440a32f305724e6365b93faf6085362694073c0ade1cbe6c468d7f15e6479b3b94","size":10922,"data":"","first_seen":"2026-08-25T21:01:47.80514Z","last_seen":"2026-08-25T21:12:27.713113Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/battle.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"694a2ab323055a7629a7c773165e5c97","sha1":"38f37de34cc187b5d81b0e8ee020885d8bf7e44e","sha256":"728eeb8337b043059d5bd5d0ed1bc32801be13c5dd564d1a44e794c7ccce6a03","sha512":"5d25e93838f930c88f8bd9a80abd71b3aad37ccc9bd0c604e052ff0060c758ccead096b8d4eca8c61198846dcda396b120e59e57927a66ef1533eff0e449aa9c","ssdeep":"192:3RTKug9U5zcyylL/vCxDTU6emRezou4Ye/yovqMN:3RTKud5oLaPTezhe/yrMN","tlshash":"8af10e5a37f70538547b11aa6edb4346e034911b2947ca8c391c9ac88fc9e75f0aaff4","size":7726,"data":"","first_seen":"2026-08-25T21:01:47.816966Z","last_seen":"2026-08-25T21:12:27.714656Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/game.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5904ab833137556e7da7772c1b284e56","sha1":"84318f3eb28ba2335c6df11137d2c3bdb3cb2966","sha256":"f89cfc0767ea34716626d425d8b372f70aac1916febaa5a54e3c8994a7232fbb","sha512":"ce1eb00267b170c855fcc28a605d73ff5e3cf5f1707148575daf2bf97737ad1ea3da830d08e9feeca70eed2fda9211ee4eea67bd6868ffaf8e2e013735a932e9","ssdeep":"192:ERTi9tG+lCvWbhjRK3hITFPxFyF+h1sKvPGrQ6DeQAjKUxPOUvAgE1uZba4QZyZn:OiPG+lXbpcIxxNhNiU44r","tlshash":"3122412a29f30172a973237e1b9f75053a346047bc0be7a87d2c4b407fa6524567b694","size":10387,"data":"","first_seen":"2026-08-25T21:01:47.806164Z","last_seen":"2026-08-25T21:12:27.749961Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/config.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e2c5004eec9e2dc78baaea07139a6cd","sha1":"e34de277e3302931e8e218c60295865b52ef70fb","sha256":"fb610f449d3cf8fe25e3f172cdd43e5fde19f5e453a6f93fc7e7731c0ce94b54","sha512":"9a4d02a7f1b5fafbfaa090a9285d4fbf30964ddf58436cccc6efab62251b146fcd426db9877396c847a9cdb76b5c807fd93ca5c157cb60a891096d13bcd46df9","ssdeep":"192:xFdzzrR5pgNfNk2mHRzjI1rq00oQm+XRsyGyai0uZfoxa9LVaFnsKe8ePePLC6CM:hzzrRvufkHRzm4/Iza9flGWiF0A","tlshash":"92926afcd851062a982391ec585e8d1e2277f2d35d6627acfa5f9a402f1de0de0f8394","size":19591,"data":"","first_seen":"2026-08-25T21:01:47.798008Z","last_seen":"2026-08-25T21:12:27.722943Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/character.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b5f1b415f8558711ec4c0a40c379a84","sha1":"ff7f2cab04100ddc4559e2004fcf1ec305f250c1","sha256":"17d01bbadb7212154abd27ffb5020620e74a97fc2565612ab89dc8a921952b80","sha512":"e72aac72d3bbd9fbe3764306546efb0a21eaf35ca9e7850a63dc739ac2acee676441ebccf56a23235dde3b2d7ef8eef87d1c391a3cd9a0d5949c879c4580a721","ssdeep":"96:75iQ0miQzLLlhomG7FUfGJ9Dk4q9DhuYsMfsQc+nOyKgYcxGdkngACGNvKGISFs:75iQ0miQznlhHWFWK9eOMEQtvSFdktCz","tlshash":"97c13dea10f604b4c5ab50ef4bcf864131611047b982c998bdbd87746fa4f3062b76ea","size":5960,"data":"","first_seen":"2026-08-25T21:01:47.814863Z","last_seen":"2026-08-25T21:12:27.710005Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/achievements.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c27db4d0327a85eb76b7a3912962d55a","sha1":"1e4fb0535ce6cbdb484e8f224e164870f6f62df7","sha256":"345c0d43ba91ed540d21024915ecd58a66849f79c4f69c19f2e84dc6c28c2583","sha512":"1000803628593b2b382678709137a4994163b4cfc40428e0d16ae0b8deac168bdcfc8fa1868572b2516d6cf48234a7ff5e802ef5d35f0a3c9769edb5329579e2","ssdeep":"192:wUaXeUDjXtSByWVEmUm3BDsm6QCWJgmlg:qXeUD7tSBjVEmIQCMg","tlshash":"1b32b7fa42f61041532bb038299f3202367851836d5d39587f8ed3a81f7f64dea7666c","size":11031,"data":"","first_seen":"2026-08-25T21:01:47.802073Z","last_seen":"2026-08-25T21:12:27.747632Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/storage.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56bbac3b2524293c2b7a6bc42b49adc9","sha1":"1a06136e6ded0de417562a572925ae2c42286a33","sha256":"8f2b4ca5dd9127b38e29f8e5f55acddbd30bc4101b08237d35cace5908f814ca","sha512":"732eac19a2eed6b69d2b726498a7bba384353dfe7c6ba6b11aa4384d1e2fb297e0a5dbb2c71e7118bc7a99cd41855463f0fe2a127c34ee99d18b15a4f7fd63b4","ssdeep":"96:L8+5hGPTz348RXUHM1UmmT4TiFUkCi+VeqdCaCijKn6x1269CTqNHJzp:P2XDEsBmT+iFUkCi+VeqdCaCsc69CTeT","tlshash":"0b9101591db311a66a733367096f30053d3470dbbc4babac799c47453f86328527e789","size":4386,"data":"","first_seen":"2026-08-25T21:01:47.815809Z","last_seen":"2026-08-25T21:12:27.712016Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/effects.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"812ecabecb0a1eb7f8a7e1ab55929b15","sha1":"abac652743d4db426e97689897937e6f5f861898","sha256":"5bc43109a583adb8181fef63656ddd504314b49e232601cb286b525de42366d6","sha512":"86699e524ce12b2c32d3b034abc65ef1f0115dd6880a7861c5d96377a1a739b807baa0741da3054c0056b70930e54185732dc93293cd2dcef173295122bc6f95","ssdeep":"192:Q3mUTu5u8tpZD+tdmkFPH6vrECdrmr+C7Xq+q1/vLrR9Orosl39x4Xbck6nE:Q3mMu5ugat3FPazEcrM+cqHBsN97E","tlshash":"09521e7a22f70525b947d16d2fab5604322130077c52dc2e3dacb6888fdeb649572fb4","size":13204,"data":"","first_seen":"2026-08-25T21:01:47.803161Z","last_seen":"2026-08-25T21:12:27.725204Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/ui.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f88bdb5bcea74f05621f733a2283d164","sha1":"8943996272882a4408b5a617b9f2f79cfc00a026","sha256":"8945037d8b7d823468ab79a73c41ee12b79c53f8bfd171e3cc7a2b7f0168b222","sha512":"8e8223d1f76a9744ee166da4481cbe36406f34521dd7193637cacdb3ae46d06d9532bf60937386c50d9f0ce629ffff4da1d7b3d75f3527d8c8c7c659a5f881d7","ssdeep":"192:lyW4RvtkWA7gQ3V7CE4Iq6sLanj0CyGn5mit3TKkc1COKCAoD4LL5NwE:ssTIoj0gmiVme","tlshash":"a332ff3b317700719a7769b75bcb938d3639600b7841e58a3d2c8a945fe7e1058b3be4","size":11660,"data":"","first_seen":"2026-08-25T21:01:47.811009Z","last_seen":"2026-08-25T21:12:27.726858Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/main.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3369049224c52b613d6294ef82c53c05","sha1":"9d8e4fa55bffe18e823428ca535536c52aa7e4a2","sha256":"3fe5815721f083ce4074864df472117a5b5ea56d0cd07e2ebc314f24e16bbf79","sha512":"f172aec102db87833eacd815aecc9e9b639e71ae250963622febbbeb7e908e6f6915e5beead58c09828bbfcf81c72f145c659d72bfff02f26e0456ecad11c497","ssdeep":"","tlshash":"b1d0172a16b31f7712b38a9e1f9b5b413a6795533376e684772852c50f8820973b01cc","size":289,"data":"","first_seen":"2026-08-25T21:01:47.800129Z","last_seen":"2026-08-25T21:12:27.718402Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/progression.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b78f69920f4daf043eca37d4aa9b10e3","sha1":"908195f52713847494048b6e87c71a0a526312f1","sha256":"76cc3f8a469e996e48bc8c9e481788e6ad70649ef1e5bb15a618fb5631ff999f","sha512":"cc295a9777cf853709c945ad5722622622a93723bfe072df83e77363e3df72d8c74a1d7dd8b01d165450b3cbaeca76747809427269db821aa86f8ea82581cf95","ssdeep":"96:lP2QcgPrLgkSVvgt3XLfOtJQLxVqF9DtPO3Unxq9BrP53TJ6yWHmb+3BDhnTrQn/:lP2QhPrLgkSVvgt3XCtJQLxVqFtt2knc","tlshash":"97a1146439c3b4155262b169294fa109113eb947728ac9cef8de4e907fc6720c1bbfc6","size":4954,"data":"","first_seen":"2026-08-25T21:01:47.799179Z","last_seen":"2026-08-25T21:12:27.71698Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/pixel-renderer.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9752fd28978d2e88067cb62ed9b5576c","sha1":"0e75c4e4e22455e753f55a65d1e8a68e8ac950d7","sha256":"9c3321b8359882275475303d3e46885bcd1d62736d52afbb99535831f6899469","sha512":"14d759701bf52441631c037d331d7808e15fb5cb6b654b927b5ec3ceffc313678739471e32bbf4f00ab5d9e3150eff93e8753f1364b8ffd856422477f679ca80","ssdeep":"96:IRcnPOCR071I3hiSTeY3r9lrmCmPxge3L7LOQvA7LB2HChwkqw0oaVemYzOLBRL4:yORl3hisXAHCKxj/9VZJs","tlshash":"e3d1cb76c6b3752950d7d01d4b2f9949e22aa063991ffe2b39afc3004fb8162a1ddd30","size":6173,"data":"","first_seen":"2026-08-25T21:01:47.809909Z","last_seen":"2026-08-25T21:12:27.755564Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/asset-loader.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"635fb0173680bd4d344ec3b7a5f11cf0","sha1":"fe981c5186efb25dd34fddcae63bae8c3fa6f725","sha256":"b7b3e0d0fb606988c3ab315d2a9720b72b467477b8d0225e9456fca5471f39c2","sha512":"92734377a2e863a55aeed5b2e1cfac28579adf455d4b943d0d2234606f39e50b42b56525d0873e27a55ab035096ebd07179f14d3b7d73395806b2ef0583fe051","ssdeep":"192:KxdFSW6RJL/79Q8G/66BeA0c43PeSTCOGxZiI7ig50Z4L9I7Qmxb+O:Kxdd6PLO3/6PA0c4WcCtxZJAZ1j","tlshash":"f032cfaac973250e00a36479870f6404f6679023671fed9e3e5ec3105fb972ae1e5fa4","size":11549,"data":"","first_seen":"2026-08-25T21:01:47.804316Z","last_seen":"2026-08-25T21:12:27.756858Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"idleminer.pro/css/components.css","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:50.381Z","timestamp":1787692310381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idleminer.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 17:42:38 GMT","end":"Sun, 11 Oct 2026 18:40:15 GMT"},"fingerprint":{"sha1":"E1:55:EB:35:B8:0E:7E:CC:51:0A:53:91:F1:1D:73:FB:5D:78:21:ED","sha256":"A8:A7:96:79:98:E3:AD:C3:E8:43:24:75:A4:82:89:73:AB:7E:77:65:84:6A:2D:14:FD:DE:23:25:EA:CF:97:4B"}}},"request":{"raw":"GET /css/components.css HTTP/1.1\r\nHost: idleminer.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idleminer.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 21:11:51 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DBM6AJbR7Oz3uZSX7wDAoT4NhWv%2FLW0D43IPjIU0wZuQ3%2FivsVq1cQH5GnHgo3Um%2FOsK4jgRgADCTpxF9xKm7AMfiNVQq2xEznL7bZg9%2FsTP4xDYc0KGmGO1allc131c\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 16 Jul 2026 13:27:48 GMT\r\netag: W/\"a112-19f6b1ca820\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a30d976bec3c5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":41234,"size_decoded":9036,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"e5d68120a832118a819ffc0581a8b650","sha1":"6e0d99f010bd6a90e5971db807fa07a1c72552a7","sha256":"990c507c0de1e705c363c3aefb9718f0fbe2a97170264e0b2fbc49b46cbfa25d","sha512":"bd41030db38c504f1fdf4762da2be05c8911e2d1a65f14c27d38adb0595113bcc8eeb76fa6228a86ae0ae631165da978825266ea6e9e5fc5f39df08853ff6844","ssdeep":"768:1yaAuJFkFIFhMNYjZRiW1j926emOeqdPV0A8S:5Ju2YNhW9DbRS","tlshash":"cd030171566305a5782be65c2b9b8b9a739c7143b807c57d3ac631048fcd2fca252bbc","first_seen":"2026-08-25T21:01:47.813827Z","last_seen":"2026-08-25T21:12:27.707862Z","times_seen":2,"resource_available":false,"data":null}},"time_used":866,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":746,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/character.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:50.392Z","timestamp":1787692310392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idleminer.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 17:42:38 GMT","end":"Sun, 11 Oct 2026 18:40:15 GMT"},"fingerprint":{"sha1":"E1:55:EB:35:B8:0E:7E:CC:51:0A:53:91:F1:1D:73:FB:5D:78:21:ED","sha256":"A8:A7:96:79:98:E3:AD:C3:E8:43:24:75:A4:82:89:73:AB:7E:77:65:84:6A:2D:14:FD:DE:23:25:EA:CF:97:4B"}}},"request":{"raw":"GET /js/character.js HTTP/1.1\r\nHost: idleminer.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idleminer.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 21:11:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o99YkmFMLoaqoLXEWw2n7y8zCyms6x5QBPDPnTbOR4IVwroYv4B9PaiWDS%2F7HOVyJkUK6IFijRbhgQBy9JjZGlnfPq4yUgcxo67MD8lNsWZvD1KtPV%2BdSUhn2B119Za%2F\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 10 Jul 2026 02:30:20 GMT\r\netag: W/\"1748-19f49dc9260\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a30d976bfc405696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5960,"size_decoded":2553,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"9b5f1b415f8558711ec4c0a40c379a84","sha1":"ff7f2cab04100ddc4559e2004fcf1ec305f250c1","sha256":"17d01bbadb7212154abd27ffb5020620e74a97fc2565612ab89dc8a921952b80","sha512":"e72aac72d3bbd9fbe3764306546efb0a21eaf35ca9e7850a63dc739ac2acee676441ebccf56a23235dde3b2d7ef8eef87d1c391a3cd9a0d5949c879c4580a721","ssdeep":"96:75iQ0miQzLLlhomG7FUfGJ9Dk4q9DhuYsMfsQc+nOyKgYcxGdkngACGNvKGISFs:75iQ0miQznlhHWFWK9eOMEQtvSFdktCz","tlshash":"97c13dea10f604b4c5ab50ef4bcf864131611047b982c998bdbd87746fa4f3062b76ea","first_seen":"2026-08-25T21:01:47.814863Z","last_seen":"2026-08-25T21:12:27.710005Z","times_seen":2,"resource_available":true,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/storage.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:50.395Z","timestamp":1787692310395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idleminer.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 17:42:38 GMT","end":"Sun, 11 Oct 2026 18:40:15 GMT"},"fingerprint":{"sha1":"E1:55:EB:35:B8:0E:7E:CC:51:0A:53:91:F1:1D:73:FB:5D:78:21:ED","sha256":"A8:A7:96:79:98:E3:AD:C3:E8:43:24:75:A4:82:89:73:AB:7E:77:65:84:6A:2D:14:FD:DE:23:25:EA:CF:97:4B"}}},"request":{"raw":"GET /js/storage.js HTTP/1.1\r\nHost: idleminer.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idleminer.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 21:11:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zMwfufGg4bqbfRRKRDmflo8%2BpqbVswdG8NAmMdH6veVDEa2k6p5L1JH4yLNpQms0IWWK%2BJFSm2UgEMHApAx2oAwH8RAbtCR838tPmFvtWd7az2zgPdoBrXiR%2F3m%2B0b8R\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 10 Jul 2026 03:10:29 GMT\r\netag: W/\"1122-19f4a015488\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a30d976bfc425696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4386,"size_decoded":2191,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"56bbac3b2524293c2b7a6bc42b49adc9","sha1":"1a06136e6ded0de417562a572925ae2c42286a33","sha256":"8f2b4ca5dd9127b38e29f8e5f55acddbd30bc4101b08237d35cace5908f814ca","sha512":"732eac19a2eed6b69d2b726498a7bba384353dfe7c6ba6b11aa4384d1e2fb297e0a5dbb2c71e7118bc7a99cd41855463f0fe2a127c34ee99d18b15a4f7fd63b4","ssdeep":"96:L8+5hGPTz348RXUHM1UmmT4TiFUkCi+VeqdCaCijKn6x1269CTqNHJzp:P2XDEsBmT+iFUkCi+VeqdCaCsc69CTeT","tlshash":"0b9101591db311a66a733367096f30053d3470dbbc4babac799c47453f86328527e789","first_seen":"2026-08-25T21:01:47.815809Z","last_seen":"2026-08-25T21:12:27.712016Z","times_seen":2,"resource_available":true,"data":null}},"time_used":645,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":645,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/auth.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:50.400Z","timestamp":1787692310400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idleminer.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 17:42:38 GMT","end":"Sun, 11 Oct 2026 18:40:15 GMT"},"fingerprint":{"sha1":"E1:55:EB:35:B8:0E:7E:CC:51:0A:53:91:F1:1D:73:FB:5D:78:21:ED","sha256":"A8:A7:96:79:98:E3:AD:C3:E8:43:24:75:A4:82:89:73:AB:7E:77:65:84:6A:2D:14:FD:DE:23:25:EA:CF:97:4B"}}},"request":{"raw":"GET /js/auth.js HTTP/1.1\r\nHost: idleminer.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idleminer.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 21:11:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ZBwqV%2BV5m9NdLPXE6nGI4SqWyP6FPNAkMAaKTBhuuwXByS%2F7GuU2%2FF%2BagWYHGUAM7RUrh0imLmnVrn2GV9mYtYw7hlwSnXHKJv9u8yNgDPdnmXEKFdGLEXFr%2BREeoHD\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 10 Jul 2026 03:10:44 GMT\r\netag: W/\"2aaa-19f4a018f20\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a30d976c0c465696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10922,"size_decoded":3319,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"3f0991cdc40553c62a92dcb80c8eb8a0","sha1":"4c642cd3fea1afe92caa41a61d211def7bb56c6a","sha256":"0e5498209c2cafc7a3a4c2cb4e07c36d39b2d1cd463db6d3e33f10816f176304","sha512":"934bea35728614de5619a2799bbba47606ef10d1544c88d538c60d096e2d6066644770f58adc1ef5bc2b747da4b491454ff68149ccc06a3ca84faf45d64996f0","ssdeep":"192:vNX9kEyAqxYBnzraKQpCLkC6YnqvLXiPLABgNcQ/Mem1sN+WyOGA8yT7qBUc7hf/:vl50CyY0BAmvV8Jhs","tlshash":"bc32440a32f305724e6365b93faf6085362694073c0ade1cbe6c468d7f15e6479b3b94","first_seen":"2026-08-25T21:01:47.80514Z","last_seen":"2026-08-25T21:12:27.713113Z","times_seen":2,"resource_available":true,"data":null}},"time_used":703,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":703,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/battle.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:50.403Z","timestamp":1787692310403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idleminer.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 17:42:38 GMT","end":"Sun, 11 Oct 2026 18:40:15 GMT"},"fingerprint":{"sha1":"E1:55:EB:35:B8:0E:7E:CC:51:0A:53:91:F1:1D:73:FB:5D:78:21:ED","sha256":"A8:A7:96:79:98:E3:AD:C3:E8:43:24:75:A4:82:89:73:AB:7E:77:65:84:6A:2D:14:FD:DE:23:25:EA:CF:97:4B"}}},"request":{"raw":"GET /js/battle.js HTTP/1.1\r\nHost: idleminer.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idleminer.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 21:11:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4slLKatlk3womFrCCNWbKBaX8nYir188eBDj6QXwyNHbWvk8RP85mbG8S7fc1a8i9TQwU51Nx4MId3xBMzDZOjmPnXdxhFgSGlKtUgrzJyjc%2B%2FQn2nZ2KrELW4IA4SEb\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 13 Jul 2026 20:20:42 GMT\r\netag: W/\"1e2e-19f5d239990\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a30d976c0c485696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":7726,"size_decoded":2784,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"694a2ab323055a7629a7c773165e5c97","sha1":"38f37de34cc187b5d81b0e8ee020885d8bf7e44e","sha256":"728eeb8337b043059d5bd5d0ed1bc32801be13c5dd564d1a44e794c7ccce6a03","sha512":"5d25e93838f930c88f8bd9a80abd71b3aad37ccc9bd0c604e052ff0060c758ccead096b8d4eca8c61198846dcda396b120e59e57927a66ef1533eff0e449aa9c","ssdeep":"192:3RTKug9U5zcyylL/vCxDTU6emRezou4Ye/yovqMN:3RTKud5oLaPTezhe/yrMN","tlshash":"8af10e5a37f70538547b11aa6edb4346e034911b2947ca8c391c9ac88fc9e75f0aaff4","first_seen":"2026-08-25T21:01:47.816966Z","last_seen":"2026-08-25T21:12:27.714656Z","times_seen":2,"resource_available":true,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/css/battle.css","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:50.382Z","timestamp":1787692310382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idleminer.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 17:42:38 GMT","end":"Sun, 11 Oct 2026 18:40:15 GMT"},"fingerprint":{"sha1":"E1:55:EB:35:B8:0E:7E:CC:51:0A:53:91:F1:1D:73:FB:5D:78:21:ED","sha256":"A8:A7:96:79:98:E3:AD:C3:E8:43:24:75:A4:82:89:73:AB:7E:77:65:84:6A:2D:14:FD:DE:23:25:EA:CF:97:4B"}}},"request":{"raw":"GET /css/battle.css HTTP/1.1\r\nHost: idleminer.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idleminer.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 21:11:50 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ueMKoXHEj1rL1d205W3ojglwzxjovQQ2iL1XR6aJGGgoa0bPPUbC8NLey3UTC2wzBtPDjS8AobWeK%2BaW7v4QIVTLrHCE5haYZfdhOyZp0yIbqxxwQNc9R4qOZ2I4j2xd\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 16 Jul 2026 14:22:29 GMT\r\netag: W/\"2793-19f6b4eb888\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a30d976bec3d5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":10131,"size_decoded":2915,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"a9c2f78675e7d0079dcf9a15f6288b63","sha1":"ad1e0cde533307fece65ff0d30a4284e8a01d010","sha256":"dcbebc5416f1010e99ebd51643b0a8119b5b4342214ca65e987da3c18ab9d317","sha512":"f1d8d08858f905dece41b1e8b079646b6c254a4a4c190d10a6156f6b096fde6704b45d6108d394e6f6a8a56768caaf44effaafe6b804625fc4c2e98c8d09a7c2","ssdeep":"192:nebJ9K8oybBFIASerW/bWq3RBeHSRWeufTwEjIb/Ezhjj/QsS/3h/oaf0/+iczM:e0LzWq3Rox","tlshash":"5222c9b514930444b51bd98c5fb68e49226cb003f41ecc28368d39ca8fed3acde96bb5","first_seen":"2026-08-25T21:01:47.796508Z","last_seen":"2026-08-25T21:12:27.715808Z","times_seen":2,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/progression.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:50.390Z","timestamp":1787692310390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idleminer.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 17:42:38 GMT","end":"Sun, 11 Oct 2026 18:40:15 GMT"},"fingerprint":{"sha1":"E1:55:EB:35:B8:0E:7E:CC:51:0A:53:91:F1:1D:73:FB:5D:78:21:ED","sha256":"A8:A7:96:79:98:E3:AD:C3:E8:43:24:75:A4:82:89:73:AB:7E:77:65:84:6A:2D:14:FD:DE:23:25:EA:CF:97:4B"}}},"request":{"raw":"GET /js/progression.js HTTP/1.1\r\nHost: idleminer.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idleminer.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 21:11:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sre7IS0qzTywzYp5Qp9dubAHkQcXocdkiSdkI5wmOm2tGxcmj4E5ec%2FoJDaN43wEAsAKoiUVlfuL04r57Lb3vInyHi%2FHvfU75QmGvemw1vQgixbqj3B1ixe4m7zUjhDJ\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 16 Jul 2026 14:06:19 GMT\r\netag: W/\"135a-19f6b3feb78\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a30d976bfc3f5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4954,"size_decoded":2030,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"b78f69920f4daf043eca37d4aa9b10e3","sha1":"908195f52713847494048b6e87c71a0a526312f1","sha256":"76cc3f8a469e996e48bc8c9e481788e6ad70649ef1e5bb15a618fb5631ff999f","sha512":"cc295a9777cf853709c945ad5722622622a93723bfe072df83e77363e3df72d8c74a1d7dd8b01d165450b3cbaeca76747809427269db821aa86f8ea82581cf95","ssdeep":"96:lP2QcgPrLgkSVvgt3XLfOtJQLxVqF9DtPO3Unxq9BrP53TJ6yWHmb+3BDhnTrQn/:lP2QhPrLgkSVvgt3XCtJQLxVqFtt2knc","tlshash":"97a1146439c3b4155262b169294fa109113eb947728ac9cef8de4e907fc6720c1bbfc6","first_seen":"2026-08-25T21:01:47.799179Z","last_seen":"2026-08-25T21:12:27.71698Z","times_seen":2,"resource_available":true,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":652,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/main.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:50.406Z","timestamp":1787692310406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idleminer.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 17:42:38 GMT","end":"Sun, 11 Oct 2026 18:40:15 GMT"},"fingerprint":{"sha1":"E1:55:EB:35:B8:0E:7E:CC:51:0A:53:91:F1:1D:73:FB:5D:78:21:ED","sha256":"A8:A7:96:79:98:E3:AD:C3:E8:43:24:75:A4:82:89:73:AB:7E:77:65:84:6A:2D:14:FD:DE:23:25:EA:CF:97:4B"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: idleminer.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idleminer.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 21:11:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=90GwBtQ4YC8yVo%2BZXEn1pKtR%2F71NZ2iEMhCMgZX9r3rDfG6YntZBmV5Cs%2Bx4IztRgp7auGAYcFlx0ypFV5yhsalfQhA8PM4tnEBT9evwhjDAtyHn3%2B%2BWSgCWIkT0Iz%2BN\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 10 Jul 2026 02:39:19 GMT\r\netag: W/\"121-19f49e4cbd8\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a30d976c0c4a5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":289,"size_decoded":931,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text","md5":"3369049224c52b613d6294ef82c53c05","sha1":"9d8e4fa55bffe18e823428ca535536c52aa7e4a2","sha256":"3fe5815721f083ce4074864df472117a5b5ea56d0cd07e2ebc314f24e16bbf79","sha512":"f172aec102db87833eacd815aecc9e9b639e71ae250963622febbbeb7e908e6f6915e5beead58c09828bbfcf81c72f145c659d72bfff02f26e0456ecad11c497","ssdeep":"","tlshash":"b1d0172a16b31f7712b38a9e1f9b5b413a6795533376e684772852c50f8820973b01cc","first_seen":"2026-08-25T21:01:47.800129Z","last_seen":"2026-08-25T21:12:27.718402Z","times_seen":2,"resource_available":true,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:51.329Z","timestamp":1787692311329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://idleminer.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 23 Aug 2026 17:38:28 GMT\r\nexpires: Mon, 23 Aug 2027 17:38:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 185603\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40836,"size_decoded":41649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40836, version 1.0","md5":"9b3b8ff7ce2027b021390b101482e960","sha1":"94042c26bb2a2e3337c293ffa5cd88894764207e","sha256":"6f7153d9320d0b79ff1fe4502f0b2f9d847dc765d66414a0efb91b31096e113e","sha512":"7f63a3f2e93936f73c8a881d3cdf17e7516e54ae50b7cab42ef3a89575f9507b27fe368b48364ce7f885dc6346969e9e46e64a7eb2cca98f416ea9a5f98e154d","ssdeep":"768:HUabfwFhS0q7rdQ5DNYk1p5tLYmDEz87/yzIMr53M2ToWr1McLhgjXsucOCH3mZh:0asFhy7rdQIkdtUmDByEApJTo+Scfu1T","tlshash":"b303028073271964a8984cac4c5def62d9c32cf75b632da05e7e84f7eab2c09d457348","first_seen":"2025-01-30T16:57:40.808331Z","last_seen":"2026-08-26T13:02:33.699717Z","times_seen":6161,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":29,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/npcs/crypt-bone-golem.png","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:51.333Z","timestamp":1787692311333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idleminer.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 17:42:38 GMT","end":"Sun, 11 Oct 2026 18:40:15 GMT"},"fingerprint":{"sha1":"E1:55:EB:35:B8:0E:7E:CC:51:0A:53:91:F1:1D:73:FB:5D:78:21:ED","sha256":"A8:A7:96:79:98:E3:AD:C3:E8:43:24:75:A4:82:89:73:AB:7E:77:65:84:6A:2D:14:FD:DE:23:25:EA:CF:97:4B"}}},"request":{"raw":"GET /npcs/crypt-bone-golem.png HTTP/1.1\r\nHost: idleminer.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idleminer.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 21:11:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 13 Jul 2026 01:37:36 GMT\r\netag: W/\"c21d-19f591f5f00\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VPjxrjY7KgDMRfcBDSJg%2BYrDLLhoYukbYzzlx2sboG62ckXC%2Bd9O9ZnFL2NO55fU6D03F%2F0Llqfh%2Bz0s7VSImQ6AL71GHY5hYoDZA8YQ56AAlEjY8QnwcpUPUPz12f2J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30d9771dc8f5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49693\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":49693,"size_decoded":50417,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"6891bde987a30bb9dd8dd6f767ec15ee","sha1":"836da659624ad1c2d5d0ec39ebf6eb6baade3686","sha256":"2fbb92e97c20978587835f2a97310b1d8e9f4bf8400aac77355e65a06009ec70","sha512":"ebcd2e6edcf12663b5192edda9cb745eeb30bfbdb6f1113c6e6b6bbdedec7662be01050228c0805462df0ddef7fe1a5a27da27c1db2fa81490f5ac9033252f2d","ssdeep":"1536:cj9JcyldGM0DJeOgcTl3ZdwUUtDhNV7mk:cJJ9wOOgMZdUBhz7mk","tlshash":"072302f9f004f97615a6ecd66f9eb96c767cce40041d295bb39c00877e3326fa51a481","first_seen":"2026-08-25T21:01:47.820269Z","last_seen":"2026-08-25T21:12:27.719931Z","times_seen":2,"resource_available":false,"data":null}},"time_used":844,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":714,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T21:11:49.313Z","timestamp":1787692309313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idleminer.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 17:42:38 GMT","end":"Sun, 11 Oct 2026 18:40:15 GMT"},"fingerprint":{"sha1":"E1:55:EB:35:B8:0E:7E:CC:51:0A:53:91:F1:1D:73:FB:5D:78:21:ED","sha256":"A8:A7:96:79:98:E3:AD:C3:E8:43:24:75:A4:82:89:73:AB:7E:77:65:84:6A:2D:14:FD:DE:23:25:EA:CF:97:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: idleminer.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 21:11:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Li070coHumEGMae%2BdDWxnGMiFapPK5xdyGFeOsad2wnq2QyIzpTXhvciE2PEn8ewEiWNgdNEJkFLYqYSrOWZrZNEyn054MkXDnZtAU7TnYGe11NEb5crrAtPkMJhlfeO\"}]}\r\npriority: u=0,i\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nlast-modified: Thu, 16 Jul 2026 14:14:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a30d9766bbc05696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36597,"size_decoded":8188,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"82c7c61f193ce3167e1e4c92e2774b78","sha1":"446c817eb5e89dfa3ba5d47e7a81fe8563004a81","sha256":"af8a90cd723a90a7c0f2dd8fff249e188b0ddc7401f6cb6253c8bc42a168db26","sha512":"0354d22d1da4f36b73db93406534a182e8827bd8f91d291ac87f6b94d4c0e77c8c10df4aeb268eeca49040d2b4197c2cd7ee0941ac788624aa86d0d2179c2afc","ssdeep":"768:lJOIIJ194XMNbajKgFv07zGZe668Y4SRM:HOIIJIXMNbVX7zGZe668Y4YM","tlshash":"a7f233a451f9657b52a390c679a65b1b3ee5ea03ca9f120032fd0bd40febf96ec07405","first_seen":"2026-08-25T21:01:47.807919Z","last_seen":"2026-08-25T21:12:27.72066Z","times_seen":2,"resource_available":false,"data":null}},"time_used":851,"timings":{"blocked":-1,"dns":216,"connect":21,"send":0,"wait":612,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/css/animations.css","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:50.380Z","timestamp":1787692310380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idleminer.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 17:42:38 GMT","end":"Sun, 11 Oct 2026 18:40:15 GMT"},"fingerprint":{"sha1":"E1:55:EB:35:B8:0E:7E:CC:51:0A:53:91:F1:1D:73:FB:5D:78:21:ED","sha256":"A8:A7:96:79:98:E3:AD:C3:E8:43:24:75:A4:82:89:73:AB:7E:77:65:84:6A:2D:14:FD:DE:23:25:EA:CF:97:4B"}}},"request":{"raw":"GET /css/animations.css HTTP/1.1\r\nHost: idleminer.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idleminer.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 21:11:51 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u4MFaTCtI0k0c6yt%2FjV87q9ATAJajhhOv0QEyhKu0jVRFe4YRsAZTv9l6HiyMNdFzqjFCC5tRxK4rTZHbD1kXitf9jmLZFQ%2BtNGcNON%2BdT6Uwh4aW22EfQm%2F6h0RlYDx\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 10 Jul 2026 02:53:11 GMT\r\netag: W/\"23f5-19f49f17dd8\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a30d976bec3b5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":9205,"size_decoded":2680,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"746fa18732af5a45e6fe77cd82c8f15c","sha1":"fe4f1e95f144d3a1ed9b61f6e819a317f94a1241","sha256":"a1ee0c09b4493034f6a556abd33a2ee9f7e4d3c499676e51db2724caf20aa3a0","sha512":"51a602b7e4e5ce8de27d82c32134e2bf0f0c3e379c967294afbba76be9737a7e61d68693021392c89080b3ba9633dc3bc8eaf714c9ef189581c6453a083b15f6","ssdeep":"192:p1HijmJ3G4b49WQ1U2bDFd+guUMw4UQW8wTHPxsx8SvzE4u9KVOK8zROk5YjnvN0:LeiTRU","tlshash":"d612e8a32dd10848d6495248a7ca4678363cb583392b1cbbb38925cbdfd93fc26dc765","first_seen":"2026-08-25T21:01:47.801204Z","last_seen":"2026-08-25T21:12:27.721572Z","times_seen":2,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/config.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:50.389Z","timestamp":1787692310389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idleminer.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 17:42:38 GMT","end":"Sun, 11 Oct 2026 18:40:15 GMT"},"fingerprint":{"sha1":"E1:55:EB:35:B8:0E:7E:CC:51:0A:53:91:F1:1D:73:FB:5D:78:21:ED","sha256":"A8:A7:96:79:98:E3:AD:C3:E8:43:24:75:A4:82:89:73:AB:7E:77:65:84:6A:2D:14:FD:DE:23:25:EA:CF:97:4B"}}},"request":{"raw":"GET /js/config.js HTTP/1.1\r\nHost: idleminer.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idleminer.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 21:11:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KIioFXTfdhEbrCdR%2Boe1XSXZJkUd02jOPgVxa6kA7JT3xBIMCcnVm3S%2BjBMKg%2F0z9Pm9Wss4fNHdOUetRYfUlfB4dEY02IYfvao%2BILthYpsHkBgl%2BU8RwMfOKXa%2F7c6G\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 16 Jul 2026 13:59:32 GMT\r\netag: W/\"4c93-19f6b39b5a0\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a30d976bec3e5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19603,"size_decoded":4888,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"0e2c5004eec9e2dc78baaea07139a6cd","sha1":"e34de277e3302931e8e218c60295865b52ef70fb","sha256":"fb610f449d3cf8fe25e3f172cdd43e5fde19f5e453a6f93fc7e7731c0ce94b54","sha512":"9a4d02a7f1b5fafbfaa090a9285d4fbf30964ddf58436cccc6efab62251b146fcd426db9877396c847a9cdb76b5c807fd93ca5c157cb60a891096d13bcd46df9","ssdeep":"192:xFdzzrR5pgNfNk2mHRzjI1rq00oQm+XRsyGyai0uZfoxa9LVaFnsKe8ePePLC6CM:hzzrRvufkHRzm4/Iza9flGWiF0A","tlshash":"92926afcd851062a982391ec585e8d1e2277f2d35d6627acfa5f9a402f1de0de0f8394","first_seen":"2026-08-25T21:01:47.798008Z","last_seen":"2026-08-25T21:12:27.722943Z","times_seen":2,"resource_available":true,"data":null}},"time_used":744,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":744,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/effects.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:50.397Z","timestamp":1787692310397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idleminer.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 17:42:38 GMT","end":"Sun, 11 Oct 2026 18:40:15 GMT"},"fingerprint":{"sha1":"E1:55:EB:35:B8:0E:7E:CC:51:0A:53:91:F1:1D:73:FB:5D:78:21:ED","sha256":"A8:A7:96:79:98:E3:AD:C3:E8:43:24:75:A4:82:89:73:AB:7E:77:65:84:6A:2D:14:FD:DE:23:25:EA:CF:97:4B"}}},"request":{"raw":"GET /js/effects.js HTTP/1.1\r\nHost: idleminer.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idleminer.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 21:11:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XzMSE6oDJj%2BrClrqlQGxR%2Fu%2Faq%2BEAVdx0WBNH8qaIBYZUp%2BIOrPydJs7m7LNnNWXYdHmy7GhfFkok7C55iKX9uXp29d5hFQA7%2Fw024RbHgMJxmI9CCNa%2BJvY8z8p16eh\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 10 Jul 2026 02:32:11 GMT\r\netag: W/\"33d6-19f49de43f8\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a30d976bfc435696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13270,"size_decoded":4460,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"812ecabecb0a1eb7f8a7e1ab55929b15","sha1":"abac652743d4db426e97689897937e6f5f861898","sha256":"5bc43109a583adb8181fef63656ddd504314b49e232601cb286b525de42366d6","sha512":"86699e524ce12b2c32d3b034abc65ef1f0115dd6880a7861c5d96377a1a739b807baa0741da3054c0056b70930e54185732dc93293cd2dcef173295122bc6f95","ssdeep":"192:Q3mUTu5u8tpZD+tdmkFPH6vrECdrmr+C7Xq+q1/vLrR9Orosl39x4Xbck6nE:Q3mMu5ugat3FPazEcrM+cqHBsN97E","tlshash":"09521e7a22f70525b947d16d2fab5604322130077c52dc2e3dacb6888fdeb649572fb4","first_seen":"2026-08-25T21:01:47.803161Z","last_seen":"2026-08-25T21:12:27.725204Z","times_seen":2,"resource_available":true,"data":null}},"time_used":734,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":734,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/ui.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:50.402Z","timestamp":1787692310402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idleminer.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 17:42:38 GMT","end":"Sun, 11 Oct 2026 18:40:15 GMT"},"fingerprint":{"sha1":"E1:55:EB:35:B8:0E:7E:CC:51:0A:53:91:F1:1D:73:FB:5D:78:21:ED","sha256":"A8:A7:96:79:98:E3:AD:C3:E8:43:24:75:A4:82:89:73:AB:7E:77:65:84:6A:2D:14:FD:DE:23:25:EA:CF:97:4B"}}},"request":{"raw":"GET /js/ui.js HTTP/1.1\r\nHost: idleminer.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idleminer.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 21:11:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5B3baFqkvT%2Bsx4f%2BrLmY1NZ4Ygo9WwjO5s8mgbgd%2FwQLNz5A3oGqxViRF%2BNcWIqAX0OMyQirhGFHUTNvxELYqzpMvGD1pweIhX8q5H8%2FALhWaQFyyh6J7ch496OeAp0g\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 16 Jul 2026 13:15:21 GMT\r\netag: W/\"2d8c-19f6b114228\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a30d976c0c475696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":11660,"size_decoded":3657,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"f88bdb5bcea74f05621f733a2283d164","sha1":"8943996272882a4408b5a617b9f2f79cfc00a026","sha256":"8945037d8b7d823468ab79a73c41ee12b79c53f8bfd171e3cc7a2b7f0168b222","sha512":"8e8223d1f76a9744ee166da4481cbe36406f34521dd7193637cacdb3ae46d06d9532bf60937386c50d9f0ce629ffff4da1d7b3d75f3527d8c8c7c659a5f881d7","ssdeep":"192:lyW4RvtkWA7gQ3V7CE4Iq6sLanj0CyGn5mit3TKkc1COKCAoD4LL5NwE:ssTIoj0gmiVme","tlshash":"a332ff3b317700719a7769b75bcb938d3639600b7841e58a3d2c8a945fe7e1058b3be4","first_seen":"2026-08-25T21:01:47.811009Z","last_seen":"2026-08-25T21:12:27.726858Z","times_seen":2,"resource_available":true,"data":null}},"time_used":729,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":729,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:51.320Z","timestamp":1787692311320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://idleminer.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 23 Aug 2026 17:38:28 GMT\r\nexpires: Mon, 23 Aug 2027 17:38:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 185603\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40836,"size_decoded":41649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40836, version 1.0","md5":"9b3b8ff7ce2027b021390b101482e960","sha1":"94042c26bb2a2e3337c293ffa5cd88894764207e","sha256":"6f7153d9320d0b79ff1fe4502f0b2f9d847dc765d66414a0efb91b31096e113e","sha512":"7f63a3f2e93936f73c8a881d3cdf17e7516e54ae50b7cab42ef3a89575f9507b27fe368b48364ce7f885dc6346969e9e46e64a7eb2cca98f416ea9a5f98e154d","ssdeep":"768:HUabfwFhS0q7rdQ5DNYk1p5tLYmDEz87/yzIMr53M2ToWr1McLhgjXsucOCH3mZh:0asFhy7rdQIkdtUmDByEApJTo+Scfu1T","tlshash":"b303028073271964a8984cac4c5def62d9c32cf75b632da05e7e84f7eab2c09d457348","first_seen":"2025-01-30T16:57:40.808331Z","last_seen":"2026-08-26T13:02:33.699717Z","times_seen":6161,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":18,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cinzel/v26/8vIJ7ww63mVu7gt79mT7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:51.322Z","timestamp":1787692311322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/cinzel/v26/8vIJ7ww63mVu7gt79mT7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://idleminer.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25904\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 18 Aug 2026 23:13:15 GMT\r\nexpires: Wed, 18 Aug 2027 23:13:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 597516\r\nlast-modified: Tue, 09 Sep 2025 18:58:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25904,"size_decoded":26717,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25904, version 1.0","md5":"e7ed1ab78a1744183d3dde29701c5fa8","sha1":"e3007b7235a3e42a9c4ce5020ab4236000073885","sha256":"09941fb1c169c38fd414536b37690057fc01b3117a5c63dd6571186540c8f370","sha512":"da3f51449b0f406be081cb782cb3ffece599cd29045c142eb00b2a591f491f49e05fd20989f510c5f3b4e443b365a82d78c25b38133c61b248cf3767f1878ccb","ssdeep":"768:IZQ9vezb0u8t5Q0NM3LXhros4eh/Cy7rEfW:Qzb6mFGelCQQu","tlshash":"32c2e131e18142c92d548df72b8f78915d4de0636fb3919482d5ab3ade2e70a22b41db","first_seen":"2025-09-10T23:55:05.516003Z","last_seen":"2026-08-26T13:07:36.142846Z","times_seen":4498,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":42,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:51.324Z","timestamp":1787692311324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://idleminer.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 23 Aug 2026 17:38:28 GMT\r\nexpires: Mon, 23 Aug 2027 17:38:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 185603\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40836,"size_decoded":41649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40836, version 1.0","md5":"9b3b8ff7ce2027b021390b101482e960","sha1":"94042c26bb2a2e3337c293ffa5cd88894764207e","sha256":"6f7153d9320d0b79ff1fe4502f0b2f9d847dc765d66414a0efb91b31096e113e","sha512":"7f63a3f2e93936f73c8a881d3cdf17e7516e54ae50b7cab42ef3a89575f9507b27fe368b48364ce7f885dc6346969e9e46e64a7eb2cca98f416ea9a5f98e154d","ssdeep":"768:HUabfwFhS0q7rdQ5DNYk1p5tLYmDEz87/yzIMr53M2ToWr1McLhgjXsucOCH3mZh:0asFhy7rdQIkdtUmDByEApJTo+Scfu1T","tlshash":"b303028073271964a8984cac4c5def62d9c32cf75b632da05e7e84f7eab2c09d457348","first_seen":"2025-01-30T16:57:40.808331Z","last_seen":"2026-08-26T13:02:33.699717Z","times_seen":6161,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":22,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Cinzel:wght@400;600;700;900\u0026family=Exo+2:ital,wght@0,300;0,400;0,600;0,700;1,400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:50.388Z","timestamp":1787692310388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Cinzel:wght@400;600;700;900\u0026family=Exo+2:ital,wght@0,300;0,400;0,600;0,700;1,400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idleminer.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 25 Aug 2026 21:11:50 GMT\r\ndate: Tue, 25 Aug 2026 21:11:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12589,"size_decoded":1514,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ae870b8c3672603b34ed4a72ae89f3d8","sha1":"a8c4e906991f830094dc96a9433228c3671c8109","sha256":"cf4974a5e85d1ef12fa76f11209606be6f38d86b7b8188747507bf03b44c55d3","sha512":"1c0eaf71607bd619dd332cc6ab2a32eda86840d7eae6c8e1039d3af87cc45cbe1b5e7f9c19b2fcf88df7911bb22a9212add43f1abc0e996206340a73dc5a482d","ssdeep":"192:xcM2cWVc13cXiOJlOiGOAOlLOhpSRHHxxEipzRHucx54pVRHkmxn/p2RHLFxAU:xml3GtwOUxlAHnQn","tlshash":"a842baa1042bd000ab971dc623cf7e3aae5e7215b484c47a5ffd0cd8acdad625369b1d","first_seen":"2026-08-25T21:01:47.808868Z","last_seen":"2026-08-25T21:12:27.736928Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":36,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/achievements.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:50.394Z","timestamp":1787692310394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idleminer.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 17:42:38 GMT","end":"Sun, 11 Oct 2026 18:40:15 GMT"},"fingerprint":{"sha1":"E1:55:EB:35:B8:0E:7E:CC:51:0A:53:91:F1:1D:73:FB:5D:78:21:ED","sha256":"A8:A7:96:79:98:E3:AD:C3:E8:43:24:75:A4:82:89:73:AB:7E:77:65:84:6A:2D:14:FD:DE:23:25:EA:CF:97:4B"}}},"request":{"raw":"GET /js/achievements.js HTTP/1.1\r\nHost: idleminer.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idleminer.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 21:11:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oWMpM3dfdOJP0ec8Ufi9wYLYwGvFqTQQbr3DD2thkUAunPdBRQNKmAv6tRUw4hFjJ2Qh9H4JWaJWWnd1pp7FHP21moj10JmnLJObLJKnlbyP5nUD%2BbseGV5N4Nqo6Cdu\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 10 Jul 2026 02:31:06 GMT\r\netag: W/\"2b23-19f49dd4610\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a30d976bfc415696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11043,"size_decoded":3565,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"c27db4d0327a85eb76b7a3912962d55a","sha1":"1e4fb0535ce6cbdb484e8f224e164870f6f62df7","sha256":"345c0d43ba91ed540d21024915ecd58a66849f79c4f69c19f2e84dc6c28c2583","sha512":"1000803628593b2b382678709137a4994163b4cfc40428e0d16ae0b8deac168bdcfc8fa1868572b2516d6cf48234a7ff5e802ef5d35f0a3c9769edb5329579e2","ssdeep":"192:wUaXeUDjXtSByWVEmUm3BDsm6QCWJgmlg:qXeUD7tSBjVEmIQCMg","tlshash":"1b32b7fa42f61041532bb038299f3202367851836d5d39587f8ed3a81f7f64dea7666c","first_seen":"2026-08-25T21:01:47.802073Z","last_seen":"2026-08-25T21:12:27.747632Z","times_seen":2,"resource_available":true,"data":null}},"time_used":704,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":704,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/game.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:50.404Z","timestamp":1787692310404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idleminer.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 17:42:38 GMT","end":"Sun, 11 Oct 2026 18:40:15 GMT"},"fingerprint":{"sha1":"E1:55:EB:35:B8:0E:7E:CC:51:0A:53:91:F1:1D:73:FB:5D:78:21:ED","sha256":"A8:A7:96:79:98:E3:AD:C3:E8:43:24:75:A4:82:89:73:AB:7E:77:65:84:6A:2D:14:FD:DE:23:25:EA:CF:97:4B"}}},"request":{"raw":"GET /js/game.js HTTP/1.1\r\nHost: idleminer.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idleminer.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 21:11:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EnSCP78Hr9kKEXBtp%2FRJ%2FLGYsQzpUMLfzCkX%2B2l2hlwQE7iLM5g3mJHf928JZZqaVVE%2BHVphnew3hRh09dlm7xbXEPgx8M2afBSLjrq48wRGVfWUTUm9vzQPFmD0nsfP\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 16 Jul 2026 13:27:36 GMT\r\netag: W/\"28a3-19f6b1c7940\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a30d976c0c495696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10403,"size_decoded":3717,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"5904ab833137556e7da7772c1b284e56","sha1":"84318f3eb28ba2335c6df11137d2c3bdb3cb2966","sha256":"f89cfc0767ea34716626d425d8b372f70aac1916febaa5a54e3c8994a7232fbb","sha512":"ce1eb00267b170c855fcc28a605d73ff5e3cf5f1707148575daf2bf97737ad1ea3da830d08e9feeca70eed2fda9211ee4eea67bd6868ffaf8e2e013735a932e9","ssdeep":"192:ERTi9tG+lCvWbhjRK3hITFPxFyF+h1sKvPGrQ6DeQAjKUxPOUvAgE1uZba4QZyZn:OiPG+lXbpcIxxNhNiU44r","tlshash":"3122412a29f30172a973237e1b9f75053a346047bc0be7a87d2c4b407fa6524567b694","first_seen":"2026-08-25T21:01:47.806164Z","last_seen":"2026-08-25T21:12:27.749961Z","times_seen":2,"resource_available":true,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cinzel/v26/8vIJ7ww63mVu7gt79mT7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:51.326Z","timestamp":1787692311326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/cinzel/v26/8vIJ7ww63mVu7gt79mT7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://idleminer.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25904\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 18 Aug 2026 23:13:15 GMT\r\nexpires: Wed, 18 Aug 2027 23:13:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 597516\r\nlast-modified: Tue, 09 Sep 2025 18:58:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25904,"size_decoded":26717,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25904, version 1.0","md5":"e7ed1ab78a1744183d3dde29701c5fa8","sha1":"e3007b7235a3e42a9c4ce5020ab4236000073885","sha256":"09941fb1c169c38fd414536b37690057fc01b3117a5c63dd6571186540c8f370","sha512":"da3f51449b0f406be081cb782cb3ffece599cd29045c142eb00b2a591f491f49e05fd20989f510c5f3b4e443b365a82d78c25b38133c61b248cf3767f1878ccb","ssdeep":"768:IZQ9vezb0u8t5Q0NM3LXhros4eh/Cy7rEfW:Qzb6mFGelCQQu","tlshash":"32c2e131e18142c92d548df72b8f78915d4de0636fb3919482d5ab3ade2e70a22b41db","first_seen":"2025-09-10T23:55:05.516003Z","last_seen":"2026-08-26T13:07:36.142846Z","times_seen":4498,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":48,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cH3v4okm5zmbtYtMeA0FKq0Jjg2drF0feC9hp8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:51.328Z","timestamp":1787692311328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/exo2/v26/7cH3v4okm5zmbtYtMeA0FKq0Jjg2drF0feC9hp8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://idleminer.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 21:10:37 GMT\r\nexpires: Thu, 19 Aug 2027 21:10:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 518474\r\nlast-modified: Wed, 27 Aug 2025 20:23:04 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17588,"size_decoded":18401,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17588, version 1.0","md5":"fa0d98539b5a1faaa28870c8b18563a9","sha1":"05607bcc8276e615da478dab049f71cb2dda89e9","sha256":"29e963f8ee5a74b9cc119dc0d61cb9adb9a8d4b1a45c50c0fd847afd36e675b6","sha512":"5859ae957d088548411f2e835499c66f8296f2973253b58a5a6fb1cbb0b9f72a75e3b5a009e9dba219210067153858855470bfb6542c3f3f6cf7a3e63825180f","ssdeep":"384:NuVnJ6jw17PgpvW+Xp2EsnyQFZWhrAVZl4SWmmyn/5gx/rj:cZMu0Kycghr84MmG6Bj","tlshash":"8382d0db0124871fd29f7f4ed6234898e7a2083663f11be0368e61b6e09bdd5954853a","first_seen":"2025-03-16T21:33:47.174896Z","last_seen":"2026-08-26T03:52:04.657316Z","times_seen":38,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":37,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/npcs/crossbowman-pavise-shield.png","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:51.332Z","timestamp":1787692311332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idleminer.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 17:42:38 GMT","end":"Sun, 11 Oct 2026 18:40:15 GMT"},"fingerprint":{"sha1":"E1:55:EB:35:B8:0E:7E:CC:51:0A:53:91:F1:1D:73:FB:5D:78:21:ED","sha256":"A8:A7:96:79:98:E3:AD:C3:E8:43:24:75:A4:82:89:73:AB:7E:77:65:84:6A:2D:14:FD:DE:23:25:EA:CF:97:4B"}}},"request":{"raw":"GET /npcs/crossbowman-pavise-shield.png HTTP/1.1\r\nHost: idleminer.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idleminer.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 21:11:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 13 Jul 2026 01:41:19 GMT\r\netag: W/\"ae2a-19f5922c618\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B68PGKyNIxvRUqFVjBV8emLvNNZZwLVGdm6F55kmY3%2BAs%2BDNkG0ROZnI595CbMkxyS%2F4Kv9DQzwp1BebxdWnDitLQgsHOU3Pmv0Gso%2Br%2BNKAcj3JnzWzD%2B9McwkhKCGm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30d9771dc8e5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 44586\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":44586,"size_decoded":45314,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"41ad60c6a0163bcf6a26ee0ae29f63dd","sha1":"cbcae08d157cbb0f5a02db7ba13156ceb2907bd8","sha256":"7861d3b24a2fef83aa2772be600142827d137678242aa1302a7e28c2bc192e7a","sha512":"180c08d528b76255799d3955c65ad7b6ab4ed0c1b8918a3b40d9049e9af2c404a4a12c5f0e39c8c875bd6c17d222b9a3097427b8478b300593abd897e86721af","ssdeep":"768:OzfdHIPQgX51rqCea762CEPSXI0TQ9OXO8WUZlIMRr:SdoPQgP/ea7697XdTA8WqlJ","tlshash":"0013f186dca1e6993c81a4fb363d17d1e1fedcaf415eddc6a6c5ea7428d138136140c1","first_seen":"2026-08-25T21:01:47.819217Z","last_seen":"2026-08-25T21:12:27.753208Z","times_seen":2,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":685,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/favicon.ico","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:51.637Z","timestamp":1787692311637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idleminer.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 17:42:38 GMT","end":"Sun, 11 Oct 2026 18:40:15 GMT"},"fingerprint":{"sha1":"E1:55:EB:35:B8:0E:7E:CC:51:0A:53:91:F1:1D:73:FB:5D:78:21:ED","sha256":"A8:A7:96:79:98:E3:AD:C3:E8:43:24:75:A4:82:89:73:AB:7E:77:65:84:6A:2D:14:FD:DE:23:25:EA:CF:97:4B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: idleminer.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idleminer.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 21:11:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nx-powered-by: Express\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ho8H0LG7Wg2vlAAeLwO4hfa22aggv4yILUDdXESqNU2n%2BqIJ1nTiqu2yEWg7DHtP7oeaXBqdJJhAUavUvP8WdIH%2FFY4ty1%2FE5xOrpsVh%2BZcCYghBSQJac4OBrKi9ygQ6\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30d9773bca75696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":873,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"84241342d84ac29592a5d9516f8edf7f","sha1":"03c53980e18e17625f439c20e7d438f066202428","sha256":"6e21162bc64073fe9e3d3d6375ca24d04fed1912a5b7716aac0cb0f2d16fae7c","sha512":"7509483335c7a30365f7f403098491ac0b44fffcc68a5cdacb86ec191f02dbda5b16a20a09e924b6a29ac938578d43bacb9a50115db5c5668ea27fe1811bd530","ssdeep":"","tlshash":"34c08c9e140012010b2087042ac1326464973b992de685006a87e027ece8a1ad987288","first_seen":"2023-04-05T13:59:49Z","last_seen":"2026-08-26T12:39:44.821871Z","times_seen":9181,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/pixel-renderer.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:50.398Z","timestamp":1787692310398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idleminer.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 17:42:38 GMT","end":"Sun, 11 Oct 2026 18:40:15 GMT"},"fingerprint":{"sha1":"E1:55:EB:35:B8:0E:7E:CC:51:0A:53:91:F1:1D:73:FB:5D:78:21:ED","sha256":"A8:A7:96:79:98:E3:AD:C3:E8:43:24:75:A4:82:89:73:AB:7E:77:65:84:6A:2D:14:FD:DE:23:25:EA:CF:97:4B"}}},"request":{"raw":"GET /js/pixel-renderer.js HTTP/1.1\r\nHost: idleminer.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idleminer.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 21:11:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZE06e7tR3u1NbbC6lVoS8JghbqwqNwU%2BBsc5fMdiWe0wbjl9LmPe%2FONHA8CgjE6YyuqMvNttCiFDhvY0AZKiceA0mwNe0ph8swPYzST6%2FnfeWPyjw%2BHFtqRzg7XslEfK\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 12 Jul 2026 23:57:14 GMT\r\netag: W/\"181d-19f58c37b90\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a30d976bfc445696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6173,"size_decoded":2401,"mime_type":"application/javascript; charset=UTF-8","magic":"C++ source, ASCII text","md5":"9752fd28978d2e88067cb62ed9b5576c","sha1":"0e75c4e4e22455e753f55a65d1e8a68e8ac950d7","sha256":"9c3321b8359882275475303d3e46885bcd1d62736d52afbb99535831f6899469","sha512":"14d759701bf52441631c037d331d7808e15fb5cb6b654b927b5ec3ceffc313678739471e32bbf4f00ab5d9e3150eff93e8753f1364b8ffd856422477f679ca80","ssdeep":"96:IRcnPOCR071I3hiSTeY3r9lrmCmPxge3L7LOQvA7LB2HChwkqw0oaVemYzOLBRL4:yORl3hisXAHCKxj/9VZJs","tlshash":"e3d1cb76c6b3752950d7d01d4b2f9949e22aa063991ffe2b39afc3004fb8162a1ddd30","first_seen":"2026-08-25T21:01:47.809909Z","last_seen":"2026-08-25T21:12:27.755564Z","times_seen":2,"resource_available":true,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/js/asset-loader.js","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:50.399Z","timestamp":1787692310399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idleminer.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 17:42:38 GMT","end":"Sun, 11 Oct 2026 18:40:15 GMT"},"fingerprint":{"sha1":"E1:55:EB:35:B8:0E:7E:CC:51:0A:53:91:F1:1D:73:FB:5D:78:21:ED","sha256":"A8:A7:96:79:98:E3:AD:C3:E8:43:24:75:A4:82:89:73:AB:7E:77:65:84:6A:2D:14:FD:DE:23:25:EA:CF:97:4B"}}},"request":{"raw":"GET /js/asset-loader.js HTTP/1.1\r\nHost: idleminer.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idleminer.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 21:11:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2FU22qc2j9c5IBOU3gkCoIbe7mSl%2FyTRqofP8DDxV0MVU6CN4nm5he4FD18K1Gkl8XJnTwcko%2FHgDME2X8VsfkHKYmOZb8bxoHWRoeeP0rMhWYqZRo6RMDFlNmWrJ02Z\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 13 Jul 2026 01:45:57 GMT\r\netag: W/\"2d1d-19f59270408\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a30d976bfc455696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":11549,"size_decoded":3067,"mime_type":"application/javascript; charset=UTF-8","magic":"C++ source, ASCII text","md5":"635fb0173680bd4d344ec3b7a5f11cf0","sha1":"fe981c5186efb25dd34fddcae63bae8c3fa6f725","sha256":"b7b3e0d0fb606988c3ab315d2a9720b72b467477b8d0225e9456fca5471f39c2","sha512":"92734377a2e863a55aeed5b2e1cfac28579adf455d4b943d0d2234606f39e50b42b56525d0873e27a55ab035096ebd07179f14d3b7d73395806b2ef0583fe051","ssdeep":"192:KxdFSW6RJL/79Q8G/66BeA0c43PeSTCOGxZiI7ig50Z4L9I7Qmxb+O:Kxdd6PLO3/6PA0c4WcCtxZJAZ1j","tlshash":"f032cfaac973250e00a36479870f6404f6679023671fed9e3e5ec3105fb972ae1e5fa4","first_seen":"2026-08-25T21:01:47.804316Z","last_seen":"2026-08-25T21:12:27.756858Z","times_seen":2,"resource_available":true,"data":null}},"time_used":732,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":732,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"idleminer.pro/css/main.css","fqdn":"idleminer.pro","domain":"idleminer.pro","tld":"pro"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://idleminer.pro/","date":"2026-08-25T21:11:50.377Z","timestamp":1787692310377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idleminer.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 17:42:38 GMT","end":"Sun, 11 Oct 2026 18:40:15 GMT"},"fingerprint":{"sha1":"E1:55:EB:35:B8:0E:7E:CC:51:0A:53:91:F1:1D:73:FB:5D:78:21:ED","sha256":"A8:A7:96:79:98:E3:AD:C3:E8:43:24:75:A4:82:89:73:AB:7E:77:65:84:6A:2D:14:FD:DE:23:25:EA:CF:97:4B"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: idleminer.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idleminer.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 21:11:51 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BIya%2Bix%2Fmn1X0Bwh13seihWOYZTr8qS59AEqrWR8WySd%2BcT5zriYVE1wX%2FqDjH9UyAk39IGOJhLfPwkTmjafupoYF9H4yEcjYJteHkGVQ0fmcrj1syM4Tso7nITwRqDG\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 10 Jul 2026 02:24:39 GMT\r\netag: W/\"524d-19f49d75e58\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a30d976bdc3a5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21069,"size_decoded":5570,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"d9e4e7ade728e6b6f7223497c4b75462","sha1":"7eb6fa8f65e3b589560decf20093e59b9e1ca28a","sha256":"9cd5d451a65b44f2bfb4f81ecde1c4c84346306ce38830d11f54d0e72e43d62b","sha512":"2b4a78e69ed9cb6e24a45e7b102bbad0947cd411ffa3e371dd1f2463e94997d24a6a80074593b850d757ec13797d0c5211b79d4edf0a15c21e3d2e497fc348ea","ssdeep":"192:gw/D5voN8KMl2Erqhl614sqFAtbUbbgfibleJ+/MHA3KdN2KivmorspgL1D0z2NM:v/D5vWFeJ63INg2oi/","tlshash":"66922372566315a5b82be66d6bdb9b49335c7003b90ac56c3ac931048fcd3f86191fbc","first_seen":"2026-08-25T21:01:47.812967Z","last_seen":"2026-08-25T21:12:27.758126Z","times_seen":2,"resource_available":false,"data":null}},"time_used":749,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":749,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"idleminer.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}