{"report_id":"3a22acd2-7d13-4cdc-9052-b329f2ff81fb","version":6,"status":"done","tags":[],"date":"2026-06-01T00:03:23Z","url":{"schema":"https","addr":"promo-event.live/","fqdn":"promo-event.live","domain":"promo-event.live","tld":"live"},"ip":{"addr":"104.21.19.152","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"promo-event.live/","fqdn":"promo-event.live","domain":"promo-event.live","tld":"live"},"title":"Biggest CRYPTO giveaway of $100,000,000","dom":{"size":592832,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65148)","md5":"b0c87e20920dbbd18668cfc3208c6e39","sha1":"0455d26f4c03d9f51535209418d53860d0209bb9","sha256":"847bbbe601a59aa2d623f84aa101931f42576e37bd4c3317a65fda3e0427249f","sha512":"4bbae1fd65d2e1d28825e958b4e242418af44c1dde965f0e1fc5260fb9713b5dade7be48b884ea04b642f62ef64229a817fdad1d6f4f01db6975f6e2ce389551","ssdeep":"12288:jfAeIGUg64bActtki4JfCYqpgllD8ug0l5iPAcuV8SAtf6Wrutm:jYeIaFm6Yq6B57VU6Nm","tlshash":"5bc4be341328d37d681b87f8af79b8a80a1d71d7e13955c8760d04309bc7beaf96b588","dom_hash":"domhashb9938227aed61788b8cd18b3a614ba2a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"promo-event.live/","fqdn":"promo-event.live","domain":"promo-event.live","tld":"live"},"ip":{"addr":"104.21.19.152","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-06T00:03:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"promo-event.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"promo-event.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"promo-event.live","ip":{"addr":"104.21.19.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-31T23:55:30.509906Z","last_seen":"2026-05-31T23:55:30.509906Z","alert_count":14,"request_count":7,"received_data":2303252,"sent_data":2866,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"promo-event.live/","fqdn":"promo-event.live","domain":"promo-event.live","tld":"live"},"ip":{"addr":"104.21.19.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7218791f8feb16bfdbefa8be87ed1925","sha1":"8683f21adda9136e40b3d657000b63f3826e4166","sha256":"011ec67c279e8c5789d48e4e93e2092e6e7becd02b5b9b2384328e9a11a0d4a8","sha512":"52a3f979f731f8c800214cd017e531a50fbeaea3303f406671b0831b5f4964c0207567cc1ec06982681a85804201b667651b7159a5168d941479aacb37c943b5","ssdeep":"","tlshash":"5af0ab9d3ca6f06737f97638c3238a7f33a6070175939928d686cc2878649861887d8e","size":444,"data":"","first_seen":"2026-05-31T23:55:35.559442Z","last_seen":"2026-06-01T00:03:27.214428Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo-event.live/","fqdn":"promo-event.live","domain":"promo-event.live","tld":"live"},"ip":{"addr":"104.21.19.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9625efa71a56f3a7c1ef007c43111d6","sha1":"2b9a63e68c19d41de49d2a3fe18787be8bae643d","sha256":"3665c6235163be87a3bd9d2bcf839feadbae44620ca072ec63af6d031a90c430","sha512":"c1c9011b80f5da3f924429e381ed0484323ee01736484e5580d627d0fefe756f089d2237098f47c57f8d285382a68dd2be2d8b2a98a81dd01ac1a53c0b16e1f1","ssdeep":"","tlshash":"9451106863fa2436607713fab6cb2bc472246013b20aed093f5f5600afc68755de7ad5","size":2571,"data":"","first_seen":"2026-05-31T23:55:35.561485Z","last_seen":"2026-06-01T00:03:27.215434Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo-event.live/","fqdn":"promo-event.live","domain":"promo-event.live","tld":"live"},"ip":{"addr":"104.21.19.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4914408891d3ad08c2f6b83c70319c4c","sha1":"fa1eecf4c47b14fe1adca060c4cd56298d8b60dd","sha256":"347cb0ad8366d4619dac643a5ee938a0cfd9b9813b0018bc8c9f6199a84346e3","sha512":"b1f012164a059ea84ea63c39ea24837d7dfb60b3d2b5605b7f9f44f313ffd3fa89f04217ad6c9b60527436ef0391053fbbcdb41159911cc962aaa5ecb07cf482","ssdeep":"","tlshash":"3651dc35c6fa12314133617837da5b48b6710067210ace397a7e83cd3fca87099f4ba8","size":2763,"data":"","first_seen":"2026-05-31T23:55:35.563643Z","last_seen":"2026-06-01T00:03:27.216442Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo-event.live/","fqdn":"promo-event.live","domain":"promo-event.live","tld":"live"},"ip":{"addr":"104.21.19.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"23d56a8355bf59adf034e256f2c57866","sha1":"7707599f01849f7db10cfa6609eca29ee37302d7","sha256":"57d3113c87b011d0b4ef4f9f3527ad723d8c9d4a11792de541b345364f492da5","sha512":"b7873ee656b94687ccbdd6dc7203bba916a0a8135dd3fe44eb53873f3a406ddd5991c0f0a4cc704b07a1b6c3433bf715bd3d4854a8053d4251a2da3035e5df0b","ssdeep":"","tlshash":"abf0461e77eb146242a7f076bbea92092d7a01531440d6d5fc5c01420fc0d04d2f7eba","size":581,"data":"","first_seen":"2026-05-31T23:55:35.565983Z","last_seen":"2026-06-01T00:03:27.217479Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo-event.live/","fqdn":"promo-event.live","domain":"promo-event.live","tld":"live"},"ip":{"addr":"104.21.19.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0b729a6fb7f5ae69ec0a6fdf78322ad","sha1":"d144f5a8a921c1b3cb137255bc581204bacea6b0","sha256":"5ea9cea1ba3fc555005203a798482b7ef682ae9820b4ed1294aafa4c0a5f9993","sha512":"06a7a2670aee6700244989222dd578e40bacc85a7d42a97988ae8f88937a626d15c9cb02f0f1d0a7f26052bca451d596dba84d8793a65f2421082dc618a50341","ssdeep":"","tlshash":"94319e68327e02308157cb6a6397d588fa22310f3889d89d7a9cc6ce0fc0b65acf25d4","size":1466,"data":"","first_seen":"2026-05-31T23:55:35.568007Z","last_seen":"2026-06-01T00:03:27.21832Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo-event.live/","fqdn":"promo-event.live","domain":"promo-event.live","tld":"live"},"ip":{"addr":"104.21.19.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3eb3b807541d8ac0746dfdce6598065b","sha1":"96f315426b45dd9f553ecd84fa1df12d5a081961","sha256":"42adbe6fa26a4b99921893b1050bc0b1dcdb7eb8869c1fa0c3b9ca685710ba3f","sha512":"a256ba1af0958cece1b7fc954f7b3d6c117aa2628a8199da80a5335936045dbd1f6f6aff85b6ae340c6f939f52b06fc72dc51cf412a2521ad2a59479c0ecdd6a","ssdeep":"96:DH+SNctglLauEXujRlFcYTsNEiKbgNoOdLiqnUmFqax3QT5:psgleuEXujRlFLTsN/KbgNoOdLdnTFq5","tlshash":"db91120430f32122512792f96b875a0576bdf15328298d193b4c86954f9ee7db4efe8c","size":4281,"data":"","first_seen":"2026-05-31T23:55:35.57144Z","last_seen":"2026-06-01T00:03:27.2192Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo-event.live/translations.js","fqdn":"promo-event.live","domain":"promo-event.live","tld":"live"},"ip":{"addr":"104.21.19.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5f50483d480a6f9f583cfb383a13be3","sha1":"f048fa2bc1bcc04522c98bd072151c60b42ecf80","sha256":"24a36e7db8cc8d9de4f072f1ce51b6c4d2baf3d589e1aa0c556b6d37d3597d94","sha512":"cdd269362db734f84d58db7129caeb900dd33744c01e9b07016bea865122e257a2a6dae33dfbabe194b425f17d4d514f1816d0f3c474eaedbccdce20a40d3574","ssdeep":"384:JwKyyyK+hKmpD6wK7v0ZGcMtwwKO7KUwK17kAwK3HNbmjuzHC:JwKyya/pOwK7v0ZVJwKO7pwK17HwK3HK","tlshash":"9962735f28e5b45004fb0344bee66a42f11423bf6354416fbafa97280fb2759b5e7870","size":14969,"data":"","first_seen":"2026-05-31T23:55:35.536426Z","last_seen":"2026-06-01T00:03:27.210259Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"promo-event.live/gm.png","fqdn":"promo-event.live","domain":"promo-event.live","tld":"live"},"ip":{"addr":"104.21.19.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promo-event.live/","date":"2026-06-01T00:03:00.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo-event.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 22:25:23 GMT","end":"Sun, 23 Aug 2026 22:25:22 GMT"},"fingerprint":{"sha1":"38:71:C1:03:CE:D7:32:96:79:7D:D5:0C:F3:5D:D4:55:4A:88:04:8C","sha256":"89:22:2E:59:7C:69:EF:54:C6:43:64:41:C5:16:1B:07:D9:EC:42:2B:F8:FF:1E:C3:91:DD:7E:AD:92:0D:56:16"}}},"request":{"raw":"GET /gm.png HTTP/1.1\r\nHost: promo-event.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 01 Jun 2026 00:03:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 263929\r\nlast-modified: Tue, 26 May 2026 02:04:44 GMT\r\npriority: u=4,i=?0\r\netag: \"6a14ffbc-406f9\"\r\nexpires: Mon, 01 Jun 2026 23:55:07 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 472\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gurrOUXLTa8Hn0EIwgbvazqY0vFQGqDvn3PJCRu5bAnvhB8hH4tJTjiqBx34rQroWIYCQwkdPVkU5PlayvKLT4cJx9%2F18zIxJbMXbmwmY2hPR536clMFC7AHPj1K%2FiG8f3qa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049f3e9bafba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":263929,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"de0dada54f4599be159316fa6bfab9bf","sha1":"1a1b30fa19ca4b1219d48081829e2a5088e372dd","sha256":"4ca8cba7216440c053a2c9b80ddd930e559380d3c1595708e0a1dea7b402615d","sha512":"9fcebc02a93585b9bdb93984d979c87343f54e5eea070a514708b894486d686ea2f6699c06c102c659e6549fe034d0d574935810508144c32006fdff37e9ed80","ssdeep":"6144:zD78ObIFsB6N3PcNAynaNJoLFeDje2nX6FHfo2FDlSHgioO:zUDsBEUOynavon2X+tlSHgDO","tlshash":"044423945600fc72ccb692bf91f6c1a98af475050ec4cec832528b66fb6326727e856c","first_seen":"2026-05-31T23:55:35.540088Z","last_seen":"2026-06-01T00:03:27.20435Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"promo-event.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"promo-event.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promo-event.live/logo.svg","fqdn":"promo-event.live","domain":"promo-event.live","tld":"live"},"ip":{"addr":"104.21.19.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promo-event.live/","date":"2026-06-01T00:03:00.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo-event.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 22:25:23 GMT","end":"Sun, 23 Aug 2026 22:25:22 GMT"},"fingerprint":{"sha1":"38:71:C1:03:CE:D7:32:96:79:7D:D5:0C:F3:5D:D4:55:4A:88:04:8C","sha256":"89:22:2E:59:7C:69:EF:54:C6:43:64:41:C5:16:1B:07:D9:EC:42:2B:F8:FF:1E:C3:91:DD:7E:AD:92:0D:56:16"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: promo-event.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 01 Jun 2026 00:03:00 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 25 May 2026 22:49:38 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"6a14d202-335\"\r\nexpires: Mon, 01 Jun 2026 23:55:07 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 473\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BN73g3cH0WDnGESDbwcMFF7g0WraPDDxe3swM%2B3XLnGNgDZefrjNg2XDeHhbnOUg1trd6%2FzFNYvndZ2%2B%2FDyINHLCmBQlMsY2%2F6RudxXJUc%2BtWwF1zu9w3fzvNLEtrl%2FkGxDE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049f3e9bafca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":821,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a2cb4065a140774af98baab18ed9fc3","sha1":"d27f39588a4599177b7d05ba0f4974a42c6ab2bf","sha256":"966545f3fd4f2a43b942ba77ae164dfada19dc90f3881ab8bf71406a14bbf5c9","sha512":"221eb7f604ac303822bf49143be9e3fe79e28a18a7246aa4e47bfc29c9f2e4f636d607dabd93d418d8c157deff325019b785865a0a08d52d370091b03b4199f2","ssdeep":"","tlshash":"1501af20c36ae7945402fb3123503d3068fa11e2684094b949fa2471eb69e1f49b88ee","first_seen":"2025-04-27T09:29:37.866554Z","last_seen":"2026-06-01T00:03:27.205752Z","times_seen":18,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"promo-event.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"promo-event.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promo-event.live/rxb.png","fqdn":"promo-event.live","domain":"promo-event.live","tld":"live"},"ip":{"addr":"104.21.19.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promo-event.live/","date":"2026-06-01T00:03:00.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo-event.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 22:25:23 GMT","end":"Sun, 23 Aug 2026 22:25:22 GMT"},"fingerprint":{"sha1":"38:71:C1:03:CE:D7:32:96:79:7D:D5:0C:F3:5D:D4:55:4A:88:04:8C","sha256":"89:22:2E:59:7C:69:EF:54:C6:43:64:41:C5:16:1B:07:D9:EC:42:2B:F8:FF:1E:C3:91:DD:7E:AD:92:0D:56:16"}}},"request":{"raw":"GET /rxb.png HTTP/1.1\r\nHost: promo-event.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 01 Jun 2026 00:03:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 4051\r\nlast-modified: Mon, 25 May 2026 22:51:56 GMT\r\npriority: u=4,i=?0\r\netag: \"6a14d28c-fd3\"\r\nexpires: Mon, 01 Jun 2026 23:55:07 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 473\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XGLsEm15db17HJzAVee6TGasoAKDzDXRxegHoJOO8TWzEjpakgXcW4sfprB6hx2qqWUlWc9tSkSeIv7fWXHWQwDtpnrA01oKMNCE5X6B2hW%2BpYLlhXH1L15UJAN%2F02sdRCFU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049f3e9daffa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4051,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 268 x 50, 8-bit/color RGBA, non-interlaced","md5":"90ff4402860ea4d6f4b31be9e2350724","sha1":"f24a19bcbf0119042e1ba6d3d6213093bf615fb2","sha256":"7713d69c7075257fdb6824b8da16f987a124fcb9a173ce460a2d3430e167bf9c","sha512":"4bd9c83c58c8da2b330663cd0bcdd9963b79e0c0970cf1a00ec9be2431da5f3247ff5a92e435ec19bcd8f18c01f42db505e09ef36835f0498247ffb0a058e957","ssdeep":"","tlshash":"d4816d838ea517027392a5617f193a809cec11f8f6b5450ff25f4ebd8d1e91c40bb615","first_seen":"2026-05-31T23:55:35.557543Z","last_seen":"2026-06-01T00:03:27.206748Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"promo-event.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"promo-event.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promo-event.live/","fqdn":"promo-event.live","domain":"promo-event.live","tld":"live"},"ip":{"addr":"104.21.19.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-01T00:03:00.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo-event.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 22:25:23 GMT","end":"Sun, 23 Aug 2026 22:25:22 GMT"},"fingerprint":{"sha1":"38:71:C1:03:CE:D7:32:96:79:7D:D5:0C:F3:5D:D4:55:4A:88:04:8C","sha256":"89:22:2E:59:7C:69:EF:54:C6:43:64:41:C5:16:1B:07:D9:EC:42:2B:F8:FF:1E:C3:91:DD:7E:AD:92:0D:56:16"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: promo-event.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 00:03:00 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 26 May 2026 02:34:36 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dSqeg7LjvXqMXcRv8cp6CnPUeOewtW7rf2qqb9QYLp%2F75Az%2FZ02oNDIT3INAaSJv3xIkupZ1z4SXuBDw8ldaCSYuoPHeZeTz0z87nroBqdgv2Q75TQkxa1qRlUqNc5ef6KGT\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a049f3e71ec1c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":587072,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65151)","md5":"b2b010ac7a64135ecd381642bcf25d05","sha1":"99c261467dab2a40b6b24078d16d238df693f288","sha256":"8b1440499562376909ad91fddef8134fcc9a63062257cd1cfe72dfb8dfef9c35","sha512":"3b11b316528cc2ab313dbf57305ea90dd801daa130fd981466f5e3ed91e1914f091b19572c6f2cafc417ea7906c536a2f8e2f8c6224c3c7b161c7a76d06132af","ssdeep":"12288:MfAeIGUg64bActtki4JfCYqpgllD8ug0l5iPAcuV8SAtj6WrGtB:MYeIaFm6Yq6B57Vg6vB","tlshash":"2ac4bf340328d27c581b83fcaf7a74594a1c71d7d27642c8ba4e41705bcbaeaf96b58c","first_seen":"2026-05-31T23:55:35.528307Z","last_seen":"2026-06-01T00:03:27.208544Z","times_seen":2,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":40,"dns":27,"connect":1,"send":0,"wait":159,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"promo-event.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"promo-event.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promo-event.live/translations.js","fqdn":"promo-event.live","domain":"promo-event.live","tld":"live"},"ip":{"addr":"104.21.19.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://promo-event.live/","date":"2026-06-01T00:03:00.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo-event.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 22:25:23 GMT","end":"Sun, 23 Aug 2026 22:25:22 GMT"},"fingerprint":{"sha1":"38:71:C1:03:CE:D7:32:96:79:7D:D5:0C:F3:5D:D4:55:4A:88:04:8C","sha256":"89:22:2E:59:7C:69:EF:54:C6:43:64:41:C5:16:1B:07:D9:EC:42:2B:F8:FF:1E:C3:91:DD:7E:AD:92:0D:56:16"}}},"request":{"raw":"GET /translations.js HTTP/1.1\r\nHost: promo-event.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 01 Jun 2026 00:03:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 May 2026 00:43:06 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a14ec9a-3a79\"\r\nexpires: Mon, 01 Jun 2026 23:55:07 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 473\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=km%2BFvUjnRM%2BfUMnG6nPDrVH2kp5RvOTTpCHH1KQLkSmGOfMXUtydVq9eJCOVef843oEkMGvgt88UWSRLkz7UY7VxZyzT3YVOtJhw%2FmL6w%2FeWZ36nQ38q3pR3KSqrqiXQcDN%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049f3e9aaf9a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14969,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"b5f50483d480a6f9f583cfb383a13be3","sha1":"f048fa2bc1bcc04522c98bd072151c60b42ecf80","sha256":"24a36e7db8cc8d9de4f072f1ce51b6c4d2baf3d589e1aa0c556b6d37d3597d94","sha512":"cdd269362db734f84d58db7129caeb900dd33744c01e9b07016bea865122e257a2a6dae33dfbabe194b425f17d4d514f1816d0f3c474eaedbccdce20a40d3574","ssdeep":"384:JwKyyyK+hKmpD6wK7v0ZGcMtwwKO7KUwK17kAwK3HNbmjuzHC:JwKyya/pOwK7v0ZVJwKO7pwK17HwK3HK","tlshash":"9962735f28e5b45004fb0344bee66a42f11423bf6354416fbafa97280fb2759b5e7870","first_seen":"2026-05-31T23:55:35.536426Z","last_seen":"2026-06-01T00:03:27.210259Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"promo-event.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"promo-event.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promo-event.live/rxb2.png","fqdn":"promo-event.live","domain":"promo-event.live","tld":"live"},"ip":{"addr":"104.21.19.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promo-event.live/","date":"2026-06-01T00:03:00.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo-event.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 22:25:23 GMT","end":"Sun, 23 Aug 2026 22:25:22 GMT"},"fingerprint":{"sha1":"38:71:C1:03:CE:D7:32:96:79:7D:D5:0C:F3:5D:D4:55:4A:88:04:8C","sha256":"89:22:2E:59:7C:69:EF:54:C6:43:64:41:C5:16:1B:07:D9:EC:42:2B:F8:FF:1E:C3:91:DD:7E:AD:92:0D:56:16"}}},"request":{"raw":"GET /rxb2.png HTTP/1.1\r\nHost: promo-event.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 01 Jun 2026 00:03:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 4580\r\nlast-modified: Mon, 25 May 2026 22:52:12 GMT\r\npriority: u=4,i=?0\r\netag: \"6a14d29c-11e4\"\r\nexpires: Mon, 01 Jun 2026 23:55:07 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 473\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CbpdGXFUBqKUEekE0k%2BRq1hfso9RwfuPXyU1vxpTdooY017D%2Fj9XA97yp8q7nxKAe%2BLT%2FTdDupmWIq21%2BtnIgYXjS5JiOjT%2BISq3SD1%2BK04chcglVMe%2F8ycEBSrTXjEFYp9q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049f3e9bafaa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4580,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 268 x 50, 8-bit/color RGBA, non-interlaced","md5":"4995bb5c74add61a525818329fb9e49e","sha1":"79f67f0119df3bba59dc37b20dc944da43a1f392","sha256":"f2bba82ee3cd14865d343520a78a81ff41a71570750d27cd3d090bd6cde51870","sha512":"d57694bd09baa960d504ab07154a747ef836699d4a29547c0e2d780d5d431c211bbeedf9081b1cc5105d20b3e171ca3549dea26774db0ba8a446bc97caee409d","ssdeep":"96:7S+d7DQ+KLbVNkADKGI3HP+0mXOYvwz+3xj+XKgcBrdp:7S+d7ibVevGozYICBEctdp","tlshash":"ba919dd4886f642acd252f54205d26ba7f77c1ab08b240da8dce81413b1887b368b74d","first_seen":"2026-05-31T23:55:35.547659Z","last_seen":"2026-06-01T00:03:27.211585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"promo-event.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"promo-event.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promo-event.live/qr.png","fqdn":"promo-event.live","domain":"promo-event.live","tld":"live"},"ip":{"addr":"104.21.19.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promo-event.live/","date":"2026-06-01T00:03:00.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo-event.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 22:25:23 GMT","end":"Sun, 23 Aug 2026 22:25:22 GMT"},"fingerprint":{"sha1":"38:71:C1:03:CE:D7:32:96:79:7D:D5:0C:F3:5D:D4:55:4A:88:04:8C","sha256":"89:22:2E:59:7C:69:EF:54:C6:43:64:41:C5:16:1B:07:D9:EC:42:2B:F8:FF:1E:C3:91:DD:7E:AD:92:0D:56:16"}}},"request":{"raw":"GET /qr.png HTTP/1.1\r\nHost: promo-event.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 01 Jun 2026 00:03:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 1422720\r\nlast-modified: Mon, 25 May 2026 23:12:50 GMT\r\npriority: u=4,i=?0\r\netag: \"6a14d772-15b580\"\r\nexpires: Mon, 01 Jun 2026 23:55:07 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 472\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qv9Skak16DnuWEPXzSMD8YwE25DHokhkal3%2F9cjffqD3gcO86ce0Tn0e5GKUzSS%2BVpFo%2BFbUf4YVqMzjVsIGX3vfHADfwzNKCgemlrXynQAAYDc0X1oj0TH3tzcmQRuh2%2BMa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049f3e9cafea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1422720,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1254 x 1254, 8-bit/color RGB, non-interlaced","md5":"00d17d59c3213e887cccf1be4f72e63f","sha1":"bed6c11cd4a6127be2480337fd93396aa75a5cf1","sha256":"091e6725ff87c96e4a37d4ac377618cc00062363f4de7d50c78a485b8c638083","sha512":"a2f029266780067235c65611c23ea783e1b8c368d35ca97969fd54368ed7019a64622829dce6b1f9f183c4aa47e001561c7791fd14e4755055b42b907b12c919","ssdeep":"24576:l0M58YK8bFjaYR6BCiNKuSaDy4i9xfOnGOxAAy+I4:r58jED6BpNKBL9JOLxnr","tlshash":"872533ad7c8dc655cab8fd74866258ab0a642133382895f4b32e1331bad5c406d97fec","first_seen":"2026-05-31T23:55:35.542545Z","last_seen":"2026-06-01T00:03:27.212827Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"promo-event.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"promo-event.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}